This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json) Hash identifier: 2lO7tB92qfksB/VMhr0lnZ+pA++AjqAuKUF1ikGQ51Q= Subject key identifier: E1:46:32:31:BA:B7:AF:8D:DC:4B:1D:FA:F8:2C:10:DB:29:13:39:B7 Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53 Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153 Certificate serial: 019B3C7E87715E324C6C105967F9BC3E6777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft Manifest number: 0E6F Signing time: Sat 20 Dec 2025 16:01:23 +0000 Manifest this update: Sat 20 Dec 2025 16:01:23 +0000 Manifest next update: Sun 21 Dec 2025 16:01:23 +0000 Files and hashes: 1: QrB38IR31JfmSrfp5ttgTReGTWo.roa (hash: tObzEsfYNmXi9X+/o+rGLlyYSek2LoSQ9N7PVMYEfqA=) 2: n3iPjhImnBjarzP2Rj2tOx0dNiE.roa (hash: lUEC9I8tI5NUjUJh9guJCH2H+g0KkZWinekNZT2+2Io=) 3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: EeXRVeiuhGIU2MJgXQDf5U06q/nUJ76edXSCtw6ejVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:87:71:5e:32:4c:6c:10:59:67:f9:bc:3e:67:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153 Validity Not Before: Dec 20 16:01:23 2025 GMT Not After : Dec 21 16:01:23 2025 GMT Subject: CN=e1463231bab7af8ddc4b1dfaf82c10db291339b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:90:54:53:8d:ae:d6:40:38:a2:ce:e4:50: 58:86:0e:32:be:fd:00:5c:5c:64:f3:6d:ae:68:d8: 60:c1:52:6e:72:d4:79:86:5e:70:4c:cb:18:0f:b6: ab:e0:01:a0:f6:05:03:2a:4e:ff:bb:4a:a4:ee:42: 80:ba:ae:fe:9b:a4:c7:35:b2:be:3d:01:d7:d8:48: e8:cc:dd:94:ab:29:4c:5b:7b:84:c2:da:b0:2b:7f: c1:b2:60:37:1e:a1:a7:10:d6:ff:49:c1:1a:5d:0f: 40:c7:ce:b0:94:05:cd:d8:0e:f0:da:fd:5c:94:1a: 2e:ce:52:2a:cc:dd:cf:80:64:52:6a:52:cc:1b:c8: 2a:9b:ef:43:5b:03:cf:99:99:73:6f:70:d3:2b:a6: a1:d6:71:5a:34:8b:a3:36:00:53:1a:7d:c2:c1:c2: 29:17:e2:60:da:2f:05:f7:9f:15:63:02:34:f3:98: 55:72:32:ea:69:8b:bf:84:a4:d6:dd:c4:ff:60:03: cf:e8:67:aa:3f:33:17:ab:94:da:e7:ad:bc:11:a4: 17:a1:cb:f9:8a:4c:2d:32:62:30:55:0c:e8:28:58: 52:8f:e0:c6:a7:8f:c1:f2:92:5e:ff:ad:1d:93:f2: 4f:d3:00:90:c0:da:34:2a:14:20:ca:29:14:6d:16: bf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:46:32:31:BA:B7:AF:8D:DC:4B:1D:FA:F8:2C:10:DB:29:13:39:B7 X509v3 Authority Key Identifier: keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:12:c2:7e:d5:0e:ed:2d:f7:5c:1d:1a:91:fa:45:27:88:1b: 63:87:3a:b3:e5:39:59:84:35:0a:9a:4d:a7:50:5f:12:65:c4: c6:75:42:b4:bc:a3:d0:60:a9:89:2f:df:f6:bb:00:8c:3f:05: db:d6:a0:fd:cd:b6:3a:64:37:c1:ca:58:94:cb:7d:d6:ed:6e: 26:94:d4:94:c6:d6:c1:41:f9:e0:77:0e:15:0b:a0:27:33:12: 81:6a:71:50:b2:6e:b6:6c:bf:dd:32:2b:c6:da:d3:2d:76:f2: 38:51:19:c1:c2:b6:99:07:2e:35:5c:e8:15:68:a8:8d:db:bc: 74:86:48:94:1c:a2:3d:18:35:21:7b:20:39:7b:42:3c:2c:17: 53:20:1f:47:26:41:b1:c2:67:de:17:35:2e:1f:76:29:d5:e8: cf:69:69:33:14:fb:df:f6:48:a6:e3:f2:f7:17:9b:82:67:17: a4:b8:17:00:76:34:77:1e:6e:36:28:41:8f:f2:61:13:a4:a4: 78:65:36:98:d4:75:d4:64:ce:7f:0f:80:e0:4f:30:93:a1:ae: 3f:e4:b0:bc:4b:30:eb:63:d8:f4:81:31:db:af:cb:25:ad:59: 69:80:ef:79:07:c7:81:5f:cb:4f:a6:2f:75:92:b2:d8:06:5e: f2:b0:d9:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fodxXjJMbBBZZ/m8Pmd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmRlYWQ0ZjFkMWM4ZGRhOTZkMWNkMTc4OWQ5ZGQzZTIz YmYxNTMwHhcNMjUxMjIwMTYwMTIzWhcNMjUxMjIxMTYwMTIzWjAzMTEwLwYDVQQD EyhlMTQ2MzIzMWJhYjdhZjhkZGM0YjFkZmFmODJjMTBkYjI5MTMzOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6GQVFONrtZAOKLO5FBYhg4yvv0A XFxk822uaNhgwVJuctR5hl5wTMsYD7ar4AGg9gUDKk7/u0qk7kKAuq7+m6THNbK+ PQHX2EjozN2UqylMW3uEwtqwK3/BsmA3HqGnENb/ScEaXQ9Ax86wlAXN2A7w2v1c lBouzlIqzN3PgGRSalLMG8gqm+9DWwPPmZlzb3DTK6ah1nFaNIujNgBTGn3CwcIp F+Jg2i8F958VYwI085hVcjLqaYu/hKTW3cT/YAPP6GeqPzMXq5Ta5628EaQXocv5 ikwtMmIwVQzoKFhSj+DGp4/B8pJe/60dk/JP0wCQwNo0KhQgyikUbRa/xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFGMjG6t6+N3Esd+vgsENspEzm3MB8GA1UdIwQY MBaAFK696tTx0cjdqW0c0XidndPiO/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjIt ODgzN2NhNjllMzk2LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjItODgzN2NhNjllMzk2 LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxLCftUO 7S33XB0akfpFJ4gbY4c6s+U5WYQ1CppNp1BfEmXExnVCtLyj0GCpiS/f9rsAjD8F 29ag/c22OmQ3wcpYlMt91u1uJpTUlMbWwUH54HcOFQugJzMSgWpxULJutmy/3TIr xtrTLXbyOFEZwcK2mQcuNVzoFWiojdu8dIZIlByiPRg1IXsgOXtCPCwXUyAfRyZB scJn3hc1Lh92KdXoz2lpMxT73/ZIpuPy9xebgmcXpLgXAHY0dx5uNihBj/JhE6Sk eGU2mNR11GTOfw+A4E8wk6GuP+SwvEsw62PY9IEx26/LJa1ZaYDveQfHgV/LT6Yv dZKy2AZe8rDZxA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:00:54 2025 by rpki-client