This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json) Hash identifier: 5RmVOLam+04ail03Ax/WaLDLO/ABy0r7KeglWr/LcvU= Subject key identifier: E3:FA:11:90:45:31:34:D2:4C:B8:2C:2E:03:9F:4B:12:E4:D2:2B:10 Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44 Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44 Certificate serial: 019B3C7F8C3C22B2E9429DF4F9D9E965F697 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft Manifest number: 074F Signing time: Sat 20 Dec 2025 16:02:30 +0000 Manifest this update: Sat 20 Dec 2025 16:02:30 +0000 Manifest next update: Sun 21 Dec 2025 16:02:30 +0000 Files and hashes: 1: DgYaKXLAfCciJB45PdY6jb3nvSM.roa (hash: 3wQZIj5q2hejLISAuXVPv02HNSLvrU3fDX6SOnePruk=) 2: iLJZ457a-7z02PhFWjv4cGHT93U.roa (hash: NESsCi8hLaoKvM16NOOEv6MVC+cF28ZWv23JeL3C9tw=) 3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: MnVc5sJ4UCcd8n7G8Uuf85uj9dWgzpfbFNQOnzU6LWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:8c:3c:22:b2:e9:42:9d:f4:f9:d9:e9:65:f6:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44 Validity Not Before: Dec 20 16:02:30 2025 GMT Not After : Dec 21 16:02:30 2025 GMT Subject: CN=e3fa1190453134d24cb82c2e039f4b12e4d22b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:56:84:e5:d9:55:6a:f5:48:4e:13:de:e5:e9: f0:05:ea:05:80:f8:88:23:bd:1d:4d:05:93:7e:a1: a0:8b:5c:cd:38:4d:3f:90:16:b1:8b:c1:30:62:75: b0:8f:91:25:36:ca:7f:28:92:ec:7f:e4:46:31:71: 13:77:d5:0a:73:62:e7:f3:df:f5:71:fa:bd:aa:43: 68:59:50:ce:31:a8:82:a9:2c:06:49:cc:a8:f8:1b: 1a:93:82:b9:d3:9b:5c:a0:f8:16:c8:8b:1f:59:39: 0c:46:c0:7e:b2:91:fb:81:d0:5d:96:43:e4:96:0f: b4:29:59:5f:85:32:0d:04:df:8d:a4:9f:c2:0a:9c: e1:aa:f0:4b:12:3a:03:d9:a7:92:ea:2c:dd:47:20: ce:d1:8c:32:8f:3b:13:43:6c:63:a4:c8:48:23:d6: 78:79:93:d1:d1:d8:0d:11:86:03:2a:f2:be:82:3d: 0a:2e:1d:ea:7b:8b:01:4c:aa:78:ef:f9:b2:cd:81: 54:18:40:69:9f:05:08:68:e6:c4:cf:17:84:47:2d: 55:13:d0:ca:b2:c3:9e:1e:64:a3:7e:a7:25:40:a1: 1e:a9:e6:42:58:5a:97:76:af:fc:fc:08:8c:a7:62: 46:6a:e1:43:de:80:46:45:de:b3:75:59:3a:cf:d9: eb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FA:11:90:45:31:34:D2:4C:B8:2C:2E:03:9F:4B:12:E4:D2:2B:10 X509v3 Authority Key Identifier: keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:cb:4f:22:83:e4:0a:08:4f:86:d1:69:87:49:e0:29:15:21: 0b:50:ad:66:4c:ac:91:ca:ea:64:c5:ab:a1:3a:23:6d:ba:1f: be:56:85:43:63:15:6c:b8:39:e7:f5:7d:11:e2:c4:11:f4:f2: 21:0a:4c:cc:1a:3b:9d:bf:28:2e:89:e7:43:8e:86:bb:43:cb: 4f:6e:42:85:b0:8b:0f:88:e8:5d:95:5d:51:83:bd:3a:b2:e9: 44:e7:43:83:b0:5e:9e:1b:b2:14:92:b7:49:4d:05:52:cd:2c: 10:a2:be:33:ed:9d:6a:0d:0c:12:5f:30:b8:7b:86:7d:70:4c: 23:41:79:8c:6c:b9:e7:5e:58:48:98:d8:51:e6:e1:6f:20:8a: a4:20:66:da:17:38:c5:03:2d:cc:a1:8e:d6:ec:d6:8e:cb:c4: d2:e2:bd:3d:99:16:d1:42:28:05:ba:81:e6:c3:f4:30:3c:73: db:8f:4b:cb:ce:b7:87:bc:5d:62:c7:47:e2:e8:d3:21:1c:3d: a4:d3:88:4b:a0:5b:c9:48:70:40:de:68:6e:54:c9:30:4c:45: c5:87:66:bf:91:84:41:71:fb:59:89:d7:ec:db:d1:3d:47:24: e0:f6:19:64:ef:36:92:73:e7:76:fa:4a:ea:5c:f5:2b:f3:89: 15:ac:22:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f4w8IrLpQp30+dnpZfaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNzRiODUzZGZkOTk3M2YyY2Q5OTRiMmUzYjc1NDYxZDlh M2ZjNDQwHhcNMjUxMjIwMTYwMjMwWhcNMjUxMjIxMTYwMjMwWjAzMTEwLwYDVQQD EyhlM2ZhMTE5MDQ1MzEzNGQyNGNiODJjMmUwMzlmNGIxMmU0ZDIyYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVaE5dlVavVIThPe5enwBeoFgPiI I70dTQWTfqGgi1zNOE0/kBaxi8EwYnWwj5ElNsp/KJLsf+RGMXETd9UKc2Ln89/1 cfq9qkNoWVDOMaiCqSwGScyo+Bsak4K505tcoPgWyIsfWTkMRsB+spH7gdBdlkPk lg+0KVlfhTINBN+NpJ/CCpzhqvBLEjoD2aeS6izdRyDO0YwyjzsTQ2xjpMhII9Z4 eZPR0dgNEYYDKvK+gj0KLh3qe4sBTKp47/myzYFUGEBpnwUIaObEzxeERy1VE9DK ssOeHmSjfqclQKEeqeZCWFqXdq/8/AiMp2JGauFD3oBGRd6zdVk6z9nrrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOP6EZBFMTTSTLgsLgOfSxLk0isQMB8GA1UdIwQY MBaAFJN0uFPf2Zc/LNmUsuO3VGHZo/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQt NjViY2M4Y2VmZGQyLzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQtNjViY2M4Y2VmZGQy LzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8tPIoPk CghPhtFph0ngKRUhC1CtZkyskcrqZMWroTojbbofvlaFQ2MVbLg55/V9EeLEEfTy IQpMzBo7nb8oLonnQ46Gu0PLT25ChbCLD4joXZVdUYO9OrLpROdDg7BenhuyFJK3 SU0FUs0sEKK+M+2dag0MEl8wuHuGfXBMI0F5jGy5515YSJjYUebhbyCKpCBm2hc4 xQMtzKGO1uzWjsvE0uK9PZkW0UIoBbqB5sP0MDxz249Ly863h7xdYsdH4ujTIRw9 pNOIS6BbyUhwQN5oblTJMExFxYdmv5GEQXH7WYnX7NvRPUck4PYZZO82knPndvpK 6lz1K/OJFawiGw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:25 2025 by rpki-client