This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json) Hash identifier: D2TNVlQZBUAzvuMXeLddgL+prfm+NSYZOhstt+BXVbs= Subject key identifier: F4:97:22:15:E7:28:A9:B0:E8:87:F6:26:EA:21:8D:84:F3:0E:2C:7E Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4 Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4 Certificate serial: 019AF540667F383D2E863FA83CDCA119EAEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft Manifest number: 0173 Signing time: Sat 06 Dec 2025 20:00:29 +0000 Manifest this update: Sat 06 Dec 2025 20:00:29 +0000 Manifest next update: Sun 07 Dec 2025 20:00:29 +0000 Files and hashes: 1: EshCzxO86qcL07tz5uc1JfugV7o.roa (hash: LPE3JzJOmXyXyccfoQvv4I0FBt2vRf2Wt20kp5/Xotw=) 2: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: 6r55+zKmHZsolUINecRqDajgjAw8v3oWEKk4E1wYMR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:66:7f:38:3d:2e:86:3f:a8:3c:dc:a1:19:ea:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4 Validity Not Before: Dec 6 20:00:29 2025 GMT Not After : Dec 7 20:00:29 2025 GMT Subject: CN=f4972215e728a9b0e887f626ea218d84f30e2c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:48:50:df:3b:f2:d8:cc:2f:a0:48:e9:18: c1:45:3b:eb:e3:26:83:ed:35:0e:d4:10:a2:0a:02: 4a:7d:98:bb:79:3a:c3:21:ab:35:e1:04:d1:97:11: 6b:31:39:20:5c:08:24:a4:c1:1d:05:ea:b3:7e:84: 76:52:57:b2:65:87:36:b9:06:0a:2f:a0:8c:27:a8: 61:86:c4:58:a5:03:b3:d3:53:09:a9:36:73:46:5a: 5d:71:fc:ec:52:b8:86:c5:73:32:bc:08:5c:4b:97: 08:36:89:0d:ae:29:4d:4f:fe:a7:57:4d:e1:0a:f4: 6c:67:3f:2f:2d:ba:5f:a7:09:45:b4:35:78:07:73: 67:d6:c1:40:df:8b:0c:7f:8d:e9:c8:0c:18:04:81: 17:75:f9:a3:ac:6c:68:31:23:5c:6e:42:2d:82:6c: c0:f7:7c:2a:b6:d2:a4:58:f9:04:b6:e9:08:a1:db: 80:c5:69:d1:7a:f4:b9:b7:93:d1:db:32:33:ea:41: 34:22:33:ce:17:9a:e8:13:91:ee:00:c9:87:6b:62: eb:08:ab:c9:57:7c:3b:50:c9:b1:d6:2d:02:e4:b9: 68:3a:a4:e6:d2:a4:2d:0e:7e:16:be:f0:b9:6b:ce: 4c:71:a2:45:92:09:9a:30:d8:64:4b:7b:e8:12:68: 32:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:97:22:15:E7:28:A9:B0:E8:87:F6:26:EA:21:8D:84:F3:0E:2C:7E X509v3 Authority Key Identifier: keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9a:84:8a:46:16:dc:79:97:92:3a:05:65:a4:cb:08:0e:10: 46:bb:ef:50:c8:aa:21:30:36:8a:20:86:84:87:83:78:3f:a1: bc:8f:29:e5:50:bc:f0:e5:15:46:10:8d:70:43:f6:69:ea:26: 70:9f:27:48:66:c7:29:34:85:10:bb:c6:cd:c9:a2:55:27:14: 85:09:57:d7:49:b0:cd:34:c7:a2:00:5a:bd:07:02:22:b6:6d: 14:d6:d7:2b:9d:fb:23:b8:8e:a4:18:f9:8e:18:9a:01:1e:cb: 23:2f:93:7e:93:47:5d:3a:f3:b8:5f:21:28:60:1d:fb:5e:c6: a7:71:2a:ac:90:3f:57:eb:3c:a9:73:b8:f7:1a:89:3e:7e:81: 54:26:7a:74:cb:47:0a:a4:61:9d:54:bb:5d:79:cf:f7:c0:92: cc:f6:82:9f:15:11:d4:74:0c:ec:ee:6e:92:68:3f:f6:5f:50: be:99:2c:8f:47:d2:b0:3e:39:50:e2:3f:ee:50:65:2e:6c:44: c5:7f:e4:74:70:f2:85:b5:8f:1d:06:38:02:6d:2c:8d:32:18: 1c:65:c9:27:63:eb:72:cc:cc:5c:5b:d2:cb:d4:0e:7d:3e:27: aa:1c:66:23:88:77:47:a4:dc:e8:29:ce:f0:07:9f:82:18:14: 81:10:14:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QGZ/OD0uhj+oPNyhGerrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzMyNDMwODFlYWRjMWVmNGFlMzIzNGY4NmIyYmQ3MjYy MmI1YzQwHhcNMjUxMjA2MjAwMDI5WhcNMjUxMjA3MjAwMDI5WjAzMTEwLwYDVQQD EyhmNDk3MjIxNWU3MjhhOWIwZTg4N2Y2MjZlYTIxOGQ4NGYzMGUyYzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3FIUN878tjML6BI6RjBRTvr4yaD 7TUO1BCiCgJKfZi7eTrDIas14QTRlxFrMTkgXAgkpMEdBeqzfoR2UleyZYc2uQYK L6CMJ6hhhsRYpQOz01MJqTZzRlpdcfzsUriGxXMyvAhcS5cINokNrilNT/6nV03h CvRsZz8vLbpfpwlFtDV4B3Nn1sFA34sMf43pyAwYBIEXdfmjrGxoMSNcbkItgmzA 93wqttKkWPkEtukIoduAxWnRevS5t5PR2zIz6kE0IjPOF5roE5HuAMmHa2LrCKvJ V3w7UMmx1i0C5LloOqTm0qQtDn4WvvC5a85McaJFkgmaMNhkS3voEmgy3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSXIhXnKKmw6If2JuohjYTzDix+MB8GA1UdIwQY MBaAFEdzJDCB6twe9K4yNPhrK9cmIrXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2It MzRhOTQ5YzkyMDc0LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2ItMzRhOTQ5YzkyMDc0 LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5qEikYW 3HmXkjoFZaTLCA4QRrvvUMiqITA2iiCGhIeDeD+hvI8p5VC88OUVRhCNcEP2aeom cJ8nSGbHKTSFELvGzcmiVScUhQlX10mwzTTHogBavQcCIrZtFNbXK537I7iOpBj5 jhiaAR7LIy+TfpNHXTrzuF8hKGAd+17Gp3EqrJA/V+s8qXO49xqJPn6BVCZ6dMtH CqRhnVS7XXnP98CSzPaCnxUR1HQM7O5ukmg/9l9Qvpksj0fSsD45UOI/7lBlLmxE xX/kdHDyhbWPHQY4Am0sjTIYHGXJJ2PrcszMXFvSy9QOfT4nqhxmI4h3R6Tc6CnO 8AefghgUgRAUUQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:06 2025 by rpki-client