This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json) Hash identifier: 2t0zz1PRcO/+2tODMjz5kACM9vXHqOKwNb1iBrQBO+s= Subject key identifier: ED:2B:CB:37:17:67:5A:69:E8:FF:7D:C1:5D:44:C1:68:5C:3F:17:FB Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28 Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28 Certificate serial: 019AF5AEAA7949DBEC5F066AB50C1B1A7584 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft Manifest number: 1126 Signing time: Sat 06 Dec 2025 22:00:56 +0000 Manifest this update: Sat 06 Dec 2025 22:00:56 +0000 Manifest next update: Sun 07 Dec 2025 22:00:56 +0000 Files and hashes: 1: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: 9xKLkWb00N/f4Pe5yX5w/CF8PKtjOPVF6slgiALddhc=) 2: JoXcYev6DySlst62DTDcDz1JN0Q.roa (hash: PRhyl4bdJivpbrgVw6w06UO6PZN+9+qwU0T6MPbrnFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:aa:79:49:db:ec:5f:06:6a:b5:0c:1b:1a:75:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28 Validity Not Before: Dec 6 22:00:56 2025 GMT Not After : Dec 7 22:00:56 2025 GMT Subject: CN=ed2bcb3717675a69e8ff7dc15d44c1685c3f17fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:30:a4:0a:54:25:3c:bd:61:9d:c6:34:b4: 60:2f:ea:04:3f:a4:77:8b:f2:54:3e:a2:00:5b:2b: cf:74:d4:d0:46:72:c9:fe:75:44:35:32:a0:8f:7a: 14:2a:df:49:8e:8e:2e:78:a6:29:b8:fb:46:98:72: 68:c8:7b:17:84:63:e9:b6:3f:b2:86:c1:c9:0e:50: 7c:23:bc:99:25:b2:9a:20:c7:76:6f:9b:92:7f:39: bd:6b:16:09:53:0a:2e:ef:3d:66:d8:8b:13:83:9a: 4d:de:9b:6a:ba:c1:af:83:b7:f1:48:5a:33:e3:16: ad:ab:04:d8:df:01:b5:91:b7:47:63:f2:8d:ad:5d: 9a:a3:42:ac:a2:b8:a5:d5:15:f8:f7:d4:68:14:55: a1:82:54:f4:95:a2:a0:39:22:cc:d3:65:d9:27:85: 03:df:d4:d2:bc:87:7a:3f:85:4b:98:9d:77:f2:ac: d3:97:95:9f:b1:a9:41:13:34:16:bf:ce:9a:22:03: d4:d7:0b:46:f1:fc:91:13:64:ba:b9:d4:eb:04:fb: 84:c0:4f:69:18:f4:2b:56:85:f8:df:a1:02:57:d9: 49:38:9d:e6:cc:25:1a:56:14:56:e2:42:7a:1b:93: 69:db:62:0b:32:93:0d:1a:4c:2b:5e:a2:36:3f:d3: 2a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2B:CB:37:17:67:5A:69:E8:FF:7D:C1:5D:44:C1:68:5C:3F:17:FB X509v3 Authority Key Identifier: keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:9c:5d:99:5d:6b:ab:6c:81:d2:cc:67:94:22:89:04:76:2d: 88:96:87:a9:ad:6d:62:50:13:14:60:3c:69:4d:a2:c3:6a:12: b1:a2:6f:c6:db:b7:8f:a1:11:9f:1e:8e:7e:89:7f:65:b5:55: fd:ce:f9:c9:8b:d4:c8:e6:43:b6:92:c4:a1:53:be:c8:3c:85: a3:2c:bd:04:63:88:ce:ec:94:79:ea:ea:62:9c:28:c9:ea:88: 74:fc:03:b7:23:05:4d:11:a5:60:19:3b:d6:e3:8e:0e:0c:ec: 37:7f:8b:eb:98:fb:26:0c:50:f0:17:87:a6:93:1a:c0:ec:1b: f1:4e:5c:25:33:db:46:51:df:f3:3c:36:b0:26:b6:d0:6e:83: 51:8d:f6:7e:1c:1f:65:8f:80:03:e2:dc:93:58:51:6e:0d:1c: 8f:68:7b:53:b1:b8:c1:96:59:1d:0b:54:b7:0a:d8:3c:3f:6f: f8:1d:c0:ff:85:cf:51:a9:21:ae:47:14:3a:6d:c7:13:b9:a6: 1a:ef:a9:b8:9c:86:2a:65:d5:14:31:b5:e2:87:fd:45:a5:c6: 8e:75:bd:4b:f1:ad:4f:db:76:2a:3c:03:ea:e8:74:bf:9e:fd: cf:fc:46:f7:6c:50:9a:9e:18:42:e3:ae:bf:2d:38:e6:63:d4: 11:b7:a0:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rqp5SdvsXwZqtQwbGnWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YTRmN2Y0ZTRlOWU3MmMzYTMzOTNmYjVkNmVhNzQyYmMx YjRjMjgwHhcNMjUxMjA2MjIwMDU2WhcNMjUxMjA3MjIwMDU2WjAzMTEwLwYDVQQD EyhlZDJiY2IzNzE3Njc1YTY5ZThmZjdkYzE1ZDQ0YzE2ODVjM2YxN2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLUwpApUJTy9YZ3GNLRgL+oEP6R3 i/JUPqIAWyvPdNTQRnLJ/nVENTKgj3oUKt9Jjo4ueKYpuPtGmHJoyHsXhGPptj+y hsHJDlB8I7yZJbKaIMd2b5uSfzm9axYJUwou7z1m2IsTg5pN3ptqusGvg7fxSFoz 4xatqwTY3wG1kbdHY/KNrV2ao0Ksoril1RX499RoFFWhglT0laKgOSLM02XZJ4UD 39TSvId6P4VLmJ138qzTl5WfsalBEzQWv86aIgPU1wtG8fyRE2S6udTrBPuEwE9p GPQrVoX436ECV9lJOJ3mzCUaVhRW4kJ6G5Np22ILMpMNGkwrXqI2P9MqmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0ryzcXZ1pp6P99wV1EwWhcPxf7MB8GA1UdIwQY MBaAFAmk9/Tk6ecsOjOT+11up0K8G0woMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUt Mjg0YzgyZGVjN2M2LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUtMjg0YzgyZGVjN2M2 LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJxdmV1r q2yB0sxnlCKJBHYtiJaHqa1tYlATFGA8aU2iw2oSsaJvxtu3j6ERnx6Ofol/ZbVV /c75yYvUyOZDtpLEoVO+yDyFoyy9BGOIzuyUeerqYpwoyeqIdPwDtyMFTRGlYBk7 1uOODgzsN3+L65j7JgxQ8BeHppMawOwb8U5cJTPbRlHf8zw2sCa20G6DUY32fhwf ZY+AA+Lck1hRbg0cj2h7U7G4wZZZHQtUtwrYPD9v+B3A/4XPUakhrkcUOm3HE7mm Gu+puJyGKmXVFDG14of9RaXGjnW9S/GtT9t2KjwD6uh0v579z/xG92xQmp4YQuOu vy045mPUEbeg+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 23:37:44 2025 by rpki-client