This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft File: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json) Hash identifier: 3oHldYP2xypE30LBdnMsee5eVNwfj4SKBof6Lzhhjs0= Subject key identifier: 7A:ED:4C:29:DD:E3:06:3E:8A:24:28:DC:72:84:61:A5:C5:50:79:FF Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Certificate serial: 019AF12D4F44E3DABF92DCDC505BB8E481C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft Manifest number: 152C Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: 29TbMLufIPxRE020kIvBxrijcXE.roa (hash: yaWCKyUE+f0tiisSqvZhHpxJTfa3UwVcLIOHWKNCXpA=) 2: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: NkAqY6+H6eU/l4IThKR1f9ttwHuCbTL6c+1hU4J+xZk=) 3: EpG6DN4aBjhttZAw1Q1XQqE7-1s.roa (hash: l6KmPb3Emr7cpoLQVZzViHX9jNPkSHPfBrkC7M4zEOg=) 4: bCHjuq-GwNDHZjsTd3pAyP2Si4w.roa (hash: M+Njn6Jry+REmQlQYvUz0vQnUhP0EbBt8o0lYes6W+o=) 5: hn5_PzzfTec18eIUGShu0x__N3w.roa (hash: +8CUvj+aURe4BOcdllxHMI3BGLO88+PbI/02n/kq4Ik=) 6: pYZCrMGmxkKgeeR3OB7Sabq_PhY.roa (hash: xXgcQpyaaoiy7n7zCgLujfBrckf/0cL3u4clvozeQMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4f:44:e3:da:bf:92:dc:dc:50:5b:b8:e4:81:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=7aed4c29dde3063e8a2428dc728461a5c55079ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:52:4e:3c:47:ec:eb:53:a6:4d:72:bf:69:e9: d4:b2:27:95:79:2e:0f:00:ee:90:c2:a6:06:20:3a: 63:74:7e:11:95:41:79:c8:e0:a5:ef:70:43:d4:6c: b4:5b:d8:9a:e5:54:8b:8e:bd:7a:37:87:7a:bb:b5: 25:ce:06:01:82:48:d5:ae:d4:af:b9:1d:78:4f:b7: 51:bb:53:5a:4f:a7:36:a8:93:38:75:13:b0:31:42: ca:4b:2d:34:db:4f:93:a4:5b:6d:f0:cf:e3:fd:57: e6:77:b9:05:92:e2:ae:d5:9c:dc:d5:45:6e:80:3b: 8b:18:a9:4d:ff:20:33:f9:c6:19:7b:70:a1:fe:e1: fe:83:74:e0:6c:59:6e:ac:b9:41:b0:d7:59:df:2d: 5c:65:c8:db:04:6e:fa:0f:c2:e8:56:6b:07:30:b2: 15:17:fe:98:8a:bc:c5:55:2c:01:37:a8:5e:32:0e: 9a:0c:68:c7:6e:d8:bc:e1:fd:58:65:57:8c:f8:73: d4:57:81:40:16:cb:16:0c:90:81:b0:bd:55:16:19: 40:f5:f4:5c:fd:4e:f0:bb:e4:95:28:a3:18:3d:5e: f9:c9:71:d5:2e:0a:00:41:ae:76:e5:2f:71:cf:b4: eb:6d:81:da:a7:c2:72:d2:1a:2e:a2:58:d3:e9:80: a7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:ED:4C:29:DD:E3:06:3E:8A:24:28:DC:72:84:61:A5:C5:50:79:FF X509v3 Authority Key Identifier: keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:97:25:a1:ea:3f:3f:fa:47:90:c9:25:68:7a:0e:4e:cf:53: ad:4c:8a:8e:b2:ff:24:9c:f9:f2:50:3a:f3:8f:94:71:e2:ee: 3b:6a:16:7d:77:87:54:3d:51:af:33:21:04:36:10:6e:09:45: 07:8d:19:ba:90:96:40:68:c3:f7:d8:a2:c5:50:0e:ad:aa:bc: 18:ae:00:1b:07:a2:50:fc:f0:94:17:19:dd:fd:75:4f:f8:cb: bf:91:1c:87:6b:83:8a:2d:a4:cf:8b:7a:f0:3b:dc:b2:53:e3: c7:27:05:be:51:69:08:d8:90:37:6c:03:41:61:3e:26:5f:d7: 5e:ae:77:7b:df:a6:f9:91:03:57:02:de:27:21:e4:f5:de:14: cd:c5:f3:da:eb:95:76:fb:ca:90:4e:49:f6:ed:e5:e5:24:7d: b9:e7:13:a7:4b:e3:42:b1:93:02:f0:4d:75:5b:a2:d5:02:64: fd:01:fa:ed:c9:c5:dc:ea:77:76:09:6e:ca:92:f1:17:f4:8c: b0:ac:27:41:f5:fe:91:52:c7:8a:98:b0:7f:da:06:7a:b9:c0: dc:25:6c:99:2d:7b:3c:c9:cc:c7:48:f5:12:39:1c:b4:23:2f: 75:c7:ff:b7:6e:88:de:8d:99:93:23:60:c1:4e:1d:06:c5:d4: a2:8b:25:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLU9E49q/ktzcUFu45IHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl ZTQzYzAwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD Eyg3YWVkNGMyOWRkZTMwNjNlOGEyNDI4ZGM3Mjg0NjFhNWM1NTA3OWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01JOPEfs61OmTXK/aenUsieVeS4P AO6QwqYGIDpjdH4RlUF5yOCl73BD1Gy0W9ia5VSLjr16N4d6u7UlzgYBgkjVrtSv uR14T7dRu1NaT6c2qJM4dROwMULKSy0020+TpFtt8M/j/Vfmd7kFkuKu1Zzc1UVu gDuLGKlN/yAz+cYZe3Ch/uH+g3TgbFlurLlBsNdZ3y1cZcjbBG76D8LoVmsHMLIV F/6YirzFVSwBN6heMg6aDGjHbti84f1YZVeM+HPUV4FAFssWDJCBsL1VFhlA9fRc /U7wu+SVKKMYPV75yXHVLgoAQa525S9xz7TrbYHap8Jy0houoljT6YCnTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrtTCnd4wY+iiQo3HKEYaXFUHn/MB8GA1UdIwQY MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt OWM4ZTU5YzI3NzFjLzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZcloeo/ P/pHkMklaHoOTs9TrUyKjrL/JJz58lA684+UceLuO2oWfXeHVD1RrzMhBDYQbglF B40ZupCWQGjD99iixVAOraq8GK4AGweiUPzwlBcZ3f11T/jLv5Ech2uDii2kz4t6 8DvcslPjxycFvlFpCNiQN2wDQWE+Jl/XXq53e9+m+ZEDVwLeJyHk9d4UzcXz2uuV dvvKkE5J9u3l5SR9uecTp0vjQrGTAvBNdVui1QJk/QH67cnF3Op3dgluypLxF/SM sKwnQfX+kVLHipiwf9oGernA3CVsmS17PMnMx0j1EjkctCMvdcf/t26I3o2ZkyNg wU4dBsXUooslRw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:03:28 2025 by rpki-client