This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft File: 31kIP69fArumaAmhoicuryboo3g.mft (raw, json) Hash identifier: Wzh/zlxN2D8Jb5QsnGNvgujWEBu8gF/KzZakCxNYzcA= Subject key identifier: E3:A1:8E:99:55:0E:0B:09:D9:6F:C8:5F:06:EC:23:8A:33:47:14:27 Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78 Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378 Certificate serial: 019AF12E68FEA54D6C6E88FC55BF23307A7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:21 +0000 Manifest this update: Sat 06 Dec 2025 01:02:21 +0000 Manifest next update: Sun 07 Dec 2025 01:02:21 +0000 Files and hashes: 1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: IwLeDfHKvHXswdJCpOKPt6lh7jzT1x0P4mq2FkDiH8U=) 2: YDfV9I6rtYOjYpm5Z092WUOvRZo.roa (hash: VUQya+NPZIcq+b1ZPCIIi30pk5o/2ydd0KrRwzAFiDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:68:fe:a5:4d:6c:6e:88:fc:55:bf:23:30:7a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378 Validity Not Before: Dec 6 01:02:21 2025 GMT Not After : Dec 7 01:02:21 2025 GMT Subject: CN=e3a18e99550e0b09d96fc85f06ec238a33471427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:71:4a:4f:3d:15:19:1c:f2:30:78:4e:98:fa: 09:6b:37:c6:b1:a5:cf:12:46:09:30:13:84:d2:e5: da:2c:72:40:7c:ad:91:bf:78:7b:bd:2b:d8:d2:93: c7:51:ae:68:4b:b3:90:e4:a5:b1:02:8f:de:81:18: 5e:3e:f2:7e:20:2e:22:4f:1b:2f:7d:60:77:f5:a2: 6c:39:d7:fb:16:52:26:5b:a4:03:62:08:2d:76:e4: 15:ed:f2:cd:4f:84:fc:37:82:ec:37:9f:25:3f:a3: b8:be:ec:fb:e4:ab:02:21:f0:00:0b:b7:4e:5f:94: 6e:20:bc:e3:f0:d5:ce:e2:b6:a2:5f:8e:4f:9c:47: 2e:87:51:16:ca:f4:a2:df:1d:30:a0:ea:86:4c:c0: 78:5b:fa:d0:de:10:f1:cd:31:a1:6a:8d:5f:3e:9f: 06:27:53:98:da:89:07:6a:09:47:0f:40:19:28:65: 94:84:81:8e:68:c6:1b:57:a4:03:61:45:15:cd:72: 2a:e3:cd:73:f9:75:a9:3b:9c:d2:75:66:46:21:25: b5:c9:8c:c9:32:e2:5e:37:e8:ad:58:bc:8d:3d:a4: 5f:70:94:c2:ee:2b:30:bf:a8:d7:6d:2a:8c:f6:47: 9a:68:6b:e4:51:37:93:0e:64:38:fb:cf:ef:4b:ab: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A1:8E:99:55:0E:0B:09:D9:6F:C8:5F:06:EC:23:8A:33:47:14:27 X509v3 Authority Key Identifier: keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:29:65:c0:a0:c1:05:1b:91:81:bf:c9:3b:09:7b:09:82:41: 13:a3:a6:6d:4f:bf:11:5a:41:87:8a:0c:b3:66:c4:a9:1d:4d: b1:f3:40:46:ed:a3:6a:62:e2:66:40:8a:5b:b4:0b:02:5c:f6: 7c:c6:9b:2f:a2:7d:9d:0a:94:4f:51:19:94:c0:24:1c:93:7f: 4c:d6:1b:5c:39:8b:ae:c3:ef:86:76:e2:86:8a:d0:f7:db:33: 59:0e:be:03:cc:00:49:17:ad:8e:d6:28:aa:13:d0:b8:1e:16: ce:ff:92:99:e6:3e:ed:cf:64:c3:ef:44:23:9d:1c:81:46:42: 3f:d3:8f:70:96:ba:2b:5f:ef:12:46:e5:ac:87:ae:c1:5b:23: a4:c8:da:a5:79:35:95:0e:3c:2d:db:3f:02:8a:6c:d7:27:04: 98:f5:6e:d8:e4:cf:61:d2:e9:78:a2:11:b1:8c:a2:23:55:40: 81:f9:15:d8:5a:dd:7e:61:a2:74:c7:25:59:98:f5:38:73:6a: 2d:6a:1d:03:2a:d1:a7:13:6b:f2:c2:c7:06:b6:08:ce:1d:f5: de:c1:92:35:77:44:39:f6:4d:69:78:6e:cd:13:38:34:e7:04: d7:04:88:43:a6:9b:02:37:d3:47:d7:58:7a:62:bb:36:1f:37: 5c:ab:72:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmj+pU1sboj8Vb8jMHp+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNTkwODNmYWY1ZjAyYmJhNjY4MDlhMWEyMjcyZWFmMjZl OGEzNzgwHhcNMjUxMjA2MDEwMjIxWhcNMjUxMjA3MDEwMjIxWjAzMTEwLwYDVQQD EyhlM2ExOGU5OTU1MGUwYjA5ZDk2ZmM4NWYwNmVjMjM4YTMzNDcxNDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nFKTz0VGRzyMHhOmPoJazfGsaXP EkYJMBOE0uXaLHJAfK2Rv3h7vSvY0pPHUa5oS7OQ5KWxAo/egRhePvJ+IC4iTxsv fWB39aJsOdf7FlImW6QDYggtduQV7fLNT4T8N4LsN58lP6O4vuz75KsCIfAAC7dO X5RuILzj8NXO4raiX45PnEcuh1EWyvSi3x0woOqGTMB4W/rQ3hDxzTGhao1fPp8G J1OY2okHaglHD0AZKGWUhIGOaMYbV6QDYUUVzXIq481z+XWpO5zSdWZGISW1yYzJ MuJeN+itWLyNPaRfcJTC7iswv6jXbSqM9keaaGvkUTeTDmQ4+8/vS6uGkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOhjplVDgsJ2W/IXwbsI4ozRxQnMB8GA1UdIwQY MBaAFN9ZCD+vXwK7pmgJoaInLq8m6KN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzFrSVA2OWZBcnVtYUFtaG9pY3VyeWJvbzNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xZDNjZTUtYzdlZi00OWZmLTlkNGUt NTk2ZmRiYjBlZGQ5LzEvMzFrSVA2OWZBcnVtYUFtaG9pY3VyeWJvbzNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8xZDNjZTUtYzdlZi00OWZmLTlkNGUtNTk2ZmRiYjBlZGQ5 LzEvMzFrSVA2OWZBcnVtYUFtaG9pY3VyeWJvbzNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCllwKDB BRuRgb/JOwl7CYJBE6OmbU+/EVpBh4oMs2bEqR1NsfNARu2jamLiZkCKW7QLAlz2 fMabL6J9nQqUT1EZlMAkHJN/TNYbXDmLrsPvhnbihorQ99szWQ6+A8wASRetjtYo qhPQuB4Wzv+SmeY+7c9kw+9EI50cgUZCP9OPcJa6K1/vEkblrIeuwVsjpMjapXk1 lQ48Lds/Aops1ycEmPVu2OTPYdLpeKIRsYyiI1VAgfkV2FrdfmGidMclWZj1OHNq LWodAyrRpxNr8sLHBrYIzh313sGSNXdEOfZNaXhuzRM4NOcE1wSIQ6abAjfTR9dY emK7Nh83XKty4w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:32 2025 by rpki-client