This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft File: t3RSzSU14-k1ff-IGIXq2RSQpGM.mft (raw, json) Hash identifier: 53Jdsp6kHdqjMVKG82BnFFqAGPGX+TT475WUFCW4ZHY= Subject key identifier: FF:8F:AA:DC:53:FF:CD:5A:CC:B2:68:1C:2D:ED:61:1D:1F:7E:A9:32 Authority key identifier: B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63 Certificate issuer: /CN=b77452cd2535e3e9357dff881885ead91490a463 Certificate serial: 019AF163F3D0819E435A51A65000C9E33101 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft Manifest number: 0716 Signing time: Sat 06 Dec 2025 02:00:50 +0000 Manifest this update: Sat 06 Dec 2025 02:00:50 +0000 Manifest next update: Sun 07 Dec 2025 02:00:50 +0000 Files and hashes: 1: t3RSzSU14-k1ff-IGIXq2RSQpGM.crl (hash: GVGrsZAkHUxy47H/128VtpqsiBg0h5d5hlDpqknOo4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f3:d0:81:9e:43:5a:51:a6:50:00:c9:e3:31:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b77452cd2535e3e9357dff881885ead91490a463 Validity Not Before: Dec 6 02:00:50 2025 GMT Not After : Dec 7 02:00:50 2025 GMT Subject: CN=ff8faadc53ffcd5accb2681c2ded611d1f7ea932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:a7:41:8a:2f:05:20:c8:6a:00:63:23:4e:d6: 36:b0:ef:b6:13:05:5d:1b:cb:7d:89:50:f0:c0:fa: c0:35:96:be:dc:41:b4:22:26:c5:21:54:64:7b:e8: d5:4c:6b:1d:2f:b2:13:a8:7b:53:c4:4d:e5:88:47: 9f:e2:33:ea:fb:ab:94:2b:f1:d8:2a:2e:b6:d5:f0: 87:a7:1b:27:75:ab:26:83:a3:98:5b:8f:8f:1c:c9: 13:fc:e8:27:9f:52:a1:81:64:9e:46:83:fa:be:47: cd:8a:4f:15:54:f2:ba:38:95:b3:50:e8:94:58:fd: ac:e3:b2:98:a9:c3:bb:63:48:93:13:9b:3a:c4:e7: b4:f6:ec:95:bf:dd:30:49:ca:e5:32:ed:ed:ff:62: f6:95:98:4b:60:5a:35:38:dd:a0:81:dd:9b:94:33: 8b:97:e6:50:21:5d:25:12:29:ab:19:19:2d:57:dc: e9:6d:b1:d6:47:1f:3d:3b:d4:fa:ac:a7:d1:15:47: d5:d2:48:05:ce:05:3d:66:82:b8:4d:9c:ba:23:60: 9d:4e:24:66:c2:97:8c:fc:39:58:06:29:bf:de:53: 46:c8:01:af:ed:46:11:6d:04:bc:3f:f3:37:86:f2: a7:8a:7d:2b:82:c4:dc:66:94:86:d8:9a:26:89:10: d5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8F:AA:DC:53:FF:CD:5A:CC:B2:68:1C:2D:ED:61:1D:1F:7E:A9:32 X509v3 Authority Key Identifier: keyid:B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ad:78:dd:38:b1:92:cf:42:fb:59:fc:de:d7:e0:ae:cd:f9: b1:bf:ab:76:a7:1e:9e:3e:6b:c6:68:25:fc:7f:73:f8:55:a2: f3:0a:af:bf:46:1d:cb:63:89:50:8a:97:4d:f5:c3:a7:38:ff: 71:5c:9d:48:b8:08:d7:0f:22:aa:0e:3b:c0:c2:11:70:d5:cb: ae:09:fb:75:9b:3a:4f:a6:8e:71:37:22:19:41:ae:a1:39:73: a3:d1:3a:52:00:e7:cf:c5:29:2a:ea:0a:82:26:b2:af:cc:de: 3b:95:e0:e4:ca:6e:98:5b:70:d1:41:c6:39:6f:62:0a:5d:1a: 6f:5e:3c:b9:44:ab:38:cb:88:4d:27:f1:a7:04:fd:d5:37:ef: fd:e2:fb:ba:2b:51:30:2d:bb:30:ef:00:61:e0:ee:65:77:88: 90:d4:e6:91:db:5b:4b:b2:d7:9e:d0:a8:f5:73:9e:da:03:42: 10:26:89:c9:82:c3:ac:58:ba:85:8d:20:ed:33:d3:63:26:f2: c6:18:04:f5:09:35:1c:5c:1c:c5:51:b6:85:9e:86:91:33:d2: 79:f2:05:d6:3e:76:db:6c:dc:1d:25:2d:7b:e7:50:5e:63:d2: 15:4f:55:f8:5c:52:a8:f2:df:29:1f:e9:f8:8a:a5:3a:75:9f: cf:2b:5b:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/PQgZ5DWlGmUADJ4zEBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzQ1MmNkMjUzNWUzZTkzNTdkZmY4ODE4ODVlYWQ5MTQ5 MGE0NjMwHhcNMjUxMjA2MDIwMDUwWhcNMjUxMjA3MDIwMDUwWjAzMTEwLwYDVQQD EyhmZjhmYWFkYzUzZmZjZDVhY2NiMjY4MWMyZGVkNjExZDFmN2VhOTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+qdBii8FIMhqAGMjTtY2sO+2EwVd G8t9iVDwwPrANZa+3EG0IibFIVRke+jVTGsdL7ITqHtTxE3liEef4jPq+6uUK/HY Ki621fCHpxsndasmg6OYW4+PHMkT/Ognn1KhgWSeRoP6vkfNik8VVPK6OJWzUOiU WP2s47KYqcO7Y0iTE5s6xOe09uyVv90wScrlMu3t/2L2lZhLYFo1ON2ggd2blDOL l+ZQIV0lEimrGRktV9zpbbHWRx89O9T6rKfRFUfV0kgFzgU9ZoK4TZy6I2CdTiRm wpeM/DlYBim/3lNGyAGv7UYRbQS8P/M3hvKnin0rgsTcZpSG2JomiRDVDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+PqtxT/81azLJoHC3tYR0ffqkyMB8GA1UdIwQY MBaAFLd0Us0lNePpNX3/iBiF6tkUkKRjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNSU3pTVTE0LWsxZmYtSUdJWHEyUlNRcEdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mNmM3MWMtMmQ0MC00YzQxLWJiYmIt Yzc1NzU5YWYyZmNmLzEvdDNSU3pTVTE0LWsxZmYtSUdJWHEyUlNRcEdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mNmM3MWMtMmQ0MC00YzQxLWJiYmItYzc1NzU5YWYyZmNm LzEvdDNSU3pTVTE0LWsxZmYtSUdJWHEyUlNRcEdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6143Tix ks9C+1n83tfgrs35sb+rdqcenj5rxmgl/H9z+FWi8wqvv0Ydy2OJUIqXTfXDpzj/ cVydSLgI1w8iqg47wMIRcNXLrgn7dZs6T6aOcTciGUGuoTlzo9E6UgDnz8UpKuoK giayr8zeO5Xg5MpumFtw0UHGOW9iCl0ab148uUSrOMuITSfxpwT91Tfv/eL7uitR MC27MO8AYeDuZXeIkNTmkdtbS7LXntCo9XOe2gNCECaJyYLDrFi6hY0g7TPTYyby xhgE9Qk1HFwcxVG2hZ6GkTPSefIF1j5222zcHSUte+dQXmPSFU9V+FxSqPLfKR/p +IqlOnWfzytbvw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:17:06 2025 by rpki-client