This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json) Hash identifier: z1E9snfmuAL0/G488O7F8CrEedRXZr9SnGR3dTsHZuY= Subject key identifier: 33:20:8F:93:7F:CF:1A:C7:F0:D8:BD:19:BE:59:0B:A6:1B:E0:9C:55 Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad Certificate serial: 019AF0BF7E1BF4BF3F90EAAA02A91F0BD433 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft Manifest number: 070C Signing time: Fri 05 Dec 2025 23:01:12 +0000 Manifest this update: Fri 05 Dec 2025 23:01:12 +0000 Manifest next update: Sat 06 Dec 2025 23:01:12 +0000 Files and hashes: 1: 6rvpyTq3GpToeI0SORQBn8auSqk.roa (hash: It3me0g3R8Ie8D4qrGq2UTC1Pz9Blt9bU50UXq7GwOE=) 2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: NnCG4WKDBC/AqffSV9Ye6mqVGQehFAJ3kCiV5q5biTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7e:1b:f4:bf:3f:90:ea:aa:02:a9:1f:0b:d4:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad Validity Not Before: Dec 5 23:01:12 2025 GMT Not After : Dec 6 23:01:12 2025 GMT Subject: CN=33208f937fcf1ac7f0d8bd19be590ba61be09c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:19:73:64:11:fe:b1:75:2d:38:a1:3d:d9: 5b:92:9e:c7:38:fc:0e:61:4a:a2:87:84:c2:1d:54: 72:f9:cd:4c:f0:52:0b:ee:ba:95:2f:eb:43:1f:d2: fe:ff:86:5e:8a:d2:93:f6:7b:c6:cb:e5:83:22:8a: 5b:92:07:d0:82:83:12:b4:e1:c6:b5:1d:79:0f:d5: c5:31:4f:7c:56:af:d0:b5:92:be:96:db:55:73:71: 92:c6:e0:ba:e7:d8:e3:55:16:cd:63:9a:75:f4:14: 00:87:a3:dd:8a:bd:94:73:4c:e0:0a:3f:f6:01:a0: a3:11:63:c7:9c:5e:ad:b1:fd:94:1a:af:a8:e7:fa: db:3a:5c:3c:0c:07:e3:da:cc:f1:f6:95:b9:0c:b4: 7b:1e:88:27:b3:be:fc:76:a7:70:99:df:58:42:51: 23:bf:1e:24:c9:5f:12:42:e3:90:61:b1:6e:f3:d0: f4:6e:82:dc:3a:2a:b1:2f:74:40:3f:1b:43:c4:bc: 67:fc:24:1d:35:ea:bd:e8:ae:86:ee:16:e3:aa:69: 8a:18:6d:9c:ab:f7:75:b7:a6:55:d3:d8:65:60:0f: 3c:df:ab:f7:05:30:63:d3:e0:d7:82:72:67:06:fe: 70:d9:2b:a8:55:fd:26:f5:db:e7:d2:e7:44:84:41: 1a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:20:8F:93:7F:CF:1A:C7:F0:D8:BD:19:BE:59:0B:A6:1B:E0:9C:55 X509v3 Authority Key Identifier: keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2f:4b:78:49:c8:ff:f8:b0:5f:36:28:5f:62:d9:a7:09:fd: b9:c5:2d:98:73:bb:d8:74:65:8a:4b:78:83:a9:21:d7:1f:df: 47:87:c3:26:eb:6f:c5:0d:34:e1:3f:8b:06:74:31:f1:d4:30: a1:63:08:57:6b:f8:d1:6d:f5:d6:00:41:33:18:51:d4:43:5c: 6d:9a:28:a5:b9:05:03:a1:4f:58:31:14:ff:a5:82:37:27:e7: fe:32:83:a0:5b:70:45:e7:43:da:de:da:21:95:30:77:e7:11: de:f1:7a:35:0f:0d:b3:d0:3a:dc:63:bd:e9:f3:0e:6a:20:49: b6:b6:c1:f7:1e:f7:b2:07:22:81:f2:87:4f:96:46:b4:be:90: 53:29:b7:6d:00:6d:a6:bf:89:45:45:a4:c4:7c:fa:92:ef:a4: af:a0:45:c6:88:06:ea:ad:6a:a7:c0:78:d6:2b:bc:07:59:59: 0b:63:92:a1:9d:49:4c:7d:69:22:c1:27:e9:8d:e8:38:f5:0d: ab:18:6c:1a:1e:63:4e:d7:c4:65:95:ab:6e:ee:20:25:be:68: dd:e7:e7:d0:6b:2c:76:89:8b:9c:0d:06:fe:1d:79:0c:33:6d: 71:b1:0d:3e:93:13:9f:d1:ff:28:7b:c0:37:83:3d:84:4f:5c: a2:86:16:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv34b9L8/kOqqAqkfC9QzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2IxMjA0NWIxYWYwOWFjZjk2NjJlZTM1YmEyY2Q3ZTFj ODViYWQwHhcNMjUxMjA1MjMwMTEyWhcNMjUxMjA2MjMwMTEyWjAzMTEwLwYDVQQD EygzMzIwOGY5MzdmY2YxYWM3ZjBkOGJkMTliZTU5MGJhNjFiZTA5YzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG0Zc2QR/rF1LTihPdlbkp7HOPwO YUqih4TCHVRy+c1M8FIL7rqVL+tDH9L+/4ZeitKT9nvGy+WDIopbkgfQgoMStOHG tR15D9XFMU98Vq/QtZK+lttVc3GSxuC659jjVRbNY5p19BQAh6Pdir2Uc0zgCj/2 AaCjEWPHnF6tsf2UGq+o5/rbOlw8DAfj2szx9pW5DLR7Hogns778dqdwmd9YQlEj vx4kyV8SQuOQYbFu89D0boLcOiqxL3RAPxtDxLxn/CQdNeq96K6G7hbjqmmKGG2c q/d1t6ZV09hlYA8836v3BTBj0+DXgnJnBv5w2SuoVf0m9dvn0udEhEEaXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMgj5N/zxrH8Ni9Gb5ZC6Yb4JxVMB8GA1UdIwQY MBaAFGt7EgRbGvCaz5Zi7jW6LNfhyFutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84NjhhOWMtZmUyNS00YjU5LWEzMjkt MTg0MDFkYTQzNTYzLzEvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84NjhhOWMtZmUyNS00YjU5LWEzMjktMTg0MDFkYTQzNTYz LzEvYTNzU0JGc2E4SnJQbG1MdU5ib3MxLUhJVzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmi9LeEnI //iwXzYoX2LZpwn9ucUtmHO72HRlikt4g6kh1x/fR4fDJutvxQ004T+LBnQx8dQw oWMIV2v40W311gBBMxhR1ENcbZoopbkFA6FPWDEU/6WCNyfn/jKDoFtwRedD2t7a IZUwd+cR3vF6NQ8Ns9A63GO96fMOaiBJtrbB9x73sgcigfKHT5ZGtL6QUym3bQBt pr+JRUWkxHz6ku+kr6BFxogG6q1qp8B41iu8B1lZC2OSoZ1JTH1pIsEn6Y3oOPUN qxhsGh5jTtfEZZWrbu4gJb5o3efn0GssdomLnA0G/h15DDNtcbENPpMTn9H/KHvA N4M9hE9cooYWTA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:42 2025 by rpki-client