This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft File: 3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json) Hash identifier: DYRjBYLAO4tBBuvGtN8HBh/nocz2OVAMGYcNFiQrrA8= Subject key identifier: 57:3E:7A:41:E1:27:AE:4A:A2:7B:1A:B8:31:7A:66:16:AA:92:C8:9B Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8 Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8 Certificate serial: 019AF2ADBF18277870F3B4478BE3387988D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft Manifest number: 1448 Signing time: Sat 06 Dec 2025 08:01:04 +0000 Manifest this update: Sat 06 Dec 2025 08:01:04 +0000 Manifest next update: Sun 07 Dec 2025 08:01:04 +0000 Files and hashes: 1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: mAStG3H6KVboSmvjSyOF63dI6drNnNF2H8+Jq3b7wQs=) 2: AFa9BeMRC9KZa5ESZVY3qezRhqo.roa (hash: kFgjZZQAO7DQ4A//2mPuGomN/dVKyDVTDikOVl1cxRM=) 3: oTU6jls5Cbp2h-8jJVa1y-YZLoo.roa (hash: UlQbXDO/2Z5fLH/VOiXf6qQdUrJ+q43vGjJDK0Fi6XA=) 4: onN6KmPVXQwrcGzs19GCsiDsKrQ.roa (hash: z68kDOoDWacxs1gAQw1w/1PdDLWcZUVC2dAlyVoGWL0=) 5: rrglEeDtNMMTRuZ3vbypZH_RQmE.roa (hash: urqCGELvaxYkBx+UEtrFXZNDg3RBmJzxwZn3ZWt36zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:bf:18:27:78:70:f3:b4:47:8b:e3:38:79:88:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8 Validity Not Before: Dec 6 08:01:04 2025 GMT Not After : Dec 7 08:01:04 2025 GMT Subject: CN=573e7a41e127ae4aa27b1ab8317a6616aa92c89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:16:3a:15:83:78:59:46:3f:41:1b:70:18:af: 7c:7e:c4:0c:33:b0:8a:5c:d0:84:61:da:19:7a:a3: 4f:4d:e5:2a:48:d2:60:d3:fd:2b:7a:a2:7f:13:3b: 97:01:c0:5b:14:bd:f4:a9:a5:64:63:e5:73:5f:ab: 4a:63:62:3a:4a:b7:a4:a9:4e:df:4c:e8:9b:82:9b: c6:45:61:92:21:1c:4c:f4:28:71:ad:aa:68:bc:03: e8:7b:dd:57:ac:2b:f0:d2:cd:d9:2f:11:c8:c1:73: 96:99:3e:41:38:97:12:cd:1a:78:8e:70:7d:d8:b5: b8:4b:bd:9d:c0:2b:1c:57:eb:f1:52:4a:ac:0c:30: 13:e5:0c:4c:ca:8d:21:37:e3:0f:92:41:1b:05:16: 4d:2e:ee:dc:cc:8e:05:78:b9:5e:8a:86:c8:1a:5a: ea:a1:40:a4:c8:f7:d0:01:25:81:a0:ba:e4:cd:19: 50:f6:ad:ef:81:43:58:b9:05:3e:9d:78:5a:61:ea: 32:92:7a:ac:44:48:a4:e3:3e:1b:1e:3d:89:41:50: af:95:9c:e0:44:40:8d:e0:5b:12:03:2a:71:41:1b: bd:e8:c2:0a:d1:b4:eb:82:fd:22:c3:0f:db:a2:f6: e2:36:c7:4e:c3:32:92:d3:b3:f2:97:03:5d:73:eb: 5f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3E:7A:41:E1:27:AE:4A:A2:7B:1A:B8:31:7A:66:16:AA:92:C8:9B X509v3 Authority Key Identifier: keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:da:a1:6a:5f:c5:77:6f:4e:d0:ec:89:19:6b:c3:91:a0:84: c5:a4:f2:9a:97:f2:ea:bf:17:7c:30:f0:31:d9:e7:c3:da:2a: df:94:c1:23:bd:ea:e2:60:e3:1a:93:3a:9d:01:e0:bb:52:37: 75:d8:c9:21:ee:10:07:d9:22:d1:2e:a3:39:2e:8e:26:c8:43: fd:54:f3:2d:5a:7d:38:24:68:42:6e:d5:3d:b0:0c:0c:73:ec: bd:77:3f:a6:e1:8f:a4:24:c0:6a:8e:6d:62:bd:ee:64:5d:34: 58:83:77:be:8e:a7:26:c1:71:9d:d6:9c:11:26:f8:02:e3:ff: 9c:d6:f7:a3:6e:10:db:85:a8:21:f8:20:a1:b0:b9:53:15:0a: a3:3a:b8:8f:60:97:72:c4:81:81:9e:75:61:d6:84:16:ce:4b: 41:c1:da:f3:ce:7e:02:3a:0f:61:3f:3e:70:45:1d:4b:ae:6f: 1e:e1:7e:c5:e6:c0:5c:c7:bf:bb:61:72:1a:bb:b3:20:01:a2: ea:36:b6:f7:c6:b5:78:00:75:dd:9f:73:42:a5:35:38:2f:2a: 86:02:d2:f2:c7:36:40:88:4d:3c:24:a4:62:ea:2d:da:0f:53: cd:f2:12:b4:2d:59:ac:28:23:7e:ec:57:bb:24:5b:cf:62:67: c4:13:7f:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrb8YJ3hw87RHi+M4eYjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZmFlN2Q0ZTY5ZDQyZTRmNGM5NWQ5OWY0ODJiOWE5NDRk YmVmYzgwHhcNMjUxMjA2MDgwMTA0WhcNMjUxMjA3MDgwMTA0WjAzMTEwLwYDVQQD Eyg1NzNlN2E0MWUxMjdhZTRhYTI3YjFhYjgzMTdhNjYxNmFhOTJjODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hY6FYN4WUY/QRtwGK98fsQMM7CK XNCEYdoZeqNPTeUqSNJg0/0reqJ/EzuXAcBbFL30qaVkY+VzX6tKY2I6SrekqU7f TOibgpvGRWGSIRxM9ChxrapovAPoe91XrCvw0s3ZLxHIwXOWmT5BOJcSzRp4jnB9 2LW4S72dwCscV+vxUkqsDDAT5QxMyo0hN+MPkkEbBRZNLu7czI4FeLleiobIGlrq oUCkyPfQASWBoLrkzRlQ9q3vgUNYuQU+nXhaYeoyknqsREik4z4bHj2JQVCvlZzg RECN4FsSAypxQRu96MIK0bTrgv0iww/bovbiNsdOwzKS07PylwNdc+tfKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFc+ekHhJ65KonsauDF6ZhaqksibMB8GA1UdIwQY MBaAFNz659TmnULk9MldmfSCualE2+/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYt MzcyNzNkZjM5MDFjLzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYtMzcyNzNkZjM5MDFj LzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9qhal/F d29O0OyJGWvDkaCExaTympfy6r8XfDDwMdnnw9oq35TBI73q4mDjGpM6nQHgu1I3 ddjJIe4QB9ki0S6jOS6OJshD/VTzLVp9OCRoQm7VPbAMDHPsvXc/puGPpCTAao5t Yr3uZF00WIN3vo6nJsFxndacESb4AuP/nNb3o24Q24WoIfggobC5UxUKozq4j2CX csSBgZ51YdaEFs5LQcHa885+AjoPYT8+cEUdS65vHuF+xebAXMe/u2FyGruzIAGi 6ja298a1eAB13Z9zQqU1OC8qhgLS8sc2QIhNPCSkYuot2g9TzfIStC1ZrCgjfuxX uyRbz2JnxBN/wg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:32 2025 by rpki-client