This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json) Hash identifier: afXb10vJBpQh10v6nP1VODkx2tBkY6/vC0leirOhCF0= Subject key identifier: F7:26:1A:75:98:01:1B:2E:20:E1:4B:80:FC:C3:9C:37:28:89:A8:83 Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38 Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338 Certificate serial: 019AF1D258886AC5D29C571126DA6C55DB23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft Manifest number: 1608 Signing time: Sat 06 Dec 2025 04:01:25 +0000 Manifest this update: Sat 06 Dec 2025 04:01:25 +0000 Manifest next update: Sun 07 Dec 2025 04:01:25 +0000 Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: R8Ha0+KxMrRWDA46COJjwdDXn/uW9gbvTl2iMROrzTc=) 2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=) 3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:58:88:6a:c5:d2:9c:57:11:26:da:6c:55:db:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338 Validity Not Before: Dec 6 04:01:25 2025 GMT Not After : Dec 7 04:01:25 2025 GMT Subject: CN=f7261a7598011b2e20e14b80fcc39c372889a883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:57:41:ce:d4:9e:cd:fe:41:9d:bc:87:0d:1a: 40:da:72:c4:31:6f:33:e4:b9:20:a4:bc:79:d0:a6: a7:6d:21:5c:23:b7:0d:d0:74:1a:41:bc:57:1b:e0: c7:7e:bd:35:1a:ce:f5:4e:19:56:52:cd:4e:02:20: 00:e1:18:f4:68:c6:56:00:84:5b:53:e3:09:5d:00: 13:f2:d3:c7:e5:7e:52:a6:42:48:3f:ae:c0:fd:1f: 0f:92:1b:81:cb:79:50:e3:82:b5:48:40:22:ca:c0: 0a:fd:b0:0f:71:9a:bb:a0:c7:f5:3a:0b:26:6c:57: dd:2d:f9:37:ab:c3:67:e7:d2:34:2e:fc:4c:8d:e8: ee:96:f0:b2:c1:9a:9d:4f:ed:37:8d:0c:5d:c1:47: f3:ca:13:31:fa:04:0b:b7:5c:a8:6d:ea:f0:7e:6d: 01:ff:3a:ba:fc:18:0f:19:dd:a0:66:e3:01:08:5c: ff:87:1e:06:21:da:a4:3e:3e:42:b0:41:9a:f1:7f: 5e:36:d9:6b:b9:5d:54:80:bb:5b:1e:64:78:48:22: 0e:3f:5b:4a:c0:f5:8a:11:86:e1:3b:49:e8:ee:ad: 15:41:51:29:be:ca:cc:2d:e5:32:21:a9:2f:24:eb: de:53:70:b9:da:02:b8:95:5e:1d:dd:75:50:f4:53: b3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:26:1A:75:98:01:1B:2E:20:E1:4B:80:FC:C3:9C:37:28:89:A8:83 X509v3 Authority Key Identifier: keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b6:96:55:79:56:bc:2d:d9:be:a1:63:76:36:53:3e:e5:22: 4f:c6:10:c7:bb:1a:47:37:74:c2:80:03:8e:f1:f6:83:b1:cf: 95:98:50:13:9a:d6:ea:b9:34:d1:64:ba:5a:c9:f1:c4:a2:09: c6:13:db:af:b9:19:55:ca:f8:6a:ec:8a:eb:93:db:ec:83:2d: a9:da:d6:75:7c:57:8f:1d:fb:d9:5a:49:36:8f:9b:b5:0e:f7: f9:9d:41:fc:3b:68:f1:ab:7b:94:fe:33:7d:e9:b9:c4:12:1e: 37:77:1f:07:dd:fe:4f:82:7d:f9:43:9d:3e:78:84:bc:87:2c: 1b:8a:02:3e:48:65:2b:27:6e:fc:1f:f2:74:02:06:bb:af:89: 46:7e:16:d2:37:47:db:6d:5f:2f:f2:50:d5:dd:4c:02:c9:2b: 9d:da:f0:2f:d6:5f:d9:1d:14:5a:de:8c:34:ca:d5:2f:b5:00: 61:6d:db:40:a1:9d:05:e3:cc:98:5e:08:db:f3:82:31:5b:0c: b9:fd:3c:d4:e2:67:a5:a2:7b:90:24:c3:42:77:ed:c2:e2:97: 1a:be:a8:33:b0:23:e6:1a:ae:25:19:66:12:4f:98:5c:f9:71: c0:6b:ad:63:3e:4d:2a:a7:4f:51:9b:1c:58:58:e8:dc:74:2b: 85:51:7b:df -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0liIasXSnFcRJtpsVdsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzgyYjc4ZjIwYTZlNGI3MDY0MzA1MmJkMWE0MGFmMTVh NTYzMzgwHhcNMjUxMjA2MDQwMTI1WhcNMjUxMjA3MDQwMTI1WjAzMTEwLwYDVQQD EyhmNzI2MWE3NTk4MDExYjJlMjBlMTRiODBmY2MzOWMzNzI4ODlhODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VdBztSezf5BnbyHDRpA2nLEMW8z 5LkgpLx50KanbSFcI7cN0HQaQbxXG+DHfr01Gs71ThlWUs1OAiAA4Rj0aMZWAIRb U+MJXQAT8tPH5X5SpkJIP67A/R8PkhuBy3lQ44K1SEAiysAK/bAPcZq7oMf1Ogsm bFfdLfk3q8Nn59I0LvxMjejulvCywZqdT+03jQxdwUfzyhMx+gQLt1yoberwfm0B /zq6/BgPGd2gZuMBCFz/hx4GIdqkPj5CsEGa8X9eNtlruV1UgLtbHmR4SCIOP1tK wPWKEYbhO0no7q0VQVEpvsrMLeUyIakvJOveU3C52gK4lV4d3XVQ9FOzRQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPcmGnWYARsuIOFLgPzDnDcoiaiDMB8GA1UdIwQY MBaAFPt4K3jyCm5LcGQwUr0aQK8VpWM4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zZ3JlUElLYmt0d1pEQlN2UnBBcnhXbFl6Zy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOWRjOTMzLTVjMGQtNDQ2MS1hNDVk LThmN2Q1NjkxYzFiZS8xLzEtM2dyZVBJS2JrdHdaREJTdlJwQXJ4V2xZemcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2UzLzlkYzkzMy01YzBkLTQ0NjEtYTQ1ZC04ZjdkNTY5MWMx YmUvMS8xLTNncmVQSUtia3R3WkRCU3ZScEFyeFdsWXpnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLaW VXlWvC3ZvqFjdjZTPuUiT8YQx7saRzd0woADjvH2g7HPlZhQE5rW6rk00WS6Wsnx xKIJxhPbr7kZVcr4auyK65Pb7IMtqdrWdXxXjx372VpJNo+btQ73+Z1B/Dto8at7 lP4zfem5xBIeN3cfB93+T4J9+UOdPniEvIcsG4oCPkhlKydu/B/ydAIGu6+JRn4W 0jdH221fL/JQ1d1MAskrndrwL9Zf2R0UWt6MNMrVL7UAYW3bQKGdBePMmF4I2/OC MVsMuf081OJnpaJ7kCTDQnftwuKXGr6oM7Aj5hquJRlmEk+YXPlxwGutYz5NKqdP UZscWFjo3HQrhVF73w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:28 2025 by rpki-client