This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json) Hash identifier: tVg4zIOKYMluw5wM6qAvIy5i6E6dkzhi5HXGi0JkE8s= Subject key identifier: 38:51:60:FB:00:29:42:0F:49:3E:6F:40:ED:4B:79:1B:AE:44:5A:4D Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c Certificate serial: 019AF209350E08FBC108BAB731CD5BDF6319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft Manifest number: 1107 Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 05:01:20 +0000 Manifest next update: Sun 07 Dec 2025 05:01:20 +0000 Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: U8MsK9xtpARtpVAgKkTdBoUZEqhomkcUmpBSPe2lr+o=) 2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=) 3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:35:0e:08:fb:c1:08:ba:b7:31:cd:5b:df:63:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c Validity Not Before: Dec 6 05:01:20 2025 GMT Not After : Dec 7 05:01:20 2025 GMT Subject: CN=385160fb0029420f493e6f40ed4b791bae445a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:37:47:48:c6:5f:f8:e3:1a:88:d0:81:9b:82: e6:bf:3e:be:ab:9b:e2:33:49:d6:21:84:b1:00:0d: e7:3d:ce:b8:80:ad:58:90:29:b3:53:98:de:50:8d: 09:ce:fb:6d:0c:bf:33:0e:d9:fb:f0:24:3a:fd:1e: da:9b:f2:1d:14:cc:81:94:de:2e:f9:b2:70:f8:9e: 3f:fc:22:f7:df:f0:58:4f:f5:27:00:21:16:5d:ca: a3:9e:58:64:80:3a:9a:a3:53:b4:86:27:a2:16:68: 72:6e:41:36:37:bc:1a:a0:cd:cb:7e:d5:ec:01:28: 3d:59:77:da:3a:91:98:fc:77:bf:06:af:54:cd:62: 98:9e:b8:21:6a:53:69:3c:39:20:0c:c8:cf:f0:f5: 77:7f:0e:ae:ac:1f:5a:9a:a7:9b:d1:43:a3:18:9a: 74:06:b2:09:67:1e:2a:a6:1e:70:a8:56:3b:0f:f2: 51:90:62:ee:34:1d:d4:9c:c9:45:33:97:a7:03:e9: 30:ad:22:fb:7e:6e:59:3f:15:72:92:75:33:e1:8c: 99:10:38:89:79:42:ee:f1:8a:37:09:b0:3c:b6:6a: 1b:92:af:c7:76:e8:dd:c6:d6:e5:ca:6d:71:ca:4a: ce:3d:c3:dc:a9:a1:54:13:45:47:75:64:42:8f:84: 65:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:51:60:FB:00:29:42:0F:49:3E:6F:40:ED:4B:79:1B:AE:44:5A:4D X509v3 Authority Key Identifier: keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2f:04:d5:77:f7:08:5a:68:90:94:39:71:d5:5e:e6:90:fb: e3:03:c8:1e:80:5e:b5:08:2b:81:45:a7:f6:c9:52:b8:93:bb: ea:b1:ba:cd:57:6a:9d:52:b2:c8:7a:92:84:92:f9:87:6e:94: e1:d9:59:cc:1c:43:d9:48:0d:fd:50:8f:1c:ff:e7:74:53:b3: b0:4d:38:d1:31:8e:fb:e2:64:65:b2:7b:69:bb:ed:be:fa:f9: 23:9d:9f:bd:3d:6d:aa:30:81:be:76:29:3b:e3:9c:a5:5e:08: 64:97:71:55:ad:28:4e:7d:ed:79:45:9b:b5:0f:73:10:ab:cf: 18:da:45:e6:c4:e5:58:4a:af:2b:d7:91:9e:72:59:7a:63:9f: 0c:1e:04:c8:68:e8:75:04:35:a0:2d:d3:3d:84:61:c5:bc:cb: e8:2b:c2:fe:09:66:84:13:cb:1e:0b:20:ce:0f:5f:ef:ab:55: 88:f7:33:7d:bd:c3:ff:96:58:25:0f:bc:11:ec:90:48:3b:54: bf:7f:83:e4:23:49:38:b7:08:8f:ee:e7:ec:cf:de:14:bb:1a: aa:04:32:9e:b0:0f:07:3e:53:fe:8e:56:72:7e:b8:2c:63:da: 39:93:86:6a:e1:fe:51:36:b8:c3:9b:a3:1a:af:a6:f6:24:f8: bf:a6:45:b2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCTUOCPvBCLq3Mc1b32MZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzBkZTg0MGZkNmJmNGIwYWZkMTI3NGU0NGVmZDFiODY2 NTc2MmMwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD EygzODUxNjBmYjAwMjk0MjBmNDkzZTZmNDBlZDRiNzkxYmFlNDQ1YTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTdHSMZf+OMaiNCBm4Lmvz6+q5vi M0nWIYSxAA3nPc64gK1YkCmzU5jeUI0JzvttDL8zDtn78CQ6/R7am/IdFMyBlN4u +bJw+J4//CL33/BYT/UnACEWXcqjnlhkgDqao1O0hieiFmhybkE2N7waoM3LftXs ASg9WXfaOpGY/He/Bq9UzWKYnrghalNpPDkgDMjP8PV3fw6urB9amqeb0UOjGJp0 BrIJZx4qph5wqFY7D/JRkGLuNB3UnMlFM5enA+kwrSL7fm5ZPxVyknUz4YyZEDiJ eULu8Yo3CbA8tmobkq/Hdujdxtblym1xykrOPcPcqaFUE0VHdWRCj4RlawIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDhRYPsAKUIPST5vQO1LeRuuRFpNMB8GA1UdIwQY MBaAFPtw3oQP1r9LCv0SdORO/RuGZXYsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zRGVoQV9XdjBzS19SSjA1RTc5RzRabGRpdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvOWEzZWFjLWY4NjItNDc4OS1hYzIx LWQ5NDQ0YTNkMGNlMC8xLzEtM0RlaEFfV3Ywc0tfUkowNUU3OUc0WmxkaXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRhLzlhM2VhYy1mODYyLTQ3ODktYWMyMS1kOTQ0NGEzZDBj ZTAvMS8xLTNEZWhBX1d2MHNLX1JKMDVFNzlHNFpsZGl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAci8E 1Xf3CFpokJQ5cdVe5pD74wPIHoBetQgrgUWn9slSuJO76rG6zVdqnVKyyHqShJL5 h26U4dlZzBxD2UgN/VCPHP/ndFOzsE040TGO++JkZbJ7abvtvvr5I52fvT1tqjCB vnYpO+OcpV4IZJdxVa0oTn3teUWbtQ9zEKvPGNpF5sTlWEqvK9eRnnJZemOfDB4E yGjodQQ1oC3TPYRhxbzL6CvC/glmhBPLHgsgzg9f76tViPczfb3D/5ZYJQ+8EeyQ SDtUv3+D5CNJOLcIj+7n7M/eFLsaqgQynrAPBz5T/o5Wcn64LGPaOZOGauH+UTa4 w5ujGq+m9iT4v6ZFsg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:24 2025 by rpki-client