This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft File: t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft (raw, json) Hash identifier: +Hmo50VtGxdCY+aUqyzexP/Rs/ZOachYzXjHz2lG01g= Subject key identifier: 4A:D0:96:71:32:AD:51:8A:13:BD:6A:18:63:CB:5F:FC:6E:97:52:0B Authority key identifier: B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5 Certificate issuer: /CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5 Certificate serial: 019AF276AF97F28D32F8A9427D71639FF189 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft Manifest number: 0196 Signing time: Sat 06 Dec 2025 07:00:55 +0000 Manifest this update: Sat 06 Dec 2025 07:00:55 +0000 Manifest next update: Sun 07 Dec 2025 07:00:55 +0000 Files and hashes: 1: t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl (hash: bVXyp2wu/gAbcjqYM6nRX3ToiCLY9Kru6o5HfKLIGpM=) 2: vfts5VO11Lf49yWawFf1T10X7IA.roa (hash: o5JhQxo9WfUPfoKsbz0ZkfnOyZ6HVJldiK9KySDHufY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:af:97:f2:8d:32:f8:a9:42:7d:71:63:9f:f1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5 Validity Not Before: Dec 6 07:00:55 2025 GMT Not After : Dec 7 07:00:55 2025 GMT Subject: CN=4ad0967132ad518a13bd6a1863cb5ffc6e97520b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:aa:b1:47:2e:c3:84:3c:e3:81:b2:35:a0:a6: 71:ff:e3:6a:e7:4d:fd:80:95:02:d9:b2:98:b9:cf: 67:94:85:3a:47:33:61:85:58:d6:1b:24:95:8c:35: 82:a4:d5:46:39:8e:94:7d:92:66:76:dd:29:db:d3: ea:e2:55:a6:ca:e3:f0:8f:08:a4:a7:5a:b3:f7:17: 97:28:d6:04:98:90:36:57:58:95:d6:b4:f8:46:0b: c0:58:f0:56:4b:cb:ac:7f:97:23:d7:0b:a9:fc:72: f6:79:dd:68:6e:cc:a8:f0:d9:0c:db:b7:f7:e1:6d: 94:01:c5:78:76:5b:19:e9:86:83:40:7e:4c:ec:3e: 91:9f:4c:ba:59:ec:7e:3d:38:7f:30:d7:e8:d1:a5: 2b:13:9f:3b:a9:fd:6a:51:e7:45:56:4f:d4:ba:a0: 7c:24:4c:99:6f:b3:fb:c5:e7:a0:ef:89:b8:e1:50: cd:9e:9e:d9:5c:6d:ea:ff:97:d3:34:4a:7e:2e:8b: 35:b2:16:23:0c:a5:7c:61:88:34:ca:a0:05:ee:dd: d0:86:bd:9a:e2:55:d9:db:6e:ef:3d:b3:68:0f:4f: 91:3b:7b:82:27:d5:7e:cf:59:6a:c8:58:77:34:1b: 7a:ee:70:fc:f8:94:d5:86:a1:7d:38:32:52:1b:0a: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D0:96:71:32:AD:51:8A:13:BD:6A:18:63:CB:5F:FC:6E:97:52:0B X509v3 Authority Key Identifier: keyid:B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e4:4c:dc:92:06:3e:37:04:45:07:81:5b:fb:55:5e:81:2a: 37:74:b2:1d:4f:86:6f:2d:a1:e7:65:fa:9c:a9:e0:af:75:59: e2:85:2e:8a:84:f8:50:46:42:fb:4d:95:fe:ba:f2:43:94:3f: 3f:7c:d7:77:f5:24:4e:ec:1f:14:66:2f:96:a7:63:64:47:f0: ad:e1:ef:cf:e6:1d:82:0f:44:06:03:ea:3e:ee:8a:27:40:f4: 1e:3d:b3:7f:2f:6b:f3:af:74:2d:a6:2d:c4:31:69:5d:67:da: 69:48:0e:42:30:e1:9c:09:10:12:b9:78:d5:43:de:d1:89:6f: 05:37:34:7d:79:ca:4a:b2:90:c9:f6:f6:ff:6e:f0:c1:08:5b: e9:fa:18:e1:7d:6c:e5:7e:a5:7b:1e:e7:2c:92:f0:7f:c4:f9: a0:46:04:45:97:a1:81:71:d7:af:82:0c:62:1b:ab:f3:02:0d: 99:4a:cb:93:37:fc:f2:3c:e5:c8:3b:c6:e8:4d:97:9a:44:7c: 30:62:54:54:9f:42:91:07:d8:27:a0:0e:58:0f:2f:0e:2e:d6: 05:89:7f:56:ae:71:45:f8:b3:40:28:c9:d7:5c:00:4a:f5:19: e5:cd:41:ff:0c:7d:3b:66:fb:7e:6e:66:d8:36:28:6a:10:0a: ce:39:56:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydq+X8o0y+KlCfXFjn/GJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzRjN2I4YmFhMWQ5ZDQ3YzNhZjU1ZjNlOTdkZDZlNWQ2 ZTI3ZDUwHhcNMjUxMjA2MDcwMDU1WhcNMjUxMjA3MDcwMDU1WjAzMTEwLwYDVQQD Eyg0YWQwOTY3MTMyYWQ1MThhMTNiZDZhMTg2M2NiNWZmYzZlOTc1MjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qqxRy7DhDzjgbI1oKZx/+Nq5039 gJUC2bKYuc9nlIU6RzNhhVjWGySVjDWCpNVGOY6UfZJmdt0p29Pq4lWmyuPwjwik p1qz9xeXKNYEmJA2V1iV1rT4RgvAWPBWS8usf5cj1wup/HL2ed1obsyo8NkM27f3 4W2UAcV4dlsZ6YaDQH5M7D6Rn0y6Wex+PTh/MNfo0aUrE587qf1qUedFVk/UuqB8 JEyZb7P7xeeg74m44VDNnp7ZXG3q/5fTNEp+Los1shYjDKV8YYg0yqAF7t3Qhr2a 4lXZ227vPbNoD0+RO3uCJ9V+z1lqyFh3NBt67nD8+JTVhqF9ODJSGwodhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErQlnEyrVGKE71qGGPLX/xul1ILMB8GA1UdIwQY MBaAFLd0x7i6odnUfDr1Xz6X3W5dbifVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNUSHVMcWgyZFI4T3ZWZlBwZmRibDF1SjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMDg3OTQtMDA5NS00NzFiLWEzMDEt ZjAzODdlMGU2MjFiLzEvdDNUSHVMcWgyZFI4T3ZWZlBwZmRibDF1SjlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9lMDg3OTQtMDA5NS00NzFiLWEzMDEtZjAzODdlMGU2MjFi LzEvdDNUSHVMcWgyZFI4T3ZWZlBwZmRibDF1SjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuRM3JIG PjcERQeBW/tVXoEqN3SyHU+Gby2h52X6nKngr3VZ4oUuioT4UEZC+02V/rryQ5Q/ P3zXd/UkTuwfFGYvlqdjZEfwreHvz+Ydgg9EBgPqPu6KJ0D0Hj2zfy9r8690LaYt xDFpXWfaaUgOQjDhnAkQErl41UPe0YlvBTc0fXnKSrKQyfb2/27wwQhb6foY4X1s 5X6lex7nLJLwf8T5oEYERZehgXHXr4IMYhur8wINmUrLkzf88jzlyDvG6E2XmkR8 MGJUVJ9CkQfYJ6AOWA8vDi7WBYl/Vq5xRfizQCjJ11wASvUZ5c1B/wx9O2b7fm5m 2DYoahAKzjlW+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:21:43 2025 by rpki-client