This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft File: s3fRc_TqOk-bJT7lLrnugUaxDj4.mft (raw, json) Hash identifier: pqL0JLEnaCwqWQ4BAAaJv1atZO/VXqOGyzaxuYqKCY8= Subject key identifier: F5:4C:6E:29:9F:88:D1:2E:7F:52:C0:1B:47:00:EE:C3:A2:CD:8A:4A Authority key identifier: B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E Certificate issuer: /CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e Certificate serial: 019AF12EFCCDFDA901941BAD82C2B3517CD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft Manifest number: 1399 Signing time: Sat 06 Dec 2025 01:02:59 +0000 Manifest this update: Sat 06 Dec 2025 01:02:59 +0000 Manifest next update: Sun 07 Dec 2025 01:02:59 +0000 Files and hashes: 1: s3fRc_TqOk-bJT7lLrnugUaxDj4.crl (hash: vM9cF5ai4XLN1rRi7rF1Q2lOimIJ/x0maX5pBF0WAVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:fc:cd:fd:a9:01:94:1b:ad:82:c2:b3:51:7c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e Validity Not Before: Dec 6 01:02:59 2025 GMT Not After : Dec 7 01:02:59 2025 GMT Subject: CN=f54c6e299f88d12e7f52c01b4700eec3a2cd8a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:32:18:87:f9:f7:69:7d:ae:a1:51:51:0c:db: 78:b3:d0:59:19:92:da:8a:67:11:27:35:60:2c:08: 01:ed:40:d5:c8:e8:3e:a3:54:bf:34:a1:43:33:2c: 03:01:18:ce:43:85:ff:05:bb:52:cc:b5:21:88:fe: c0:ec:17:80:0b:93:89:ba:e1:12:b5:f8:6f:26:a4: c6:65:b5:0c:2f:8b:4f:7d:c4:e3:c8:47:70:bc:fb: 76:5a:2d:e4:21:58:6e:f3:7a:40:7c:44:14:37:08: 56:61:03:a1:4b:38:20:b2:72:1a:4c:c9:bd:49:73: 6e:21:fd:11:38:3e:e8:a6:c3:41:3f:99:0d:dd:75: 8b:04:a1:70:f0:60:1d:60:30:d0:7d:4e:9d:4f:54: 4e:07:86:79:59:f1:84:e1:a8:d5:c1:87:70:86:fb: 44:a4:68:6b:bc:f7:e0:1e:50:c6:69:74:c1:68:0c: e4:36:1a:49:2b:fc:71:ae:b8:3d:ac:10:c4:e5:72: 39:aa:7a:40:6e:9b:cf:ce:5f:c3:ae:2f:9c:dc:14: 2e:39:d2:fc:67:c9:f0:69:1a:06:50:00:75:ba:03: 32:29:d0:bf:d9:e4:af:f1:87:1e:35:d6:25:5f:0b: 78:be:15:0d:44:1b:51:48:02:d3:01:92:36:f4:bb: b5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4C:6E:29:9F:88:D1:2E:7F:52:C0:1B:47:00:EE:C3:A2:CD:8A:4A X509v3 Authority Key Identifier: keyid:B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:72:8c:34:86:5e:d1:c1:24:c9:f8:8f:44:d4:bd:03:a5:4d: 54:86:bf:2c:b5:a8:36:0b:f3:e9:32:2e:67:ae:8f:43:d0:24: 07:58:d9:14:40:be:b4:ea:d2:62:90:44:98:bf:66:49:45:56: b1:00:21:44:19:d3:dd:26:f3:25:45:1a:b9:10:4f:a4:a5:98: de:45:72:56:5c:a6:12:a4:ff:0d:61:33:02:77:2c:fe:34:82: f2:fc:19:5c:16:82:87:f4:d4:34:41:24:a8:f1:81:f4:fd:2b: eb:08:7e:ea:b9:ea:f8:20:9f:2c:f6:d0:de:35:22:ba:3a:aa: e1:99:85:ee:39:88:f5:81:66:fc:df:ad:ca:85:70:e9:89:79: 7e:4c:8f:4e:8c:b5:bd:59:10:a6:60:ca:95:2b:31:f6:84:ca: 47:b8:12:bb:a9:a2:fa:6a:99:8e:14:55:b0:59:09:62:f4:09: c4:fe:1d:4a:b9:84:e9:39:65:0b:83:72:12:fd:43:77:33:46: fc:11:c9:c9:6a:3b:e3:51:f8:2a:02:22:7e:20:cc:d0:dd:cb: dc:0f:a7:21:40:ab:c1:98:f2:41:6b:49:56:ef:3a:45:8b:40: d2:0b:7d:69:eb:27:3d:36:ee:4c:c4:cc:58:6b:2a:21:18:09: 2c:8f:53:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvzN/akBlButgsKzUXzTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNzdkMTczZjRlYTNhNGY5YjI1M2VlNTJlYjllZTgxNDZi MTBlM2UwHhcNMjUxMjA2MDEwMjU5WhcNMjUxMjA3MDEwMjU5WjAzMTEwLwYDVQQD EyhmNTRjNmUyOTlmODhkMTJlN2Y1MmMwMWI0NzAwZWVjM2EyY2Q4YTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzIYh/n3aX2uoVFRDNt4s9BZGZLa imcRJzVgLAgB7UDVyOg+o1S/NKFDMywDARjOQ4X/BbtSzLUhiP7A7BeAC5OJuuES tfhvJqTGZbUML4tPfcTjyEdwvPt2Wi3kIVhu83pAfEQUNwhWYQOhSzggsnIaTMm9 SXNuIf0ROD7opsNBP5kN3XWLBKFw8GAdYDDQfU6dT1ROB4Z5WfGE4ajVwYdwhvtE pGhrvPfgHlDGaXTBaAzkNhpJK/xxrrg9rBDE5XI5qnpAbpvPzl/Dri+c3BQuOdL8 Z8nwaRoGUAB1ugMyKdC/2eSv8YceNdYlXwt4vhUNRBtRSALTAZI29Lu1WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVMbimfiNEuf1LAG0cA7sOizYpKMB8GA1UdIwQY MBaAFLN30XP06jpPmyU+5S657oFGsQ4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczNmUmNfVHFPay1iSlQ3bExybnVnVWF4RGo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wZTIxNDYtOTc4YS00MzlmLTk1NzAt Nzk2MDk4NWQzNWEzLzEvczNmUmNfVHFPay1iSlQ3bExybnVnVWF4RGo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8wZTIxNDYtOTc4YS00MzlmLTk1NzAtNzk2MDk4NWQzNWEz LzEvczNmUmNfVHFPay1iSlQ3bExybnVnVWF4RGo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnKMNIZe 0cEkyfiPRNS9A6VNVIa/LLWoNgvz6TIuZ66PQ9AkB1jZFEC+tOrSYpBEmL9mSUVW sQAhRBnT3SbzJUUauRBPpKWY3kVyVlymEqT/DWEzAncs/jSC8vwZXBaCh/TUNEEk qPGB9P0r6wh+6rnq+CCfLPbQ3jUiujqq4ZmF7jmI9YFm/N+tyoVw6Yl5fkyPToy1 vVkQpmDKlSsx9oTKR7gSu6mi+mqZjhRVsFkJYvQJxP4dSrmE6TllC4NyEv1DdzNG /BHJyWo741H4KgIifiDM0N3L3A+nIUCrwZjyQWtJVu86RYtA0gt9aesnPTbuTMTM WGsqIRgJLI9T5w== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:25 2025 by rpki-client