This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft File: R3BGWvTHI2RwAFnnll08iepGPNc.mft (raw, json) Hash identifier: V+4tRBALUBE9v2BghmHqPYGz/BpMZg7ilLa8Q2nVQCo= Subject key identifier: 65:12:5B:E6:07:71:E6:8B:3A:AA:6F:1B:15:4C:60:6A:C5:F1:CC:9B Authority key identifier: 47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7 Certificate issuer: /CN=4770465af4c72364700059e7965d3c89ea463cd7 Certificate serial: 019B4FCE15BCE1DABD633BA368113D405C55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft Manifest number: 1148 Signing time: Wed 24 Dec 2025 10:01:04 +0000 Manifest this update: Wed 24 Dec 2025 10:01:04 +0000 Manifest next update: Thu 25 Dec 2025 10:01:04 +0000 Files and hashes: 1: R3BGWvTHI2RwAFnnll08iepGPNc.crl (hash: 9eywmzsqhfW+m3d2Fn8InkQ4EOQznCVV8YBh33W0skc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:15:bc:e1:da:bd:63:3b:a3:68:11:3d:40:5c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4770465af4c72364700059e7965d3c89ea463cd7 Validity Not Before: Dec 24 10:01:04 2025 GMT Not After : Dec 25 10:01:04 2025 GMT Subject: CN=65125be60771e68b3aaa6f1b154c606ac5f1cc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e2:d5:af:ba:2f:9f:e0:da:5e:7a:d4:09:40: 62:f8:70:31:55:22:10:b4:09:cd:26:8f:9f:7d:4b: ad:fc:87:4e:ba:49:02:df:83:df:06:e6:1d:a0:e1: 6e:ee:2b:83:57:07:53:7d:4e:9f:fe:24:53:14:ca: eb:59:7e:e3:81:49:3f:b5:d3:87:db:3f:66:65:79: 6c:2a:75:bb:ca:38:e4:4e:7c:c2:32:cc:03:b4:30: 85:74:be:4d:65:c1:d5:c0:e8:d9:06:11:f7:6d:00: 6c:aa:8c:1b:32:ef:c7:b9:19:7c:fa:1c:c8:34:f5: 59:03:ec:e7:45:2c:be:90:c9:57:64:58:c9:93:31: 31:a7:ef:1f:4b:70:d4:12:c6:b6:34:d8:dc:ab:d0: ef:57:32:ad:10:7c:85:87:1a:16:36:6b:c2:7d:dc: bd:e9:1c:75:1d:50:e5:45:5c:61:9d:72:39:7e:1f: 73:32:8e:cf:c8:bc:88:15:e1:84:db:c4:89:75:51: 88:84:1d:fa:9e:be:e5:78:27:18:0b:4d:65:a8:58: 67:8f:c0:c4:f8:af:df:f2:90:f8:65:75:3d:63:15: da:80:88:61:6a:b4:42:5e:79:b4:64:19:54:81:37: e3:5c:db:e8:23:c7:f2:9b:ad:cb:86:50:7e:32:20: d7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:12:5B:E6:07:71:E6:8B:3A:AA:6F:1B:15:4C:60:6A:C5:F1:CC:9B X509v3 Authority Key Identifier: keyid:47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e5:e2:78:40:72:0c:7a:22:c6:4b:2a:68:70:3a:c0:30:02: be:35:03:1a:4f:c4:c3:9a:23:03:a5:3e:07:5c:11:bd:df:5a: b5:5f:f9:e9:08:95:f7:cf:3c:a1:4f:38:8e:7b:50:f3:a8:e3: 73:12:6f:df:06:e5:a0:9e:a3:b9:8e:08:ae:80:8f:73:ce:76: 0e:f9:7a:75:d3:66:67:b8:02:a2:19:67:66:02:5a:af:a6:3c: 13:23:c6:79:f0:49:13:21:77:c8:1d:0a:46:07:e9:70:34:a3: 6e:22:e4:f6:35:cf:5e:a7:36:67:bf:70:5e:6c:5e:31:22:05: 31:11:ee:14:fe:aa:6f:e3:6e:15:bc:85:e7:45:32:04:b1:f4: 63:ba:9d:1a:f7:77:c1:52:2a:fc:5e:c6:cf:d0:1b:40:e6:25: d0:64:ed:7b:60:d1:c1:3b:0a:7a:7d:53:d3:5e:f9:be:53:ce: 43:0b:5d:11:3a:bb:69:2a:e7:30:47:20:cf:d9:f1:d7:2a:51: 54:f3:bd:b0:59:80:d4:f1:7a:69:f1:7e:1d:10:e1:dd:02:aa: 5b:c2:aa:03:35:41:7c:9d:3d:71:49:96:5f:39:85:1a:db:0e: 16:b0:44:2c:30:6c:8a:44:7c:bf:f4:3e:9f:21:fe:05:53:53: 0c:f4:8d:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzhW84dq9YzujaBE9QFxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzA0NjVhZjRjNzIzNjQ3MDAwNTllNzk2NWQzYzg5ZWE0 NjNjZDcwHhcNMjUxMjI0MTAwMTA0WhcNMjUxMjI1MTAwMTA0WjAzMTEwLwYDVQQD Eyg2NTEyNWJlNjA3NzFlNjhiM2FhYTZmMWIxNTRjNjA2YWM1ZjFjYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeLVr7ovn+DaXnrUCUBi+HAxVSIQ tAnNJo+ffUut/IdOukkC34PfBuYdoOFu7iuDVwdTfU6f/iRTFMrrWX7jgUk/tdOH 2z9mZXlsKnW7yjjkTnzCMswDtDCFdL5NZcHVwOjZBhH3bQBsqowbMu/HuRl8+hzI NPVZA+znRSy+kMlXZFjJkzExp+8fS3DUEsa2NNjcq9DvVzKtEHyFhxoWNmvCfdy9 6Rx1HVDlRVxhnXI5fh9zMo7PyLyIFeGE28SJdVGIhB36nr7leCcYC01lqFhnj8DE +K/f8pD4ZXU9YxXagIhharRCXnm0ZBlUgTfjXNvoI8fym63LhlB+MiDXrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUSW+YHceaLOqpvGxVMYGrF8cybMB8GA1UdIwQY MBaAFEdwRlr0xyNkcABZ55ZdPInqRjzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85N2QwOWItZTVlMS00N2Y4LWIyNWYt OGE5MmUwOWJmZTFiLzEvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85N2QwOWItZTVlMS00N2Y4LWIyNWYtOGE5MmUwOWJmZTFi LzEvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+XieEBy DHoixksqaHA6wDACvjUDGk/Ew5ojA6U+B1wRvd9atV/56QiV9888oU84jntQ86jj cxJv3wbloJ6juY4IroCPc852Dvl6ddNmZ7gCohlnZgJar6Y8EyPGefBJEyF3yB0K RgfpcDSjbiLk9jXPXqc2Z79wXmxeMSIFMRHuFP6qb+NuFbyF50UyBLH0Y7qdGvd3 wVIq/F7Gz9AbQOYl0GTte2DRwTsKen1T0175vlPOQwtdETq7aSrnMEcgz9nx1ypR VPO9sFmA1PF6afF+HRDh3QKqW8KqAzVBfJ09cUmWXzmFGtsOFrBELDBsikR8v/Q+ nyH+BVNTDPSNug== -----END CERTIFICATE-----Generated at Wed Dec 24 18:05:31 2025 by rpki-client