This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft File: F3khM2kRpWiNeOk__l5HIRO7Gb4.mft (raw, json) Hash identifier: xlEDPOHpmeMTq3x2cdlVcdXxAVQ9MPyFs/Wj8DsNwJM= Subject key identifier: 3D:A7:47:48:20:76:B4:30:6A:EA:D0:B3:D3:BF:DE:57:19:AB:09:0D Authority key identifier: 17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE Certificate issuer: /CN=177921336911a5688d78e93ffe5e472113bb19be Certificate serial: 019AF12CD034F68D2660E1C4416EA3B740B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft Manifest number: 0742 Signing time: Sat 06 Dec 2025 01:00:37 +0000 Manifest this update: Sat 06 Dec 2025 01:00:37 +0000 Manifest next update: Sun 07 Dec 2025 01:00:37 +0000 Files and hashes: 1: F3khM2kRpWiNeOk__l5HIRO7Gb4.crl (hash: tIL2A+88fyZz3t3p8o0BxIILp9GqgMBoqOS0lCwFCdw=) 2: WN1QsY4J0xzhzXI37At9k24AG4s.roa (hash: aONG4etXL5aCmGtS97ulkTYk4UjXjlB6E7tpLdYeDEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d0:34:f6:8d:26:60:e1:c4:41:6e:a3:b7:40:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=177921336911a5688d78e93ffe5e472113bb19be Validity Not Before: Dec 6 01:00:37 2025 GMT Not After : Dec 7 01:00:37 2025 GMT Subject: CN=3da747482076b4306aead0b3d3bfde5719ab090d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:e3:8b:25:89:d0:a9:4a:59:65:ef:61:58: 1c:83:b9:ca:3d:4b:55:ad:58:61:d8:26:8f:39:dd: ce:8d:ae:e4:d7:ec:fb:59:0b:65:8f:6d:56:73:a5: 8b:dc:9c:4e:f0:ea:4c:88:bd:f3:ab:18:79:0f:b9: da:f0:c9:7d:ca:45:34:da:bf:36:e0:5d:b4:75:80: d8:92:51:b1:d4:81:11:49:62:47:75:19:dd:3b:96: 48:73:de:77:23:a9:e2:f0:c2:3d:88:8e:05:dc:21: 0a:b6:0b:6d:b7:d5:8e:af:49:3f:25:da:46:e2:77: bd:fb:4b:cc:a4:c7:71:26:b8:7d:3d:8b:7a:72:61: 9d:19:68:19:83:74:87:43:13:fe:db:65:4c:7f:d0: e1:d1:78:4b:de:6f:cd:a4:7d:cb:83:0b:ed:9c:ea: f8:f0:8e:10:fb:87:94:d5:bc:12:fb:8d:df:7a:25: 95:ff:6a:6f:03:cc:57:c4:d3:38:d3:0a:99:02:0d: 96:95:ff:d7:6b:1d:92:19:d5:ba:a9:13:bf:56:3b: 19:77:d7:6c:c3:fe:7a:d8:e6:95:84:c7:d6:0e:bc: 75:79:30:91:6c:44:aa:82:0f:82:db:b6:20:c8:7a: bd:84:2b:b0:76:53:5e:3f:9e:ff:05:82:2f:b1:22: 70:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A7:47:48:20:76:B4:30:6A:EA:D0:B3:D3:BF:DE:57:19:AB:09:0D X509v3 Authority Key Identifier: keyid:17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:fc:e8:c5:42:c2:d8:f2:74:a6:4b:3b:ee:62:96:54:39:66: 65:fd:73:fe:b3:2c:03:19:b3:18:46:f9:f8:6f:06:e4:7b:f6: 1e:e1:a3:4b:e2:0d:73:8b:83:cc:9e:92:6a:c2:1e:30:49:9f: 6c:39:68:a8:f0:8b:20:93:2d:47:21:25:05:60:73:7a:a9:ce: a5:9a:0d:07:eb:5c:82:7d:0c:ab:ea:55:68:6d:94:7c:1f:8e: 8c:03:69:87:5d:7b:1b:77:5e:4d:49:0b:05:b3:16:6b:f0:01: 85:d6:5d:74:22:57:ce:ad:23:ad:1f:fe:6f:01:8a:cc:d0:20: 70:a0:1c:f2:0b:e9:23:75:6a:bc:ba:6c:49:c6:31:63:ed:88: ce:bf:72:58:d9:25:1d:4e:a4:35:c1:60:54:a6:86:4f:8d:41: 44:53:30:22:0d:a0:8e:73:8f:9d:dd:7e:5d:89:8f:e9:7e:88: 12:3a:ec:4b:53:cb:9a:fe:c6:ec:05:4a:12:e2:b8:cd:aa:d6: 8c:cf:66:dc:b2:8c:bf:8b:65:e1:3f:da:79:73:ae:33:fc:cd: 33:0d:7c:17:ef:d0:ab:b5:5d:47:fd:35:90:2c:30:e2:3b:3e: 6a:30:7a:76:c9:c1:4f:e5:88:51:a7:c1:cd:d6:86:e3:05:6e: 8b:96:40:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNA09o0mYOHEQW6jt0C0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzkyMTMzNjkxMWE1Njg4ZDc4ZTkzZmZlNWU0NzIxMTNi YjE5YmUwHhcNMjUxMjA2MDEwMDM3WhcNMjUxMjA3MDEwMDM3WjAzMTEwLwYDVQQD EygzZGE3NDc0ODIwNzZiNDMwNmFlYWQwYjNkM2JmZGU1NzE5YWIwOTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjvjiyWJ0KlKWWXvYVgcg7nKPUtV rVhh2CaPOd3Oja7k1+z7WQtlj21Wc6WL3JxO8OpMiL3zqxh5D7na8Ml9ykU02r82 4F20dYDYklGx1IERSWJHdRndO5ZIc953I6ni8MI9iI4F3CEKtgttt9WOr0k/JdpG 4ne9+0vMpMdxJrh9PYt6cmGdGWgZg3SHQxP+22VMf9Dh0XhL3m/NpH3LgwvtnOr4 8I4Q+4eU1bwS+43feiWV/2pvA8xXxNM40wqZAg2Wlf/Xax2SGdW6qRO/VjsZd9ds w/562OaVhMfWDrx1eTCRbESqgg+C27YgyHq9hCuwdlNeP57/BYIvsSJw1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2nR0ggdrQwaurQs9O/3lcZqwkNMB8GA1UdIwQY MBaAFBd5ITNpEaVojXjpP/5eRyETuxm+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNraE0ya1JwV2lOZU9rX19sNUhJUk83R2I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82MzEwN2MtYjU2MC00MTE2LWI0Nzgt YjVjM2QyNGVmZGNkLzEvRjNraE0ya1JwV2lOZU9rX19sNUhJUk83R2I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82MzEwN2MtYjU2MC00MTE2LWI0NzgtYjVjM2QyNGVmZGNk LzEvRjNraE0ya1JwV2lOZU9rX19sNUhJUk83R2I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyfzoxULC 2PJ0pks77mKWVDlmZf1z/rMsAxmzGEb5+G8G5Hv2HuGjS+INc4uDzJ6SasIeMEmf bDloqPCLIJMtRyElBWBzeqnOpZoNB+tcgn0Mq+pVaG2UfB+OjANph117G3deTUkL BbMWa/ABhdZddCJXzq0jrR/+bwGKzNAgcKAc8gvpI3VqvLpsScYxY+2Izr9yWNkl HU6kNcFgVKaGT41BRFMwIg2gjnOPnd1+XYmP6X6IEjrsS1PLmv7G7AVKEuK4zarW jM9m3LKMv4tl4T/aeXOuM/zNMw18F+/Qq7VdR/01kCww4js+ajB6dsnBT+WIUafB zdaG4wVui5ZADA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:24:25 2025 by rpki-client