This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft File: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json) Hash identifier: NrezRi4WNNCl2TqKzq5B7Wpi/9XDymHuabsWx0Lh6EU= Subject key identifier: DF:1E:06:23:C4:E7:AC:3C:01:EB:B8:6F:63:AB:E0:45:A2:C8:C4:74 Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75 Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775 Certificate serial: 019AF31BB8B30B1CCEE73782BDE86ED93DE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft Manifest number: 0B0D Signing time: Sat 06 Dec 2025 10:01:11 +0000 Manifest this update: Sat 06 Dec 2025 10:01:11 +0000 Manifest next update: Sun 07 Dec 2025 10:01:11 +0000 Files and hashes: 1: E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa (hash: AbosUOGwDkylbwXsNTmNDaibnmXnMj0HIqZzxGPKQ6U=) 2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: CfDTJT+tfzawNjpqcEXlDsXScqHQL9R/BxO9AmpCgAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b8:b3:0b:1c:ce:e7:37:82:bd:e8:6e:d9:3d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775 Validity Not Before: Dec 6 10:01:11 2025 GMT Not After : Dec 7 10:01:11 2025 GMT Subject: CN=df1e0623c4e7ac3c01ebb86f63abe045a2c8c474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d5:f1:3c:72:8a:0e:cd:ab:6e:37:ca:70:eb: dc:f2:b6:98:e9:ad:6e:73:ae:40:5a:82:62:1f:fd: 40:87:9a:48:8b:94:4e:53:d6:39:9d:f8:c2:94:b8: e1:c4:bb:12:5b:16:20:de:22:1e:73:84:c1:e2:94: 73:7c:4d:7d:4b:1d:2d:0a:5d:e5:a4:bc:fd:50:34: f8:61:e6:6b:34:b9:d2:a9:54:db:0f:e9:a5:03:35: c1:41:fb:bf:28:77:59:ac:79:81:5a:46:8c:fd:d5: c2:f2:fd:4e:83:61:c6:fb:22:19:a9:b6:da:fe:03: 11:78:50:16:bf:b2:d4:fc:95:4e:8b:2f:14:ea:59: 38:2c:4b:32:fd:49:c5:10:da:00:b5:81:5a:2c:82: ac:24:b4:6b:29:fb:1d:06:b7:7c:b5:ec:22:07:04: 39:33:ee:37:18:23:6a:77:42:77:f8:73:29:bf:8a: d2:ac:bb:c5:38:03:3b:81:10:4d:00:b3:42:44:a6: 83:53:ce:a0:ce:d6:32:a2:de:3e:5c:5a:ab:96:e6: 9e:fb:cd:45:81:e8:5d:f2:10:34:01:66:00:54:4e: 03:9a:32:80:c6:d7:4a:92:b4:97:ab:11:96:23:ae: 61:47:79:69:5d:a1:7b:42:b2:e8:3c:e4:5a:c8:60: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1E:06:23:C4:E7:AC:3C:01:EB:B8:6F:63:AB:E0:45:A2:C8:C4:74 X509v3 Authority Key Identifier: keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:4e:da:47:76:80:7e:83:f2:3b:b4:b4:e1:4d:c4:6a:6b:93: 3a:94:9a:83:ee:c1:12:61:55:2f:08:55:d2:02:87:01:ea:cc: e1:74:95:4a:2e:ca:13:58:79:c3:63:b6:3d:d0:59:b7:f9:83: 8b:62:1f:1d:c0:77:c4:46:53:b2:46:00:79:2a:86:f7:1a:76: 27:ff:a0:cd:ed:31:69:d2:2e:9b:d1:d6:c1:ad:5c:9d:b3:39: a8:e6:1e:44:eb:53:56:ac:42:14:62:97:18:6d:d5:17:af:e4: d1:9c:f8:15:c4:4a:cd:b2:77:88:58:b6:7e:09:38:19:8b:09: 4e:6e:eb:54:5f:b6:ec:aa:fe:42:dd:6c:3b:9f:15:c7:53:2f: 96:28:e6:ef:b0:ab:bf:43:5a:ba:48:47:5a:a6:b8:c4:83:f5: 73:7f:3a:20:4c:83:19:e2:ec:aa:b8:06:61:af:7a:46:e4:fe: 45:ca:b1:28:fb:c6:59:3d:00:47:e7:64:79:f2:a1:54:aa:b2: 3d:1d:cc:13:56:1a:9c:f8:4f:f3:fa:80:1e:20:5f:a5:dc:35: 10:02:29:98:9a:f0:24:f3:7f:36:45:50:67:d0:e8:1a:1f:92: 41:c6:95:68:61:7f:63:2c:24:04:ee:89:b4:c7:fb:15:ab:65: 60:6c:78:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7izCxzO5zeCvehu2T3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYmQ1ZjhiYjVhNTk0ZDY3YjVjZTgwN2E4NGM1OWRkZTU2 OWE3NzUwHhcNMjUxMjA2MTAwMTExWhcNMjUxMjA3MTAwMTExWjAzMTEwLwYDVQQD EyhkZjFlMDYyM2M0ZTdhYzNjMDFlYmI4NmY2M2FiZTA0NWEyYzhjNDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdXxPHKKDs2rbjfKcOvc8raY6a1u c65AWoJiH/1Ah5pIi5ROU9Y5nfjClLjhxLsSWxYg3iIec4TB4pRzfE19Sx0tCl3l pLz9UDT4YeZrNLnSqVTbD+mlAzXBQfu/KHdZrHmBWkaM/dXC8v1Og2HG+yIZqbba /gMReFAWv7LU/JVOiy8U6lk4LEsy/UnFENoAtYFaLIKsJLRrKfsdBrd8tewiBwQ5 M+43GCNqd0J3+HMpv4rSrLvFOAM7gRBNALNCRKaDU86gztYyot4+XFqrluae+81F gehd8hA0AWYAVE4DmjKAxtdKkrSXqxGWI65hR3lpXaF7QrLoPORayGAKuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8eBiPE56w8Aeu4b2Or4EWiyMR0MB8GA1UdIwQY MBaAFD69X4u1pZTWe1zoB6hMWd3laad1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jZWE1Y2YtMDc4Mi00MGQxLTg5MTMt OTI3MTJmOTVlMzM2LzEvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jZWE1Y2YtMDc4Mi00MGQxLTg5MTMtOTI3MTJmOTVlMzM2 LzEvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmE7aR3aA foPyO7S04U3EamuTOpSag+7BEmFVLwhV0gKHAerM4XSVSi7KE1h5w2O2PdBZt/mD i2IfHcB3xEZTskYAeSqG9xp2J/+gze0xadIum9HWwa1cnbM5qOYeROtTVqxCFGKX GG3VF6/k0Zz4FcRKzbJ3iFi2fgk4GYsJTm7rVF+27Kr+Qt1sO58Vx1Mvlijm77Cr v0NaukhHWqa4xIP1c386IEyDGeLsqrgGYa96RuT+RcqxKPvGWT0AR+dkefKhVKqy PR3ME1YanPhP8/qAHiBfpdw1EAIpmJrwJPN/NkVQZ9DoGh+SQcaVaGF/YywkBO6J tMf7FatlYGx4JA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:24:46 2025 by rpki-client