This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json) Hash identifier: aFfqnSsqdV196KKxCOmrgytiFq5s4tIWhYSgXRi7lzQ= Subject key identifier: 02:A5:D2:16:A3:07:34:84:9B:55:F1:B3:C1:4F:B5:C2:F4:AF:0C:4B Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49 Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49 Certificate serial: 019AF2ADA47961E55B20DCF9A4938CB5FC4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft Manifest number: 0A88 Signing time: Sat 06 Dec 2025 08:00:57 +0000 Manifest this update: Sat 06 Dec 2025 08:00:57 +0000 Manifest next update: Sun 07 Dec 2025 08:00:57 +0000 Files and hashes: 1: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: nOPlzrBW5GmFVe6hHbVtQjAYT75igluPuGrXh8YxHV8=) 2: 3jwAJkscmhb8NSw4un_w0ZUqE_E.roa (hash: /Q2oG/fmxx/4QlsXXEqOyxHV9Ye6s1RkScscquc109A=) 3: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (hash: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=) 4: CXGUOccTDu6x1YyIQfa-qjSpPdk.roa (hash: r4qpBtId2VEmuyzWlIPXdikWdV98Yneiil1e7VOsia4=) 5: IlOsEMD7ILB9j5FhhZ10NN6XXx0.roa (hash: gwOuiCu86d+6YjbDxDzDd3u72bl4nQy8FzU+NPDlo3k=) 6: cMeqdhzIVxayTI5Te-oZwPQzjz0.roa (hash: opO/yGSPCMGlHiRXXAkyr0DveRWYRoFkmjqGZrYYDFc=) 7: dsfkSXYJLfZWJjDQMc0Y0owm7FA.roa (hash: W0p5k/KWht0yDd7EzO060gDAd+rVO0Q+Y0m/UDAfM10=) 8: z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa (hash: hGK3SDsyu3nnm6fMnZyOrn3oCumiT/HHk1hSsPcxxpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a4:79:61:e5:5b:20:dc:f9:a4:93:8c:b5:fc:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49 Validity Not Before: Dec 6 08:00:57 2025 GMT Not After : Dec 7 08:00:57 2025 GMT Subject: CN=02a5d216a30734849b55f1b3c14fb5c2f4af0c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:b3:53:52:9d:e0:7e:ce:1e:d0:a9:e2:cf: 19:c8:f3:b5:a8:e8:16:5b:e4:68:50:bf:47:38:34: 8a:27:b2:c3:e5:c0:ea:93:7b:e7:53:37:29:18:60: ea:08:31:6e:89:37:10:19:a0:d4:3a:ab:84:62:33: 56:52:d8:92:ea:53:99:44:04:57:a1:6d:41:55:e6: 42:3d:89:d0:38:7a:82:84:79:6c:b1:6f:64:dc:15: 7f:37:08:d6:04:d5:a3:8c:8d:1d:24:51:b4:aa:57: e0:04:db:22:14:d6:dc:34:80:9f:7b:35:12:4d:a8: f3:f6:5a:f8:38:73:53:d4:66:78:c4:3a:5f:8c:45: 27:47:12:d0:2f:da:2f:55:53:65:3c:86:1a:8a:10: ca:b6:2e:b6:8c:df:97:ed:7c:46:76:50:8b:35:d4: 16:d7:e9:9e:89:7c:27:73:b4:df:70:4f:96:28:dc: be:82:ac:ae:9d:63:06:ca:65:25:9a:71:00:ea:b2: 8a:b8:dd:49:b6:c7:22:a0:d6:9a:54:25:89:bc:52: 15:c4:9b:e6:a7:42:4b:36:46:79:52:46:c7:e2:af: eb:75:c4:5e:f4:e7:b3:5e:90:26:bd:8c:e2:4b:50: f4:1b:ef:ba:96:a5:15:d1:da:fc:78:f6:12:2e:71: 6d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A5:D2:16:A3:07:34:84:9B:55:F1:B3:C1:4F:B5:C2:F4:AF:0C:4B X509v3 Authority Key Identifier: keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ef:83:6a:52:90:02:67:dc:24:4f:cb:83:8a:58:10:1e:16: e2:47:6d:a8:65:71:db:63:d4:78:5e:55:a1:14:a3:9d:26:a2: 65:0b:55:20:da:f0:f5:65:90:ee:df:f0:4b:a8:dc:e2:5e:c9: dd:2c:c8:bf:cc:f1:4d:88:48:bd:f9:27:27:e5:a2:99:62:10: 89:e7:cf:79:05:ab:86:a2:66:6b:f4:92:a6:f2:54:e6:27:b9: a1:c5:6b:f1:2c:c6:9d:33:2e:88:1c:60:01:a7:fc:9e:fb:e5: 58:df:bc:6f:27:95:d5:cc:50:0c:56:36:4c:30:3d:a0:b8:e3: 36:4d:74:03:03:ab:a3:bf:94:26:74:05:37:1e:5a:90:e4:90: 57:bd:39:96:a8:ee:21:be:9b:f7:2c:29:87:70:17:b9:31:57: 05:36:00:45:f0:31:cd:5b:1e:2f:e8:11:ba:88:54:a8:98:e0: 32:2a:fd:1f:16:bf:3f:4b:cf:c1:a9:8b:50:fc:7e:9e:88:df: e2:a7:38:89:7f:a0:1a:76:8e:6f:6f:20:c4:f8:4a:de:45:c5: f8:f7:a0:fd:1e:a3:60:37:ec:ee:25:7c:46:d0:79:36:de:1d: 2e:a0:c9:ca:6d:9f:9b:9f:11:7f:d0:7d:32:ea:f1:24:96:64: 90:95:ce:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraR5YeVbINz5pJOMtfxKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMWRhZWNkMzBhZWI3NDY1MmJiZGRhNWRhZDk2NzZjZTQ4 OGFhNDkwHhcNMjUxMjA2MDgwMDU3WhcNMjUxMjA3MDgwMDU3WjAzMTEwLwYDVQQD EygwMmE1ZDIxNmEzMDczNDg0OWI1NWYxYjNjMTRmYjVjMmY0YWYwYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfWzU1Kd4H7OHtCp4s8ZyPO1qOgW W+RoUL9HODSKJ7LD5cDqk3vnUzcpGGDqCDFuiTcQGaDUOquEYjNWUtiS6lOZRARX oW1BVeZCPYnQOHqChHlssW9k3BV/NwjWBNWjjI0dJFG0qlfgBNsiFNbcNICfezUS Tajz9lr4OHNT1GZ4xDpfjEUnRxLQL9ovVVNlPIYaihDKti62jN+X7XxGdlCLNdQW 1+meiXwnc7TfcE+WKNy+gqyunWMGymUlmnEA6rKKuN1JtscioNaaVCWJvFIVxJvm p0JLNkZ5UkbH4q/rdcRe9OezXpAmvYziS1D0G++6lqUV0dr8ePYSLnFtNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKl0hajBzSEm1Xxs8FPtcL0rwxLMB8GA1UdIwQY MBaAFN0drs0wrrdGUrvdpdrZZ2zkiKpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct MDYwYWMwODkwOTY2LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2 LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoe+DalKQ AmfcJE/Lg4pYEB4W4kdtqGVx22PUeF5VoRSjnSaiZQtVINrw9WWQ7t/wS6jc4l7J 3SzIv8zxTYhIvfknJ+WimWIQiefPeQWrhqJma/SSpvJU5ie5ocVr8SzGnTMuiBxg Aaf8nvvlWN+8byeV1cxQDFY2TDA9oLjjNk10AwOro7+UJnQFNx5akOSQV705lqju Ib6b9ywph3AXuTFXBTYARfAxzVseL+gRuohUqJjgMir9Hxa/P0vPwamLUPx+nojf 4qc4iX+gGnaOb28gxPhK3kXF+Peg/R6jYDfs7iV8RtB5Nt4dLqDJym2fm58Rf9B9 MurxJJZkkJXO3w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:34 2025 by rpki-client