This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft File: k3hbOp4zxStYueyVo3cj8ACL-UY.mft (raw, json) Hash identifier: Kfg/0mal7lcOWN1Xi/d0kzl/Uehsxcy/62blJg/umqo= Subject key identifier: C2:FA:26:20:94:94:2F:64:0C:09:24:81:DF:15:4F:57:7D:8A:95:CC Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46 Certificate issuer: /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946 Certificate serial: 019AF4655E1A98405276F695B90B150F2504 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:01:15 +0000 Manifest this update: Sat 06 Dec 2025 16:01:15 +0000 Manifest next update: Sun 07 Dec 2025 16:01:15 +0000 Files and hashes: 1: k3hbOp4zxStYueyVo3cj8ACL-UY.crl (hash: 8obgSsUUHAMVn5fj2wctW+NTdmEHuvRvJtxExsFPXCc=) 2: nuidpU4aDNDfpkpE3RPeG40f1q4.roa (hash: KG4XUtkHgFpia+tczkzg4tQ7m8oF5y68xoUIqm5c/jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:5e:1a:98:40:52:76:f6:95:b9:0b:15:0f:25:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946 Validity Not Before: Dec 6 16:01:15 2025 GMT Not After : Dec 7 16:01:15 2025 GMT Subject: CN=c2fa262094942f640c092481df154f577d8a95cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0b:24:5c:22:98:1b:86:e9:80:b3:e6:06:44: 80:27:3b:7f:99:f8:a3:d5:23:70:eb:4d:18:35:02: 16:96:fd:d3:d5:c7:1d:d0:ec:4e:60:38:bd:d8:44: 5a:ac:3a:15:3e:70:6b:20:03:c9:e1:77:69:93:06: f1:5d:a0:bd:31:90:e9:86:c8:a1:de:7d:b0:47:33: 06:17:66:a0:19:12:e8:41:4f:af:08:46:8a:92:42: a4:f0:d0:da:9e:ce:d2:9d:c4:6f:dd:f8:c3:2f:19: 85:7f:77:7f:f9:76:2e:74:aa:c7:6e:c8:1f:ef:22: 43:79:2d:ff:84:ce:60:4a:f4:95:16:e9:7c:9f:ab: 2a:8c:d4:e0:4f:91:52:e0:3d:61:18:42:45:c0:76: 32:75:1a:ba:2e:f3:f6:2b:c0:a2:6f:b9:23:39:db: df:aa:c5:d5:87:62:49:44:38:4e:2d:80:1a:aa:4d: 22:91:a3:28:9f:70:f2:40:3f:d5:86:90:3d:3f:8e: 3c:3d:9e:b4:1e:64:3a:55:16:32:6f:d2:23:ba:f4: b5:af:51:e4:57:a5:80:0a:4e:17:7d:a2:4c:40:9a: 52:68:21:62:95:a3:93:41:b7:bd:45:01:30:09:9c: 0a:43:ca:90:c8:d1:f7:ce:4e:f3:fa:ac:c0:e1:02: d5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FA:26:20:94:94:2F:64:0C:09:24:81:DF:15:4F:57:7D:8A:95:CC X509v3 Authority Key Identifier: keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:c0:fc:90:3f:87:df:98:ad:77:69:e2:71:96:4b:01:6d:ab: db:ee:a8:62:6b:ab:01:f6:32:0b:8a:e6:df:cc:ae:33:36:53: ce:a8:29:cf:0e:f9:f7:58:40:ec:f7:ee:3a:17:e5:27:58:9b: 13:86:72:ac:eb:c1:6d:39:b1:e6:13:e4:0a:79:a4:0b:64:0b: 2f:60:18:dd:17:d3:12:62:13:d0:42:bf:e7:d4:bb:11:dc:c2: 19:32:93:f9:0b:fd:83:b7:18:70:63:b5:24:db:f0:6e:7e:73: 7a:66:a7:c3:84:49:23:93:35:a8:5a:7b:d4:bf:ee:12:7b:fe: 15:be:56:92:a6:31:18:fa:1f:92:b1:11:c5:7e:19:b9:62:70: e5:c3:4f:63:0b:23:f7:bc:30:b0:81:27:2e:f6:47:c8:0c:db: 1d:09:b8:d4:31:0c:50:fa:84:79:2d:1f:71:dd:94:ff:64:ea: 7f:ad:c9:e1:1b:36:3c:30:08:a5:4d:6c:ee:96:40:8d:c4:b7: 3b:4c:68:67:79:8a:b8:a1:79:e6:08:87:f8:75:94:a7:58:d8: 13:75:24:1a:0f:da:e6:ec:16:d9:a4:d1:c7:6c:f6:68:3d:83: 99:10:94:cb:2b:c0:4a:9c:e4:a3:78:3c:c7:58:14:c8:40:e1: ff:11:b4:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZV4amEBSdvaVuQsVDyUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNzg1YjNhOWUzM2M1MmI1OGI5ZWM5NWEzNzcyM2YwMDA4 YmY5NDYwHhcNMjUxMjA2MTYwMTE1WhcNMjUxMjA3MTYwMTE1WjAzMTEwLwYDVQQD EyhjMmZhMjYyMDk0OTQyZjY0MGMwOTI0ODFkZjE1NGY1NzdkOGE5NWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AskXCKYG4bpgLPmBkSAJzt/mfij 1SNw600YNQIWlv3T1ccd0OxOYDi92ERarDoVPnBrIAPJ4XdpkwbxXaC9MZDphsih 3n2wRzMGF2agGRLoQU+vCEaKkkKk8NDans7SncRv3fjDLxmFf3d/+XYudKrHbsgf 7yJDeS3/hM5gSvSVFul8n6sqjNTgT5FS4D1hGEJFwHYydRq6LvP2K8Cib7kjOdvf qsXVh2JJRDhOLYAaqk0ikaMon3DyQD/VhpA9P448PZ60HmQ6VRYyb9IjuvS1r1Hk V6WACk4XfaJMQJpSaCFilaOTQbe9RQEwCZwKQ8qQyNH3zk7z+qzA4QLV7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFML6JiCUlC9kDAkkgd8VT1d9ipXMMB8GA1UdIwQY MBaAFJN4WzqeM8UrWLnslaN3I/AAi/lGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80ODI5ODQtZDllNC00ZDMzLWE4ZWMt ZjRiYWI3MTllMDcwLzEvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80ODI5ODQtZDllNC00ZDMzLWE4ZWMtZjRiYWI3MTllMDcw LzEvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzcD8kD+H 35itd2nicZZLAW2r2+6oYmurAfYyC4rm38yuMzZTzqgpzw7591hA7PfuOhflJ1ib E4ZyrOvBbTmx5hPkCnmkC2QLL2AY3RfTEmIT0EK/59S7EdzCGTKT+Qv9g7cYcGO1 JNvwbn5zemanw4RJI5M1qFp71L/uEnv+Fb5WkqYxGPofkrERxX4ZuWJw5cNPYwsj 97wwsIEnLvZHyAzbHQm41DEMUPqEeS0fcd2U/2Tqf63J4Rs2PDAIpU1s7pZAjcS3 O0xoZ3mKuKF55giH+HWUp1jYE3UkGg/a5uwW2aTRx2z2aD2DmRCUyyvASpzko3g8 x1gUyEDh/xG0fQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:42:46 2025 by rpki-client