This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft File: s-3xF3T0QHrdvfPPukweeqAkIiM.mft (raw, json) Hash identifier: P/054OfD+WQ5Q1t9ojUb81yXoBlmoFZHnGZd3yzqBWU= Subject key identifier: F3:CC:23:C8:D4:3C:77:C9:75:4F:57:25:4E:5F:FE:9A:32:81:4D:20 Authority key identifier: B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23 Certificate issuer: /CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223 Certificate serial: 019AF6F98A59D2637F938EACB8CF8F0ED622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft Manifest number: 04F2 Signing time: Sun 07 Dec 2025 04:02:20 +0000 Manifest this update: Sun 07 Dec 2025 04:02:20 +0000 Manifest next update: Mon 08 Dec 2025 04:02:20 +0000 Files and hashes: 1: s-3xF3T0QHrdvfPPukweeqAkIiM.crl (hash: P1Bdg15OQ6YbX5vqQT3rxA3DFEYoOKKv5mU+KBjF0FY=) 2: uqWPOGEjKAK6cva-7ggQuyGZx84.roa (hash: LmiTjnCPg8ISEkh3ESWU5kwDHzMqe3y8V1474zgHE24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:8a:59:d2:63:7f:93:8e:ac:b8:cf:8f:0e:d6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223 Validity Not Before: Dec 7 04:02:20 2025 GMT Not After : Dec 8 04:02:20 2025 GMT Subject: CN=f3cc23c8d43c77c9754f57254e5ffe9a32814d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:15:16:65:58:04:98:e9:95:17:5b:2a:56:ca: 74:e7:14:7f:d0:2c:e9:cd:c6:0c:9b:e8:07:6c:0f: 0d:f1:4b:51:13:9d:31:2c:72:ee:8b:77:0a:eb:d3: 9f:4c:6d:f6:d1:1c:b1:3f:1f:ac:71:24:90:9e:7c: 71:01:3f:2a:dd:db:e1:22:5c:0b:bd:08:e5:2d:ef: 2f:6b:8c:fe:69:11:56:f8:47:2c:4a:83:0b:83:85: ce:74:ef:6b:22:67:07:0f:50:6f:58:a4:41:e0:1b: ec:e4:93:bf:2e:18:da:96:fb:b7:b9:b7:8b:7c:5a: b9:4c:ec:5f:93:e4:60:8e:11:47:28:45:19:61:cc: 26:38:e1:d8:fc:e1:a0:9f:1d:84:4f:1e:7e:63:33: 37:9d:c8:b4:5d:b3:12:40:5f:6b:73:1b:87:20:b1: bd:5c:d8:a3:30:41:ef:3c:e9:d3:4d:49:fb:fb:46: 3d:74:5b:a5:83:95:3e:10:8c:72:69:ec:90:dd:d0: 8d:d4:99:aa:83:54:16:9c:4c:69:11:dd:72:db:b8: a2:fa:d2:38:6b:9a:83:39:08:c3:a0:b2:90:72:c5: 53:c5:2f:20:f4:67:1a:e6:42:73:3b:be:29:a1:bd: 91:08:dd:6d:58:65:6a:ed:52:2d:25:35:fc:e5:b3: 0d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CC:23:C8:D4:3C:77:C9:75:4F:57:25:4E:5F:FE:9A:32:81:4D:20 X509v3 Authority Key Identifier: keyid:B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:c1:31:00:78:a8:5f:88:77:ef:aa:60:da:2d:43:d8:e7:04: ac:19:49:7e:38:35:19:b7:3e:f4:b3:d1:d4:3c:7b:0c:b8:59: 5b:ed:ed:9a:01:3b:51:fb:99:ce:f4:81:8e:69:10:c2:65:4e: 8a:3b:50:94:1a:8c:1e:56:a6:95:96:cf:16:ff:80:1e:ee:00: 6c:2d:35:d9:1f:44:09:15:4d:8d:99:7a:8a:f7:56:44:88:97: f0:1e:19:07:2e:46:9b:ef:f4:20:50:c9:23:02:cc:38:de:e9: cd:89:c4:ec:fe:cb:b4:ef:0f:9f:b6:e5:64:11:52:7e:81:84: 86:0f:55:12:fd:94:5d:bb:35:5d:28:d9:1c:f3:0e:39:38:4b: 34:3d:1b:4a:76:f8:a3:7f:dd:2d:9d:ac:c0:1d:23:d9:7a:b6: de:1f:e7:9f:cc:d9:3b:64:16:f9:f2:ef:5d:f0:3c:9c:2a:a7: ae:a8:dd:e5:46:a5:d4:f1:e0:52:fd:f2:92:fa:f2:54:df:bb: 66:fc:4e:29:b1:29:7e:5b:b8:79:fc:10:96:41:31:4c:96:51: 11:62:46:58:50:f6:67:15:a9:2c:c6:b1:9e:17:e7:69:9a:47: a3:62:5e:b1:33:1f:b7:f6:72:95:9b:30:40:0f:cf:90:e9:55: 96:ab:c5:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+YpZ0mN/k46suM+PDtYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZWRmMTE3NzRmNDQwN2FkZGJkZjNjZmJhNGMxZTdhYTAy NDIyMjMwHhcNMjUxMjA3MDQwMjIwWhcNMjUxMjA4MDQwMjIwWjAzMTEwLwYDVQQD EyhmM2NjMjNjOGQ0M2M3N2M5NzU0ZjU3MjU0ZTVmZmU5YTMyODE0ZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxUWZVgEmOmVF1sqVsp05xR/0Czp zcYMm+gHbA8N8UtRE50xLHLui3cK69OfTG320RyxPx+scSSQnnxxAT8q3dvhIlwL vQjlLe8va4z+aRFW+EcsSoMLg4XOdO9rImcHD1BvWKRB4Bvs5JO/Lhjalvu3ubeL fFq5TOxfk+RgjhFHKEUZYcwmOOHY/OGgnx2ETx5+YzM3nci0XbMSQF9rcxuHILG9 XNijMEHvPOnTTUn7+0Y9dFulg5U+EIxyaeyQ3dCN1Jmqg1QWnExpEd1y27ii+tI4 a5qDOQjDoLKQcsVTxS8g9Gca5kJzO74pob2RCN1tWGVq7VItJTX85bMNPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPMI8jUPHfJdU9XJU5f/poygU0gMB8GA1UdIwQY MBaAFLPt8Rd09EB63b3zz7pMHnqgJCIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MDMwMTgtOWJhYy00ODU4LThkZjgt YWRjYTFhNTdhYjBjLzEvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81MDMwMTgtOWJhYy00ODU4LThkZjgtYWRjYTFhNTdhYjBj LzEvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMExAHio X4h376pg2i1D2OcErBlJfjg1Gbc+9LPR1Dx7DLhZW+3tmgE7UfuZzvSBjmkQwmVO ijtQlBqMHlamlZbPFv+AHu4AbC012R9ECRVNjZl6ivdWRIiX8B4ZBy5Gm+/0IFDJ IwLMON7pzYnE7P7LtO8Pn7blZBFSfoGEhg9VEv2UXbs1XSjZHPMOOThLND0bSnb4 o3/dLZ2swB0j2Xq23h/nn8zZO2QW+fLvXfA8nCqnrqjd5Ual1PHgUv3ykvryVN+7 ZvxOKbEpflu4efwQlkExTJZREWJGWFD2ZxWpLMaxnhfnaZpHo2JesTMft/ZylZsw QA/PkOlVlqvF9Q== -----END CERTIFICATE-----Generated at Sun Dec 7 06:08:28 2025 by rpki-client