This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json) Hash identifier: iz4J68tGREvaT2MzH7GPh/2RcJYGKI2wdq/DLTiEyjI= Subject key identifier: FF:E1:A6:67:8B:0E:07:5A:7B:7A:41:0C:41:5F:A3:E4:87:C0:75:47 Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38 Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338 Certificate serial: 019B3D22E558E1F7868F40D5CDD398212297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft Manifest number: 162F Signing time: Sat 20 Dec 2025 19:00:55 +0000 Manifest this update: Sat 20 Dec 2025 19:00:55 +0000 Manifest next update: Sun 21 Dec 2025 19:00:55 +0000 Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: zWq2sANg7Y3t88tvfA/YHbXGuuP/O35pZ6g7yXxuhuU=) 2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=) 3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:e5:58:e1:f7:86:8f:40:d5:cd:d3:98:21:22:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338 Validity Not Before: Dec 20 19:00:55 2025 GMT Not After : Dec 21 19:00:55 2025 GMT Subject: CN=ffe1a6678b0e075a7b7a410c415fa3e487c07547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:ea:af:cc:c2:9e:66:11:93:f2:18:a2:6b: 64:f7:98:05:1b:9a:21:c8:47:3e:6e:57:7b:d7:91: f4:06:74:16:63:77:3d:4f:be:b3:c3:41:21:11:79: 82:7a:ea:e5:87:f1:df:55:6d:05:08:63:4a:d5:7d: 9b:1c:83:ae:60:32:f0:0f:15:22:8f:64:7c:b6:ad: af:34:99:cc:84:59:22:9f:e1:16:88:0c:5c:b1:b4: 43:b6:49:be:11:6b:ef:43:16:11:54:55:c7:70:cf: 97:27:f1:dc:c3:40:1b:34:1a:aa:37:cf:e3:e0:97: 00:f2:e4:cd:9c:65:f0:f0:d5:cb:31:6d:c1:98:dd: 54:9b:c2:b8:a8:91:72:e4:e9:6c:22:b9:69:22:a1: 1d:72:45:bd:17:cf:85:11:f7:83:ce:bd:c4:9c:f7: 81:4b:06:c3:3b:26:6f:1d:77:1a:32:06:ad:b9:6f: dd:09:0d:8c:fe:20:e8:47:65:0f:0f:03:48:d1:32: 1a:3d:3d:85:88:16:38:18:30:61:36:dc:c9:0b:d9: ac:7a:e2:4e:d4:42:e3:ec:57:28:e3:56:e4:c8:95: 13:63:5d:13:da:27:73:b7:b6:54:80:6b:33:bd:ca: 9f:2c:0c:3f:e9:ba:e0:6d:e6:11:90:06:bf:18:69: a7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E1:A6:67:8B:0E:07:5A:7B:7A:41:0C:41:5F:A3:E4:87:C0:75:47 X509v3 Authority Key Identifier: keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:31:e2:6f:52:40:f4:cb:9e:90:33:a0:74:9b:8e:d8:b1:1e: 44:68:14:48:1a:dc:45:87:79:c3:78:ee:d9:ef:67:8d:7d:99: 6b:ef:c6:bf:f9:5d:e4:e0:9a:54:9d:41:48:2f:a8:da:42:0a: 11:37:c0:65:bc:4b:a5:ce:ff:22:38:1a:13:81:21:dd:67:1c: 7f:ef:b2:ec:d4:32:bc:23:7a:dc:df:0d:6c:d5:3b:c9:d2:3d: d9:c5:7f:b3:15:93:ba:a3:0c:7d:1d:82:6b:7e:e0:10:f4:47: 6c:2c:2d:94:a0:1a:02:cd:26:3f:46:91:00:bb:cc:93:5e:5f: 7e:80:73:26:f7:5f:db:7b:eb:fe:20:87:bf:e3:6d:81:59:1e: 47:d7:dc:7d:bc:08:7d:4e:83:50:f7:5c:44:27:df:db:ae:08: fc:ac:32:cd:18:c2:01:2d:be:1e:aa:88:de:f9:05:67:ef:cf: 50:f2:bd:d7:1a:af:e9:fa:06:d3:b0:a8:69:cd:13:3c:45:25: 8b:1f:4b:45:1d:e1:54:35:a3:7f:af:d4:4a:9c:05:f6:1c:b2: e4:f3:74:2d:12:0e:04:41:ba:73:0e:80:ae:ab:34:f6:9f:93: e7:0e:68:7d:dc:fb:eb:fd:75:8a:42:5a:72:5e:f8:14:35:c8: 85:70:a6:c0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs9IuVY4feGj0DVzdOYISKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzgyYjc4ZjIwYTZlNGI3MDY0MzA1MmJkMWE0MGFmMTVh NTYzMzgwHhcNMjUxMjIwMTkwMDU1WhcNMjUxMjIxMTkwMDU1WjAzMTEwLwYDVQQD EyhmZmUxYTY2NzhiMGUwNzVhN2I3YTQxMGM0MTVmYTNlNDg3YzA3NTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzrqr8zCnmYRk/IYomtk95gFG5oh yEc+bld715H0BnQWY3c9T76zw0EhEXmCeurlh/HfVW0FCGNK1X2bHIOuYDLwDxUi j2R8tq2vNJnMhFkin+EWiAxcsbRDtkm+EWvvQxYRVFXHcM+XJ/Hcw0AbNBqqN8/j 4JcA8uTNnGXw8NXLMW3BmN1Um8K4qJFy5OlsIrlpIqEdckW9F8+FEfeDzr3EnPeB SwbDOyZvHXcaMgatuW/dCQ2M/iDoR2UPDwNI0TIaPT2FiBY4GDBhNtzJC9mseuJO 1ELj7Fco41bkyJUTY10T2idzt7ZUgGszvcqfLAw/6brgbeYRkAa/GGmnOwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFP/hpmeLDgdae3pBDEFfo+SHwHVHMB8GA1UdIwQY MBaAFPt4K3jyCm5LcGQwUr0aQK8VpWM4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zZ3JlUElLYmt0d1pEQlN2UnBBcnhXbFl6Zy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOWRjOTMzLTVjMGQtNDQ2MS1hNDVk LThmN2Q1NjkxYzFiZS8xLzEtM2dyZVBJS2JrdHdaREJTdlJwQXJ4V2xZemcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2UzLzlkYzkzMy01YzBkLTQ0NjEtYTQ1ZC04ZjdkNTY5MWMx YmUvMS8xLTNncmVQSUtia3R3WkRCU3ZScEFyeFdsWXpnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTHi b1JA9MuekDOgdJuO2LEeRGgUSBrcRYd5w3ju2e9njX2Za+/Gv/ld5OCaVJ1BSC+o 2kIKETfAZbxLpc7/IjgaE4Eh3Wccf++y7NQyvCN63N8NbNU7ydI92cV/sxWTuqMM fR2Ca37gEPRHbCwtlKAaAs0mP0aRALvMk15ffoBzJvdf23vr/iCHv+NtgVkeR9fc fbwIfU6DUPdcRCff264I/KwyzRjCAS2+HqqI3vkFZ+/PUPK91xqv6foG07Coac0T PEUlix9LRR3hVDWjf6/USpwF9hyy5PN0LRIOBEG6cw6Arqs09p+T5w5ofdz76/11 ikJacl74FDXIhXCmwA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:15 2025 by rpki-client