This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft File: g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft (raw, json) Hash identifier: T1VPROIg+T7PG4goXPiMiblxW038QZb6ZT0F8RxVzHE= Subject key identifier: 66:1D:03:38:95:FC:E3:07:91:9F:D5:C2:88:20:BE:1A:FA:65:4F:62 Authority key identifier: 83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5 Certificate issuer: /CN=837a739fd50864ccc246843ed6801959ba1ba6a5 Certificate serial: 019AF12D4E8BC09A2D0E9A1F5E7977C29199 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft Manifest number: 06CA Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl (hash: HtxUEnK/yQqJMMQWcCCYQ0DZxa96gJ6tX95hWTSjibc=) 2: i_7sQOqEUBCfUKXhCQozAQCgyio.roa (hash: xzt+AxE4W+DPtsBUDajL0GS1rN6Mde5JKYoD1qrRxjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4e:8b:c0:9a:2d:0e:9a:1f:5e:79:77:c2:91:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=837a739fd50864ccc246843ed6801959ba1ba6a5 Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=661d033895fce307919fd5c28820be1afa654f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f0:a1:ac:98:d1:4a:6d:88:3c:30:ae:f6:05: 31:55:d5:62:60:8b:8a:d9:f9:10:c2:94:35:c5:e3: 04:ff:a2:b9:0e:ad:12:cd:81:d5:48:db:30:69:4c: b2:e1:88:fc:dc:0d:40:95:25:05:34:03:5b:a1:6b: e5:15:99:00:40:c6:d3:52:e3:0c:96:13:a4:77:95: ae:de:a4:da:10:ca:bd:5b:77:c5:c5:3c:18:37:73: 24:13:c7:b3:45:1b:e3:6c:47:75:10:eb:de:40:ab: e1:d8:59:2e:6b:8b:ea:ec:5c:2d:6d:3a:84:6f:11: 79:f7:9e:0d:3c:23:9e:51:8e:6e:29:06:74:28:97: a1:3b:04:2e:3e:75:4e:94:8a:c5:be:b5:f9:d5:42: 4f:a5:5c:28:ce:7e:35:b8:7d:42:3b:a6:7c:ad:91: 74:5c:43:13:83:a8:a5:1d:12:3d:af:cd:c0:41:d3: f1:6b:7a:ce:86:a4:e4:bd:81:28:50:14:3b:77:e1: ad:54:b3:d0:63:b9:52:58:3c:1f:89:88:03:b2:7e: ac:7c:6f:f9:76:71:4f:1b:32:a4:fc:72:d0:58:e6: 29:3f:82:82:6b:5e:62:e4:6d:10:ea:e5:f4:5d:22: 20:35:46:f3:73:2d:6f:b1:fb:b8:5c:d3:61:0d:d2: 48:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1D:03:38:95:FC:E3:07:91:9F:D5:C2:88:20:BE:1A:FA:65:4F:62 X509v3 Authority Key Identifier: keyid:83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ec:72:d6:fb:76:56:a3:dc:d3:15:9d:84:9c:b3:b8:63:7b: 88:3b:5c:29:ec:96:69:29:fc:3a:46:a8:27:53:05:f8:44:f9: 8a:1a:04:ac:3d:67:c9:59:91:8f:3f:23:38:38:32:f1:2b:de: 70:f9:5d:a0:07:71:35:a9:6e:94:88:2d:0b:87:4a:fc:e4:9b: 23:86:26:54:3c:7c:ce:07:a1:2e:9b:1f:d8:37:26:7c:ad:12: cf:0e:4f:42:ac:d5:4a:90:83:6f:8e:43:2f:a7:6b:e6:30:15: 4f:89:a6:e2:e7:c2:0c:28:30:95:bc:46:f3:41:f9:42:72:4d: a9:60:ad:62:2a:d6:2d:0f:40:4f:7b:05:f2:59:90:e4:10:77: f3:ba:c8:fa:f8:74:a8:a8:b4:1b:b3:d9:85:6f:33:88:ac:cd: de:89:49:a0:c2:17:77:c8:7b:6a:f4:3a:4b:3f:5d:f1:a4:22: c1:73:c8:97:20:69:af:9f:47:e6:05:dd:b2:64:2c:b7:ac:58: 19:27:71:4a:c3:a1:18:76:4c:16:5a:08:da:76:87:7c:a0:72: 62:6b:19:1f:45:2b:f7:02:ff:e9:b6:6f:51:0a:4b:9f:3b:bf: c0:07:58:a9:a1:8f:17:a7:5b:0a:9e:ee:cb:bd:43:fe:59:37: e4:9d:b0:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLU6LwJotDpofXnl3wpGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzN2E3MzlmZDUwODY0Y2NjMjQ2ODQzZWQ2ODAxOTU5YmEx YmE2YTUwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD Eyg2NjFkMDMzODk1ZmNlMzA3OTE5ZmQ1YzI4ODIwYmUxYWZhNjU0ZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/ChrJjRSm2IPDCu9gUxVdViYIuK 2fkQwpQ1xeME/6K5Dq0SzYHVSNswaUyy4Yj83A1AlSUFNANboWvlFZkAQMbTUuMM lhOkd5Wu3qTaEMq9W3fFxTwYN3MkE8ezRRvjbEd1EOveQKvh2Fkua4vq7FwtbTqE bxF5954NPCOeUY5uKQZ0KJehOwQuPnVOlIrFvrX51UJPpVwozn41uH1CO6Z8rZF0 XEMTg6ilHRI9r83AQdPxa3rOhqTkvYEoUBQ7d+GtVLPQY7lSWDwfiYgDsn6sfG/5 dnFPGzKk/HLQWOYpP4KCa15i5G0Q6uX0XSIgNUbzcy1vsfu4XNNhDdJI2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYdAziV/OMHkZ/Vwoggvhr6ZU9iMB8GA1UdIwQY MBaAFIN6c5/VCGTMwkaEPtaAGVm6G6alMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzNwem45VUlaTXpDUm9RLTFvQVpXYm9icHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xMWNiYjUtM2UyZS00NGQ2LTlkMWIt YWFlMWEwYmRhMDJjLzEvZzNwem45VUlaTXpDUm9RLTFvQVpXYm9icHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xMWNiYjUtM2UyZS00NGQ2LTlkMWItYWFlMWEwYmRhMDJj LzEvZzNwem45VUlaTXpDUm9RLTFvQVpXYm9icHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjexy1vt2 VqPc0xWdhJyzuGN7iDtcKeyWaSn8OkaoJ1MF+ET5ihoErD1nyVmRjz8jODgy8Sve cPldoAdxNalulIgtC4dK/OSbI4YmVDx8zgehLpsf2DcmfK0Szw5PQqzVSpCDb45D L6dr5jAVT4mm4ufCDCgwlbxG80H5QnJNqWCtYirWLQ9AT3sF8lmQ5BB387rI+vh0 qKi0G7PZhW8ziKzN3olJoMIXd8h7avQ6Sz9d8aQiwXPIlyBpr59H5gXdsmQst6xY GSdxSsOhGHZMFloI2naHfKByYmsZH0Ur9wL/6bZvUQpLnzu/wAdYqaGPF6dbCp7u y71D/lk35J2w3g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:12 2025 by rpki-client