This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft File: Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json) Hash identifier: +dRmEP7acSIWGJdsO2vgM6JyItS0egXYxDUwy+8zeBk= Subject key identifier: EB:A1:92:22:AF:5A:B9:FB:84:15:59:5E:4C:03:CB:77:77:A5:97:61 Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19 Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19 Certificate serial: 019AF2766176A141F027A4D8EB359CA7A1DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft Manifest number: 0F7C Signing time: Sat 06 Dec 2025 07:00:35 +0000 Manifest this update: Sat 06 Dec 2025 07:00:35 +0000 Manifest next update: Sun 07 Dec 2025 07:00:35 +0000 Files and hashes: 1: 1ykQwAr7tjzYeu5N5mzq1ApyYvM.roa (hash: 5NLaYiuNwek7qbqlr2qTFyj4HJSwenOAixDp+ZTkHiw=) 2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: yMR1KMdSZv81BCD3r7VrIV2sgPMMsBRe+3nUhREWJZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:61:76:a1:41:f0:27:a4:d8:eb:35:9c:a7:a1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19 Validity Not Before: Dec 6 07:00:35 2025 GMT Not After : Dec 7 07:00:35 2025 GMT Subject: CN=eba19222af5ab9fb8415595e4c03cb7777a59761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:62:a3:13:45:ec:71:c8:e6:85:41:7c:b6:99: b0:5d:2b:07:cf:6c:95:8d:ad:58:28:c8:4b:d9:69: 9f:b6:54:43:34:98:84:7f:51:8d:68:eb:c0:8e:09: 6d:d8:dd:0b:d0:13:7e:de:e9:8f:71:cd:f1:75:22: 5f:90:f1:46:56:dd:be:e3:35:af:b3:bb:4d:0b:96: df:02:e7:4e:71:a5:cb:31:b1:1b:16:42:3e:9b:9d: 09:0b:2a:02:e8:0f:dd:02:48:e1:6d:13:32:a6:99: 56:2d:7a:6b:82:8c:f7:96:ca:a7:a8:c8:1e:28:83: 10:2c:14:7e:19:66:b0:1d:30:d0:07:52:3e:72:77: 15:73:ff:30:c6:45:bb:63:f3:a3:97:e0:22:1a:9b: 82:d0:69:a5:32:75:e9:2b:40:ba:c3:da:93:1e:a4: c1:d4:9b:13:d8:1b:93:f1:0d:cd:a5:84:99:dc:dc: a8:91:1d:02:5c:69:06:f5:e0:22:1c:cb:42:0f:c7: 30:86:cd:5e:28:aa:a5:66:29:aa:e7:c5:2c:94:f5: 3a:fb:9c:f6:a1:fd:15:80:d5:47:8a:c5:d0:29:f8: 89:8c:e4:7f:38:3f:32:45:f1:02:b4:cd:4c:b2:b6: 17:bd:9b:d5:64:c3:0d:0c:19:f9:b2:30:52:34:c5: 37:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A1:92:22:AF:5A:B9:FB:84:15:59:5E:4C:03:CB:77:77:A5:97:61 X509v3 Authority Key Identifier: keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:bd:f8:ed:a1:01:4d:39:00:ca:9a:08:31:c1:16:de:7c:cd: 89:8a:51:65:15:b7:71:b3:99:43:72:94:f6:64:1f:cc:1b:0f: 90:64:7e:72:d9:b1:0d:a6:60:52:88:91:eb:a6:d7:2f:c7:a4: 23:d8:26:70:75:f4:af:3b:f9:51:f2:b6:17:d0:13:8a:de:c7: 36:2e:04:65:dc:0d:72:84:38:09:e1:51:f1:46:85:32:fa:53: 8d:81:fe:5d:02:9b:82:91:8f:b1:27:e9:9f:8c:b9:c3:37:1d: 5a:91:a5:93:f1:53:ab:25:55:9d:02:98:c5:d6:12:ea:98:7b: 9b:ce:c0:10:c2:fa:4c:ae:60:c0:ce:9c:74:0c:9d:9b:40:41: db:1d:4f:e0:c4:aa:2f:9e:eb:cb:b4:e0:f4:c2:e6:43:27:36: 8d:eb:68:be:f9:bf:28:6b:49:a8:2a:8c:92:a5:06:58:07:aa: 1d:ec:c7:42:37:2e:67:b7:b2:2b:8d:75:b6:a6:e0:7d:bf:de: 87:ac:18:70:55:90:04:40:d8:ae:c7:93:ff:ea:f6:76:4a:a3: 0a:31:27:4a:de:33:fc:b0:17:32:b4:0c:fa:cd:da:4f:85:6c: 2c:18:1f:33:ae:20:06:4d:4a:d1:0d:18:45:7b:3c:88:92:44: f0:8d:65:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmF2oUHwJ6TY6zWcp6HdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYmRlY2YyYjFhNDEwZjY1MjNjMjBlNjMwODI2NzA5Y2I2 ZGFjMTkwHhcNMjUxMjA2MDcwMDM1WhcNMjUxMjA3MDcwMDM1WjAzMTEwLwYDVQQD EyhlYmExOTIyMmFmNWFiOWZiODQxNTU5NWU0YzAzY2I3Nzc3YTU5NzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GKjE0XsccjmhUF8tpmwXSsHz2yV ja1YKMhL2WmftlRDNJiEf1GNaOvAjglt2N0L0BN+3umPcc3xdSJfkPFGVt2+4zWv s7tNC5bfAudOcaXLMbEbFkI+m50JCyoC6A/dAkjhbRMypplWLXprgoz3lsqnqMge KIMQLBR+GWawHTDQB1I+cncVc/8wxkW7Y/Ojl+AiGpuC0GmlMnXpK0C6w9qTHqTB 1JsT2BuT8Q3NpYSZ3NyokR0CXGkG9eAiHMtCD8cwhs1eKKqlZimq58UslPU6+5z2 of0VgNVHisXQKfiJjOR/OD8yRfECtM1MsrYXvZvVZMMNDBn5sjBSNMU3gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuhkiKvWrn7hBVZXkwDy3d3pZdhMB8GA1UdIwQY MBaAFDK97PKxpBD2Ujwg5jCCZwnLbawZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXIzczhyR2tFUFpTUENEbU1JSm5DY3R0ckJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lMTU0NGItMWIyYy00ZWJkLTg2NTgt Nzc4MzllYjVmODIwLzEvTXIzczhyR2tFUFpTUENEbU1JSm5DY3R0ckJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9lMTU0NGItMWIyYy00ZWJkLTg2NTgtNzc4MzllYjVmODIw LzEvTXIzczhyR2tFUFpTUENEbU1JSm5DY3R0ckJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7347aEB TTkAypoIMcEW3nzNiYpRZRW3cbOZQ3KU9mQfzBsPkGR+ctmxDaZgUoiR66bXL8ek I9gmcHX0rzv5UfK2F9ATit7HNi4EZdwNcoQ4CeFR8UaFMvpTjYH+XQKbgpGPsSfp n4y5wzcdWpGlk/FTqyVVnQKYxdYS6ph7m87AEML6TK5gwM6cdAydm0BB2x1P4MSq L57ry7Tg9MLmQyc2jetovvm/KGtJqCqMkqUGWAeqHezHQjcuZ7eyK411tqbgfb/e h6wYcFWQBEDYrseT/+r2dkqjCjEnSt4z/LAXMrQM+s3aT4VsLBgfM64gBk1K0Q0Y RXs8iJJE8I1lCA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:35 2025 by rpki-client