This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json) Hash identifier: 27oCioPgxDSlh27GXFIJbWrMEfaOZ2HkdvCCZJpQaeU= Subject key identifier: C5:88:C3:AD:9A:01:18:83:16:1A:16:F5:68:A9:BD:4F:86:9B:7C:36 Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42 Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442 Certificate serial: 019AF23F99986203393B305C335D451FAF88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 06:00:45 +0000 Manifest this update: Sat 06 Dec 2025 06:00:45 +0000 Manifest next update: Sun 07 Dec 2025 06:00:45 +0000 Files and hashes: 1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=) 2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: NHb/9qN8AMbnxKaEFI2ywGHv2tOZiInurV2FeIdjFfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:99:98:62:03:39:3b:30:5c:33:5d:45:1f:af:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442 Validity Not Before: Dec 6 06:00:45 2025 GMT Not After : Dec 7 06:00:45 2025 GMT Subject: CN=c588c3ad9a011883161a16f568a9bd4f869b7c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:0e:51:41:7d:a4:fb:05:fd:22:c9:71:67: b1:a9:61:36:56:5d:5e:89:33:01:81:2c:3c:ab:af: 29:27:db:18:f3:2f:b4:dd:4a:28:36:46:8a:4f:6d: 2c:a6:49:19:f9:f5:a2:6a:79:6c:ae:bd:59:8f:d6: 52:89:cf:26:2f:85:1a:89:ca:d3:1c:ef:de:3f:b0: 5c:e5:10:3a:00:29:ee:22:b3:03:e2:d9:fb:f0:a2: 95:47:7a:9a:a4:d0:0e:06:6f:b7:ae:0b:44:5d:f3: 4a:d2:27:5c:80:9b:78:b9:00:75:36:b6:83:07:9f: 62:d5:05:0b:07:76:b6:ba:89:3f:d5:c7:14:13:30: 37:a3:e7:fa:1d:9f:d8:84:6f:f1:46:69:e5:2a:f3: 47:a9:24:7b:99:72:a4:f0:f6:94:76:9c:c5:ca:8f: 66:22:30:41:1e:a6:cf:cb:41:6d:3f:52:4b:32:75: 7d:7e:6a:9a:d4:71:ce:b2:e5:cd:a1:49:4d:62:0f: 33:f0:61:c7:7a:cc:30:f2:ce:91:31:b9:cf:91:31: fe:4e:4a:79:19:9d:93:14:10:82:26:74:77:98:6d: 48:1f:a4:be:79:4d:21:78:ba:e0:4a:91:76:25:33: 24:4d:c1:51:9c:0c:fe:64:80:a5:c2:c9:62:bc:74: 1a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:88:C3:AD:9A:01:18:83:16:1A:16:F5:68:A9:BD:4F:86:9B:7C:36 X509v3 Authority Key Identifier: keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:41:50:63:89:3a:2c:3e:d3:14:ab:f8:a4:79:19:df:27:69: cb:3b:da:9e:2e:6e:f1:37:11:df:98:19:77:d3:ec:92:a2:f3: 1d:9b:e2:e3:7d:22:05:0e:bc:0e:f8:78:f7:69:7e:c5:49:58: 94:f0:1f:c0:a9:71:8b:69:54:e2:29:99:b9:ad:66:a2:9d:15: 3a:1e:9c:3e:c4:a7:78:0d:53:42:d2:2e:04:88:f4:be:0a:54: 43:96:bd:cd:85:45:26:3c:0e:ca:95:0b:2d:5c:f4:39:86:8a: f1:32:72:b5:a3:d7:59:ad:0d:0b:98:d2:43:aa:83:9a:da:e1: 03:35:a2:06:a2:bc:be:b6:15:ed:9b:c4:e0:23:6a:92:27:00: e3:11:ee:91:0f:6d:7f:63:71:fa:5f:aa:3c:ad:e5:80:a7:34: 70:28:7f:dc:ab:42:45:e1:81:64:46:1e:c5:e6:28:30:bd:ab: 6d:0a:de:e2:be:e4:2c:3d:7d:cf:eb:29:06:ec:f3:ea:1e:f0: cf:a3:57:f5:71:1e:68:23:71:b1:e0:6f:45:7a:aa:da:23:67: c4:df:c3:b4:8f:de:b9:30:31:b2:0f:f9:78:91:ae:a5:2b:06: 59:48:45:a2:3e:22:d8:32:0d:2c:14:c1:45:59:09:64:d5:5b: 7c:33:da:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5mYYgM5OzBcM11FH6+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzdkYTE1Nzc2ODQyM2ZjYmE5MjE3MzkyZWM3ZjQ4M2Iz Yjk0NDIwHhcNMjUxMjA2MDYwMDQ1WhcNMjUxMjA3MDYwMDQ1WjAzMTEwLwYDVQQD EyhjNTg4YzNhZDlhMDExODgzMTYxYTE2ZjU2OGE5YmQ0Zjg2OWI3YzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnEOUUF9pPsF/SLJcWexqWE2Vl1e iTMBgSw8q68pJ9sY8y+03UooNkaKT20spkkZ+fWianlsrr1Zj9ZSic8mL4UaicrT HO/eP7Bc5RA6ACnuIrMD4tn78KKVR3qapNAOBm+3rgtEXfNK0idcgJt4uQB1NraD B59i1QULB3a2uok/1ccUEzA3o+f6HZ/YhG/xRmnlKvNHqSR7mXKk8PaUdpzFyo9m IjBBHqbPy0FtP1JLMnV9fmqa1HHOsuXNoUlNYg8z8GHHesww8s6RMbnPkTH+Tkp5 GZ2TFBCCJnR3mG1IH6S+eU0heLrgSpF2JTMkTcFRnAz+ZIClwslivHQaOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWIw62aARiDFhoW9WipvU+Gm3w2MB8GA1UdIwQY MBaAFEd32hV3aEI/y6khc5Lsf0g7O5RCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iMjFhMzgtZGI2Mi00NDM4LWJhOWMt ZjU3Zjg2ZGY0ZjE2LzEvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9iMjFhMzgtZGI2Mi00NDM4LWJhOWMtZjU3Zjg2ZGY0ZjE2 LzEvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEFQY4k6 LD7TFKv4pHkZ3ydpyzvani5u8TcR35gZd9PskqLzHZvi430iBQ68Dvh492l+xUlY lPAfwKlxi2lU4imZua1mop0VOh6cPsSneA1TQtIuBIj0vgpUQ5a9zYVFJjwOypUL LVz0OYaK8TJytaPXWa0NC5jSQ6qDmtrhAzWiBqK8vrYV7ZvE4CNqkicA4xHukQ9t f2Nx+l+qPK3lgKc0cCh/3KtCReGBZEYexeYoML2rbQre4r7kLD19z+spBuzz6h7w z6NX9XEeaCNxseBvRXqq2iNnxN/DtI/euTAxsg/5eJGupSsGWUhFoj4i2DINLBTB RVkJZNVbfDPaHg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:21 2025 by rpki-client