This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json) Hash identifier: keUkTW9WLgfwaLORBJn73FMsYIdq9Yi15LxyRXwpiOg= Subject key identifier: 0C:8E:6E:BB:6E:BF:5B:C3:26:CF:73:38:2E:A9:57:70:C4:05:6D:41 Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76 Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176 Certificate serial: 019AF42E7A3DEA9658D376D997F56F325FCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 15:01:17 +0000 Manifest this update: Sat 06 Dec 2025 15:01:17 +0000 Manifest next update: Sun 07 Dec 2025 15:01:17 +0000 Files and hashes: 1: F0xtYGfQ_s_LJkUkk89IHcL9J5M.roa (hash: JVjlGGRIJlPuTdOW/N8SfdRvr3fAH3HHybxJ5aP4RD0=) 2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: i8PjaAxvMIDkf13UaIlBSmRUqBLw5viVP1cC9AVrYqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:7a:3d:ea:96:58:d3:76:d9:97:f5:6f:32:5f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176 Validity Not Before: Dec 6 15:01:17 2025 GMT Not After : Dec 7 15:01:17 2025 GMT Subject: CN=0c8e6ebb6ebf5bc326cf73382ea95770c4056d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:7d:f3:b2:d2:58:1d:00:a8:c4:8a:b3:8b: a5:61:62:68:38:f7:e5:52:74:bb:7f:01:43:68:66: 13:2f:2b:d0:43:d0:6a:c4:04:be:93:eb:8d:47:9e: 7f:e5:de:13:cc:2f:86:8f:86:e0:43:5d:8e:3b:97: 00:6a:af:eb:79:e1:a1:f5:ab:ed:1e:8f:d3:30:25: ff:a3:ec:b1:e5:e0:53:b3:04:91:7f:b8:c6:45:db: 9d:65:94:63:46:55:f3:0f:ba:06:91:9c:39:f2:3b: 73:c4:03:97:6f:98:f3:30:84:0a:f9:40:50:4f:4e: 03:be:62:8b:13:d5:14:58:54:f3:95:ab:68:45:a6: 90:b0:89:6a:e8:9f:ad:9e:7b:16:6d:ab:27:bf:d8: 77:e7:e1:4e:11:8a:8f:15:61:12:9a:1f:9e:03:69: 55:57:6b:ae:2e:36:fe:52:96:26:b0:e9:f3:45:3d: 1f:dc:28:ae:8d:62:9d:00:a9:38:39:99:6c:2a:26: 47:bf:0b:50:5e:0e:29:d3:5e:de:ea:c1:02:3b:c6: 4f:7e:6c:78:e4:b4:2f:96:ac:4a:ad:fe:2e:35:0a: 9b:25:0f:9a:25:22:54:93:48:c7:df:56:89:ef:17: bd:7c:57:8e:32:dc:6d:56:57:db:62:db:38:54:e3: 4c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8E:6E:BB:6E:BF:5B:C3:26:CF:73:38:2E:A9:57:70:C4:05:6D:41 X509v3 Authority Key Identifier: keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:81:a9:ed:19:a1:c6:fa:45:22:e9:e4:73:a2:2b:09:84:46: 4b:eb:a8:7f:45:4d:05:70:a9:ac:30:ab:59:f6:bd:eb:91:16: a3:24:3b:9c:00:c8:2b:be:cd:0e:3a:cb:48:cd:7c:df:72:07: 05:6d:35:7f:72:21:34:90:45:52:8a:ac:80:3c:01:b8:54:6d: 3b:f0:7e:f4:d7:1e:90:ec:6f:6f:9b:9c:f5:cc:66:92:1f:dc: 3e:99:11:24:c5:04:41:23:c9:89:c1:ab:ee:51:df:24:f7:30: 5d:69:6c:7f:1b:27:45:02:ca:1f:69:40:2c:93:43:c4:86:5d: 95:89:76:a5:c0:c4:11:a9:5d:c5:dc:d8:6f:7c:ea:86:50:56: be:08:bf:4e:8d:bf:0b:55:ec:70:e3:73:11:f1:bd:29:21:64: 5c:1d:41:41:12:5f:45:1e:04:52:34:b8:88:05:51:dd:7d:f3: 53:e7:88:53:96:c9:b1:be:7d:f0:64:c0:b8:cc:c8:e5:38:42: 2a:f9:02:8f:19:10:e5:47:02:5b:82:c0:65:fe:a8:cc:31:72: 3a:3b:8d:53:14:58:ae:b9:b0:dc:0d:44:e8:6a:e8:c2:22:3d: d9:2d:16:a9:e3:1e:73:e9:50:bb:45:57:f4:0f:6d:d8:c0:ed: 51:51:a4:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lno96pZY03bZl/VvMl/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YmRjMzc2YTE1OWQwNWUyYWY5NzE3NmEzZWJhODM2MGU2 MGQxNzYwHhcNMjUxMjA2MTUwMTE3WhcNMjUxMjA3MTUwMTE3WjAzMTEwLwYDVQQD EygwYzhlNmViYjZlYmY1YmMzMjZjZjczMzgyZWE5NTc3MGM0MDU2ZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzd987LSWB0AqMSKs4ulYWJoOPfl UnS7fwFDaGYTLyvQQ9BqxAS+k+uNR55/5d4TzC+Gj4bgQ12OO5cAaq/reeGh9avt Ho/TMCX/o+yx5eBTswSRf7jGRdudZZRjRlXzD7oGkZw58jtzxAOXb5jzMIQK+UBQ T04DvmKLE9UUWFTzlatoRaaQsIlq6J+tnnsWbasnv9h35+FOEYqPFWESmh+eA2lV V2uuLjb+UpYmsOnzRT0f3CiujWKdAKk4OZlsKiZHvwtQXg4p017e6sECO8ZPfmx4 5LQvlqxKrf4uNQqbJQ+aJSJUk0jH31aJ7xe9fFeOMtxtVlfbYts4VONMIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyObrtuv1vDJs9zOC6pV3DEBW1BMB8GA1UdIwQY MBaAFLS9w3ahWdBeKvlxdqPrqDYOYNF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80MGVhMTQtZGM1MC00YWEwLWFhODUt MjhkMDEwNjAzNTI5LzEvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80MGVhMTQtZGM1MC00YWEwLWFhODUtMjhkMDEwNjAzNTI5 LzEvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoGp7Rmh xvpFIunkc6IrCYRGS+uof0VNBXCprDCrWfa965EWoyQ7nADIK77NDjrLSM1833IH BW01f3IhNJBFUoqsgDwBuFRtO/B+9NcekOxvb5uc9cxmkh/cPpkRJMUEQSPJicGr 7lHfJPcwXWlsfxsnRQLKH2lALJNDxIZdlYl2pcDEEaldxdzYb3zqhlBWvgi/To2/ C1XscONzEfG9KSFkXB1BQRJfRR4EUjS4iAVR3X3zU+eIU5bJsb598GTAuMzI5ThC KvkCjxkQ5UcCW4LAZf6ozDFyOjuNUxRYrrmw3A1E6GrowiI92S0WqeMec+lQu0VX 9A9t2MDtUVGkuw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:21 2025 by rpki-client