This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json) Hash identifier: oPQhCDNF8Ms/BPgIm3+4nUdxuhjZTLlQC6qJrIVaHgE= Subject key identifier: 2F:A5:94:38:78:56:2C:EE:79:70:41:82:A8:95:84:2E:82:91:71:27 Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad Certificate serial: 019AF23F60E10BC55346DA832DAAD5B1DB41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft Manifest number: 12A2 Signing time: Sat 06 Dec 2025 06:00:30 +0000 Manifest this update: Sat 06 Dec 2025 06:00:30 +0000 Manifest next update: Sun 07 Dec 2025 06:00:30 +0000 Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: j//fRaVBvuxa80EJMTYUxANZzyyQfMnOR5w3x93uIW4=) 2: _Sn3RhfY--fiVliyrSpcw_Dpx8U.roa (hash: 0DlsX3tbgemelzimR5EC4gu2Xnu0fF/hzb1n4QMYZI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:60:e1:0b:c5:53:46:da:83:2d:aa:d5:b1:db:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad Validity Not Before: Dec 6 06:00:30 2025 GMT Not After : Dec 7 06:00:30 2025 GMT Subject: CN=2fa5943878562cee79704182a895842e82917127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:87:86:81:12:5f:fa:b9:e1:74:19:0a:97: a6:8a:8c:72:3f:2e:94:6a:70:81:b8:8e:b2:0e:e8: df:0d:de:17:ee:ee:5c:3b:70:b5:aa:7c:14:55:61: 09:04:87:bf:90:27:0a:92:b6:68:b3:40:cc:5a:c2: 50:e7:d0:d3:63:36:8a:52:9b:fa:1e:ce:32:b8:51: 1c:68:5c:cf:47:92:c6:e1:bb:27:4b:bd:bd:8a:62: 14:d2:ba:54:1b:4f:e3:83:8e:b3:3e:4b:ca:56:b4: 75:38:6e:0b:56:b2:7c:b2:11:6c:3e:4b:98:64:6e: 8a:79:28:d6:54:e9:07:95:4f:9a:55:7d:52:76:ba: 6c:c1:e8:9e:a8:e2:6c:35:94:ba:fe:af:aa:31:90: f6:fb:62:40:f9:02:56:2e:7f:15:cc:74:66:10:ab: c7:1d:13:82:1e:68:66:01:96:b0:84:ae:fd:81:36: 5e:59:86:73:20:3a:ac:21:ae:62:02:10:af:39:32: 5c:39:73:64:82:a1:e3:5c:02:50:42:53:2a:5c:80: 8e:02:7f:2a:36:b0:8a:ae:f8:3e:78:f6:75:a2:c6: 09:cb:20:7b:5f:4c:c5:98:5e:56:e7:12:fc:0b:5a: 48:27:45:16:33:3a:b8:a0:32:34:94:87:f4:b9:f8: d4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A5:94:38:78:56:2C:EE:79:70:41:82:A8:95:84:2E:82:91:71:27 X509v3 Authority Key Identifier: keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:66:a0:3a:73:98:8f:7f:1f:e3:54:c0:8f:6c:e6:05:75:b4: e4:97:12:c5:14:01:7f:ab:94:8f:14:4e:3b:79:d8:e4:a7:22: b9:43:d8:b2:f9:c9:26:fb:25:5c:13:69:be:56:bb:ff:d1:e5: f2:55:84:f7:4a:ed:da:cb:10:5a:6f:57:8b:cc:35:12:a3:4e: b3:bc:58:ae:c2:a4:5c:98:bc:3c:e2:17:8c:10:5e:b7:ab:ff: 5e:32:f4:a6:2b:1b:6d:26:c7:a1:80:25:5d:04:cd:25:5c:43: ca:1d:3e:77:73:74:7c:28:0e:93:b2:d1:03:5e:4a:0c:3b:ae: 5b:a2:cb:36:e7:40:8c:fb:59:1d:33:b6:8f:44:c2:0f:36:2d: 66:22:86:34:c4:99:83:fa:4a:65:2d:c9:3e:58:74:70:ab:7d: 34:a0:5c:6f:48:f2:04:11:86:fc:72:3f:0e:62:81:59:85:f7: 88:ae:de:23:98:b5:2f:96:0a:ad:f3:19:b9:5c:9e:0f:79:32: 31:df:fa:02:8e:ee:cb:f4:7e:6e:39:26:b0:17:7d:a0:38:96: 41:50:f6:18:5b:db:ec:7d:28:dd:99:ef:b1:59:4e:a5:3a:d2: dc:f6:f8:d4:5a:af:9e:ae:c3:5e:c9:b8:f7:6c:2e:bf:c6:53: f3:ee:0f:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2DhC8VTRtqDLarVsdtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMjg2ZDAzYTM3M2JkNjg5ZWYwNDYxMGExYzhhZDg0NzNl YmRkYWQwHhcNMjUxMjA2MDYwMDMwWhcNMjUxMjA3MDYwMDMwWjAzMTEwLwYDVQQD EygyZmE1OTQzODc4NTYyY2VlNzk3MDQxODJhODk1ODQyZTgyOTE3MTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJmHhoESX/q54XQZCpemioxyPy6U anCBuI6yDujfDd4X7u5cO3C1qnwUVWEJBIe/kCcKkrZos0DMWsJQ59DTYzaKUpv6 Hs4yuFEcaFzPR5LG4bsnS729imIU0rpUG0/jg46zPkvKVrR1OG4LVrJ8shFsPkuY ZG6KeSjWVOkHlU+aVX1SdrpsweieqOJsNZS6/q+qMZD2+2JA+QJWLn8VzHRmEKvH HROCHmhmAZawhK79gTZeWYZzIDqsIa5iAhCvOTJcOXNkgqHjXAJQQlMqXICOAn8q NrCKrvg+ePZ1osYJyyB7X0zFmF5W5xL8C1pIJ0UWMzq4oDI0lIf0ufjUqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+llDh4VizueXBBgqiVhC6CkXEnMB8GA1UdIwQY MBaAFN4obQOjc71onvBGEKHIrYRz692tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMt Y2FkZjBjYTFkZDBkLzEvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMtY2FkZjBjYTFkZDBk LzEvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2agOnOY j38f41TAj2zmBXW05JcSxRQBf6uUjxROO3nY5KciuUPYsvnJJvslXBNpvla7/9Hl 8lWE90rt2ssQWm9Xi8w1EqNOs7xYrsKkXJi8POIXjBBet6v/XjL0pisbbSbHoYAl XQTNJVxDyh0+d3N0fCgOk7LRA15KDDuuW6LLNudAjPtZHTO2j0TCDzYtZiKGNMSZ g/pKZS3JPlh0cKt9NKBcb0jyBBGG/HI/DmKBWYX3iK7eI5i1L5YKrfMZuVyeD3ky Md/6Ao7uy/R+bjkmsBd9oDiWQVD2GFvb7H0o3ZnvsVlOpTrS3Pb41Fqvnq7DXsm4 92wuv8ZT8+4PPA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:26 2025 by rpki-client