This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft File: 0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json) Hash identifier: KA0r0iTUDNdF7aEdqDIceVVbrDXWcjZdMfwWFDLnCoc= Subject key identifier: 5B:81:94:7B:04:D9:89:DA:3E:EF:66:42:6E:A5:36:2E:4F:2F:C5:A1 Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Certificate serial: 019AF5AE531B0AB7863174F5070A744D15A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft Manifest number: 1773 Signing time: Sat 06 Dec 2025 22:00:33 +0000 Manifest this update: Sat 06 Dec 2025 22:00:33 +0000 Manifest next update: Sun 07 Dec 2025 22:00:33 +0000 Files and hashes: 1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: tvkVqPfvJO+95otpPgIzKE3tBrC0qrzRrV01AMaRd5s=) 2: JOdkDpvp0vkWhvJ9lV0dWUTL_74.roa (hash: Yn5hV+sSL6Zg2EJjKD6GZsY1cY5bsq3d8VKm7ARDueo=) 3: Mx0tomllVsmkxbnh1iU8_2PCyj0.roa (hash: 7kB7d7CTYtow392lbDCXYANcYe1E5mU3cWH2302D1Ck=) 4: TiEyxKmyiS65-0wzRPZF8VUxgEI.roa (hash: O61YlumzohkeBoQeKX9n1/69jzfPg7pNTilEHThyZVQ=) 5: UZGcM2ffX81NtAhfATE7LMKcmU0.roa (hash: IHojeJZnyEKNZzsFj36mgVJwIZkRWe7Nk65gWxDYXn0=) 6: gWauuati_t4mDyHK5P6-vGRw5tI.roa (hash: 8Gg051rcVEVxLbKS4zWCYakDmEwjk+i+o+ush3e3CSQ=) 7: rtkk5gT-jAJhBoaE_BQPXocOEfU.roa (hash: v/MP7pEa6ZGIvq0Wu6Fpus/nOHl8IEXjbt8QwhltqFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:53:1b:0a:b7:86:31:74:f5:07:0a:74:4d:15:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Validity Not Before: Dec 6 22:00:33 2025 GMT Not After : Dec 7 22:00:33 2025 GMT Subject: CN=5b81947b04d989da3eef66426ea5362e4f2fc5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:44:15:00:e1:79:c7:6c:ff:24:e0:6c:0d: 86:23:34:7e:eb:5d:88:ca:42:99:94:b0:3c:57:c8: 9c:80:b8:34:21:f4:43:01:c3:46:67:f0:66:bd:1c: 82:fd:a9:0a:88:80:c5:ea:b8:a8:3a:f9:cb:38:e8: b5:88:17:0e:42:6c:a4:cd:dc:5a:f4:8c:b2:8b:b3: 99:61:76:61:54:42:e1:8f:e7:f7:8a:e1:69:00:4b: 3c:c6:34:1c:13:dc:a6:24:29:50:4e:ea:c9:26:7a: 9e:bc:74:4b:da:ca:34:ac:b2:e0:2e:04:16:5d:94: 56:e8:d7:ae:96:a9:ce:7c:9d:fc:63:91:69:d5:a2: 66:b5:6b:ab:d6:8f:67:41:78:ca:9c:56:34:6f:6b: 78:32:46:fe:6f:8d:c6:fb:30:38:83:bf:9a:97:ac: b5:b1:b5:b4:89:bc:24:99:3b:f6:e7:70:f4:bf:ed: aa:c8:da:6d:98:14:00:ff:60:26:77:91:ac:8b:51: 4b:fd:96:ee:bc:cc:ea:f2:be:7a:92:5f:21:19:9d: 78:85:28:cd:e6:05:1d:e6:3d:d4:59:20:4e:b8:69: c5:62:72:ee:fc:48:d8:d8:37:9f:cd:99:f1:b9:58: 45:1a:be:bf:1c:0b:13:d4:23:c7:32:37:11:15:75: 15:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:81:94:7B:04:D9:89:DA:3E:EF:66:42:6E:A5:36:2E:4F:2F:C5:A1 X509v3 Authority Key Identifier: keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:84:d2:9d:cb:48:7a:bb:b1:a2:1e:ae:08:1c:68:86:2b:8b: 19:33:b7:3f:61:45:70:22:6f:4e:79:a0:83:c3:08:51:2d:13: 5b:44:a3:1a:43:f9:f5:ab:29:04:56:13:55:53:bc:be:e8:a6: 22:0e:55:71:5b:2a:f9:98:ec:dc:aa:c0:fa:80:b5:ad:c9:1a: 33:9e:5e:51:f3:23:f6:c6:c8:5a:d9:e3:1b:5d:48:ed:98:32: 7f:2b:71:5d:72:c1:1d:61:b2:3a:9a:1a:1b:ee:16:e9:8d:b7: 91:bb:23:40:0f:66:bb:36:ac:82:94:5c:24:5b:01:79:64:9c: 7f:18:37:44:86:a7:49:e4:bd:28:88:bb:08:75:66:bd:32:0e: 16:a7:f7:65:3c:7a:8b:8c:90:ac:2f:16:28:1c:3d:76:de:3d: 26:ed:87:ff:9e:7b:14:d9:aa:d8:6d:12:f3:d9:04:c8:96:3d: 7c:bb:fd:8d:6b:d4:be:34:44:73:27:4a:49:ff:41:1c:54:f0: c6:18:47:40:75:cb:f3:54:50:21:e1:9a:0e:ea:f2:98:9a:59: 0b:dd:c1:c2:74:68:f4:e5:a2:16:44:fa:8d:ee:22:fb:a9:33: 2f:4c:aa:07:ff:1b:79:ca:93:03:bd:aa:ab:0d:76:55:c5:80: c9:43:e0:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rlMbCreGMXT1Bwp0TRWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMWRkMWE1MTRkM2E3ZTNkZmRiOGJmYjc1ZDdkMjRlZDk4 ZDQ3OWYwHhcNMjUxMjA2MjIwMDMzWhcNMjUxMjA3MjIwMDMzWjAzMTEwLwYDVQQD Eyg1YjgxOTQ3YjA0ZDk4OWRhM2VlZjY2NDI2ZWE1MzYyZTRmMmZjNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk9EFQDhecds/yTgbA2GIzR+612I ykKZlLA8V8icgLg0IfRDAcNGZ/BmvRyC/akKiIDF6rioOvnLOOi1iBcOQmykzdxa 9Iyyi7OZYXZhVELhj+f3iuFpAEs8xjQcE9ymJClQTurJJnqevHRL2so0rLLgLgQW XZRW6NeulqnOfJ38Y5Fp1aJmtWur1o9nQXjKnFY0b2t4Mkb+b43G+zA4g7+al6y1 sbW0ibwkmTv253D0v+2qyNptmBQA/2Amd5Gsi1FL/ZbuvMzq8r56kl8hGZ14hSjN 5gUd5j3UWSBOuGnFYnLu/EjY2DefzZnxuVhFGr6/HAsT1CPHMjcRFXUV8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuBlHsE2YnaPu9mQm6lNi5PL8WhMB8GA1UdIwQY MBaAFNMd0aUU06fj39uL+3XX0k7ZjUefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjIt YjE2NmFlMmVmMjg3LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjItYjE2NmFlMmVmMjg3 LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYTSnctI eruxoh6uCBxohiuLGTO3P2FFcCJvTnmgg8MIUS0TW0SjGkP59aspBFYTVVO8vuim Ig5VcVsq+Zjs3KrA+oC1rckaM55eUfMj9sbIWtnjG11I7ZgyfytxXXLBHWGyOpoa G+4W6Y23kbsjQA9muzasgpRcJFsBeWScfxg3RIanSeS9KIi7CHVmvTIOFqf3ZTx6 i4yQrC8WKBw9dt49Ju2H/557FNmq2G0S89kEyJY9fLv9jWvUvjREcydKSf9BHFTw xhhHQHXL81RQIeGaDurymJpZC93BwnRo9OWiFkT6je4i+6kzL0yqB/8becqTA72q qw12VcWAyUPggA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:50 2025 by rpki-client