This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json) Hash identifier: ByqorHfe58jWe101ktIPmwvk4bSk0xGn3eI15mDJ1RE= Subject key identifier: 92:E7:B0:62:6E:79:BE:70:69:DB:AE:A6:2A:69:FC:7D:BE:58:EC:98 Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66 Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566 Certificate serial: 019AF19AB9C46A79C87AD7A436B4D2353A6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft Manifest number: 1077 Signing time: Sat 06 Dec 2025 03:00:40 +0000 Manifest this update: Sat 06 Dec 2025 03:00:40 +0000 Manifest next update: Sun 07 Dec 2025 03:00:40 +0000 Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: bswKA5fghypRT6DI8g2UQunSZwvwMDLE3W7gK/kc5B0=) 2: f98-QGGyvPNag3NBWDooTVrQ2vI.roa (hash: HJhPbHQVg92t7q01K4xm1xNnj11AYPaciJd3bC3Ng+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b9:c4:6a:79:c8:7a:d7:a4:36:b4:d2:35:3a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566 Validity Not Before: Dec 6 03:00:40 2025 GMT Not After : Dec 7 03:00:40 2025 GMT Subject: CN=92e7b0626e79be7069dbaea62a69fc7dbe58ec98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:46:b2:17:36:f6:f4:9b:6c:a5:4e:a9:dd: f0:37:ba:b2:aa:83:b1:50:e8:f0:c6:d2:4c:6e:b7: 36:1e:80:8f:26:f8:77:d9:e5:52:00:e1:db:5d:83: 8b:84:08:ab:9e:4d:7c:0b:24:ab:55:2b:c6:97:77: b0:f4:27:1c:0e:4b:44:33:63:1f:8c:b4:41:cf:b1: ff:fc:95:c9:32:47:72:be:29:c2:7e:1e:40:9a:78: 89:eb:14:f1:45:83:e9:ad:e5:6f:13:c0:e5:1d:a6: d2:2a:d9:b3:4a:1b:95:29:8b:a0:d3:a8:b5:c8:71: e0:45:86:f8:92:e2:0d:eb:fe:d8:7f:97:78:80:a2: b4:fd:07:8d:e2:3a:6c:76:79:0a:c6:7b:8b:42:f9: 33:7e:e1:4c:27:2b:9d:b5:ed:2b:ee:94:9e:c5:76: 0c:fd:ff:cd:b2:27:73:e8:d3:ba:e2:e6:bf:03:04: 41:af:e7:3c:ad:a5:a0:7f:52:ec:56:be:a1:07:0d: a1:6b:6b:6c:87:7d:33:87:3f:95:f0:c1:3c:af:40: b8:6e:67:cc:37:e3:e1:68:7f:ef:6f:dc:00:18:5b: 48:4d:50:10:d2:31:22:33:ca:1d:a0:ab:e1:87:d2: 8b:e1:5a:b0:3b:3c:0a:7a:25:df:6e:5f:23:69:ac: 85:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E7:B0:62:6E:79:BE:70:69:DB:AE:A6:2A:69:FC:7D:BE:58:EC:98 X509v3 Authority Key Identifier: keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4c:f8:ae:d8:11:4a:2b:93:2e:b2:fd:89:30:d5:42:92:74: 74:cf:3a:3e:3b:62:ef:68:96:b4:df:3f:4b:6f:48:7d:64:39: 6a:2a:8e:a5:6b:ed:e8:65:9d:41:10:35:8d:5c:21:db:a3:d4: 05:01:75:07:f7:d2:e3:31:82:03:7c:96:9a:26:e2:9d:cd:04: 59:29:4b:cc:fe:86:41:98:b2:06:33:95:d0:8f:d1:6c:9e:6e: 2a:40:04:c8:58:32:97:a6:8c:db:71:b1:29:c5:74:3d:30:9d: 27:7c:19:58:3f:df:99:ff:b3:7a:c4:46:3e:3c:74:40:05:5a: cd:fb:0e:dd:73:fc:27:c1:84:ab:7d:0e:e8:0f:6e:76:d2:9d: 33:33:57:0e:30:76:c5:63:c8:1a:fa:ba:ed:47:28:72:1f:94: a5:6a:68:44:31:9b:6c:46:f5:34:9c:4c:dc:26:63:64:e5:1a: bd:9b:01:cb:05:38:f1:49:3d:6c:2e:9f:99:4b:e7:77:6a:fa: 2a:b0:55:0d:72:ca:49:43:d4:57:47:f1:7c:89:5f:55:14:4d: 55:4b:03:f5:e7:a1:c6:44:23:39:3f:c4:2e:d5:9c:3e:b1:a1: d5:7b:6d:c2:53:fb:5c:42:0c:95:49:a2:d2:f2:ed:a3:21:f8: 8d:1f:76:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrnEannIetekNrTSNTpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNDhkNTA4MjE1MzQwZWFjMGYxNGYwYjc0NzQ5ZDFjOGVj OWY1NjYwHhcNMjUxMjA2MDMwMDQwWhcNMjUxMjA3MDMwMDQwWjAzMTEwLwYDVQQD Eyg5MmU3YjA2MjZlNzliZTcwNjlkYmFlYTYyYTY5ZmM3ZGJlNThlYzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx51Gshc29vSbbKVOqd3wN7qyqoOx UOjwxtJMbrc2HoCPJvh32eVSAOHbXYOLhAirnk18CySrVSvGl3ew9CccDktEM2Mf jLRBz7H//JXJMkdyvinCfh5AmniJ6xTxRYPpreVvE8DlHabSKtmzShuVKYug06i1 yHHgRYb4kuIN6/7Yf5d4gKK0/QeN4jpsdnkKxnuLQvkzfuFMJyudte0r7pSexXYM /f/Nsidz6NO64ua/AwRBr+c8raWgf1LsVr6hBw2ha2tsh30zhz+V8ME8r0C4bmfM N+PhaH/vb9wAGFtITVAQ0jEiM8odoKvhh9KL4VqwOzwKeiXfbl8jaayFfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLnsGJueb5waduupipp/H2+WOyYMB8GA1UdIwQY MBaAFN1I1QghU0DqwPFPC3R0nRyOyfVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjkt NDVlNDc0MDAyM2RiLzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjktNDVlNDc0MDAyM2Ri LzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEz4rtgR SiuTLrL9iTDVQpJ0dM86Pjti72iWtN8/S29IfWQ5aiqOpWvt6GWdQRA1jVwh26PU BQF1B/fS4zGCA3yWmibinc0EWSlLzP6GQZiyBjOV0I/RbJ5uKkAEyFgyl6aM23Gx KcV0PTCdJ3wZWD/fmf+zesRGPjx0QAVazfsO3XP8J8GEq30O6A9udtKdMzNXDjB2 xWPIGvq67Ucoch+UpWpoRDGbbEb1NJxM3CZjZOUavZsBywU48Uk9bC6fmUvnd2r6 KrBVDXLKSUPUV0fxfIlfVRRNVUsD9eehxkQjOT/ELtWcPrGh1XttwlP7XEIMlUmi 0vLtoyH4jR92wg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:56 2025 by rpki-client