This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft File: tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft (raw, json) Hash identifier: GFT2YQypaQKc9MxGFkW5RfQfyZRI2gN91qcnNavGwig= Subject key identifier: 10:89:74:F0:5E:9A:01:CF:87:26:90:4A:A3:DD:F7:A3:33:C9:3D:77 Authority key identifier: B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0 Certificate issuer: /CN=b6bde8794b0a0d88f92967f5084e4c38199613a0 Certificate serial: 019B3EDA508DD1FF83F8D0062FC7A3BCF2B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft Manifest number: 11 Signing time: Sun 21 Dec 2025 03:00:53 +0000 Manifest this update: Sun 21 Dec 2025 03:00:53 +0000 Manifest next update: Mon 22 Dec 2025 03:00:53 +0000 Files and hashes: 1: YJtWWkd40LeFmgY7B3XEmPng2QU.roa (hash: rjscWRDiq39+sDx2H9BVMRCDWFFnJdKD35VGGtGde4k=) 2: tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl (hash: P1Ejb5XSAxJ2V9h0tOPI9cGp+iH+ineGpKMb9oq7UsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:50:8d:d1:ff:83:f8:d0:06:2f:c7:a3:bc:f2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6bde8794b0a0d88f92967f5084e4c38199613a0 Validity Not Before: Dec 21 03:00:53 2025 GMT Not After : Dec 22 03:00:53 2025 GMT Subject: CN=108974f05e9a01cf8726904aa3ddf7a333c93d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a8:00:37:d2:d6:91:62:fc:27:5e:2a:f5:93: 25:45:4b:f1:13:18:34:64:be:cc:f8:0e:57:36:0b: 40:2c:c6:fa:36:74:0d:6b:14:0b:a1:d4:b1:d4:a8: 96:04:e8:3a:cb:71:a0:5c:49:98:22:34:a9:91:9c: 7e:6b:37:30:99:24:ac:f3:61:d5:8c:d0:7e:46:e5: 28:da:dd:bd:a6:be:ce:63:62:3f:f5:f8:a7:95:e3: 72:bf:44:d3:e7:f8:ad:c2:31:b5:e9:7f:27:2b:d8: b5:0b:3e:fa:08:4e:cd:2b:97:00:bf:0b:ee:35:1e: b4:d1:70:07:23:c3:8c:cb:c5:b9:9a:99:01:7d:ce: 07:2a:21:45:f7:2f:ae:3b:30:ed:6e:74:2f:06:97: c1:d2:bb:96:00:21:8e:6d:88:da:f2:df:43:c8:21: ea:29:9a:30:ec:74:7d:d9:79:78:f7:e1:81:d2:e4: a4:98:81:d8:81:8b:bc:dd:42:3f:0f:27:6a:4f:a5: 96:56:d9:8e:78:43:e2:28:2e:85:f1:75:06:cc:1c: be:2b:05:62:14:5c:83:ae:bd:ef:9a:3e:b8:cf:31: d5:06:b3:4c:81:11:3a:c9:ea:38:1e:46:b3:a5:f7: d1:63:44:88:19:55:63:6c:ba:d4:ad:69:e7:17:43: dc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:89:74:F0:5E:9A:01:CF:87:26:90:4A:A3:DD:F7:A3:33:C9:3D:77 X509v3 Authority Key Identifier: keyid:B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3a:8f:b1:70:7e:0a:06:eb:b3:fb:c0:e7:46:e0:d0:52:bf: a3:f2:01:64:d0:ba:8e:a9:46:3c:96:12:20:e6:9c:ae:d0:2b: 58:97:53:cf:54:63:35:2b:f2:5f:58:d8:0a:1c:d7:c1:9d:f7: b4:1c:2b:52:84:a5:bd:32:15:a8:a7:80:71:3f:0f:c4:d1:5b: 3b:61:b2:82:c7:a0:be:ce:ca:e6:fb:73:9f:4f:24:47:8c:36: d3:39:ea:b8:8c:72:f1:47:85:1a:47:34:a1:f7:92:c4:44:94: 8a:80:6c:89:00:5b:a2:11:62:a2:9a:36:81:46:ce:f6:8d:a0: 73:53:4a:0b:0d:d2:07:eb:ec:7f:9b:b4:22:79:58:82:89:2b: bd:45:2c:2d:8a:c5:72:54:be:01:2e:b1:c7:66:0b:cd:71:2f: 77:c7:d1:02:2a:4b:88:a6:ed:e9:60:5d:f6:bd:31:c2:e3:76: e6:b7:1b:83:5f:17:fc:e0:09:bb:35:18:91:7b:49:b0:67:04: 07:9e:8b:7c:cb:0c:bd:1a:46:8e:c5:af:50:f2:0e:31:a6:81: c0:30:2e:f1:69:bd:c8:bd:77:b8:21:54:e0:8e:20:f0:ea:a6: cd:bc:04:82:f1:72:64:15:71:81:7a:d4:6a:29:58:81:8f:51: 7e:d3:2f:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2lCN0f+D+NAGL8ejvPKyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YmRlODc5NGIwYTBkODhmOTI5NjdmNTA4NGU0YzM4MTk5 NjEzYTAwHhcNMjUxMjIxMDMwMDUzWhcNMjUxMjIyMDMwMDUzWjAzMTEwLwYDVQQD EygxMDg5NzRmMDVlOWEwMWNmODcyNjkwNGFhM2RkZjdhMzMzYzkzZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qgAN9LWkWL8J14q9ZMlRUvxExg0 ZL7M+A5XNgtALMb6NnQNaxQLodSx1KiWBOg6y3GgXEmYIjSpkZx+azcwmSSs82HV jNB+RuUo2t29pr7OY2I/9finleNyv0TT5/itwjG16X8nK9i1Cz76CE7NK5cAvwvu NR600XAHI8OMy8W5mpkBfc4HKiFF9y+uOzDtbnQvBpfB0ruWACGObYja8t9DyCHq KZow7HR92Xl49+GB0uSkmIHYgYu83UI/DydqT6WWVtmOeEPiKC6F8XUGzBy+KwVi FFyDrr3vmj64zzHVBrNMgRE6yeo4HkazpffRY0SIGVVjbLrUrWnnF0PcJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCJdPBemgHPhyaQSqPd96MzyT13MB8GA1UdIwQY MBaAFLa96HlLCg2I+Sln9QhOTDgZlhOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHIzb2VVc0tEWWo1S1dmMUNFNU1PQm1XRTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85OGFhMGItZDhiMy00MTA5LThmOGIt MjBlNTljZjkyNjg2LzEvdHIzb2VVc0tEWWo1S1dmMUNFNU1PQm1XRTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85OGFhMGItZDhiMy00MTA5LThmOGItMjBlNTljZjkyNjg2 LzEvdHIzb2VVc0tEWWo1S1dmMUNFNU1PQm1XRTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDqPsXB+ Cgbrs/vA50bg0FK/o/IBZNC6jqlGPJYSIOacrtArWJdTz1RjNSvyX1jYChzXwZ33 tBwrUoSlvTIVqKeAcT8PxNFbO2Gygsegvs7K5vtzn08kR4w20znquIxy8UeFGkc0 ofeSxESUioBsiQBbohFiopo2gUbO9o2gc1NKCw3SB+vsf5u0InlYgokrvUUsLYrF clS+AS6xx2YLzXEvd8fRAipLiKbt6WBd9r0xwuN25rcbg18X/OAJuzUYkXtJsGcE B56LfMsMvRpGjsWvUPIOMaaBwDAu8Wm9yL13uCFU4I4g8OqmzbwEgvFyZBVxgXrU ailYgY9RftMvDQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:29:11 2025 by rpki-client