This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft File: t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json) Hash identifier: lewXRg7jja4Fn/Y3k2RN5ICqGkPSZM4Qt8zVxWlvbFQ= Subject key identifier: 4F:06:72:D8:64:2A:AF:74:BE:BE:17:C0:DE:F5:46:5C:00:C8:98:8A Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4 Certificate issuer: /CN=b770877fe07df49a216814ade701d087b11693b4 Certificate serial: 019AF1D19AEA09B9F140642824A927031982 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft Manifest number: 05A6 Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: JqVo/XhmKzYfSVT22j9D5khrMaHbvYnIp7EhurveSSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9a:ea:09:b9:f1:40:64:28:24:a9:27:03:19:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b770877fe07df49a216814ade701d087b11693b4 Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=4f0672d8642aaf74bebe17c0def5465c00c8988a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:89:2b:58:46:70:48:cb:07:bf:11:6b:5b:a3: b6:7c:d3:47:b8:0a:3d:65:54:85:8a:70:39:46:98: d5:2d:65:4f:eb:13:0a:62:8e:c8:a1:8d:57:c1:e8: c8:b3:26:ea:73:cb:3f:c8:89:2e:da:c3:23:c6:8b: 4f:42:c6:20:27:c1:2b:da:92:a2:f4:4a:2a:f5:04: d3:de:f0:88:44:28:c3:cd:bb:91:f8:65:96:68:4c: d1:90:27:ef:39:d0:b2:af:91:7d:3a:6e:5d:31:35: 4b:63:fd:80:d0:c2:c7:59:db:28:36:52:04:6a:bb: f0:84:44:f1:eb:f0:8c:81:f7:51:57:09:1c:5b:a2: d9:58:35:ff:a0:7b:cd:e4:95:0f:62:8f:3f:64:28: ec:0b:dc:f1:a6:81:15:c7:c2:f8:19:9a:b6:86:e9: 75:69:ec:0d:6a:eb:6f:e3:3c:e3:1a:89:7b:c7:b6: d2:1d:04:41:93:89:e0:40:b6:09:9a:08:a6:44:de: 56:f6:ba:8f:21:cc:0b:b6:58:2f:9b:9b:b3:ab:c0: 87:10:e6:ad:77:43:f7:73:c0:a8:62:a3:0e:6e:de: 5d:a4:66:d6:de:fb:9e:c6:a3:6d:fa:a4:30:c2:4f: bf:06:6e:70:28:54:18:e0:89:9b:25:2f:aa:5d:8b: 6c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:06:72:D8:64:2A:AF:74:BE:BE:17:C0:DE:F5:46:5C:00:C8:98:8A X509v3 Authority Key Identifier: keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:3d:5b:86:99:b7:31:74:d4:0f:91:a3:83:53:54:cd:b1:9a: 8e:cf:70:96:ec:4e:0b:e9:0e:ee:da:b7:2e:c4:a7:e6:e0:29: bd:0c:ed:89:db:33:f5:0e:2b:8f:ff:52:90:b5:4e:d5:3d:f7: fb:6d:3b:6e:36:9b:0d:e6:3b:f3:bb:a2:08:58:cc:24:b9:6d: f9:fd:68:5b:3b:39:51:58:44:5b:3e:6b:6c:30:4e:ad:e7:28: 27:e4:5d:c1:49:f3:5c:a1:0d:ea:93:15:34:17:b6:6b:80:30: c8:80:8b:21:c9:36:c5:b9:54:11:4b:fd:1e:ef:96:e8:3e:02: ef:70:73:6c:7f:c0:8b:53:17:fa:a4:05:e5:70:ec:1c:bf:b6: 39:d0:04:8c:e8:fd:3a:7b:5c:d4:1b:5b:ab:66:e2:6e:c8:a5: f7:4d:53:b9:d2:de:9b:6e:46:10:64:0b:c5:86:04:d6:59:a9: 1c:1b:d7:d3:74:3a:8b:4d:b4:b3:c1:2a:63:df:58:ed:6a:21: 3f:8a:ef:6f:36:89:4b:fd:64:81:b8:11:5f:52:83:0d:d3:67: 0e:1c:ff:80:40:52:c0:00:8a:c3:3a:f9:79:14:4e:f1:fd:95: 50:ca:e4:e2:3b:54:f8:2d:07:64:51:2f:2c:88:6f:be:0f:98: ee:45:98:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZrqCbnxQGQoJKknAxmCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzA4NzdmZTA3ZGY0OWEyMTY4MTRhZGU3MDFkMDg3YjEx NjkzYjQwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD Eyg0ZjA2NzJkODY0MmFhZjc0YmViZTE3YzBkZWY1NDY1YzAwYzg5ODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIkrWEZwSMsHvxFrW6O2fNNHuAo9 ZVSFinA5RpjVLWVP6xMKYo7IoY1XwejIsybqc8s/yIku2sMjxotPQsYgJ8Er2pKi 9Eoq9QTT3vCIRCjDzbuR+GWWaEzRkCfvOdCyr5F9Om5dMTVLY/2A0MLHWdsoNlIE arvwhETx6/CMgfdRVwkcW6LZWDX/oHvN5JUPYo8/ZCjsC9zxpoEVx8L4GZq2hul1 aewNautv4zzjGol7x7bSHQRBk4ngQLYJmgimRN5W9rqPIcwLtlgvm5uzq8CHEOat d0P3c8CoYqMObt5dpGbW3vuexqNt+qQwwk+/Bm5wKFQY4ImbJS+qXYtsRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8GcthkKq90vr4XwN71RlwAyJiKMB8GA1UdIwQY MBaAFLdwh3/gffSaIWgUrecB0IexFpO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNDSGYtQjk5Sm9oYUJTdDV3SFFoN0VXazdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81Y2MxMjctZTZlYy00ZGExLTg0Njkt YzRhMGU5NzA2NTk3LzEvdDNDSGYtQjk5Sm9oYUJTdDV3SFFoN0VXazdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS81Y2MxMjctZTZlYy00ZGExLTg0NjktYzRhMGU5NzA2NTk3 LzEvdDNDSGYtQjk5Sm9oYUJTdDV3SFFoN0VXazdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmT1bhpm3 MXTUD5Gjg1NUzbGajs9wluxOC+kO7tq3LsSn5uApvQztidsz9Q4rj/9SkLVO1T33 +207bjabDeY787uiCFjMJLlt+f1oWzs5UVhEWz5rbDBOrecoJ+RdwUnzXKEN6pMV NBe2a4AwyICLIck2xblUEUv9Hu+W6D4C73BzbH/Ai1MX+qQF5XDsHL+2OdAEjOj9 Ontc1Btbq2bibsil901TudLem25GEGQLxYYE1lmpHBvX03Q6i020s8EqY99Y7Woh P4rvbzaJS/1kgbgRX1KDDdNnDhz/gEBSwACKwzr5eRRO8f2VUMrk4jtU+C0HZFEv LIhvvg+Y7kWY+w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:24:38 2025 by rpki-client