This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft File: R3faFXdoQj_LqSFzkux_SDs7lEI.mft (raw, json) Hash identifier: CggAtdR/yyjruFx0W8a7Hf4d5ZZMqwZSldi+CARK1y4= Subject key identifier: 85:39:8B:FC:F8:83:15:09:BB:CC:F9:A4:5F:85:B4:0F:4C:99:3F:B0 Authority key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42 Certificate issuer: /CN=4777da157768423fcba9217392ec7f483b3b9442 Certificate serial: 019B39B3F9EFFB0A7523E17265BF0F8A184A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 03:00:54 +0000 Manifest this update: Sat 20 Dec 2025 03:00:54 +0000 Manifest next update: Sun 21 Dec 2025 03:00:54 +0000 Files and hashes: 1: Q3JTPjWcEREqifdCmIjbHLzzn7s.roa (hash: vaz4o+tAP641StTPMvLecOpfelAjJS1sX1oCmpWNCoo=) 2: R3faFXdoQj_LqSFzkux_SDs7lEI.crl (hash: h3iHrxnbOEe39zeYS4bUmYxgM4vehV40QihYeZS+udQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:f9:ef:fb:0a:75:23:e1:72:65:bf:0f:8a:18:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4777da157768423fcba9217392ec7f483b3b9442 Validity Not Before: Dec 20 03:00:54 2025 GMT Not After : Dec 21 03:00:54 2025 GMT Subject: CN=85398bfcf8831509bbccf9a45f85b40f4c993fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6b:31:03:68:3d:bd:89:4a:2a:5b:f6:84:d5: d6:b1:d1:68:7a:b6:aa:d6:e2:af:e4:9f:69:3a:e5: 54:ff:d8:f4:b6:fc:de:74:8a:47:58:4e:ff:5f:62: f2:a2:3f:bb:5d:b4:cc:fb:58:6b:fe:71:8f:c3:02: ff:8d:8f:4f:28:e2:6b:3b:82:3b:0e:37:75:c7:88: c6:00:85:e6:54:8b:ae:fa:b6:f1:dd:fb:ad:f2:73: 6f:09:f4:8f:8b:44:51:ba:ec:28:ba:70:14:be:2f: 90:a4:51:b8:ea:71:15:5a:e5:a6:8a:7b:2a:96:57: a1:52:bb:08:dd:e5:76:42:c8:c5:ce:5e:71:2d:4f: f0:0d:fd:6e:26:73:37:42:14:5a:8b:e6:75:e4:52: 79:b9:b8:3a:64:f9:2f:22:aa:e2:69:cc:2b:37:13: e9:38:31:3d:19:52:ee:17:ca:bd:4d:12:6a:72:15: 63:c7:14:87:da:21:42:d9:c7:87:7d:c6:68:0d:f8: 5c:56:13:8b:e5:14:4e:33:27:a7:ed:bb:e3:79:bc: 4b:14:28:b1:ec:89:b9:a4:a6:a8:4c:f6:bb:fc:46: 3a:75:5d:ce:4b:fa:34:e5:3c:4a:9b:ec:03:de:f6: 2a:f7:3c:c0:6a:32:9c:87:8a:28:e1:f6:34:8a:a8: 62:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:39:8B:FC:F8:83:15:09:BB:CC:F9:A4:5F:85:B4:0F:4C:99:3F:B0 X509v3 Authority Key Identifier: keyid:47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:86:94:6f:fe:a8:4b:13:c0:ad:64:bd:75:49:36:c1:ad:01: bd:7e:1b:88:ed:f4:5d:11:e4:74:29:49:f4:20:29:61:64:5d: f3:99:97:22:b5:66:49:6c:e5:96:7f:f1:c2:3b:48:07:54:a5: 56:95:11:65:6d:d2:64:05:e8:81:3b:95:96:72:ed:d8:b7:e8: fc:5b:69:71:6d:b0:a1:a3:4c:fc:6a:c5:43:4d:e6:9a:fc:5d: 28:be:1c:8f:8c:61:42:48:b6:a9:32:a5:ae:7c:3d:b4:97:77: 47:e4:c5:f4:5a:5b:54:6d:c4:1f:dc:1c:22:ce:b9:7d:ed:0f: bf:23:b2:50:b8:ae:03:0b:54:19:08:e9:0d:5b:4f:01:67:af: 56:0f:aa:a1:e0:c0:34:19:b7:65:16:2a:35:35:f0:94:8b:cb: bd:fa:59:c2:3e:82:5e:5e:a0:09:c1:7d:94:f7:eb:5e:79:7b: 83:14:5d:fa:52:60:3f:a9:a2:b4:30:64:13:d2:06:55:e8:7a: c6:1a:e0:f0:e8:0f:bc:24:a5:35:4d:e6:9c:a7:25:92:4a:64: 3a:53:44:d0:45:da:56:f7:46:9e:84:6f:f0:7d:3c:f7:bb:1a: 48:6b:f2:6b:8c:a8:bf:7a:70:7b:76:67:e4:37:75:8a:ca:5a: df:b1:5f:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s/nv+wp1I+FyZb8PihhKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzdkYTE1Nzc2ODQyM2ZjYmE5MjE3MzkyZWM3ZjQ4M2Iz Yjk0NDIwHhcNMjUxMjIwMDMwMDU0WhcNMjUxMjIxMDMwMDU0WjAzMTEwLwYDVQQD Eyg4NTM5OGJmY2Y4ODMxNTA5YmJjY2Y5YTQ1Zjg1YjQwZjRjOTkzZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12sxA2g9vYlKKlv2hNXWsdFoeraq 1uKv5J9pOuVU/9j0tvzedIpHWE7/X2Lyoj+7XbTM+1hr/nGPwwL/jY9PKOJrO4I7 Djd1x4jGAIXmVIuu+rbx3fut8nNvCfSPi0RRuuwounAUvi+QpFG46nEVWuWminsq llehUrsI3eV2QsjFzl5xLU/wDf1uJnM3QhRai+Z15FJ5ubg6ZPkvIqriacwrNxPp ODE9GVLuF8q9TRJqchVjxxSH2iFC2ceHfcZoDfhcVhOL5RROMyen7bvjebxLFCix 7Im5pKaoTPa7/EY6dV3OS/o05TxKm+wD3vYq9zzAajKch4oo4fY0iqhiEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIU5i/z4gxUJu8z5pF+FtA9MmT+wMB8GA1UdIwQY MBaAFEd32hV3aEI/y6khc5Lsf0g7O5RCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iMjFhMzgtZGI2Mi00NDM4LWJhOWMt ZjU3Zjg2ZGY0ZjE2LzEvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9iMjFhMzgtZGI2Mi00NDM4LWJhOWMtZjU3Zjg2ZGY0ZjE2 LzEvUjNmYUZYZG9Ral9McVNGemt1eF9TRHM3bEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYaUb/6o SxPArWS9dUk2wa0BvX4biO30XRHkdClJ9CApYWRd85mXIrVmSWzlln/xwjtIB1Sl VpURZW3SZAXogTuVlnLt2Lfo/FtpcW2woaNM/GrFQ03mmvxdKL4cj4xhQki2qTKl rnw9tJd3R+TF9FpbVG3EH9wcIs65fe0PvyOyULiuAwtUGQjpDVtPAWevVg+qoeDA NBm3ZRYqNTXwlIvLvfpZwj6CXl6gCcF9lPfrXnl7gxRd+lJgP6mitDBkE9IGVeh6 xhrg8OgPvCSlNU3mnKclkkpkOlNE0EXaVvdGnoRv8H0897saSGvya4yov3pwe3Zn 5Dd1ispa37FfLQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:30:17 2025 by rpki-client