This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft File: t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json) Hash identifier: gRIPr6EMSp2QjGH9xi2fgrLYMqeo/GlRW4BB6rAzKyA= Subject key identifier: 80:1C:C4:6A:06:98:54:EF:29:D1:3E:13:DD:4B:A7:4F:35:4F:5E:FB Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4 Certificate issuer: /CN=b770877fe07df49a216814ade701d087b11693b4 Certificate serial: 019B3757AADFD8C1CAD5ACD78B97B32221BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft Manifest number: 05CA Signing time: Fri 19 Dec 2025 16:00:50 +0000 Manifest this update: Fri 19 Dec 2025 16:00:50 +0000 Manifest next update: Sat 20 Dec 2025 16:00:50 +0000 Files and hashes: 1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: Rb59mo6KyiWLMLnYGydVDLcuYFEXimF+hGK5AhZ7/2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:aa:df:d8:c1:ca:d5:ac:d7:8b:97:b3:22:21:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b770877fe07df49a216814ade701d087b11693b4 Validity Not Before: Dec 19 16:00:50 2025 GMT Not After : Dec 20 16:00:50 2025 GMT Subject: CN=801cc46a069854ef29d13e13dd4ba74f354f5efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:18:0e:aa:c9:7c:62:2c:c4:5f:e5:fb:ca:00: ec:86:73:d4:72:e4:b5:94:af:20:63:70:83:01:24: ac:d2:93:fa:ea:87:bf:db:de:98:53:54:61:4c:5e: 88:b5:fa:f3:b0:b0:38:7b:b0:39:4f:06:2c:10:40: ea:ee:bd:d4:3c:42:89:e3:ae:63:7f:17:c0:d2:98: 94:79:70:8b:a2:9f:bf:d8:8c:92:d5:54:94:9e:60: 53:40:ef:05:06:12:6c:98:9c:ae:c4:f0:61:f7:c1: 11:6f:b8:a8:6b:c4:2d:37:a0:e6:f2:74:63:0d:81: 35:bd:5d:17:a8:f5:2a:a7:8c:b2:45:fb:8a:37:5d: 27:ee:d7:35:b9:98:21:a3:fd:43:20:f0:b9:4a:5c: a8:4f:57:0d:16:63:e1:b6:ff:a6:94:3f:ae:2f:d4: ea:16:8e:d4:08:b1:9c:3e:d2:b8:66:90:5a:8d:7d: ea:d5:f0:bf:de:10:d9:c0:3d:16:00:f9:48:6a:d9: 76:77:8e:50:8b:f5:17:8e:d5:96:5c:a8:c3:4c:e5: c9:c6:69:2d:49:1c:a0:80:76:67:c8:d4:bd:48:5a: c4:e2:c2:7c:2f:e5:14:8d:07:cc:8a:90:e1:33:e7: 39:8b:aa:66:f7:0a:44:46:08:41:69:7b:1d:91:ea: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1C:C4:6A:06:98:54:EF:29:D1:3E:13:DD:4B:A7:4F:35:4F:5E:FB X509v3 Authority Key Identifier: keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:26:5a:d4:c2:10:7b:b3:48:ea:a7:3c:ed:ee:36:ba:40:bc: b3:6f:d8:44:f8:bf:93:2c:5b:db:aa:67:bf:e0:66:5a:89:1f: d7:2a:6f:3e:42:dc:11:a4:7c:a5:9b:51:b3:b6:3a:6c:b9:eb: 7e:0d:b3:2b:4c:59:92:47:9f:b1:59:6c:0c:59:44:cc:2e:8a: b5:5e:f1:71:ee:b5:bf:e9:32:cc:ad:97:23:16:79:6a:16:4e: 12:ad:a6:ed:55:67:e2:5e:ea:1d:67:39:f0:c5:57:89:29:40: ce:c7:b4:27:7e:60:42:5e:c6:1e:17:a3:a3:4e:bc:8c:5d:af: 3c:12:75:d4:34:db:d2:d5:9a:3f:18:b1:8e:7b:ba:df:61:c2: 1f:9a:c9:08:fd:67:19:01:8f:e1:4f:a5:34:a7:11:18:f8:c4: eb:10:4d:31:f5:3d:3b:ba:70:30:41:fb:5a:9a:f0:3b:cc:73: 39:d4:3f:74:9e:ab:d4:f1:39:9c:79:da:c0:5a:cd:49:94:a1: 65:76:0d:c8:0a:51:6f:a9:1f:05:89:f0:93:f6:db:21:1c:83: 98:1f:78:2b:15:65:e2:7d:b6:41:29:d9:5b:fa:ce:b5:d7:ed: e9:15:b8:16:f3:7a:c6:48:03:42:5d:15:80:40:02:b4:15:bb: 08:04:ab:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V6rf2MHK1azXi5ezIiG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzA4NzdmZTA3ZGY0OWEyMTY4MTRhZGU3MDFkMDg3YjEx NjkzYjQwHhcNMjUxMjE5MTYwMDUwWhcNMjUxMjIwMTYwMDUwWjAzMTEwLwYDVQQD Eyg4MDFjYzQ2YTA2OTg1NGVmMjlkMTNlMTNkZDRiYTc0ZjM1NGY1ZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBgOqsl8YizEX+X7ygDshnPUcuS1 lK8gY3CDASSs0pP66oe/296YU1RhTF6ItfrzsLA4e7A5TwYsEEDq7r3UPEKJ465j fxfA0piUeXCLop+/2IyS1VSUnmBTQO8FBhJsmJyuxPBh98ERb7ioa8QtN6Dm8nRj DYE1vV0XqPUqp4yyRfuKN10n7tc1uZgho/1DIPC5SlyoT1cNFmPhtv+mlD+uL9Tq Fo7UCLGcPtK4ZpBajX3q1fC/3hDZwD0WAPlIatl2d45Qi/UXjtWWXKjDTOXJxmkt SRyggHZnyNS9SFrE4sJ8L+UUjQfMipDhM+c5i6pm9wpERghBaXsdkeqh9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAcxGoGmFTvKdE+E91Lp081T177MB8GA1UdIwQY MBaAFLdwh3/gffSaIWgUrecB0IexFpO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNDSGYtQjk5Sm9oYUJTdDV3SFFoN0VXazdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81Y2MxMjctZTZlYy00ZGExLTg0Njkt YzRhMGU5NzA2NTk3LzEvdDNDSGYtQjk5Sm9oYUJTdDV3SFFoN0VXazdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS81Y2MxMjctZTZlYy00ZGExLTg0NjktYzRhMGU5NzA2NTk3 LzEvdDNDSGYtQjk5Sm9oYUJTdDV3SFFoN0VXazdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCZa1MIQ e7NI6qc87e42ukC8s2/YRPi/kyxb26pnv+BmWokf1ypvPkLcEaR8pZtRs7Y6bLnr fg2zK0xZkkefsVlsDFlEzC6KtV7xce61v+kyzK2XIxZ5ahZOEq2m7VVn4l7qHWc5 8MVXiSlAzse0J35gQl7GHhejo068jF2vPBJ11DTb0tWaPxixjnu632HCH5rJCP1n GQGP4U+lNKcRGPjE6xBNMfU9O7pwMEH7WprwO8xzOdQ/dJ6r1PE5nHnawFrNSZSh ZXYNyApRb6kfBYnwk/bbIRyDmB94KxVl4n22QSnZW/rOtdft6RW4FvN6xkgDQl0V gEACtBW7CASr8Q== -----END CERTIFICATE-----Generated at Sat Dec 20 01:54:24 2025 by rpki-client