This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft File: a3YD1VVBw1n46HRHfL6K8h9peHw.mft (raw, json) Hash identifier: JxFBG3Fv5QO31F3+v0osrXfAbIIFdmUbzLdLxzvgTqU= Subject key identifier: B7:08:09:14:42:52:C5:B2:9F:CF:D1:06:99:7B:93:FE:DE:31:A1:84 Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C Certificate issuer: /CN=6b7603d55541c359f8e874477cbe8af21f69787c Certificate serial: 019B30E896F907775F6D9006879D41BF2270 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft Manifest number: 047A Signing time: Thu 18 Dec 2025 10:01:47 +0000 Manifest this update: Thu 18 Dec 2025 10:01:47 +0000 Manifest next update: Fri 19 Dec 2025 10:01:47 +0000 Files and hashes: 1: a3YD1VVBw1n46HRHfL6K8h9peHw.crl (hash: mEpUhdM1id1ursBAYrvxEtYshupC5HbpgSXVFGj57fA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:96:f9:07:77:5f:6d:90:06:87:9d:41:bf:22:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c Validity Not Before: Dec 18 10:01:47 2025 GMT Not After : Dec 19 10:01:47 2025 GMT Subject: CN=b70809144252c5b29fcfd106997b93fede31a184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:cd:e1:28:33:8f:8a:b6:52:9d:67:97:15: 11:0f:ae:25:fe:0a:88:78:fb:db:74:70:09:ba:5d: 98:b1:ab:a9:0f:c4:c6:d1:f2:e9:af:03:cf:2d:c5: 77:f8:81:20:ea:88:e6:77:a7:4a:fa:ac:3f:4c:8d: 27:ef:0b:5a:7c:3e:1b:50:e1:05:a1:f4:d9:ca:c1: b4:ad:a5:6c:f7:93:0e:0f:d7:0b:46:d4:86:72:d9: bc:a8:d8:0c:8e:bc:43:de:b4:b2:7b:96:41:25:0b: 4d:22:bc:57:ab:fe:5d:23:b2:23:e0:d8:cc:0d:86: 4c:be:f0:74:82:ce:f7:07:10:e9:18:d3:6b:14:cc: b6:24:bf:95:1c:65:9b:54:53:36:d2:18:ad:03:97: ef:61:8e:92:f6:08:fc:21:48:1d:46:2b:41:cf:e2: 01:86:85:e2:ce:da:37:e0:a7:e0:fd:c5:17:bc:f7: bc:0f:57:2c:82:f9:dc:ed:20:a1:0f:97:55:9b:7e: a3:06:c6:8b:4c:7e:41:c8:21:7e:e4:80:b0:94:7d: 7b:f1:85:5e:3d:36:ab:80:54:b3:c6:f5:ba:e8:1a: 59:66:9c:cb:33:3d:8d:a4:90:18:ed:11:db:47:08: 89:a2:79:cf:6e:eb:98:71:cf:db:d0:77:fd:92:cf: e6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:08:09:14:42:52:C5:B2:9F:CF:D1:06:99:7B:93:FE:DE:31:A1:84 X509v3 Authority Key Identifier: keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:e2:3d:79:fb:f0:46:91:18:9d:2b:60:de:d4:0a:32:b3:01: 6e:ba:bb:e5:6a:38:e0:0d:0b:3e:b1:7c:e0:c4:71:32:05:f5: d9:81:22:62:c0:ac:81:5d:0a:c5:f5:69:7c:a5:06:da:43:1e: 69:1f:8e:4f:96:33:13:ee:72:ae:19:0c:4f:a0:e7:51:11:60: 70:dd:e6:cb:19:c8:3e:28:b4:48:79:96:5f:ce:d2:b0:b2:58: 17:e8:b4:27:0e:1a:78:41:59:0b:50:b3:ce:32:78:57:fa:5b: f0:0a:0a:07:3a:24:a0:30:ed:97:0b:01:e9:e7:93:23:2a:1a: 43:d1:1b:36:83:69:79:73:cd:77:af:a1:c7:4f:58:0c:75:a2: a3:14:a9:d3:c7:7c:e9:42:48:fd:0b:83:df:d5:31:d0:2d:38: 21:df:d8:70:a3:2b:8c:31:8c:64:4c:f1:d2:ca:f6:d6:4d:78: d7:6f:93:90:47:2c:97:43:29:40:e8:72:93:4f:cd:aa:ce:60: d7:cc:ca:d4:84:ec:f4:df:bf:8c:05:97:2d:e2:e8:8e:40:cb: 19:03:17:14:9e:fd:56:3b:42:77:14:75:48:e7:e9:57:cd:19: 44:a4:77:d0:c8:3e:f2:38:88:72:e0:30:52:97:ea:f3:49:79: 3d:0a:f1:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6Jb5B3dfbZAGh51BvyJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNzYwM2Q1NTU0MWMzNTlmOGU4NzQ0NzdjYmU4YWYyMWY2 OTc4N2MwHhcNMjUxMjE4MTAwMTQ3WhcNMjUxMjE5MTAwMTQ3WjAzMTEwLwYDVQQD EyhiNzA4MDkxNDQyNTJjNWIyOWZjZmQxMDY5OTdiOTNmZWRlMzFhMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEnN4Sgzj4q2Up1nlxURD64l/gqI ePvbdHAJul2YsaupD8TG0fLprwPPLcV3+IEg6ojmd6dK+qw/TI0n7wtafD4bUOEF ofTZysG0raVs95MOD9cLRtSGctm8qNgMjrxD3rSye5ZBJQtNIrxXq/5dI7Ij4NjM DYZMvvB0gs73BxDpGNNrFMy2JL+VHGWbVFM20hitA5fvYY6S9gj8IUgdRitBz+IB hoXizto34Kfg/cUXvPe8D1csgvnc7SChD5dVm36jBsaLTH5ByCF+5ICwlH178YVe PTargFSzxvW66BpZZpzLMz2NpJAY7RHbRwiJonnPbuuYcc/b0Hf9ks/myQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcICRRCUsWyn8/RBpl7k/7eMaGEMB8GA1UdIwQY MBaAFGt2A9VVQcNZ+Oh0R3y+ivIfaXh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTNZRDFWVkJ3MW40NkhSSGZMNks4aDlwZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYzU4OWYtMmJkMi00OWJkLWJkODEt NTdlNjMyMGIxMThmLzEvYTNZRDFWVkJ3MW40NkhSSGZMNks4aDlwZUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zYzU4OWYtMmJkMi00OWJkLWJkODEtNTdlNjMyMGIxMThm LzEvYTNZRDFWVkJ3MW40NkhSSGZMNks4aDlwZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuuI9efvw RpEYnStg3tQKMrMBbrq75Wo44A0LPrF84MRxMgX12YEiYsCsgV0KxfVpfKUG2kMe aR+OT5YzE+5yrhkMT6DnURFgcN3myxnIPii0SHmWX87SsLJYF+i0Jw4aeEFZC1Cz zjJ4V/pb8AoKBzokoDDtlwsB6eeTIyoaQ9EbNoNpeXPNd6+hx09YDHWioxSp08d8 6UJI/QuD39Ux0C04Id/YcKMrjDGMZEzx0sr21k1412+TkEcsl0MpQOhyk0/Nqs5g 18zK1ITs9N+/jAWXLeLojkDLGQMXFJ79VjtCdxR1SOfpV80ZRKR30Mg+8jiIcuAw Upfq80l5PQrxrg== -----END CERTIFICATE-----Generated at Thu Dec 18 11:52:47 2025 by rpki-client