This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft File: m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft (raw, json) Hash identifier: OdBFu6toCdAsIgD7edcBI6XCTul6rCKcz8o+7OThxMM= Subject key identifier: D7:03:83:2A:8C:35:4E:94:A7:C6:76:79:E3:DB:AD:5F:E4:8C:ED:84 Authority key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C Certificate issuer: /CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c Certificate serial: 019AF31BA5D018771C8842A58F5C372FF390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft Manifest number: 1516 Signing time: Sat 06 Dec 2025 10:01:06 +0000 Manifest this update: Sat 06 Dec 2025 10:01:06 +0000 Manifest next update: Sun 07 Dec 2025 10:01:06 +0000 Files and hashes: 1: 60W-NBk3253Bk_GEI2gKgd_BE8I.roa (hash: X2dRuZeK2mpNw1Oq8MItS3tX6isys5T0YQbrPJr37XA=) 2: WMfZ9_oSWOFVeUy99ChSUELiYaI.roa (hash: H0ifkv1EEGP8mDtQZpBc/lFwxXIm4L3JwiD9/BcXTyk=) 3: m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl (hash: qvC/LeZWIOXcxlgMIITXFR6xMy5z4yRYNwUQ18/J5iQ=) 4: tXaCAurW2gGTHINoOjZh72dEXKU.roa (hash: y5O02pogDW0jIlJpvO+hAt91pj2qn6goqR2eIeEiFSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a5:d0:18:77:1c:88:42:a5:8f:5c:37:2f:f3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c Validity Not Before: Dec 6 10:01:06 2025 GMT Not After : Dec 7 10:01:06 2025 GMT Subject: CN=d703832a8c354e94a7c67679e3dbad5fe48ced84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:47:db:ee:b0:34:ad:7f:b1:60:3a:da:b6: 71:6f:11:af:3b:e1:af:9e:1d:3e:e1:12:6c:aa:97: 20:3b:1a:17:54:14:e1:12:45:54:35:fd:ff:8f:73: 1b:ae:92:af:6e:97:0a:1a:7a:90:30:0a:22:9d:c2: 94:56:7d:fe:f4:71:40:2d:14:25:2c:30:a1:46:d8: 3d:c3:b6:b0:f3:05:3e:5e:2b:c8:2d:83:30:7f:75: 08:39:2a:b1:76:2e:34:50:5b:35:cc:ac:85:d1:fe: 2e:5b:00:83:95:12:e8:f9:00:4c:72:30:90:a1:35: 07:03:4d:f7:b7:01:9d:3c:ca:b3:23:54:de:80:da: 76:29:ba:6b:eb:5c:5b:fe:11:c8:ac:b3:3d:92:a1: 82:ed:56:6d:c5:28:28:82:a5:d0:67:fc:43:68:49: 6c:39:9a:71:e3:7d:0e:b9:b7:0b:32:c6:1d:f7:c8: 2f:a6:60:03:46:bd:e7:24:15:aa:82:c7:d4:44:8e: b1:9e:86:89:1c:29:dc:eb:fa:14:06:42:16:96:a8: d4:b4:12:31:c9:ed:f9:87:b6:77:40:2a:e9:ac:29: 21:51:f4:60:ed:02:68:07:a2:52:e0:68:03:27:57: a5:69:16:2f:87:e4:89:ea:c8:df:4d:45:6c:ad:ab: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:03:83:2A:8C:35:4E:94:A7:C6:76:79:E3:DB:AD:5F:E4:8C:ED:84 X509v3 Authority Key Identifier: keyid:9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:86:71:7d:80:35:56:36:d3:b7:d5:7e:d3:1a:cd:b1:42:9d: 81:29:d8:95:71:6e:27:fb:cb:24:f0:bf:86:a1:19:82:f0:5a: 3e:08:8b:7e:a3:f2:21:c2:51:75:65:3d:55:25:39:0b:bf:2d: f7:30:60:35:b4:3d:ba:53:22:ef:c9:a5:48:a7:65:cb:ae:29: 65:06:d3:1f:5d:ac:ca:1e:d3:31:bf:f8:3c:5a:31:a8:77:c0: 9b:4a:dd:8c:d9:7a:44:06:2f:45:55:54:db:c0:66:66:32:4e: 2e:30:4b:9b:d8:61:79:eb:af:d6:b4:1a:79:e5:03:19:51:9f: 51:d9:83:83:8f:f1:e5:ba:9e:ff:de:1d:b2:7b:e5:da:f9:b8: 98:81:74:ce:c7:2a:19:81:e9:c6:58:13:6e:0a:5c:48:e2:da: ef:ab:a4:25:b4:39:34:59:dc:09:0a:21:18:ac:67:9d:1d:82: eb:5b:05:ed:79:62:5d:3a:8a:6f:bc:fd:2d:d1:0c:44:55:e8: 47:c6:b2:78:5d:a1:24:31:23:f4:b3:b3:e5:e3:14:33:e5:61: fd:16:2c:55:a3:2a:1b:e2:24:6d:ba:6c:8c:1c:91:ce:dd:b3: 7c:4b:11:5d:5a:a2:4a:13:29:40:85:dc:5d:0b:02:66:26:4f: 8a:6b:81:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6XQGHcciEKlj1w3L/OQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNzU5ZWM5ZmY1NGRlMDNhN2ZmM2E2NWVkYmIyZTA3NThl Njg3OGMwHhcNMjUxMjA2MTAwMTA2WhcNMjUxMjA3MTAwMTA2WjAzMTEwLwYDVQQD EyhkNzAzODMyYThjMzU0ZTk0YTdjNjc2NzllM2RiYWQ1ZmU0OGNlZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/NH2+6wNK1/sWA62rZxbxGvO+Gv nh0+4RJsqpcgOxoXVBThEkVUNf3/j3MbrpKvbpcKGnqQMAoincKUVn3+9HFALRQl LDChRtg9w7aw8wU+XivILYMwf3UIOSqxdi40UFs1zKyF0f4uWwCDlRLo+QBMcjCQ oTUHA033twGdPMqzI1TegNp2Kbpr61xb/hHIrLM9kqGC7VZtxSgogqXQZ/xDaEls OZpx430OubcLMsYd98gvpmADRr3nJBWqgsfURI6xnoaJHCnc6/oUBkIWlqjUtBIx ye35h7Z3QCrprCkhUfRg7QJoB6JS4GgDJ1elaRYvh+SJ6sjfTUVsrauhPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcDgyqMNU6Up8Z2eePbrV/kjO2EMB8GA1UdIwQY MBaAFJt1nsn/VN4Dp/86Ze27LgdY5oeMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNXZXlmOVUzZ09uX3pwbDdic3VCMWptaDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS81YWQ3M2ItZGIxNy00MzIyLWFkZTUt YjlhOWQ4YWU5NDIxLzEvbTNXZXlmOVUzZ09uX3pwbDdic3VCMWptaDR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS81YWQ3M2ItZGIxNy00MzIyLWFkZTUtYjlhOWQ4YWU5NDIx LzEvbTNXZXlmOVUzZ09uX3pwbDdic3VCMWptaDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYZxfYA1 VjbTt9V+0xrNsUKdgSnYlXFuJ/vLJPC/hqEZgvBaPgiLfqPyIcJRdWU9VSU5C78t 9zBgNbQ9ulMi78mlSKdly64pZQbTH12syh7TMb/4PFoxqHfAm0rdjNl6RAYvRVVU 28BmZjJOLjBLm9hheeuv1rQaeeUDGVGfUdmDg4/x5bqe/94dsnvl2vm4mIF0zscq GYHpxlgTbgpcSOLa76ukJbQ5NFncCQohGKxnnR2C61sF7XliXTqKb7z9LdEMRFXo R8ayeF2hJDEj9LOz5eMUM+Vh/RYsVaMqG+IkbbpsjByRzt2zfEsRXVqiShMpQIXc XQsCZiZPimuB2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:46 2025 by rpki-client