This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json) Hash identifier: c22bgTKGmHgBBL7grv5ZYElRlMLDPMQPz/6Aayjle2c= Subject key identifier: 17:0A:00:A3:70:C7:EE:83:40:2E:20:48:4D:FC:04:5A:E1:81:60:6C Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44 Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44 Certificate serial: 019AF12EF2F39BAF8DE28849CBABC5584C72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft Manifest number: 0728 Signing time: Sat 06 Dec 2025 01:02:57 +0000 Manifest this update: Sat 06 Dec 2025 01:02:57 +0000 Manifest next update: Sun 07 Dec 2025 01:02:57 +0000 Files and hashes: 1: DgYaKXLAfCciJB45PdY6jb3nvSM.roa (hash: 3wQZIj5q2hejLISAuXVPv02HNSLvrU3fDX6SOnePruk=) 2: iLJZ457a-7z02PhFWjv4cGHT93U.roa (hash: NESsCi8hLaoKvM16NOOEv6MVC+cF28ZWv23JeL3C9tw=) 3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: CgjZYuh7Kq70L7pwuSGMDKgFP5sPTlmKtU+bx1npYYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:f2:f3:9b:af:8d:e2:88:49:cb:ab:c5:58:4c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44 Validity Not Before: Dec 6 01:02:57 2025 GMT Not After : Dec 7 01:02:57 2025 GMT Subject: CN=170a00a370c7ee83402e20484dfc045ae181606c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:c0:cd:27:cd:68:10:dd:a8:c2:5b:18:65: 34:1d:f9:5c:c3:1f:51:52:e2:aa:4e:00:85:10:d0: c1:9e:97:4f:5b:dc:ff:d9:dd:c1:af:35:22:ec:d5: 50:8c:c5:d7:f7:6c:c8:d5:db:ec:42:54:fc:db:b2: d2:33:33:81:20:9c:d0:19:03:a4:2b:ca:db:79:66: bf:d9:3a:69:06:14:d2:ed:47:6d:34:d9:b5:90:cf: 27:48:a1:ab:e5:6f:5a:9f:dd:18:52:4e:db:b0:cd: 10:1a:31:fc:44:a7:30:38:17:4b:80:19:86:9d:16: 83:1c:b6:79:d2:b4:2a:23:6c:37:1c:c8:5f:d9:77: 43:df:52:20:88:be:eb:74:5f:70:bd:ec:d3:8b:e2: 3e:a8:6b:8f:f7:7c:3a:75:1f:01:d5:14:03:4e:14: a7:63:cf:cc:d5:cc:69:56:98:8c:b3:a1:a0:9e:80: 39:31:94:6b:3a:82:0d:58:d5:7b:1e:b7:03:88:3a: 64:a3:78:8b:de:35:1d:0c:67:f6:4a:d0:1e:2e:01: 71:a2:08:ce:04:99:a2:30:fc:f8:e8:45:ca:73:57: dc:88:4b:dd:f4:31:d9:22:4f:9f:17:5e:52:ce:ba: d9:f5:3a:90:54:3c:ed:08:88:9a:51:69:7a:37:7e: d0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0A:00:A3:70:C7:EE:83:40:2E:20:48:4D:FC:04:5A:E1:81:60:6C X509v3 Authority Key Identifier: keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2f:68:b5:01:64:86:46:c1:17:33:58:1e:f0:08:3b:29:a5: 45:d8:60:ab:2d:bd:cd:6e:84:9c:17:90:b7:c3:3a:22:47:de: 52:9b:45:97:51:75:8b:8f:2b:2e:08:dc:e3:5b:af:f0:84:21: 7d:d9:db:33:e4:f2:b1:14:ba:73:16:74:7c:4b:59:8d:b3:bc: f9:96:c6:d0:e8:07:7e:32:f5:45:cd:e7:12:42:43:a8:25:3d: 68:8f:8c:f3:57:1a:e4:b2:03:a8:47:55:8c:86:ae:81:d0:cd: b4:ec:51:56:9e:3b:37:44:38:94:60:05:08:2f:f0:8b:63:15: 13:17:c2:12:5b:d0:21:62:07:86:f4:9b:73:4f:d9:cc:91:34: 49:06:08:e3:20:c2:e0:d1:3e:a8:ab:e7:66:6d:ca:36:4f:c1: e3:a4:fc:57:c9:05:27:ef:c2:ac:93:aa:1c:f7:77:ff:5c:39: a1:94:71:02:94:a0:ef:90:d8:e6:9b:56:50:fa:51:42:c3:25: 1c:ab:2c:1d:81:69:eb:ea:30:f5:82:f1:cf:e2:48:1a:67:e5: c0:fe:80:49:22:33:fb:e1:2e:4d:f2:44:46:03:17:41:8b:1f: f2:38:34:51:1a:35:cc:31:66:0d:8e:d1:2d:83:84:62:0f:7d: 38:60:c7:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvLzm6+N4ohJy6vFWExyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNzRiODUzZGZkOTk3M2YyY2Q5OTRiMmUzYjc1NDYxZDlh M2ZjNDQwHhcNMjUxMjA2MDEwMjU3WhcNMjUxMjA3MDEwMjU3WjAzMTEwLwYDVQQD EygxNzBhMDBhMzcwYzdlZTgzNDAyZTIwNDg0ZGZjMDQ1YWUxODE2MDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRHAzSfNaBDdqMJbGGU0Hflcwx9R UuKqTgCFENDBnpdPW9z/2d3BrzUi7NVQjMXX92zI1dvsQlT827LSMzOBIJzQGQOk K8rbeWa/2TppBhTS7UdtNNm1kM8nSKGr5W9an90YUk7bsM0QGjH8RKcwOBdLgBmG nRaDHLZ50rQqI2w3HMhf2XdD31IgiL7rdF9wvezTi+I+qGuP93w6dR8B1RQDThSn Y8/M1cxpVpiMs6GgnoA5MZRrOoINWNV7HrcDiDpko3iL3jUdDGf2StAeLgFxogjO BJmiMPz46EXKc1fciEvd9DHZIk+fF15SzrrZ9TqQVDztCIiaUWl6N37QGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcKAKNwx+6DQC4gSE38BFrhgWBsMB8GA1UdIwQY MBaAFJN0uFPf2Zc/LNmUsuO3VGHZo/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQt NjViY2M4Y2VmZGQyLzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQtNjViY2M4Y2VmZGQy LzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADC9otQFk hkbBFzNYHvAIOymlRdhgqy29zW6EnBeQt8M6IkfeUptFl1F1i48rLgjc41uv8IQh fdnbM+TysRS6cxZ0fEtZjbO8+ZbG0OgHfjL1Rc3nEkJDqCU9aI+M81ca5LIDqEdV jIaugdDNtOxRVp47N0Q4lGAFCC/wi2MVExfCElvQIWIHhvSbc0/ZzJE0SQYI4yDC 4NE+qKvnZm3KNk/B46T8V8kFJ+/CrJOqHPd3/1w5oZRxApSg75DY5ptWUPpRQsMl HKssHYFp6+ow9YLxz+JIGmflwP6ASSIz++EuTfJERgMXQYsf8jg0URo1zDFmDY7R LYOEYg99OGDHaw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:22 2025 by rpki-client