This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft File: 03lp9dJTIQsKvo4HoIb2CNbyoK8.mft (raw, json) Hash identifier: AKR0TEhAtRgQe7KZU6WVgzfwmkwgg9rnfGdMZjrE6Pw= Subject key identifier: 06:3D:EC:12:78:8A:F9:48:69:A9:AE:2A:D5:8A:48:BE:91:54:2D:15 Authority key identifier: D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF Certificate issuer: /CN=d37969f5d253210b0abe8e07a086f608d6f2a0af Certificate serial: 019AF27661970A3FB43336ACAE4FB037FE90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft Manifest number: 01F4 Signing time: Sat 06 Dec 2025 07:00:35 +0000 Manifest this update: Sat 06 Dec 2025 07:00:35 +0000 Manifest next update: Sun 07 Dec 2025 07:00:35 +0000 Files and hashes: 1: 03lp9dJTIQsKvo4HoIb2CNbyoK8.crl (hash: fyNQkw1t7K52EBrHqh/+bE8akun45XOXLa8s3mLhKbM=) 2: uPuOBXO8b4-bI2P5P3XpiRIEXXA.roa (hash: q/g5oVhV8oJmXJeCRjYEShHLH12PHyzIo7YhSAchvwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:61:97:0a:3f:b4:33:36:ac:ae:4f:b0:37:fe:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d37969f5d253210b0abe8e07a086f608d6f2a0af Validity Not Before: Dec 6 07:00:35 2025 GMT Not After : Dec 7 07:00:35 2025 GMT Subject: CN=063dec12788af94869a9ae2ad58a48be91542d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:df:d5:32:e1:a6:ca:f1:69:7a:fb:9c:40:7e: 95:c1:c6:35:b7:4a:38:32:f2:98:c7:fa:7f:61:be: 44:41:96:14:52:38:f7:d9:31:67:54:2e:04:54:b2: be:8a:15:7c:d7:c5:16:34:b6:bb:c6:83:40:fd:32: 82:5c:e1:8f:ba:29:42:b9:13:10:b8:f3:01:6a:ba: 58:2d:02:ea:25:73:a4:b9:16:da:72:d1:07:00:76: 06:5e:c1:68:59:9b:d1:94:40:27:90:ea:8b:7b:f5: c6:41:02:94:de:2b:b8:29:b5:4b:c6:2b:b3:07:fb: 61:6e:a1:30:d2:5c:50:ce:78:1a:0f:f3:92:ee:87: c2:d4:1c:f6:d6:af:8c:66:da:84:79:a9:a2:d7:bb: cc:23:72:27:9e:b3:9d:ac:32:a7:66:fd:17:13:93: 5c:05:e8:ec:51:64:9b:ac:19:6b:af:97:4a:e4:f4: 43:fb:89:5a:7f:02:b7:97:2a:7a:aa:a3:8d:dc:32: e0:c7:e5:89:7a:6b:19:84:b1:e6:2d:12:ba:b9:b6: 9a:36:ba:b6:d6:90:2c:d4:a5:7a:1f:86:ae:f0:69: e8:33:e3:e2:8b:ac:4f:d7:2b:08:3c:06:2c:98:32: ba:25:9d:51:90:9d:12:e1:9a:b2:63:8f:59:56:ff: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3D:EC:12:78:8A:F9:48:69:A9:AE:2A:D5:8A:48:BE:91:54:2D:15 X509v3 Authority Key Identifier: keyid:D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:71:17:6c:91:89:c3:fd:c8:5f:39:19:66:38:f0:93:6b:93: 5f:c5:e5:aa:4a:85:37:83:1d:53:fa:04:65:d0:86:cf:07:89: e4:12:1a:7a:fd:27:81:f5:35:af:d3:ef:82:c2:1e:68:ed:72: 09:c8:86:77:6a:ac:81:78:90:57:c8:01:ed:8a:d2:3b:87:f5: 8c:2d:2c:4c:c6:c4:af:f1:44:31:ec:58:fa:47:ae:1e:e7:dc: c5:40:a2:cc:42:38:ed:7f:7d:7a:91:95:07:d5:01:a5:9d:1f: 38:98:37:90:de:b5:05:39:5c:a2:64:2d:1e:b0:a7:f1:82:1e: b5:a6:81:29:c4:ac:98:e9:22:1e:2c:c8:ba:26:28:8d:8b:5d: 7b:49:74:57:33:43:4d:0e:e6:01:db:b6:68:6a:a1:02:8f:d1: cb:5a:ea:06:2c:bd:34:d7:a1:87:88:d6:7f:4a:e5:92:67:62: 3b:f2:58:49:27:f3:e9:fa:4c:68:90:d3:cc:a9:d8:0d:e9:86: 61:10:be:83:79:0b:49:65:f7:af:97:b1:6f:bb:7c:2f:88:36: b0:6b:82:ad:34:51:92:3c:32:43:41:56:13:79:57:37:13:a4: cf:58:2e:6c:e4:4c:ef:21:f3:e8:75:7a:ab:3f:61:2b:bb:8b: 56:a3:d5:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmGXCj+0Mzasrk+wN/6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNzk2OWY1ZDI1MzIxMGIwYWJlOGUwN2EwODZmNjA4ZDZm MmEwYWYwHhcNMjUxMjA2MDcwMDM1WhcNMjUxMjA3MDcwMDM1WjAzMTEwLwYDVQQD EygwNjNkZWMxMjc4OGFmOTQ4NjlhOWFlMmFkNThhNDhiZTkxNTQyZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt/VMuGmyvFpevucQH6VwcY1t0o4 MvKYx/p/Yb5EQZYUUjj32TFnVC4EVLK+ihV818UWNLa7xoNA/TKCXOGPuilCuRMQ uPMBarpYLQLqJXOkuRbactEHAHYGXsFoWZvRlEAnkOqLe/XGQQKU3iu4KbVLxiuz B/thbqEw0lxQzngaD/OS7ofC1Bz21q+MZtqEeami17vMI3InnrOdrDKnZv0XE5Nc BejsUWSbrBlrr5dK5PRD+4lafwK3lyp6qqON3DLgx+WJemsZhLHmLRK6ubaaNrq2 1pAs1KV6H4au8GnoM+Pii6xP1ysIPAYsmDK6JZ1RkJ0S4ZqyY49ZVv9ANQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAY97BJ4ivlIaamuKtWKSL6RVC0VMB8GA1UdIwQY MBaAFNN5afXSUyELCr6OB6CG9gjW8qCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81MjQwYTYtY2Q2MS00ZTBjLTg4YjYt ZjU5ZDIwZWYyN2I0LzEvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC81MjQwYTYtY2Q2MS00ZTBjLTg4YjYtZjU5ZDIwZWYyN2I0 LzEvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3EXbJGJ w/3IXzkZZjjwk2uTX8XlqkqFN4MdU/oEZdCGzweJ5BIaev0ngfU1r9PvgsIeaO1y CciGd2qsgXiQV8gB7YrSO4f1jC0sTMbEr/FEMexY+keuHufcxUCizEI47X99epGV B9UBpZ0fOJg3kN61BTlcomQtHrCn8YIetaaBKcSsmOkiHizIuiYojYtde0l0VzND TQ7mAdu2aGqhAo/Ry1rqBiy9NNehh4jWf0rlkmdiO/JYSSfz6fpMaJDTzKnYDemG YRC+g3kLSWX3r5exb7t8L4g2sGuCrTRRkjwyQ0FWE3lXNxOkz1gubORM7yHz6HV6 qz9hK7uLVqPVuA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:52 2025 by rpki-client