This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json) Hash identifier: suZyvIMQCdwAEXGKyt5dx1xIzs6+2tZ7mKVpUP/YUIo= Subject key identifier: 30:83:F8:A1:E3:02:E9:A6:A4:88:A3:48:BA:4D:B2:47:8B:92:F6:87 Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e Certificate serial: 019AF54125A90F504A4A2188C7F999135CC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft Manifest number: 015C Signing time: Sat 06 Dec 2025 20:01:18 +0000 Manifest this update: Sat 06 Dec 2025 20:01:18 +0000 Manifest next update: Sun 07 Dec 2025 20:01:18 +0000 Files and hashes: 1: BLqnqYXfNpeDaXR1TT1NxALunTU.roa (hash: HiOoL5QoKyGrCXU+ZvFwDx1bHqF6go6OY2pLOukJd1s=) 2: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: H/ohI69tgm1ybkwTYL5UpchuRMQ0LFge+e5J/zjKUgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:25:a9:0f:50:4a:4a:21:88:c7:f9:99:13:5c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e Validity Not Before: Dec 6 20:01:18 2025 GMT Not After : Dec 7 20:01:18 2025 GMT Subject: CN=3083f8a1e302e9a6a488a348ba4db2478b92f687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:6e:a4:d4:9f:c5:31:eb:02:b5:33:2e:ef: 7b:ba:58:e0:2e:5d:35:e3:0b:de:6a:82:4b:46:cb: 27:0b:d9:ed:17:e4:63:ad:df:81:16:8d:d9:c8:88: f6:d8:88:0a:0b:05:78:77:f5:10:8c:f8:52:96:60: 7b:31:6d:1a:a9:61:1b:49:48:e5:1a:72:ef:31:ad: fb:65:f2:41:b4:5d:92:f0:f0:8d:58:80:01:ba:81: aa:90:64:52:8c:15:2a:94:1a:16:24:9c:4b:ff:55: c4:e8:31:c9:6e:dc:70:bd:5b:7e:9d:7c:06:94:ba: 4b:16:90:51:2d:e1:57:d8:f5:e1:a7:2a:3c:9a:df: 67:e8:fb:56:a3:f5:69:30:32:bf:38:2d:38:d3:e4: 0b:5b:46:1c:0d:54:12:0e:77:8d:fe:b2:2c:6a:80: 77:30:46:0f:3c:5a:91:79:87:7c:46:5a:62:9e:c0: 4a:33:a9:17:3c:28:2d:e2:35:0d:4d:6e:5c:9b:08: bc:88:c2:8f:33:ae:df:0d:ba:27:df:2e:d2:d6:27: 77:14:7b:17:1d:82:85:17:52:19:56:fe:9f:cd:ae: 16:08:48:4e:3f:ae:e8:74:6c:97:27:f6:3e:4d:cf: 17:93:c2:d0:3b:fd:0d:66:76:63:ef:e1:63:c4:29: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:83:F8:A1:E3:02:E9:A6:A4:88:A3:48:BA:4D:B2:47:8B:92:F6:87 X509v3 Authority Key Identifier: keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f2:82:cf:a3:1e:16:b5:3c:cd:ad:3c:22:b3:f3:9f:c2:6d: 03:93:3d:e1:3a:63:57:bb:44:78:84:69:3a:49:53:a8:0a:8e: fa:63:18:13:cb:3e:84:d6:67:90:35:79:a0:26:63:cd:f6:c9: 52:77:34:b3:94:0e:5a:04:bf:e7:00:c7:48:3f:79:06:63:d1: 12:7c:7a:90:e0:0f:ce:1d:ef:7c:d1:dd:d6:a1:85:53:02:fc: 5b:1f:c2:0c:5c:59:2a:ce:75:de:69:3c:0e:d7:75:4a:be:66: 7b:43:1f:15:2f:39:bf:ea:7a:41:d2:a7:3d:24:c6:8a:b6:66: e4:ab:8c:d0:4a:d2:df:47:b8:23:6d:33:43:1a:73:c9:d5:6e: ac:7f:7a:90:c9:76:44:89:85:61:7f:60:66:5e:ab:3c:93:0a: 00:af:7c:1a:70:65:d8:98:00:cc:c1:ec:6c:01:6e:10:b6:bf: 22:57:dd:d4:ad:84:33:66:a6:bd:a0:9c:ea:e0:80:59:e3:ef: ae:68:6d:b0:98:b7:42:a5:b2:3f:2a:15:fc:c3:48:30:9e:26: 2a:48:2e:42:9e:d8:ca:59:94:da:bf:f9:a9:a9:23:21:69:cb: 73:d5:f2:ef:18:43:35:23:2c:0e:24:97:c7:a9:9d:6b:36:e0: 03:f1:b0:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QSWpD1BKSiGIx/mZE1zBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTQzN2JjYWQ5YmFjZmEzYjc2YjdkZDA0NTQxMzNmYjRk OGNiM2UwHhcNMjUxMjA2MjAwMTE4WhcNMjUxMjA3MjAwMTE4WjAzMTEwLwYDVQQD EygzMDgzZjhhMWUzMDJlOWE2YTQ4OGEzNDhiYTRkYjI0NzhiOTJmNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn65upNSfxTHrArUzLu97uljgLl01 4wveaoJLRssnC9ntF+Rjrd+BFo3ZyIj22IgKCwV4d/UQjPhSlmB7MW0aqWEbSUjl GnLvMa37ZfJBtF2S8PCNWIABuoGqkGRSjBUqlBoWJJxL/1XE6DHJbtxwvVt+nXwG lLpLFpBRLeFX2PXhpyo8mt9n6PtWo/VpMDK/OC040+QLW0YcDVQSDneN/rIsaoB3 MEYPPFqReYd8RlpinsBKM6kXPCgt4jUNTW5cmwi8iMKPM67fDbon3y7S1id3FHsX HYKFF1IZVv6fza4WCEhOP67odGyXJ/Y+Tc8Xk8LQO/0NZnZj7+FjxCleBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCD+KHjAummpIijSLpNskeLkvaHMB8GA1UdIwQY MBaAFP/kN7ytm6z6O3a33QRUEz+02Ms+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zZDQ4MjctM2YxNC00MzBlLTljZWUt ZDEyMWM1YTc1ZDk4LzEvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8zZDQ4MjctM2YxNC00MzBlLTljZWUtZDEyMWM1YTc1ZDk4 LzEvXy1RM3ZLMmJyUG83ZHJmZEJGUVRQN1RZeXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/KCz6Me FrU8za08IrPzn8JtA5M94TpjV7tEeIRpOklTqAqO+mMYE8s+hNZnkDV5oCZjzfbJ Unc0s5QOWgS/5wDHSD95BmPREnx6kOAPzh3vfNHd1qGFUwL8Wx/CDFxZKs513mk8 Dtd1Sr5me0MfFS85v+p6QdKnPSTGirZm5KuM0ErS30e4I20zQxpzydVurH96kMl2 RImFYX9gZl6rPJMKAK98GnBl2JgAzMHsbAFuELa/Ilfd1K2EM2amvaCc6uCAWePv rmhtsJi3QqWyPyoV/MNIMJ4mKkguQp7YylmU2r/5qakjIWnLc9Xy7xhDNSMsDiSX x6mdazbgA/GwiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:13 2025 by rpki-client