This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json) Hash identifier: eRM+a+NBS6Lj9xCAItI0OwwloNBQSDG1a3CgBDcFG1A= Subject key identifier: D2:A4:B8:01:82:A0:39:23:24:6E:88:3B:8F:A9:AF:F2:39:C2:C8:72 Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61 Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61 Certificate serial: 019AF3894C8B9F9D2084E921CC20EB0E2076 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft Manifest number: 0F96 Signing time: Sat 06 Dec 2025 12:00:52 +0000 Manifest this update: Sat 06 Dec 2025 12:00:52 +0000 Manifest next update: Sun 07 Dec 2025 12:00:52 +0000 Files and hashes: 1: 31BQV3QAlmQzRsLUDQbTCf9Ts0c.roa (hash: f5KyFjaDpcu5Ry6iCP+PpIAQgbWGNkKpf4ok3qoVBRQ=) 2: 3AEqC5MBKsUSJPKumrvs8Im8c9o.roa (hash: D78tSUGZBxIx3iz83nRMiDYhqRD43nH1bdGS66Ruaho=) 3: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: LGILXvJYFtqR3bR0Ag3HXGHm2yjRTc1Hzt0J0e/50ww=) 4: i7f3Os5SqwUidTwtNEfR_Ylz3QE.roa (hash: Jdo1W7QOzxfUxrWm3qhdLrJjsKXCupCbNIYoEy3U06I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:4c:8b:9f:9d:20:84:e9:21:cc:20:eb:0e:20:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61 Validity Not Before: Dec 6 12:00:52 2025 GMT Not After : Dec 7 12:00:52 2025 GMT Subject: CN=d2a4b80182a03923246e883b8fa9aff239c2c872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c3:79:79:00:cf:64:31:c3:cd:c8:b5:b9:be: 1d:67:7f:c6:f3:3e:0f:ca:32:62:c2:b5:2f:a1:0e: ec:71:cb:72:07:26:e0:cf:5c:9f:0c:28:b5:f9:76: 7f:12:2f:03:ae:01:b7:66:b9:ba:0c:0e:47:74:49: 3b:f7:a9:dc:26:cf:54:96:ce:fc:71:74:e6:9d:64: 40:4b:d0:45:5c:a2:f7:70:5a:6d:7b:e2:12:f9:9f: 92:e9:3e:3b:ff:99:47:f5:5e:ca:b5:d3:f5:8e:da: e7:6a:73:61:cf:22:ee:98:71:a4:59:04:ec:ce:95: 1a:8f:8d:07:e0:65:e6:a8:5c:59:20:26:9d:b0:76: c0:f1:1c:81:4f:ff:16:8c:5f:8d:7f:f7:18:89:92: 48:f7:37:d0:62:62:37:72:79:38:6e:0e:2c:33:35: db:83:15:c3:20:7c:2c:40:f5:e3:a6:f0:c2:8f:07: ef:6e:4f:b6:ad:0a:95:90:57:a2:f8:1b:43:95:7f: 52:ea:75:e1:94:1d:6c:2b:9b:bc:1e:bd:06:7f:42: 4d:fc:57:d5:5f:94:63:de:80:db:f4:93:11:55:c7: 34:9e:94:cd:2b:8b:1d:6c:36:57:2a:37:12:e0:e3: 61:c5:6f:85:25:9a:b2:8e:0b:67:6b:d3:ee:d5:fe: fe:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A4:B8:01:82:A0:39:23:24:6E:88:3B:8F:A9:AF:F2:39:C2:C8:72 X509v3 Authority Key Identifier: keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:26:cb:29:4a:6f:b0:23:1a:8a:e3:eb:a3:99:8b:21:9a:7c: 79:45:af:7f:6a:fa:03:11:61:0b:5e:0c:3e:5a:63:e5:1e:dc: be:3e:2e:b1:20:6f:3b:c0:15:24:26:45:c1:b5:a3:96:bb:80: 9b:5e:e0:3f:ec:58:13:e0:8c:d4:c7:af:d0:63:c2:7b:bd:b0: 6a:e4:59:0a:d3:03:ea:bf:3e:03:14:85:c6:f4:9b:24:40:b6: 3e:7e:2a:d6:01:f2:b2:24:fc:ba:7b:27:c1:1f:ae:d8:1e:7a: 2e:9e:a9:57:a9:bc:ba:f9:77:6e:7f:20:7f:1b:cc:7d:06:4a: fe:84:ec:63:61:77:03:af:0c:4b:9e:3d:1d:d8:4d:82:91:2b: 17:7d:ff:b6:be:77:fd:9b:56:28:66:f6:3a:4e:43:93:c0:82: 4c:c1:81:65:86:72:bb:84:e7:ef:17:6f:e7:37:b5:aa:a1:6a: 3a:f2:03:22:9b:51:07:b7:a9:5a:a5:db:8b:49:a8:f9:59:8a: bd:25:16:e2:54:4d:cb:3b:b4:b3:c7:d8:d1:de:83:d7:ab:24: cf:5e:fa:08:f1:a9:f8:dd:4b:37:e4:0a:fc:d8:06:85:18:b9: a7:15:ac:8e:b6:da:d9:da:0a:54:5c:cf:05:9a:23:9f:4a:b5: eb:92:3d:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUyLn50ghOkhzCDrDiB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzN2Y5YmY4NGI2OWEwOTA0MjQzMmRhZTgzNzdlZTBhYzhm ZjFjNjEwHhcNMjUxMjA2MTIwMDUyWhcNMjUxMjA3MTIwMDUyWjAzMTEwLwYDVQQD EyhkMmE0YjgwMTgyYTAzOTIzMjQ2ZTg4M2I4ZmE5YWZmMjM5YzJjODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MN5eQDPZDHDzci1ub4dZ3/G8z4P yjJiwrUvoQ7scctyBybgz1yfDCi1+XZ/Ei8DrgG3Zrm6DA5HdEk796ncJs9Uls78 cXTmnWRAS9BFXKL3cFpte+IS+Z+S6T47/5lH9V7KtdP1jtrnanNhzyLumHGkWQTs zpUaj40H4GXmqFxZICadsHbA8RyBT/8WjF+Nf/cYiZJI9zfQYmI3cnk4bg4sMzXb gxXDIHwsQPXjpvDCjwfvbk+2rQqVkFei+BtDlX9S6nXhlB1sK5u8Hr0Gf0JN/FfV X5Rj3oDb9JMRVcc0npTNK4sdbDZXKjcS4ONhxW+FJZqyjgtna9Pu1f7+1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKkuAGCoDkjJG6IO4+pr/I5wshyMB8GA1UdIwQY MBaAFFN/m/hLaaCQQkMtroN37grI/xxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUt ODkyZWM2ZmY0NzcxLzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUtODkyZWM2ZmY0Nzcx LzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlibLKUpv sCMaiuPro5mLIZp8eUWvf2r6AxFhC14MPlpj5R7cvj4usSBvO8AVJCZFwbWjlruA m17gP+xYE+CM1Mev0GPCe72wauRZCtMD6r8+AxSFxvSbJEC2Pn4q1gHysiT8unsn wR+u2B56Lp6pV6m8uvl3bn8gfxvMfQZK/oTsY2F3A68MS549HdhNgpErF33/tr53 /ZtWKGb2Ok5Dk8CCTMGBZYZyu4Tn7xdv5ze1qqFqOvIDIptRB7epWqXbi0mo+VmK vSUW4lRNyzu0s8fY0d6D16skz176CPGp+N1LN+QK/NgGhRi5pxWsjrba2doKVFzP BZojn0q165I9GQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:45:58 2025 by rpki-client