This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json) Hash identifier: FLtLeuGKvFkdWiKOWb5w6E6tHINJ2oVmvP+ofrjpi2E= Subject key identifier: 3B:15:B0:4E:BE:C8:AB:A7:B2:71:2D:01:6D:A7:C1:F1:28:5C:AC:20 Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b Certificate serial: 019B6D6AA2154C533C006C75FE0A77166582 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft Manifest number: 17B3 Signing time: Tue 30 Dec 2025 04:01:03 +0000 Manifest this update: Tue 30 Dec 2025 04:01:03 +0000 Manifest next update: Wed 31 Dec 2025 04:01:03 +0000 Files and hashes: 1: MTPWLW2wZKUX3rd5H2fglwcmRP8.roa (hash: NV6d77rjaDRaqkT0W7HOp+x3FnU/qH62m4QIfaIEmLM=) 2: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: BdSEmDSogn+baLievddSUfEfCPGY8qSo+MJHkj4mSXQ=) 3: zMsRcKOONscECgINX74a-U1WNU0.roa (hash: 6TWMzzay/K1ed+s9hSmFCHo0y4lDFCLVPqVrZje4kuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:a2:15:4c:53:3c:00:6c:75:fe:0a:77:16:65:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b Validity Not Before: Dec 30 04:01:03 2025 GMT Not After : Dec 31 04:01:03 2025 GMT Subject: CN=3b15b04ebec8aba7b2712d016da7c1f1285cac20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:fb:17:b1:69:1f:4c:1e:87:03:8a:73:3c: f6:c4:73:ce:51:07:b1:c5:e8:d8:95:df:18:62:c9: 10:07:95:74:8c:26:c4:91:d7:78:0b:72:d0:f0:c9: d5:f8:ee:ef:4b:7a:d6:32:74:97:b6:61:d4:59:8c: b9:ec:8c:6d:10:51:f4:c6:1b:1c:aa:c4:3d:8e:7e: 05:22:b7:dc:87:78:ce:a0:7f:76:70:04:2e:10:02: 24:03:9c:91:e9:32:54:0f:d8:b2:4c:6e:09:a1:ce: cb:0f:dd:df:b4:3c:03:6d:37:a4:bd:28:98:6b:df: af:5f:3b:ad:7f:27:2a:ef:9d:81:d2:f7:00:e7:84: b0:88:0b:73:bf:9d:46:11:9e:75:ab:3b:56:09:ec: 69:0f:51:76:c3:e9:9f:4e:5f:06:ac:d0:56:43:07: 42:97:5e:74:0f:2a:7a:bb:18:f5:3e:0c:e6:ec:71: 8a:15:38:4f:3b:dd:48:0f:bb:48:c5:3b:d2:9b:85: f2:7d:33:8e:90:06:ac:25:7d:e7:ca:eb:12:0f:fd: 2b:2c:f6:e2:5f:44:9f:7f:3a:76:27:c0:75:77:f4: e5:ed:fe:3e:a1:0d:f4:d4:27:1c:cd:3e:19:5d:ac: ec:8a:a0:6c:ee:25:a5:14:52:37:c6:87:be:b4:57: f2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:15:B0:4E:BE:C8:AB:A7:B2:71:2D:01:6D:A7:C1:F1:28:5C:AC:20 X509v3 Authority Key Identifier: keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:45:28:cb:9c:10:dc:fc:d5:07:bb:ce:0f:16:25:82:63:ba: e8:ee:3e:0a:50:73:0c:6f:19:24:d5:76:45:52:ff:79:20:d8: e6:f1:7f:0c:e6:50:38:be:3d:d7:27:a7:5c:d2:a6:8e:ee:51: a6:b9:56:b5:a5:61:37:b9:67:73:cf:cc:c3:0b:df:18:c4:d6: af:8e:36:28:5d:19:64:1b:19:83:ed:02:ea:39:25:bc:6c:b8: 97:90:d4:17:81:95:e9:df:95:75:f4:16:dc:9d:7b:95:c2:bd: 01:52:f4:d5:d6:d3:34:01:64:17:f0:e5:ce:3d:4b:d5:0c:e0: cb:5c:5c:6b:03:83:42:c2:1e:28:b5:fe:aa:4a:43:b2:b5:8a: b2:7f:37:58:ed:4b:d4:85:dc:b4:d3:94:e3:9b:94:3b:3a:1f: e8:24:19:3e:29:c9:6f:89:16:55:05:f8:08:eb:0b:1d:0d:c1: 69:0a:d7:cd:60:5a:b6:ba:c8:1d:75:fa:13:61:34:db:25:51: ab:a0:03:0a:71:55:fa:f0:12:8b:70:00:d1:9f:d8:ba:8e:49: 13:9f:9a:5e:98:55:b0:34:09:c5:d0:f3:6a:f7:32:cc:48:46: a1:7d:b3:45:5e:8d:53:85:58:62:fe:9d:98:e0:0d:4d:90:c7: 6c:03:a7:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttaqIVTFM8AGx1/gp3FmWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzMzZTlkZTk0ODViNDQ2NzFjOGU1MTFkYTIyMWU0MTUz YzcxMWIwHhcNMjUxMjMwMDQwMTAzWhcNMjUxMjMxMDQwMTAzWjAzMTEwLwYDVQQD EygzYjE1YjA0ZWJlYzhhYmE3YjI3MTJkMDE2ZGE3YzFmMTI4NWNhYzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutP7F7FpH0wehwOKczz2xHPOUQex xejYld8YYskQB5V0jCbEkdd4C3LQ8MnV+O7vS3rWMnSXtmHUWYy57IxtEFH0xhsc qsQ9jn4FIrfch3jOoH92cAQuEAIkA5yR6TJUD9iyTG4Joc7LD93ftDwDbTekvSiY a9+vXzutfycq752B0vcA54SwiAtzv51GEZ51qztWCexpD1F2w+mfTl8GrNBWQwdC l150Dyp6uxj1Pgzm7HGKFThPO91ID7tIxTvSm4XyfTOOkAasJX3nyusSD/0rLPbi X0Sffzp2J8B1d/Tl7f4+oQ301CcczT4ZXazsiqBs7iWlFFI3xoe+tFfyJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsVsE6+yKunsnEtAW2nwfEoXKwgMB8GA1UdIwQY MBaAFLdzPp3pSFtEZxyOUR2iIeQVPHEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUt NTE4Y2QxNDcxM2ViLzEvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUtNTE4Y2QxNDcxM2Vi LzEvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUUoy5wQ 3PzVB7vODxYlgmO66O4+ClBzDG8ZJNV2RVL/eSDY5vF/DOZQOL491yenXNKmju5R prlWtaVhN7lnc8/MwwvfGMTWr442KF0ZZBsZg+0C6jklvGy4l5DUF4GV6d+VdfQW 3J17lcK9AVL01dbTNAFkF/Dlzj1L1Qzgy1xcawODQsIeKLX+qkpDsrWKsn83WO1L 1IXctNOU45uUOzof6CQZPinJb4kWVQX4COsLHQ3BaQrXzWBatrrIHXX6E2E02yVR q6ADCnFV+vASi3AA0Z/Yuo5JE5+aXphVsDQJxdDzavcyzEhGoX2zRV6NU4VYYv6d mOANTZDHbAOnrg== -----END CERTIFICATE-----Generated at Tue Dec 30 12:30:53 2025 by rpki-client