This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft File: tj8U3_NUhamVlBKGMDe4XfqfE9g.mft (raw, json) Hash identifier: b36t4rVLDErIdVTD0UeJrRjo+LQRC6ckZR9iUPZCl1k= Subject key identifier: FB:C8:3E:C7:FC:D8:05:85:20:7D:72:91:B5:BE:19:23:D2:A6:07:4C Authority key identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8 Certificate issuer: /CN=b63f14dff35485a9959412863037b85dfa9f13d8 Certificate serial: 019AF27669DA9A320CA48996D12ABDD69F17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft Manifest number: 0697 Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: tj8U3_NUhamVlBKGMDe4XfqfE9g.crl (hash: x4RPY4odn4qtmfdhSXnVG+fI3RIM4hbetdgnLCvrfkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:69:da:9a:32:0c:a4:89:96:d1:2a:bd:d6:9f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b63f14dff35485a9959412863037b85dfa9f13d8 Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=fbc83ec7fcd80585207d7291b5be1923d2a6074c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:9b:b7:5e:c8:f3:b3:8a:84:cf:e2:8c:7d: 13:9a:65:90:57:1b:cc:16:ec:89:31:5a:a5:55:a0: b4:7e:c3:12:8c:5f:28:91:0b:68:20:f9:5c:2e:9d: dd:e2:20:76:43:d8:b9:e6:9b:31:e5:0b:53:84:bd: 60:c3:a4:cc:57:d7:75:5b:1d:bb:ba:a7:60:53:b1: 24:36:1d:d5:71:e4:51:00:1d:2f:db:70:8e:bb:6a: 1c:ff:af:58:f1:85:7e:d7:6f:64:c0:00:6e:a9:7c: f8:a0:62:71:35:2b:04:c1:06:67:f4:a8:06:28:c0: 83:7a:7b:ec:ac:6f:4e:e5:ec:4f:4b:7d:c3:a6:28: 47:7a:a0:4c:33:da:44:88:c0:50:ed:e3:f8:86:79: 69:4b:b5:39:34:d7:5b:61:e7:ea:fb:50:d9:1b:c2: df:ff:c9:ea:15:44:b4:32:32:ee:26:9b:96:cd:04: 36:10:55:8d:80:17:e2:13:09:59:86:fa:60:d8:9f: c6:dc:61:31:f3:2a:01:73:3a:fa:b8:8d:98:ca:9f: 17:6b:24:de:ef:0a:f1:49:d2:b0:77:0c:07:84:d5: 14:67:aa:f3:bd:1c:23:26:d8:8e:01:9e:57:5b:f7: 3d:ea:9c:fc:56:27:67:df:92:56:67:2c:ba:a3:64: e6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C8:3E:C7:FC:D8:05:85:20:7D:72:91:B5:BE:19:23:D2:A6:07:4C X509v3 Authority Key Identifier: keyid:B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1a:47:15:e1:e2:34:18:52:60:0c:38:56:85:84:34:e5:42: 24:a0:e8:f2:37:5e:48:9e:fe:1d:42:88:23:e4:c0:d7:49:5b: ab:b7:11:9e:2e:0e:26:c7:a7:58:e8:89:b3:b3:ec:7e:e5:e1: 05:4d:cf:d1:5e:7d:cd:b4:1d:12:4b:49:63:c2:90:62:84:a8: aa:a9:ea:87:3a:b5:73:cc:db:c0:34:c1:1d:f3:fb:f0:65:b1: 15:1c:f4:34:11:cc:d0:f1:24:a9:46:05:fe:18:26:6c:14:60: 21:b2:d4:c8:92:58:9b:a2:46:38:1d:bd:ba:d3:75:5f:ac:42: 28:01:7f:4c:0f:70:77:df:7e:0a:fc:98:b6:27:be:da:91:60: 57:1e:b3:e0:72:e7:70:b1:eb:ff:aa:8c:61:c0:36:ab:53:ee: ee:19:60:5c:4b:21:d7:ec:b9:42:80:36:a9:fc:c6:a2:e6:b3: 8a:ea:a2:43:7c:5c:27:44:ee:56:ad:28:15:35:c0:b3:f1:cc: 05:46:d0:e8:ea:4e:a5:83:92:51:31:70:b2:77:a1:1e:06:d5: 05:58:b9:60:da:b5:e1:a2:66:d3:4a:e6:55:40:90:14:63:88: cc:32:44:78:85:8b:28:9b:6d:f5:c7:37:a2:19:c1:86:99:b2: 01:7b:61:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmnamjIMpImW0Sq91p8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2M2YxNGRmZjM1NDg1YTk5NTk0MTI4NjMwMzdiODVkZmE5 ZjEzZDgwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD EyhmYmM4M2VjN2ZjZDgwNTg1MjA3ZDcyOTFiNWJlMTkyM2QyYTYwNzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ubt17I87OKhM/ijH0TmmWQVxvM FuyJMVqlVaC0fsMSjF8okQtoIPlcLp3d4iB2Q9i55psx5QtThL1gw6TMV9d1Wx27 uqdgU7EkNh3VceRRAB0v23COu2oc/69Y8YV+129kwABuqXz4oGJxNSsEwQZn9KgG KMCDenvsrG9O5exPS33DpihHeqBMM9pEiMBQ7eP4hnlpS7U5NNdbYefq+1DZG8Lf /8nqFUS0MjLuJpuWzQQ2EFWNgBfiEwlZhvpg2J/G3GEx8yoBczr6uI2Yyp8XayTe 7wrxSdKwdwwHhNUUZ6rzvRwjJtiOAZ5XW/c96pz8Vidn35JWZyy6o2TmswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvIPsf82AWFIH1ykbW+GSPSpgdMMB8GA1UdIwQY MBaAFLY/FN/zVIWplZQShjA3uF36nxPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGo4VTNfTlVoYW1WbEJLR01EZTRYZnFmRTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYmM4NjUtMzg2Yi00YmVhLWFiYTAt NjZjOThjMDFkZmQ3LzEvdGo4VTNfTlVoYW1WbEJLR01EZTRYZnFmRTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zYmM4NjUtMzg2Yi00YmVhLWFiYTAtNjZjOThjMDFkZmQ3 LzEvdGo4VTNfTlVoYW1WbEJLR01EZTRYZnFmRTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchpHFeHi NBhSYAw4VoWENOVCJKDo8jdeSJ7+HUKII+TA10lbq7cRni4OJsenWOiJs7PsfuXh BU3P0V59zbQdEktJY8KQYoSoqqnqhzq1c8zbwDTBHfP78GWxFRz0NBHM0PEkqUYF /hgmbBRgIbLUyJJYm6JGOB29utN1X6xCKAF/TA9wd99+CvyYtie+2pFgVx6z4HLn cLHr/6qMYcA2q1Pu7hlgXEsh1+y5QoA2qfzGouaziuqiQ3xcJ0TuVq0oFTXAs/HM BUbQ6OpOpYOSUTFwsnehHgbVBVi5YNq14aJm00rmVUCQFGOIzDJEeIWLKJtt9cc3 ohnBhpmyAXthUg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:16:21 2025 by rpki-client