This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft File: V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json) Hash identifier: EiHSvj++dJBZMIn5xPp8bH6sw06arCF/5AJd6Hi3Y/8= Subject key identifier: 49:8E:2C:9B:CF:C3:F6:AF:53:E2:AC:54:CB:77:BD:49:F7:52:AA:E1 Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55 Certificate issuer: /CN=577cd3b2391f4726c1aa89d5ed3d040823252355 Certificate serial: 019AF46509D90826EFDBF41AB3CF492DE1F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft Manifest number: 02D3 Signing time: Sat 06 Dec 2025 16:00:53 +0000 Manifest this update: Sat 06 Dec 2025 16:00:53 +0000 Manifest next update: Sun 07 Dec 2025 16:00:53 +0000 Files and hashes: 1: IwKSwRXA9Ph0qRohZhJ0WEYVgOM.roa (hash: RFNUKmFIpsyvimoGalaE9V72k6NP7c6/ODYYIyEjkmE=) 2: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: GBynfRx7QBTbAqSHrbCqJHfU9dNw3nEeC5Z9wTr5gTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:09:d9:08:26:ef:db:f4:1a:b3:cf:49:2d:e1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355 Validity Not Before: Dec 6 16:00:53 2025 GMT Not After : Dec 7 16:00:53 2025 GMT Subject: CN=498e2c9bcfc3f6af53e2ac54cb77bd49f752aae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:8e:7d:54:6d:6c:fc:59:61:f7:1b:19:cc: ba:68:61:58:e8:fb:d2:63:62:f6:70:5b:36:45:3a: 64:f3:d1:63:75:0d:a9:d2:ed:17:ac:4a:32:68:3e: 2f:de:89:5d:14:18:da:75:b8:57:e8:f9:93:17:2c: 5e:de:08:af:e7:6f:d3:c7:bb:14:1e:cd:59:0d:b8: 25:07:fa:03:f3:d1:c4:45:3e:82:f3:c4:b8:8b:75: 03:ca:86:15:0d:77:46:82:ce:d8:83:84:b6:42:db: d7:63:e9:73:8b:dd:64:46:af:dd:53:a4:6f:a0:f9: f7:6c:af:b2:97:e7:b9:5a:b5:76:25:af:f3:38:8a: c4:62:59:7c:19:e0:ce:92:78:a7:ac:6a:57:c3:b1: 50:b5:ab:80:03:e4:e6:08:9d:3e:89:87:63:6f:c2: 74:6d:44:15:72:9e:72:8e:a4:b1:ee:2b:0e:88:19: 1c:65:ee:ce:e5:d0:84:0e:e2:5e:f2:68:78:99:1d: 0e:5e:ed:4b:50:c8:86:3f:eb:9a:48:3c:e0:04:ed: aa:eb:4e:d9:a8:c0:8b:bf:b6:61:ca:3c:f3:da:44: aa:f4:75:ab:e6:02:5b:58:36:70:f3:05:8d:85:24: af:82:54:fd:2a:ff:90:13:90:79:b0:46:33:71:da: b0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8E:2C:9B:CF:C3:F6:AF:53:E2:AC:54:CB:77:BD:49:F7:52:AA:E1 X509v3 Authority Key Identifier: keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:b0:08:e8:56:dd:b3:d9:44:b7:5c:98:e3:5c:34:c8:9d:6a: ce:fd:7b:5c:90:83:0f:5c:a1:cb:de:59:a1:87:bf:89:2d:5d: 2c:eb:3a:f5:9d:47:6e:d4:5f:ff:85:83:62:77:c1:89:ba:c8: 9d:e0:8c:c5:17:bf:68:dc:e4:07:35:60:8b:fd:a6:07:c9:0d: 9e:25:a6:75:a5:c8:b3:dd:36:da:e2:7e:37:c5:bd:b3:a1:93: 63:44:ed:13:41:d6:70:52:ed:de:c0:f9:52:0f:af:cf:ee:1f: f1:7f:c2:46:88:a2:81:26:7a:52:08:da:9e:e4:50:b6:55:52: b9:ae:c7:90:71:ad:58:71:e4:e3:59:7b:bf:da:a0:12:b4:4f: 6a:58:d2:c2:0d:c6:68:12:d9:c8:db:3e:9c:ad:76:74:3d:d4: e8:47:58:0c:20:a4:14:ff:d4:bb:b9:f0:77:4b:40:ff:5d:1f: 4a:38:a0:d2:92:15:11:47:b3:df:27:b9:7b:61:ef:c4:a9:b1: 90:77:2b:2b:80:e6:55:ee:c7:1f:0b:54:92:fb:9b:a4:70:49: 88:21:d0:d4:f8:00:27:04:94:dd:3f:65:5c:17:3d:6d:a8:81: 01:79:b0:85:72:5a:dc:e6:c6:8b:52:5e:38:74:89:ad:83:d1: 34:79:c4:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQnZCCbv2/Qas89JLeH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3N2NkM2IyMzkxZjQ3MjZjMWFhODlkNWVkM2QwNDA4MjMy NTIzNTUwHhcNMjUxMjA2MTYwMDUzWhcNMjUxMjA3MTYwMDUzWjAzMTEwLwYDVQQD Eyg0OThlMmM5YmNmYzNmNmFmNTNlMmFjNTRjYjc3YmQ0OWY3NTJhYWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IqOfVRtbPxZYfcbGcy6aGFY6PvS Y2L2cFs2RTpk89FjdQ2p0u0XrEoyaD4v3oldFBjadbhX6PmTFyxe3giv52/Tx7sU Hs1ZDbglB/oD89HERT6C88S4i3UDyoYVDXdGgs7Yg4S2QtvXY+lzi91kRq/dU6Rv oPn3bK+yl+e5WrV2Ja/zOIrEYll8GeDOkninrGpXw7FQtauAA+TmCJ0+iYdjb8J0 bUQVcp5yjqSx7isOiBkcZe7O5dCEDuJe8mh4mR0OXu1LUMiGP+uaSDzgBO2q607Z qMCLv7Zhyjzz2kSq9HWr5gJbWDZw8wWNhSSvglT9Kv+QE5B5sEYzcdqwQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmOLJvPw/avU+KsVMt3vUn3UqrhMB8GA1UdIwQY MBaAFFd807I5H0cmwaqJ1e09BAgjJSNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjN6VHNqa2ZSeWJCcW9uVjdUMEVDQ01sSTFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80YjgyZmUtZmY3My00YjU4LWEyMWEt MDBmZDA1ZDNjZDFkLzEvVjN6VHNqa2ZSeWJCcW9uVjdUMEVDQ01sSTFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS80YjgyZmUtZmY3My00YjU4LWEyMWEtMDBmZDA1ZDNjZDFk LzEvVjN6VHNqa2ZSeWJCcW9uVjdUMEVDQ01sSTFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzbAI6Fbd s9lEt1yY41w0yJ1qzv17XJCDD1yhy95ZoYe/iS1dLOs69Z1HbtRf/4WDYnfBibrI neCMxRe/aNzkBzVgi/2mB8kNniWmdaXIs9022uJ+N8W9s6GTY0TtE0HWcFLt3sD5 Ug+vz+4f8X/CRoiigSZ6UgjanuRQtlVSua7HkHGtWHHk41l7v9qgErRPaljSwg3G aBLZyNs+nK12dD3U6EdYDCCkFP/Uu7nwd0tA/10fSjig0pIVEUez3ye5e2HvxKmx kHcrK4DmVe7HHwtUkvubpHBJiCHQ1PgAJwSU3T9lXBc9baiBAXmwhXJa3ObGi1Je OHSJrYPRNHnEJA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:18 2025 by rpki-client