This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json) Hash identifier: apsKAAbjhqrSL2ETg1yQNYOwylYiqGJbIuVn5YEfMmk= Subject key identifier: 53:DC:B3:F2:FD:AE:A1:F6:A2:95:90:3B:08:73:18:6B:38:6D:C0:27 Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53 Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153 Certificate serial: 019B2D0BA072AE6FEBBD2E017A7B75EB3128 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft Manifest number: 0E67 Signing time: Wed 17 Dec 2025 16:01:35 +0000 Manifest this update: Wed 17 Dec 2025 16:01:35 +0000 Manifest next update: Thu 18 Dec 2025 16:01:35 +0000 Files and hashes: 1: QrB38IR31JfmSrfp5ttgTReGTWo.roa (hash: tObzEsfYNmXi9X+/o+rGLlyYSek2LoSQ9N7PVMYEfqA=) 2: n3iPjhImnBjarzP2Rj2tOx0dNiE.roa (hash: lUEC9I8tI5NUjUJh9guJCH2H+g0KkZWinekNZT2+2Io=) 3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: lYJQK8DoMFMuW4BJsdx2uWyHK1wynI6nrdMxhGTkP9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:a0:72:ae:6f:eb:bd:2e:01:7a:7b:75:eb:31:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153 Validity Not Before: Dec 17 16:01:35 2025 GMT Not After : Dec 18 16:01:35 2025 GMT Subject: CN=53dcb3f2fdaea1f6a295903b0873186b386dc027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3e:3a:5f:20:53:52:07:6b:f8:4b:8f:53:a1: 18:c5:0e:6a:72:61:b5:d1:37:17:14:00:92:c4:fe: 3f:a8:24:78:78:ae:20:1c:f4:a3:50:08:3c:b9:b1: 03:54:2e:50:f5:30:81:00:f9:1f:80:01:30:b1:fc: 18:86:e0:29:8b:ad:72:c1:27:58:fd:e7:3f:d4:b5: 4b:85:f0:3e:50:05:93:f6:0d:7b:8d:38:85:a3:35: 9b:0c:01:db:49:e9:45:4a:e2:04:12:42:97:b3:41: f4:d0:87:fb:21:f6:09:ce:24:6a:72:d1:00:bf:8d: 78:29:88:7a:62:a2:de:11:a0:b7:eb:2a:9f:bd:e3: 72:55:f4:d8:45:d8:f3:2a:2b:e7:a8:db:a9:42:7b: 3b:2e:88:a2:a3:48:3a:54:cb:70:27:b4:39:1d:0d: f3:f0:16:3e:9c:be:dc:f0:d7:40:16:8b:bd:d4:c3: 99:e9:58:00:94:c2:dd:b8:ea:8f:20:4a:ae:0a:d7: eb:fc:35:38:f3:1d:f8:21:9f:46:99:43:0f:b7:8c: f0:00:66:25:33:10:d3:41:53:d4:39:b4:0a:e5:de: 62:17:69:5a:87:a0:af:c3:54:be:7c:ce:51:07:8c: a9:80:95:da:0c:58:ef:14:83:21:41:42:5a:19:0c: 6b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DC:B3:F2:FD:AE:A1:F6:A2:95:90:3B:08:73:18:6B:38:6D:C0:27 X509v3 Authority Key Identifier: keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:25:89:3f:5b:3d:2c:5e:d6:46:4c:95:0e:a0:f6:bd:10:7f: 40:aa:34:bf:c9:cf:78:8d:f2:84:94:39:ba:ff:a3:ce:97:9f: 8d:f2:4d:da:2e:0d:7a:3a:1a:d9:c9:1b:c6:c3:3b:a1:80:a0: a5:e8:ae:d7:c5:29:98:b4:a0:55:92:ca:d7:7e:7e:d2:96:3c: 6b:d9:e4:f9:f1:a6:2b:16:d8:dd:b0:8b:cf:08:75:23:33:23: dc:30:ef:04:1e:b0:47:4b:e4:ba:fa:b6:39:fd:70:81:8b:87: 83:f7:bc:ad:32:a9:a9:7b:ef:bf:57:c2:33:c1:45:88:0d:c9: 94:25:3c:0b:fe:3c:62:6c:ed:fa:c8:06:88:22:cf:1a:d6:0a: e5:2e:1f:58:72:e9:2e:de:a2:7b:bb:f7:65:02:8d:77:fc:3e: aa:71:51:d9:cf:e7:12:dd:ba:05:18:0e:38:da:2c:8c:89:14: 9f:9f:95:47:0a:67:02:df:25:85:cc:69:fd:31:78:81:50:1e: 2e:9f:36:c7:c8:86:bc:51:ea:67:5f:37:b9:c4:10:8e:5f:94: 9e:4c:56:77:2d:9c:16:7a:6c:08:40:fd:36:20:c4:02:fc:9a: 19:da:e9:4d:29:f4:21:d8:56:67:6d:39:15:4c:61:bd:fe:c2: 3f:a0:62:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC6Byrm/rvS4Bent16zEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmRlYWQ0ZjFkMWM4ZGRhOTZkMWNkMTc4OWQ5ZGQzZTIz YmYxNTMwHhcNMjUxMjE3MTYwMTM1WhcNMjUxMjE4MTYwMTM1WjAzMTEwLwYDVQQD Eyg1M2RjYjNmMmZkYWVhMWY2YTI5NTkwM2IwODczMTg2YjM4NmRjMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j46XyBTUgdr+EuPU6EYxQ5qcmG1 0TcXFACSxP4/qCR4eK4gHPSjUAg8ubEDVC5Q9TCBAPkfgAEwsfwYhuApi61ywSdY /ec/1LVLhfA+UAWT9g17jTiFozWbDAHbSelFSuIEEkKXs0H00If7IfYJziRqctEA v414KYh6YqLeEaC36yqfveNyVfTYRdjzKivnqNupQns7Loiio0g6VMtwJ7Q5HQ3z 8BY+nL7c8NdAFou91MOZ6VgAlMLduOqPIEquCtfr/DU48x34IZ9GmUMPt4zwAGYl MxDTQVPUObQK5d5iF2lah6Cvw1S+fM5RB4ypgJXaDFjvFIMhQUJaGQxrzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPcs/L9rqH2opWQOwhzGGs4bcAnMB8GA1UdIwQY MBaAFK696tTx0cjdqW0c0XidndPiO/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjIt ODgzN2NhNjllMzk2LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjItODgzN2NhNjllMzk2 LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiWJP1s9 LF7WRkyVDqD2vRB/QKo0v8nPeI3yhJQ5uv+jzpefjfJN2i4Nejoa2ckbxsM7oYCg peiu18UpmLSgVZLK135+0pY8a9nk+fGmKxbY3bCLzwh1IzMj3DDvBB6wR0vkuvq2 Of1wgYuHg/e8rTKpqXvvv1fCM8FFiA3JlCU8C/48Ymzt+sgGiCLPGtYK5S4fWHLp Lt6ie7v3ZQKNd/w+qnFR2c/nEt26BRgOONosjIkUn5+VRwpnAt8lhcxp/TF4gVAe Lp82x8iGvFHqZ183ucQQjl+UnkxWdy2cFnpsCED9NiDEAvyaGdrpTSn0IdhWZ205 FUxhvf7CP6BizA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:36:08 2025 by rpki-client