This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft File: t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json) Hash identifier: 3yOTLSPsHWgS7XuBTYa1hkkboU1jzYvbo0H7ETaA/Pw= Subject key identifier: 8C:EA:9C:AF:84:FC:35:6C:74:2E:50:E6:79:79:34:8B:A3:D1:51:8D Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b Certificate serial: 019AF23F8A97E6A5580EA1544896D9AEB46D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:41 +0000 Manifest this update: Sat 06 Dec 2025 06:00:41 +0000 Manifest next update: Sun 07 Dec 2025 06:00:41 +0000 Files and hashes: 1: 4tvYqBz30c-0SHwQf2CtT0VNBPQ.roa (hash: qCyQEU6OdMbxdWiqsxkcJvwc0b3lfRGI0KL0oWxXAXQ=) 2: 5BiiR8tyxMqnVkrCR-JVCe5thJE.roa (hash: Hg2Lr4BrUeLiGXPiTTswxDVsunI16iUbiaP/wD6FGp4=) 3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: xHoeaC5ok8GGCq50IFikFXCH5uTLjt9dMoUByvKXnDM=) 4: zmgQ_aWhp6cEGx4y0seWn4Gsss4.roa (hash: /bqbphYKFU51MVxXzZqrdhuQ80/Caxadp1A0xOJ6vp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8a:97:e6:a5:58:0e:a1:54:48:96:d9:ae:b4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b Validity Not Before: Dec 6 06:00:41 2025 GMT Not After : Dec 7 06:00:41 2025 GMT Subject: CN=8cea9caf84fc356c742e50e67979348ba3d1518d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a7:69:f8:8f:e3:c7:53:af:78:b2:f3:ae:92: 39:8a:ee:3b:38:3e:ac:49:70:86:59:7d:9f:ab:bd: 23:11:a8:8f:3e:e2:fc:31:38:07:82:ec:7b:4b:cc: 35:da:b7:5a:77:00:6b:71:ca:de:ec:2a:15:02:8d: f1:64:b4:4f:1c:d1:1f:9f:49:e6:05:da:5f:db:ac: 02:38:22:d8:8f:25:03:b4:0c:2d:58:ec:c4:87:ad: a9:de:26:4e:5c:29:dd:7f:3b:b2:0b:ec:82:11:22: 74:5d:6a:1b:a3:1b:b8:cc:f8:a5:bb:2f:f3:2b:82: 0a:03:d4:b4:2f:75:8c:55:32:a5:73:0f:9d:6e:2a: 67:a5:40:4c:4d:35:c1:b7:6c:21:d9:87:be:04:18: 50:f1:43:05:35:95:49:9a:4a:4e:00:ff:b9:df:d9: 85:ce:44:76:a3:32:67:5e:de:ab:fa:92:94:03:38: 4f:8b:30:46:c3:d2:ab:db:c7:fc:bf:34:2b:d6:7d: ad:cf:a9:69:a6:dd:47:64:30:c6:71:3a:a2:29:15: a1:dc:15:fd:d4:d5:70:50:5e:b3:a9:70:46:a3:32: a8:8f:be:bc:21:6a:31:a1:96:d0:3d:00:e4:5d:a6: c8:30:7d:ef:0d:f4:98:6e:83:62:76:3c:ca:fa:c2: 4d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EA:9C:AF:84:FC:35:6C:74:2E:50:E6:79:79:34:8B:A3:D1:51:8D X509v3 Authority Key Identifier: keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:83:2c:89:64:5c:4b:51:82:10:38:91:e2:33:3e:9e:01:fb: ed:a3:26:53:45:b9:15:f4:28:af:81:a7:48:2a:ba:e2:cc:77: 94:44:d4:88:e3:ed:8f:27:3e:46:72:2e:20:f8:2c:36:23:ae: 7e:7a:6b:78:66:00:3c:d6:90:5e:fd:86:0e:72:ab:52:f9:ad: c7:b9:f5:71:35:cf:21:97:07:71:c2:a2:91:c4:e9:d7:53:d1: 99:9c:a6:d2:0a:0e:06:17:95:2c:20:cf:00:c2:a3:17:41:7e: 67:b2:b0:2a:4b:79:2a:61:ce:62:9a:ec:4a:84:7b:c7:9d:a4: 01:9d:b3:87:77:35:35:29:04:77:71:6e:6a:58:6d:86:7a:82: 2c:a0:7d:c7:09:9b:d2:c0:e5:71:bc:69:76:23:87:98:f0:dd: e4:29:10:75:78:2b:d3:14:04:ca:a8:93:9a:a8:a5:1e:24:11: 1d:c8:8f:12:b2:5b:e6:d7:75:02:86:58:72:87:5d:7c:37:45: 68:58:67:57:87:7d:b0:b0:66:ba:55:4a:08:63:21:68:77:4b: 7d:b8:ef:d6:20:7e:57:0c:37:90:17:48:36:a3:ec:5d:1d:f3: 31:25:90:dd:50:9f:06:3f:fd:eb:a7:e2:90:b6:30:ce:00:39: 50:e4:d7:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4qX5qVYDqFUSJbZrrRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Nzg1YTMwZDg1MTJkMGQ4YWI2Mzc4MTJiNzlmYTQ1Mjlh MWVmMWIwHhcNMjUxMjA2MDYwMDQxWhcNMjUxMjA3MDYwMDQxWjAzMTEwLwYDVQQD Eyg4Y2VhOWNhZjg0ZmMzNTZjNzQyZTUwZTY3OTc5MzQ4YmEzZDE1MThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qdp+I/jx1OveLLzrpI5iu47OD6s SXCGWX2fq70jEaiPPuL8MTgHgux7S8w12rdadwBrccre7CoVAo3xZLRPHNEfn0nm Bdpf26wCOCLYjyUDtAwtWOzEh62p3iZOXCndfzuyC+yCESJ0XWoboxu4zPiluy/z K4IKA9S0L3WMVTKlcw+dbipnpUBMTTXBt2wh2Ye+BBhQ8UMFNZVJmkpOAP+539mF zkR2ozJnXt6r+pKUAzhPizBGw9Kr28f8vzQr1n2tz6lppt1HZDDGcTqiKRWh3BX9 1NVwUF6zqXBGozKoj768IWoxoZbQPQDkXabIMH3vDfSYboNidjzK+sJNSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzqnK+E/DVsdC5Q5nl5NIuj0VGNMB8GA1UdIwQY MBaAFLd4WjDYUS0NirY3gSt5+kUpoe8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEt NjIxOWIzMjEyMmQwLzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEtNjIxOWIzMjEyMmQw LzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIMsiWRc S1GCEDiR4jM+ngH77aMmU0W5FfQor4GnSCq64sx3lETUiOPtjyc+RnIuIPgsNiOu fnpreGYAPNaQXv2GDnKrUvmtx7n1cTXPIZcHccKikcTp11PRmZym0goOBheVLCDP AMKjF0F+Z7KwKkt5KmHOYprsSoR7x52kAZ2zh3c1NSkEd3FualhthnqCLKB9xwmb 0sDlcbxpdiOHmPDd5CkQdXgr0xQEyqiTmqilHiQRHciPErJb5td1AoZYcoddfDdF aFhnV4d9sLBmulVKCGMhaHdLfbjv1iB+Vww3kBdINqPsXR3zMSWQ3VCfBj/966fi kLYwzgA5UOTXeg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:27:47 2025 by rpki-client