This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json) Hash identifier: xVZzFIeE0qdvYGQuSBl8znIBer4/LpI2CVSBwVLqHBg= Subject key identifier: 3B:4B:31:21:ED:5A:E1:8B:A6:61:10:CB:6B:B3:BB:EE:32:74:16:D0 Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff Certificate serial: 019AF2E427493DAE34B74FAA2EBCEF75787D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft Manifest number: 0515 Signing time: Sat 06 Dec 2025 09:00:29 +0000 Manifest this update: Sat 06 Dec 2025 09:00:29 +0000 Manifest next update: Sun 07 Dec 2025 09:00:29 +0000 Files and hashes: 1: KJwvgElTVvzSDkiiLVbk2sY499A.roa (hash: kKy6TJRdTCOke9YuiLb9jXp15SOk9kOvN+LVFTH7qS0=) 2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: ICTB3beQvtaFFWW0X5/Zs11SuaIlJMUl8J0P0bx0Gb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:27:49:3d:ae:34:b7:4f:aa:2e:bc:ef:75:78:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff Validity Not Before: Dec 6 09:00:29 2025 GMT Not After : Dec 7 09:00:29 2025 GMT Subject: CN=3b4b3121ed5ae18ba66110cb6bb3bbee327416d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:79:f8:6e:90:4d:b6:3f:b9:ac:d1:52:7e:33: 59:a8:05:ba:4d:b3:e2:e9:e0:d6:1c:f5:45:6d:a6: 37:61:95:1f:96:01:29:03:00:6f:59:b5:80:92:68: f5:ec:de:55:a3:2d:7a:46:1d:5d:c9:4e:38:92:38: c7:e2:ad:e1:23:71:c7:40:eb:9b:2a:72:e5:1f:f6: 24:5c:7b:90:54:68:04:11:67:b9:cc:0c:99:da:04: 33:d5:fe:13:ba:2d:92:2d:20:1d:cb:3c:57:f2:0b: 55:3c:4d:b5:c3:38:b3:17:54:c9:d6:f1:84:35:8c: 4c:42:1e:54:63:90:e7:67:bc:e7:1e:a7:99:48:55: 64:9d:02:48:45:ff:9e:82:65:7b:16:6a:65:25:a2: 77:8d:55:bb:08:88:59:ce:f4:8c:bf:2c:72:13:47: 54:70:60:d6:a6:d5:cf:61:77:87:bb:15:9f:48:7d: 2d:80:64:0e:1d:77:46:c8:a9:7c:9c:e0:a0:08:5b: f5:ec:ae:52:5b:a1:7f:91:dd:87:b3:f0:65:86:38: 42:a7:99:93:fd:56:29:ee:74:86:5f:00:77:fc:b2: 15:44:61:20:93:b2:71:99:95:f0:68:bd:ea:40:8e: 48:a1:d4:63:43:2e:80:63:15:e6:9c:82:5c:9f:f2: 32:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4B:31:21:ED:5A:E1:8B:A6:61:10:CB:6B:B3:BB:EE:32:74:16:D0 X509v3 Authority Key Identifier: keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b1:47:4a:bf:10:ac:8e:8b:16:b3:5c:d0:dc:3e:48:6f:41: 31:99:ef:0c:0b:9f:ec:4b:6f:d1:f5:ab:8a:0e:9e:f8:e7:b8: 21:51:04:65:45:ab:61:07:92:be:d3:06:93:4f:ea:9d:41:dc: cc:a0:c8:7a:da:64:8e:2b:b2:7c:a2:7c:c6:7a:90:e5:64:6b: 16:69:cf:6d:79:05:a2:6e:10:89:c5:34:70:56:96:69:61:9d: dc:35:66:8a:74:82:d9:18:40:ff:14:8b:f3:12:b1:f4:83:63: 19:bd:c5:64:2f:10:bb:86:66:6a:1a:08:b0:37:45:17:e9:3f: c1:0c:38:8f:06:46:48:8f:cb:ef:22:04:35:e8:a1:fb:57:b2: 7e:1e:87:69:c8:fb:c4:aa:5f:3f:63:9c:d8:25:31:3f:ce:29: 67:f5:d5:2a:f1:6b:d9:3b:89:fe:57:48:f2:eb:f1:2d:f2:21: 22:8e:d7:a8:d0:ca:8f:26:e8:a0:e3:52:45:b3:1c:89:00:d6: 00:12:f0:92:d7:49:64:98:e7:be:4d:ce:07:b5:30:48:88:e5: 24:33:3a:d0:16:33:87:22:a6:20:c1:89:cf:a5:02:c4:ab:df: 50:85:9a:01:93:cb:dc:a3:05:b7:89:86:44:d8:5f:5f:4d:5e: f5:95:7f:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5CdJPa40t0+qLrzvdXh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNzExMDU0YTg5NDQ2YTc2ZjQ5M2NlMmMxMjdhOTQ4ZWJh NGE4ZmYwHhcNMjUxMjA2MDkwMDI5WhcNMjUxMjA3MDkwMDI5WjAzMTEwLwYDVQQD EygzYjRiMzEyMWVkNWFlMThiYTY2MTEwY2I2YmIzYmJlZTMyNzQxNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3n4bpBNtj+5rNFSfjNZqAW6TbPi 6eDWHPVFbaY3YZUflgEpAwBvWbWAkmj17N5Voy16Rh1dyU44kjjH4q3hI3HHQOub KnLlH/YkXHuQVGgEEWe5zAyZ2gQz1f4Tui2SLSAdyzxX8gtVPE21wzizF1TJ1vGE NYxMQh5UY5DnZ7znHqeZSFVknQJIRf+egmV7FmplJaJ3jVW7CIhZzvSMvyxyE0dU cGDWptXPYXeHuxWfSH0tgGQOHXdGyKl8nOCgCFv17K5SW6F/kd2Hs/BlhjhCp5mT /VYp7nSGXwB3/LIVRGEgk7JxmZXwaL3qQI5IodRjQy6AYxXmnIJcn/IyNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtLMSHtWuGLpmEQy2uzu+4ydBbQMB8GA1UdIwQY MBaAFP9xEFSolEanb0k84sEnqUjrpKj/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAt NDdhYzM4OWQzMjYxLzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAtNDdhYzM4OWQzMjYx LzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7FHSr8Q rI6LFrNc0Nw+SG9BMZnvDAuf7Etv0fWrig6e+Oe4IVEEZUWrYQeSvtMGk0/qnUHc zKDIetpkjiuyfKJ8xnqQ5WRrFmnPbXkFom4QicU0cFaWaWGd3DVminSC2RhA/xSL 8xKx9INjGb3FZC8Qu4ZmahoIsDdFF+k/wQw4jwZGSI/L7yIENeih+1eyfh6Hacj7 xKpfP2Oc2CUxP84pZ/XVKvFr2TuJ/ldI8uvxLfIhIo7XqNDKjybooONSRbMciQDW ABLwktdJZJjnvk3OB7UwSIjlJDM60BYzhyKmIMGJz6UCxKvfUIWaAZPL3KMFt4mG RNhfX01e9ZV/3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:47:10 2025 by rpki-client