This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json) Hash identifier: pRmi6YwaF2Wj44Wx5NYbTsq0SJizn9xSXM1JdgJrzXU= Subject key identifier: DD:AF:AA:5A:83:0D:4A:2F:A8:E0:46:CF:A6:D2:5A:97:7B:B4:91:4D Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53 Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153 Certificate serial: 019AF12D89897F0D3C06FA8589CCADE9D4D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft Manifest number: 0E48 Signing time: Sat 06 Dec 2025 01:01:24 +0000 Manifest this update: Sat 06 Dec 2025 01:01:24 +0000 Manifest next update: Sun 07 Dec 2025 01:01:24 +0000 Files and hashes: 1: QrB38IR31JfmSrfp5ttgTReGTWo.roa (hash: tObzEsfYNmXi9X+/o+rGLlyYSek2LoSQ9N7PVMYEfqA=) 2: n3iPjhImnBjarzP2Rj2tOx0dNiE.roa (hash: lUEC9I8tI5NUjUJh9guJCH2H+g0KkZWinekNZT2+2Io=) 3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: BFDxvSj+EoPyg/Nrx6TZeCYsX5ad9PrDH0QW919VRTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:89:89:7f:0d:3c:06:fa:85:89:cc:ad:e9:d4:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153 Validity Not Before: Dec 6 01:01:24 2025 GMT Not After : Dec 7 01:01:24 2025 GMT Subject: CN=ddafaa5a830d4a2fa8e046cfa6d25a977bb4914d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:f0:44:31:4a:ff:12:ec:d7:07:70:33:42: 02:12:1d:6e:47:77:df:5c:52:a4:ee:ce:19:b0:16: 1d:8a:18:5f:b1:97:2c:aa:74:db:88:ab:72:40:7a: 59:24:09:0a:89:5d:47:8b:63:a5:4a:d5:0f:1e:1e: bd:2b:58:34:fe:d4:e2:cf:34:3a:d4:a6:a8:fa:41: 88:8a:35:a4:7c:e2:1a:82:93:1b:54:0b:19:bc:8d: 8d:28:af:b6:6e:32:ea:3d:60:3b:d9:84:51:21:b3: c3:0a:19:f2:12:c4:aa:31:e2:b7:86:7a:d8:e8:e8: 38:94:ca:a4:de:86:e1:f1:e6:c1:91:39:34:2f:c5: 69:62:40:1d:83:5f:95:2e:2f:9f:8a:a4:17:94:b0: a0:10:77:4e:61:be:ee:23:7a:a1:82:3f:a7:1d:14: 00:24:0e:23:3f:12:b9:fa:9a:c5:ee:22:d4:2a:dc: a5:f8:55:7e:1a:f7:16:a9:3c:d9:f7:4e:bc:0a:ad: bf:02:e1:14:fa:2d:ee:fd:11:ac:06:ca:4d:a2:55: cd:89:a5:be:df:8d:f4:db:7f:b7:7b:3e:1b:e0:08: db:11:70:43:50:44:65:77:21:1b:52:22:fc:8a:25: 6e:71:ee:e1:dd:de:56:c2:6a:20:8b:f2:a6:9b:a2: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AF:AA:5A:83:0D:4A:2F:A8:E0:46:CF:A6:D2:5A:97:7B:B4:91:4D X509v3 Authority Key Identifier: keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d0:c9:cd:1d:ea:cf:94:d4:e1:17:62:0a:a5:3d:35:df:c4: 03:62:61:5b:30:e0:d6:c6:a9:fa:ba:71:31:5e:30:12:bf:c2: 47:a7:d8:d6:ed:bc:37:70:1c:ca:4c:79:96:fa:2f:91:b8:cb: 91:a1:94:e7:cc:e4:ef:72:83:b2:d0:25:4c:dc:5c:01:09:5c: f1:ee:68:1b:7a:92:07:4c:e9:83:77:04:02:d4:3b:af:b4:82: 70:92:1a:21:65:34:85:5b:ec:9f:82:7c:15:bb:70:67:a7:57: 01:5f:3b:ce:83:f6:3d:cf:93:f2:63:65:89:5f:df:56:2d:ce: 51:cf:a7:7a:26:d7:5c:03:20:ac:07:93:9d:58:2e:6c:83:97: df:58:dd:9f:bf:8e:70:91:fa:1f:c8:07:cc:35:ad:0d:3c:7a: 86:98:e1:f6:a9:82:76:b7:62:a3:ee:8e:e6:29:59:9f:4a:8d: 56:9a:37:66:5c:f7:30:e4:d5:b3:11:f4:3e:c3:07:48:6a:75: f4:f0:96:e3:22:22:aa:62:6c:89:3a:67:f3:66:45:31:56:fc: 41:73:9b:fc:2b:65:d4:a6:60:08:79:6e:9d:58:f9:8e:e1:48: a6:6d:18:71:02:1b:d8:78:13:64:f1:0e:64:7f:ae:11:cc:0f: fd:8e:43:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYmJfw08BvqFicyt6dTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmRlYWQ0ZjFkMWM4ZGRhOTZkMWNkMTc4OWQ5ZGQzZTIz YmYxNTMwHhcNMjUxMjA2MDEwMTI0WhcNMjUxMjA3MDEwMTI0WjAzMTEwLwYDVQQD EyhkZGFmYWE1YTgzMGQ0YTJmYThlMDQ2Y2ZhNmQyNWE5NzdiYjQ5MTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5DwRDFK/xLs1wdwM0ICEh1uR3ff XFKk7s4ZsBYdihhfsZcsqnTbiKtyQHpZJAkKiV1Hi2OlStUPHh69K1g0/tTizzQ6 1Kao+kGIijWkfOIagpMbVAsZvI2NKK+2bjLqPWA72YRRIbPDChnyEsSqMeK3hnrY 6Og4lMqk3obh8ebBkTk0L8VpYkAdg1+VLi+fiqQXlLCgEHdOYb7uI3qhgj+nHRQA JA4jPxK5+prF7iLUKtyl+FV+GvcWqTzZ9068Cq2/AuEU+i3u/RGsBspNolXNiaW+ 343023+3ez4b4AjbEXBDUERldyEbUiL8iiVuce7h3d5Wwmogi/Kmm6LprwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2vqlqDDUovqOBGz6bSWpd7tJFNMB8GA1UdIwQY MBaAFK696tTx0cjdqW0c0XidndPiO/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjIt ODgzN2NhNjllMzk2LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjItODgzN2NhNjllMzk2 LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltDJzR3q z5TU4RdiCqU9Nd/EA2JhWzDg1sap+rpxMV4wEr/CR6fY1u28N3Acykx5lvovkbjL kaGU58zk73KDstAlTNxcAQlc8e5oG3qSB0zpg3cEAtQ7r7SCcJIaIWU0hVvsn4J8 FbtwZ6dXAV87zoP2Pc+T8mNliV/fVi3OUc+neibXXAMgrAeTnVgubIOX31jdn7+O cJH6H8gHzDWtDTx6hpjh9qmCdrdio+6O5ilZn0qNVpo3Zlz3MOTVsxH0PsMHSGp1 9PCW4yIiqmJsiTpn82ZFMVb8QXOb/Ctl1KZgCHlunVj5juFIpm0YcQIb2HgTZPEO ZH+uEcwP/Y5D/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:25 2025 by rpki-client