This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json) Hash identifier: 52vasdpJfpyHTxuCQDeyrl+OP4o1Trf156n/mTm75ww= Subject key identifier: 4F:45:50:6B:FF:17:49:2B:15:B9:DF:3A:C8:89:DF:93:02:ED:18:73 Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06 Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06 Certificate serial: 019AF2090985E1E454D61DD847C7321DDEF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft Manifest number: 0D90 Signing time: Sat 06 Dec 2025 05:01:09 +0000 Manifest this update: Sat 06 Dec 2025 05:01:09 +0000 Manifest next update: Sun 07 Dec 2025 05:01:09 +0000 Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: e1xxLCHWZs7XcUi5n+1kLj1lO19wa3zv+xBdbuve46w=) 2: NH9bJkmOLcBYnLsAYTfcsFMJkSM.roa (hash: sPNuwdbSLXSgaPh+BpoER3Hzbei/qqQBt4s/TVbjmVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:09:85:e1:e4:54:d6:1d:d8:47:c7:32:1d:de:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06 Validity Not Before: Dec 6 05:01:09 2025 GMT Not After : Dec 7 05:01:09 2025 GMT Subject: CN=4f45506bff17492b15b9df3ac889df9302ed1873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6b:2c:c1:31:f9:36:22:2b:7b:26:b8:c6:57: 02:61:71:24:40:39:17:4f:95:25:43:df:94:c0:70: 74:29:17:e2:12:d7:f2:12:5a:a9:61:a5:b7:76:96: 21:8c:5b:ed:b0:ed:34:f1:1f:b4:72:e1:17:10:e8: 25:a0:db:71:87:77:69:46:f5:d7:b4:c6:e7:47:e6: a3:78:2c:37:44:ca:af:2b:f7:52:da:08:2a:3f:e5: 0e:36:5e:eb:d0:11:58:09:2f:ec:e6:0e:7a:59:2e: f8:90:af:6f:fb:bd:74:ad:38:5f:ed:e7:36:fc:ef: 57:1d:ce:9e:4c:e7:6e:d5:af:d0:65:8f:5f:a5:e1: 8f:b2:e2:53:b9:a3:8f:9a:61:2d:69:f1:2a:94:63: af:a3:04:67:2e:ce:b3:0c:8d:87:9d:0d:12:eb:bd: 7c:b5:e8:33:b5:04:ca:d9:8d:dc:cb:e1:ac:e6:be: 06:80:d5:e9:c8:cf:bc:ec:ca:22:74:58:82:6e:96: 23:62:dc:1f:3d:26:48:3b:3a:23:da:d7:7c:5a:d9: 85:4b:ec:e7:96:9d:f0:4b:20:9a:ae:a8:1d:aa:25: ea:04:41:01:fc:b0:6d:c7:39:63:ed:c3:9a:83:db: 7f:ba:c1:74:dc:30:b2:cb:72:22:92:ca:24:35:24: 61:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:45:50:6B:FF:17:49:2B:15:B9:DF:3A:C8:89:DF:93:02:ED:18:73 X509v3 Authority Key Identifier: keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:18:90:dc:3e:f1:44:71:99:09:23:98:0a:9b:a6:ad:42:a6: 18:c4:e2:e9:c6:ae:6a:d8:91:0a:7f:9c:8c:d8:7e:45:db:f9: 56:1c:a8:9a:87:c1:9a:9d:3e:8c:d5:70:be:28:b1:03:7b:ef: 55:84:e2:90:00:33:08:11:b7:78:d3:db:d6:50:3f:fd:ca:82: e6:eb:ef:36:da:e7:06:34:31:9b:3f:86:64:aa:1f:38:e7:b1: 92:c0:3f:90:13:03:27:8f:28:ba:bf:30:7f:d3:bc:b6:40:d6: f8:9b:6c:5d:9c:13:30:e1:6d:5e:97:db:13:ec:ee:86:ed:f7: 20:8e:f2:6f:93:de:90:94:ec:64:32:88:90:1b:f6:5d:56:ae: 68:a4:38:87:5d:6b:ee:04:e0:b6:76:e7:e0:b6:42:b5:11:20: 2c:51:b7:23:58:4b:9c:cb:4b:77:98:a1:42:92:7a:1c:9b:1a: 4c:88:eb:6b:d2:73:ec:e6:fa:6d:2b:d6:d2:d6:22:a6:0b:0f: 21:e8:ad:e9:ff:04:20:ac:95:65:36:e4:8d:2e:4c:1d:9b:50: b2:38:ac:e4:64:38:6a:76:46:47:dd:7b:b7:63:65:88:24:76: 96:8b:05:cd:03:8b:b6:38:3a:c7:d7:4d:d6:b3:ba:9b:80:6c: 40:01:46:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQmF4eRU1h3YR8cyHd7yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNzJmNWQxMThhYmQxMjkxYWUyNDhlNmM2OWQ2NGE5OWE5 YWVmMDYwHhcNMjUxMjA2MDUwMTA5WhcNMjUxMjA3MDUwMTA5WjAzMTEwLwYDVQQD Eyg0ZjQ1NTA2YmZmMTc0OTJiMTViOWRmM2FjODg5ZGY5MzAyZWQxODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWsswTH5NiIreya4xlcCYXEkQDkX T5UlQ9+UwHB0KRfiEtfyElqpYaW3dpYhjFvtsO008R+0cuEXEOgloNtxh3dpRvXX tMbnR+ajeCw3RMqvK/dS2ggqP+UONl7r0BFYCS/s5g56WS74kK9v+710rThf7ec2 /O9XHc6eTOdu1a/QZY9fpeGPsuJTuaOPmmEtafEqlGOvowRnLs6zDI2HnQ0S6718 tegztQTK2Y3cy+Gs5r4GgNXpyM+87MoidFiCbpYjYtwfPSZIOzoj2td8WtmFS+zn lp3wSyCarqgdqiXqBEEB/LBtxzlj7cOag9t/usF03DCyy3IiksokNSRhCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9FUGv/F0krFbnfOsiJ35MC7RhzMB8GA1UdIwQY MBaAFDNy9dEYq9EpGuJI5sadZKmamu8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMt ZDJkOTI0MWVjNWRiLzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMtZDJkOTI0MWVjNWRi LzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhiQ3D7x RHGZCSOYCpumrUKmGMTi6cauatiRCn+cjNh+Rdv5VhyomofBmp0+jNVwviixA3vv VYTikAAzCBG3eNPb1lA//cqC5uvvNtrnBjQxmz+GZKofOOexksA/kBMDJ48our8w f9O8tkDW+JtsXZwTMOFtXpfbE+zuhu33II7yb5PekJTsZDKIkBv2XVauaKQ4h11r 7gTgtnbn4LZCtREgLFG3I1hLnMtLd5ihQpJ6HJsaTIjra9Jz7Ob6bSvW0tYipgsP Ieit6f8EIKyVZTbkjS5MHZtQsjis5GQ4anZGR917t2NliCR2losFzQOLtjg6x9dN 1rO6m4BsQAFGQg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:08 2025 by rpki-client