This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft File: Pr6uqg8H3D1UvBFcziAq2pggsdU.mft (raw, json) Hash identifier: 4t2XMpO3Mb/2My+2zt/YOzzt/YUhhLdJ4A2Ex5BH4Zo= Subject key identifier: D7:9F:7D:FB:80:ED:04:D2:32:1A:4B:33:34:8A:8F:11:AD:8F:C5:82 Authority key identifier: 3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5 Certificate issuer: /CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5 Certificate serial: 019AF0BF21BE2D69CA4E5A9DDC55DF7E8A0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft Manifest number: 08F3 Signing time: Fri 05 Dec 2025 23:00:49 +0000 Manifest this update: Fri 05 Dec 2025 23:00:49 +0000 Manifest next update: Sat 06 Dec 2025 23:00:49 +0000 Files and hashes: 1: Pr6uqg8H3D1UvBFcziAq2pggsdU.crl (hash: OnB82UCyeJW88LyE/7labtVTXlYWOA00jCNvXGN2O2k=) 2: nV3wzH_1I5VE4qLJ5nCrt9MPHjQ.roa (hash: db3hfBEW1jL4gbyVu0D2s50T0rgPqR4B0mvJEYFg7lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:21:be:2d:69:ca:4e:5a:9d:dc:55:df:7e:8a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5 Validity Not Before: Dec 5 23:00:49 2025 GMT Not After : Dec 6 23:00:49 2025 GMT Subject: CN=d79f7dfb80ed04d2321a4b33348a8f11ad8fc582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:32:75:86:dc:b0:f8:d9:aa:de:58:46:8e:d5: 29:bb:3c:56:14:af:38:d7:dd:e5:19:4d:70:9a:37: 3c:0f:67:bf:7a:b8:4e:11:05:62:e1:39:2f:70:13: 6c:fa:54:cb:cf:d5:39:a8:77:22:ec:ca:77:5f:35: ae:53:db:bc:ce:80:1a:c8:87:97:f9:8a:14:25:dd: 6e:24:b5:91:53:2a:a6:48:28:3a:bc:e6:31:39:d3: c7:23:d9:4b:b2:fe:66:86:14:1e:94:00:5c:5c:55: e4:f9:da:50:2e:d0:00:d0:79:a8:e8:36:b8:41:33: 5b:0a:74:e5:75:0a:66:9d:d5:0a:c4:ea:f2:95:17: bf:98:14:d3:8c:07:85:73:cb:1d:42:c4:8e:90:d8: df:b7:06:62:7c:a4:8d:e1:2f:ac:bb:be:bc:b1:7f: 70:5d:c8:c6:ff:4c:17:b3:6d:44:70:05:a8:b1:df: d1:54:43:3e:a5:11:c0:bb:38:0c:78:31:25:cc:e9: 49:de:28:7e:57:df:b8:30:ec:12:97:22:fe:c6:95: b7:84:5a:57:16:d8:60:1a:d1:dc:7d:fe:b9:7b:ae: 8b:53:8a:54:d5:52:23:7c:ab:1d:ae:08:05:eb:2a: c6:6e:db:f5:7c:d7:b8:6e:4e:1f:0a:4f:26:fd:cb: 7b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9F:7D:FB:80:ED:04:D2:32:1A:4B:33:34:8A:8F:11:AD:8F:C5:82 X509v3 Authority Key Identifier: keyid:3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:df:ec:ce:71:2c:d3:79:67:c6:02:9f:2c:1b:b0:3a:32:22: ee:ed:b3:4d:e1:44:6f:cd:65:a6:87:8c:53:fc:f9:d6:2d:67: 10:34:5f:42:c2:e4:86:15:9e:36:8b:d9:a2:6f:4a:2a:4e:d6: 44:10:41:f0:be:fd:2f:fe:40:d0:2a:1d:e2:dc:7a:b8:87:b4: f9:dc:9c:3c:3b:76:d3:4f:cf:cc:4f:06:25:10:e2:c6:b8:1c: 8e:33:ba:4a:1a:ca:84:30:04:96:f9:0c:5a:8b:ce:16:7d:67: f9:1c:56:79:80:ce:d1:79:3e:5a:9a:bc:69:df:39:e7:69:e8: 8d:b7:9b:49:3b:a3:1a:40:30:0c:73:e3:53:c7:e8:40:bf:f1: 85:62:b9:81:4c:cf:bb:07:d3:27:9a:1c:09:df:44:df:71:9e: 45:fa:96:0e:0c:05:69:f5:c6:0d:be:85:59:54:9d:45:58:16: 26:4c:f4:b4:4e:53:71:91:65:98:d1:74:1b:de:e9:76:7b:60: df:bd:62:71:6f:80:03:9e:a5:1e:d7:0f:25:f6:39:4e:66:e3: 3e:75:9c:3d:e8:a4:31:da:8f:20:38:a3:dd:0d:05:d1:6b:50: 7a:d9:14:0d:ad:75:a8:e8:36:82:4a:72:fb:ff:f0:97:4d:ec: df:0f:3d:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyG+LWnKTlqd3FXffooMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmVhZWFhMGYwN2RjM2Q1NGJjMTE1Y2NlMjAyYWRhOTgy MGIxZDUwHhcNMjUxMjA1MjMwMDQ5WhcNMjUxMjA2MjMwMDQ5WjAzMTEwLwYDVQQD EyhkNzlmN2RmYjgwZWQwNGQyMzIxYTRiMzMzNDhhOGYxMWFkOGZjNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzJ1htyw+Nmq3lhGjtUpuzxWFK84 193lGU1wmjc8D2e/erhOEQVi4TkvcBNs+lTLz9U5qHci7Mp3XzWuU9u8zoAayIeX +YoUJd1uJLWRUyqmSCg6vOYxOdPHI9lLsv5mhhQelABcXFXk+dpQLtAA0Hmo6Da4 QTNbCnTldQpmndUKxOrylRe/mBTTjAeFc8sdQsSOkNjftwZifKSN4S+su768sX9w XcjG/0wXs21EcAWosd/RVEM+pRHAuzgMeDElzOlJ3ih+V9+4MOwSlyL+xpW3hFpX FthgGtHcff65e66LU4pU1VIjfKsdrggF6yrGbtv1fNe4bk4fCk8m/ct7EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNefffuA7QTSMhpLMzSKjxGtj8WCMB8GA1UdIwQY MBaAFD6+rqoPB9w9VLwRXM4gKtqYILHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zYTAzNjgtNTcwYy00ODQ3LThkNGEt ZmY0YWQxZTNkYWY1LzEvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8zYTAzNjgtNTcwYy00ODQ3LThkNGEtZmY0YWQxZTNkYWY1 LzEvUHI2dXFnOEgzRDFVdkJGY3ppQXEycGdnc2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMN/sznEs 03lnxgKfLBuwOjIi7u2zTeFEb81lpoeMU/z51i1nEDRfQsLkhhWeNovZom9KKk7W RBBB8L79L/5A0Cod4tx6uIe0+dycPDt200/PzE8GJRDixrgcjjO6ShrKhDAElvkM WovOFn1n+RxWeYDO0Xk+Wpq8ad8552nojbebSTujGkAwDHPjU8foQL/xhWK5gUzP uwfTJ5ocCd9E33GeRfqWDgwFafXGDb6FWVSdRVgWJkz0tE5TcZFlmNF0G97pdntg 371icW+AA56lHtcPJfY5TmbjPnWcPeikMdqPIDij3Q0F0WtQetkUDa11qOg2gkpy +//wl03s3w89Fw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:55 2025 by rpki-client