This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json) Hash identifier: 6OhxxboH8d8KW6+SOxln8MTZ6uGsNN9RIiGsXBqHthk= Subject key identifier: FF:12:31:68:A8:54:08:F8:87:3C:41:24:21:24:78:68:34:D0:66:A8 Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59 Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159 Certificate serial: 019B2DE6790EC998F6E0E7DDC3B69DF7A3EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft Manifest number: 0D2D Signing time: Wed 17 Dec 2025 20:00:37 +0000 Manifest this update: Wed 17 Dec 2025 20:00:37 +0000 Manifest next update: Thu 18 Dec 2025 20:00:37 +0000 Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: 4LJtKVJtbuYA5Pnts65fCxgFB2uQtJ4TRiYcR3ohhq4=) 2: IWr6TuTrJyjayPLvTxSMqZtzabw.roa (hash: rtpLNLVSn8Vjv4N/NCkqAqr/rBVi4ck/ZAOnbXB0Ovs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:79:0e:c9:98:f6:e0:e7:dd:c3:b6:9d:f7:a3:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159 Validity Not Before: Dec 17 20:00:37 2025 GMT Not After : Dec 18 20:00:37 2025 GMT Subject: CN=ff123168a85408f8873c41242124786834d066a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ae:49:43:78:8f:16:cd:3c:5f:4c:cb:12:5f: a4:57:22:b2:69:96:ea:ff:3b:39:dc:c1:46:0f:08: 91:c3:91:e7:3f:19:40:f2:d8:c2:f2:49:a1:6d:5d: c0:4e:23:47:2f:4e:30:b6:c8:1d:1a:5c:b1:e6:28: 49:a1:aa:3e:5c:bd:10:ae:3e:48:52:fe:cd:09:aa: e7:ab:9b:2e:b5:7c:60:c7:d4:b0:a2:21:37:3f:82: 71:47:5d:e4:67:d6:d0:f3:6d:9e:b5:c9:07:bf:16: 7a:05:19:ab:62:4a:7b:eb:f3:c9:aa:5a:8a:34:05: 87:31:94:84:7f:01:3a:a3:d5:f1:a5:1a:10:2d:e6: 38:2e:07:16:65:6e:ed:0f:49:17:4b:7d:5e:f0:01: 60:61:8c:00:3d:97:53:d6:b8:17:a9:b4:66:ce:3e: 89:c1:df:9a:dd:fc:b4:45:d7:75:55:27:c1:31:16: 30:bc:14:dd:d3:f2:54:65:50:ff:02:d1:15:5f:57: 54:3e:98:2c:25:9e:e9:b8:25:2f:ba:ab:1a:7a:cc: b0:cc:8f:ee:ca:ec:ae:ad:a5:ea:f1:76:db:d6:7c: cd:5a:0d:9e:f0:53:8a:34:f5:54:d7:2f:38:05:6e: 2b:bf:5a:97:e7:67:20:27:ac:41:4f:bb:c2:90:98: 15:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:12:31:68:A8:54:08:F8:87:3C:41:24:21:24:78:68:34:D0:66:A8 X509v3 Authority Key Identifier: keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:cd:d6:e6:8b:87:c3:fc:4e:18:53:4e:d4:77:1e:ed:93:c1: 7b:ef:a9:35:b7:e8:5e:50:70:71:d9:df:a8:d3:b0:bb:b1:aa: 4a:eb:51:d5:06:88:e8:42:fd:7d:38:40:1f:5d:d1:99:89:73: 81:4a:8f:c9:9b:96:bd:1d:43:3f:b2:97:b5:43:42:da:72:5a: 5f:eb:13:0e:1c:c1:9f:6a:fa:d5:fb:2a:0b:9c:18:33:b2:25: b9:9c:cb:0d:9a:c1:cd:37:50:df:79:3e:7b:d1:19:64:d2:f7: fa:8c:58:9e:e0:2c:99:86:aa:e9:21:60:b8:e3:fa:b2:6a:e4: 5c:9f:05:85:76:5f:92:b2:85:63:50:1c:67:4c:fb:8b:e6:bb: 03:9d:4a:e4:0c:7f:d2:c7:d6:bc:f5:9a:3a:da:30:42:f8:31: a6:e2:15:c7:94:27:f9:fa:15:b9:2a:45:95:d9:a8:84:50:f0: 01:ff:7c:33:1f:9b:97:23:e1:29:e0:f0:44:03:d5:7e:0b:ba: dd:2a:44:52:5b:e0:25:7a:0a:c0:fc:7a:67:d7:c4:6d:14:22: fb:5f:36:da:5b:f1:de:2d:fc:fd:2e:e7:e3:20:5d:29:7b:4e: 2b:cd:57:5f:6c:02:7d:bc:a3:3e:87:93:30:b2:ac:87:e1:8e: 64:94:63:89 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZst5nkOyZj24Ofdw7ad96PsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZWZmNzZlMTJkYzE0Yzc0NGFhNzI2ZTAxNzQxNzI3YzQ2 ZGMxNTkwHhcNMjUxMjE3MjAwMDM3WhcNMjUxMjE4MjAwMDM3WjAzMTEwLwYDVQQD EyhmZjEyMzE2OGE4NTQwOGY4ODczYzQxMjQyMTI0Nzg2ODM0ZDA2NmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q5JQ3iPFs08X0zLEl+kVyKyaZbq /zs53MFGDwiRw5HnPxlA8tjC8kmhbV3ATiNHL04wtsgdGlyx5ihJoao+XL0Qrj5I Uv7NCarnq5sutXxgx9SwoiE3P4JxR13kZ9bQ822etckHvxZ6BRmrYkp76/PJqlqK NAWHMZSEfwE6o9XxpRoQLeY4LgcWZW7tD0kXS31e8AFgYYwAPZdT1rgXqbRmzj6J wd+a3fy0Rdd1VSfBMRYwvBTd0/JUZVD/AtEVX1dUPpgsJZ7puCUvuqsaesywzI/u yuyuraXq8Xbb1nzNWg2e8FOKNPVU1y84BW4rv1qX52cgJ6xBT7vCkJgVuwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFP8SMWioVAj4hzxBJCEkeGg00GaoMB8GA1UdIwQY MBaAFPvv924S3BTHRKpybgF0FyfEbcFZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0tXzNiaExjRk1kRXFuSnVBWFFYSjhSdHdWay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvZDgwMWY3LTI4MjQtNGVhOS1hZDhm LTNiOGY1MDhhNzU0YS8xLzEtLV8zYmhMY0ZNZEVxbkp1QVhRWEo4UnR3VmsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzVmL2Q4MDFmNy0yODI0LTRlYTktYWQ4Zi0zYjhmNTA4YTc1 NGEvMS8xLS1fM2JoTGNGTWRFcW5KdUFYUVhKOFJ0d1ZrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh83W 5ouHw/xOGFNO1Hce7ZPBe++pNbfoXlBwcdnfqNOwu7GqSutR1QaI6EL9fThAH13R mYlzgUqPyZuWvR1DP7KXtUNC2nJaX+sTDhzBn2r61fsqC5wYM7IluZzLDZrBzTdQ 33k+e9EZZNL3+oxYnuAsmYaq6SFguOP6smrkXJ8FhXZfkrKFY1AcZ0z7i+a7A51K 5Ax/0sfWvPWaOtowQvgxpuIVx5Qn+foVuSpFldmohFDwAf98Mx+blyPhKeDwRAPV fgu63SpEUlvgJXoKwPx6Z9fEbRQi+1822lvx3i38/S7n4yBdKXtOK81XX2wCfbyj PoeTMLKsh+GOZJRjiQ== -----END CERTIFICATE-----Generated at Thu Dec 18 05:00:31 2025 by rpki-client