This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json) Hash identifier: KkIWpBCkgRUGrT2Ny5tjJMsSSO5XGX48H0Q4yTX0rx8= Subject key identifier: CD:D4:DC:68:D9:89:DD:79:66:A0:62:49:62:6A:51:1A:99:4E:03:A3 Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42 Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442 Certificate serial: 019B35D714D1274356E4353921110E34046B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 09:00:46 +0000 Manifest this update: Fri 19 Dec 2025 09:00:46 +0000 Manifest next update: Sat 20 Dec 2025 09:00:46 +0000 Files and hashes: 1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=) 2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: 51t0InH05cQHKBnS02jXK/WUxCHuwN0saF3SH+xOW2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:14:d1:27:43:56:e4:35:39:21:11:0e:34:04:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442 Validity Not Before: Dec 19 09:00:46 2025 GMT Not After : Dec 20 09:00:46 2025 GMT Subject: CN=cdd4dc68d989dd7966a06249626a511a994e03a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:17:80:96:b6:bf:06:38:1a:10:aa:f3:c7: c0:29:e2:06:2c:c9:2e:e0:86:88:36:30:0c:73:1d: a0:d2:b4:eb:57:8b:08:3e:64:a6:88:f2:a6:e6:b0: 47:c9:a9:cc:ad:ae:10:99:2c:10:26:51:8b:76:1d: 90:56:0d:0e:10:b5:dc:a6:b0:c4:2b:49:b6:2d:75: bb:d9:1b:ec:3e:b1:8a:cd:2c:f7:59:ff:f6:4c:83: da:e4:d7:04:41:0b:e8:5f:76:df:c9:43:94:48:46: 43:50:ad:37:bd:08:80:db:f5:ec:3a:b9:3d:c4:d5: 8f:1d:cb:76:d4:e4:3d:dc:f2:2d:56:8d:e4:c9:57: 18:22:ea:15:06:7d:65:a4:57:29:0a:67:bb:8f:06: 38:c4:d4:eb:db:7a:c0:e9:0d:f1:eb:3b:64:4c:c2: 02:29:7a:7c:22:8b:6e:da:87:bc:31:81:29:2f:3c: fc:20:0e:50:62:43:52:26:02:0c:6f:9d:f2:70:64: 05:78:37:71:d8:37:55:52:97:0f:73:00:b0:d4:af: 54:88:bb:02:af:eb:ed:97:50:fa:9d:51:06:9f:79: 11:12:43:ea:69:15:4a:56:73:8e:3b:6c:fa:dd:98: 3b:d8:1c:d1:b4:de:f4:39:5b:6f:62:2e:ba:fc:fd: 5e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D4:DC:68:D9:89:DD:79:66:A0:62:49:62:6A:51:1A:99:4E:03:A3 X509v3 Authority Key Identifier: keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c8:65:f3:a4:b3:eb:9e:bf:b6:4f:fa:a2:a0:52:02:41:95: 72:14:e0:20:a4:67:a9:fd:80:6e:53:dd:b7:d3:12:17:cd:a7: f0:21:60:1a:da:9d:db:0e:e8:11:ad:44:ff:bc:e6:b7:5d:72: 0a:f6:d8:52:23:e0:dd:d7:b3:4c:f3:71:3e:e0:be:d9:6c:7b: 35:ee:36:6e:10:1d:07:ba:b7:9a:d4:d0:da:bc:2f:8f:58:7a: a1:87:44:df:21:f0:2d:6a:af:60:64:81:c1:9d:dc:e1:03:f0: 80:db:3d:d3:d1:a4:b3:e2:6a:af:59:ae:ae:9e:31:02:fe:bb: 31:7b:44:85:17:1f:3a:87:b2:77:d9:76:01:cf:1b:08:65:08: ea:08:0c:de:ba:0f:11:40:9d:26:61:8e:85:5d:64:5f:27:27: c2:ec:d5:16:41:28:2d:bf:c4:e6:94:8a:89:ed:f7:62:40:b0: 97:f1:99:62:1a:26:d0:51:68:55:59:f1:f8:5a:d5:68:32:ef: 06:c9:d8:50:65:45:f0:86:4d:59:fc:d7:65:3c:37:ce:87:c4: 2c:f9:e9:7c:bf:7e:ee:37:51:a4:91:2d:a5:5c:98:61:d6:fd: c4:46:e4:34:02:15:b6:6e:b9:cf:00:a4:7a:3b:47:41:4f:6c: 1b:d3:ae:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11xTRJ0NW5DU5IREONARrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzdkYTE1Nzc2ODQyM2ZjYmE5MjE3MzkyZWM3ZjQ4M2Iz Yjk0NDIwHhcNMjUxMjE5MDkwMDQ2WhcNMjUxMjIwMDkwMDQ2WjAzMTEwLwYDVQQD EyhjZGQ0ZGM2OGQ5ODlkZDc5NjZhMDYyNDk2MjZhNTExYTk5NGUwM2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPgXgJa2vwY4GhCq88fAKeIGLMku 4IaINjAMcx2g0rTrV4sIPmSmiPKm5rBHyanMra4QmSwQJlGLdh2QVg0OELXcprDE K0m2LXW72RvsPrGKzSz3Wf/2TIPa5NcEQQvoX3bfyUOUSEZDUK03vQiA2/XsOrk9 xNWPHct21OQ93PItVo3kyVcYIuoVBn1lpFcpCme7jwY4xNTr23rA6Q3x6ztkTMIC KXp8Iotu2oe8MYEpLzz8IA5QYkNSJgIMb53ycGQFeDdx2DdVUpcPcwCw1K9UiLsC r+vtl1D6nVEGn3kREkPqaRVKVnOOO2z63Zg72BzRtN70OVtvYi66/P1e9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3U3GjZid15ZqBiSWJqURqZTgOjMB8GA1UdIwQY MBaAFEd32hV3aEI/y6khc5Lsf0g7O5RCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iMjFhMzgtZGI2Mi00NDM4LWJhOWMt ZjU3Zjg2ZGY0ZjE2LzEvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9iMjFhMzgtZGI2Mi00NDM4LWJhOWMtZjU3Zjg2ZGY0ZjE2 LzEvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMhl86Sz 656/tk/6oqBSAkGVchTgIKRnqf2AblPdt9MSF82n8CFgGtqd2w7oEa1E/7zmt11y CvbYUiPg3dezTPNxPuC+2Wx7Ne42bhAdB7q3mtTQ2rwvj1h6oYdE3yHwLWqvYGSB wZ3c4QPwgNs909Gks+Jqr1murp4xAv67MXtEhRcfOoeyd9l2Ac8bCGUI6ggM3roP EUCdJmGOhV1kXycnwuzVFkEoLb/E5pSKie33YkCwl/GZYhom0FFoVVnx+FrVaDLv BsnYUGVF8IZNWfzXZTw3zofELPnpfL9+7jdRpJEtpVyYYdb9xEbkNAIVtm65zwCk ejtHQU9sG9Ou3Q== -----END CERTIFICATE-----Generated at Fri Dec 19 18:46:14 2025 by rpki-client