This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft File: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft (raw, json) Hash identifier: k3FpoAza03Qc3WVPN9ox3SKEbJD0S83Jago2KdgsZ+Q= Subject key identifier: 06:9B:F0:AF:28:15:4A:86:4A:23:E2:F4:46:1E:C5:9C:33:C1:8D:A6 Authority key identifier: DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E Certificate issuer: /CN=df52526f3d282765325c15a6e5765d7cd7f1f89e Certificate serial: 019AF1D23BE5778C93CC90708C67691A199F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft Manifest number: 0EC9 Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl (hash: s8JpM8RvrbJkCrylj8i5TQMYWEPexqQ+ZIJWhTHJbXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3b:e5:77:8c:93:cc:90:70:8c:67:69:1a:19:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df52526f3d282765325c15a6e5765d7cd7f1f89e Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=069bf0af28154a864a23e2f4461ec59c33c18da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:68:bb:bb:a6:fa:9c:b4:4e:8f:d1:3a:31:05: dc:bf:e0:fa:37:d8:a4:a3:9d:ee:04:41:22:50:8c: 01:e1:30:bd:88:e7:a4:08:f6:79:38:a7:25:c3:62: 08:cf:43:ed:bb:51:5d:bf:e6:c0:70:b0:fb:0b:39: 4c:b1:0b:cd:e3:cd:4e:70:a5:21:a4:e0:80:76:66: b6:39:71:5c:4d:d3:e4:5f:53:43:3c:ff:22:f9:03: 0e:13:d7:2e:9b:61:ef:84:33:15:45:6c:1e:c7:13: d2:62:6c:5e:64:50:2b:e9:9c:bc:3d:38:bc:a7:7b: b0:ec:7b:14:dc:f6:8c:1c:5e:72:b2:49:0f:b9:df: 9a:fb:20:ec:a7:71:b5:cb:10:2b:b7:c8:ae:2e:a0: f2:3d:c0:08:3b:2f:b1:2e:74:0f:53:52:04:96:5d: dc:df:68:f2:50:af:8c:1c:ab:33:73:4c:d8:b8:26: 4e:02:04:b1:d9:8b:9f:4b:98:34:2e:ff:71:3b:a7: 61:2b:31:f7:d4:8a:f1:ed:ee:68:5b:a4:7f:30:4e: bf:bd:b7:b4:bd:ad:90:ae:84:c4:aa:e2:00:98:4b: b0:01:e7:84:7f:20:a0:7c:36:23:19:32:59:4b:68: cb:c7:3f:e2:08:60:fe:a0:d9:d6:54:24:15:40:d6: fc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9B:F0:AF:28:15:4A:86:4A:23:E2:F4:46:1E:C5:9C:33:C1:8D:A6 X509v3 Authority Key Identifier: keyid:DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:48:e1:22:6f:d2:4a:e2:de:a7:50:0b:ac:74:d2:7e:ac:80: 93:bf:bf:23:9a:50:02:3c:86:1a:11:20:10:26:c4:0f:35:cf: 51:3c:43:33:9d:20:db:ab:66:51:10:6a:28:6f:b3:bf:79:94: 03:a2:d7:8b:36:6e:fb:90:b5:21:14:19:72:47:32:ab:ea:1a: 38:1c:de:6c:e5:74:30:8b:63:5c:f9:5e:2d:14:6c:0b:2c:26: 30:3c:b5:21:f5:f6:0d:75:15:bb:1b:16:3f:25:5f:91:09:ac: 66:4b:d0:f1:ff:01:12:19:2d:40:ea:9e:7b:6b:3b:2c:8f:9b: 2c:e7:f7:ea:a0:84:53:76:64:e9:4c:df:da:fa:cf:38:8f:ba: 13:59:35:c1:99:4d:ae:4d:b1:9d:72:03:44:b0:27:6d:8a:51: c0:f3:42:86:9a:4e:62:ca:ab:93:87:2f:72:81:d3:aa:8a:ce: c5:9f:7d:3b:3b:07:28:cb:19:61:68:90:b8:3d:f8:c0:39:ca: 5f:1a:f5:6a:dd:58:31:ba:35:71:12:24:e0:65:06:e9:52:8d: c9:cf:0c:93:eb:7d:86:85:5c:8f:b5:fc:bd:ad:a7:3d:5d:c1: 94:62:be:90:43:21:b0:f0:2c:75:27:d3:57:48:0f:e1:d7:b9: 4a:35:a4:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jvld4yTzJBwjGdpGhmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNTI1MjZmM2QyODI3NjUzMjVjMTVhNmU1NzY1ZDdjZDdm MWY4OWUwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD EygwNjliZjBhZjI4MTU0YTg2NGEyM2UyZjQ0NjFlYzU5YzMzYzE4ZGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Wi7u6b6nLROj9E6MQXcv+D6N9ik o53uBEEiUIwB4TC9iOekCPZ5OKclw2IIz0Ptu1Fdv+bAcLD7CzlMsQvN481OcKUh pOCAdma2OXFcTdPkX1NDPP8i+QMOE9cum2HvhDMVRWwexxPSYmxeZFAr6Zy8PTi8 p3uw7HsU3PaMHF5yskkPud+a+yDsp3G1yxArt8iuLqDyPcAIOy+xLnQPU1IEll3c 32jyUK+MHKszc0zYuCZOAgSx2YufS5g0Lv9xO6dhKzH31Irx7e5oW6R/ME6/vbe0 va2QroTEquIAmEuwAeeEfyCgfDYjGTJZS2jLxz/iCGD+oNnWVCQVQNb8wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAab8K8oFUqGSiPi9EYexZwzwY2mMB8GA1UdIwQY MBaAFN9SUm89KCdlMlwVpuV2XXzX8fieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzFKU2J6MG9KMlV5WEJXbTVYWmRmTmZ4LUo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wYmY2ZGItY2M3ZC00Njk3LTlhZWMt NjIzZTZjOWM0NDY0LzEvMzFKU2J6MG9KMlV5WEJXbTVYWmRmTmZ4LUo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wYmY2ZGItY2M3ZC00Njk3LTlhZWMtNjIzZTZjOWM0NDY0 LzEvMzFKU2J6MG9KMlV5WEJXbTVYWmRmTmZ4LUo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUjhIm/S SuLep1ALrHTSfqyAk7+/I5pQAjyGGhEgECbEDzXPUTxDM50g26tmURBqKG+zv3mU A6LXizZu+5C1IRQZckcyq+oaOBzebOV0MItjXPleLRRsCywmMDy1IfX2DXUVuxsW PyVfkQmsZkvQ8f8BEhktQOqee2s7LI+bLOf36qCEU3Zk6Uzf2vrPOI+6E1k1wZlN rk2xnXIDRLAnbYpRwPNChppOYsqrk4cvcoHTqorOxZ99OzsHKMsZYWiQuD34wDnK Xxr1at1YMbo1cRIk4GUG6VKNyc8Mk+t9hoVcj7X8va2nPV3BlGK+kEMhsPAsdSfT V0gP4de5SjWkHA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:22 2025 by rpki-client