This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json) Hash identifier: A2JDonVM5De9P8x5rUYPE+1WWlyG/lcoB2195Ksxbtc= Subject key identifier: BD:48:F0:BA:E8:FC:77:D2:87:7E:20:BB:FA:6B:B9:A9:42:DD:31:87 Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6 Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6 Certificate serial: 019AEC06BA32EC3F19DA6EF6EC27CC804267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft Manifest number: 1033 Signing time: Fri 05 Dec 2025 01:00:55 +0000 Manifest this update: Fri 05 Dec 2025 01:00:55 +0000 Manifest next update: Sat 06 Dec 2025 01:00:55 +0000 Files and hashes: 1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: ulDW0f2iPH217dcD4G1V4tANIuytNdrnDFOZLEmpAo8=) 2: M45Q5osiYzOCttb5qUkWO2UNnW8.roa (hash: 7YD67txjderrmSpgg9cu7S2KQewiqgBNt7grVOcHVbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ec:06:ba:32:ec:3f:19:da:6e:f6:ec:27:cc:80:42:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6 Validity Not Before: Dec 5 01:00:55 2025 GMT Not After : Dec 6 01:00:55 2025 GMT Subject: CN=bd48f0bae8fc77d2877e20bbfa6bb9a942dd3187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:d6:53:5b:b1:0d:08:dc:4c:a3:d8:d4:52: 9d:e7:eb:1b:82:14:92:70:85:89:b5:e7:b0:c5:65: ef:22:39:aa:26:4f:db:41:39:36:a7:fd:46:40:aa: 3d:1f:ba:82:ac:31:32:4b:a2:a2:1c:af:f1:06:d2: 43:20:d7:af:9a:63:bc:a9:ba:31:f0:02:e6:52:23: 6a:1f:f0:6a:8b:fb:f1:02:23:ec:cd:ef:79:04:13: 20:10:39:58:f3:54:8f:2c:75:27:84:73:6d:49:7c: b1:2f:ea:69:f0:66:f7:40:ad:f6:9c:0d:45:55:16: 1c:32:af:b3:c5:8e:7c:08:c6:3e:18:88:bd:23:ff: 3b:d3:d0:cf:b3:e3:d3:49:ca:54:44:6f:14:6c:64: 01:f3:76:0e:a6:0f:86:f6:0c:d3:60:39:17:f5:33: 60:d7:90:ea:8a:eb:77:0d:3c:44:a8:05:7b:0f:6d: 99:26:b8:a7:dc:50:19:bf:ef:5c:77:27:7d:3d:66: e4:1c:c3:fc:fd:32:db:7b:5d:e1:2d:9e:c5:17:69: e8:f6:17:6d:da:55:b8:77:08:18:92:34:ff:d9:38: 70:6b:40:06:58:fa:39:f0:49:56:96:bb:77:5c:5b: 26:19:7a:ee:cf:f2:ce:93:3c:54:04:d4:71:5b:84: 75:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:48:F0:BA:E8:FC:77:D2:87:7E:20:BB:FA:6B:B9:A9:42:DD:31:87 X509v3 Authority Key Identifier: keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:88:bb:35:b5:d2:2d:88:90:7f:1c:cf:d2:e9:2b:03:7e:f8: 60:16:74:89:9b:60:18:85:0f:7f:5e:20:eb:9f:52:79:d0:14: 6b:0e:55:45:e6:9b:32:c9:42:7d:9d:ed:bc:d7:6e:dc:43:5f: 3a:63:37:87:3d:4a:24:d8:1f:8c:48:e8:02:41:30:b5:5a:37: 72:6e:15:bf:e1:16:19:37:bb:0d:c1:45:df:21:5f:0e:63:87: cf:b2:13:d5:a4:32:4f:4e:8d:6f:fb:bd:e6:19:9d:ff:6d:a4: 04:00:a1:7d:77:72:21:c7:ad:95:86:d9:7c:55:8d:5e:07:84: 93:ff:7a:4a:ed:4f:26:5c:10:16:57:e9:38:af:92:8e:49:20: 6e:97:98:48:c9:f6:a5:46:b5:af:57:7e:33:1d:3d:52:c2:84: dc:8b:0c:3e:d2:88:6f:d2:fb:b3:26:8d:7a:5d:73:b9:3b:3b: af:49:b1:ff:41:30:8d:b4:e6:60:35:73:6a:b6:05:6e:a4:0c: de:cf:9e:f1:39:10:e9:99:80:78:5f:d7:b3:22:0f:72:c4:13: 14:1f:47:9b:b0:72:95:aa:3c:36:4a:67:99:85:6a:5f:72:c3: 9a:5f:33:af:3f:4a:45:4a:41:1a:68:07:73:6d:44:3b:72:a8: 2d:63:4a:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrsBroy7D8Z2m727CfMgEJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzhjZmMwOWEzNjNhNzNjYzhkZGEzNjJhMmM5ZTgyMjNk N2RhZDYwHhcNMjUxMjA1MDEwMDU1WhcNMjUxMjA2MDEwMDU1WjAzMTEwLwYDVQQD EyhiZDQ4ZjBiYWU4ZmM3N2QyODc3ZTIwYmJmYTZiYjlhOTQyZGQzMTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqODWU1uxDQjcTKPY1FKd5+sbghSS cIWJteewxWXvIjmqJk/bQTk2p/1GQKo9H7qCrDEyS6KiHK/xBtJDINevmmO8qbox 8ALmUiNqH/Bqi/vxAiPsze95BBMgEDlY81SPLHUnhHNtSXyxL+pp8Gb3QK32nA1F VRYcMq+zxY58CMY+GIi9I/8709DPs+PTScpURG8UbGQB83YOpg+G9gzTYDkX9TNg 15Dqiut3DTxEqAV7D22ZJrin3FAZv+9cdyd9PWbkHMP8/TLbe13hLZ7FF2no9hdt 2lW4dwgYkjT/2Thwa0AGWPo58ElWlrt3XFsmGXruz/LOkzxUBNRxW4R15wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1I8Lro/HfSh34gu/prualC3TGHMB8GA1UdIwQY MBaAFBd4z8CaNjpzzI3aNiosnoIj19rWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wOTAxMmYtYjRmNi00ZGY3LWI1NjIt MDEwY2YyZGQ0MGFmLzEvRjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wOTAxMmYtYjRmNi00ZGY3LWI1NjItMDEwY2YyZGQ0MGFm LzEvRjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYi7NbXS LYiQfxzP0ukrA374YBZ0iZtgGIUPf14g659SedAUaw5VReabMslCfZ3tvNdu3ENf OmM3hz1KJNgfjEjoAkEwtVo3cm4Vv+EWGTe7DcFF3yFfDmOHz7IT1aQyT06Nb/u9 5hmd/22kBAChfXdyIcetlYbZfFWNXgeEk/96Su1PJlwQFlfpOK+SjkkgbpeYSMn2 pUa1r1d+Mx09UsKE3IsMPtKIb9L7syaNel1zuTs7r0mx/0EwjbTmYDVzarYFbqQM 3s+e8TkQ6ZmAeF/XsyIPcsQTFB9Hm7Bylao8NkpnmYVqX3LDml8zrz9KRUpBGmgH c21EO3KoLWNKuA== -----END CERTIFICATE-----Generated at Fri Dec 5 07:51:40 2025 by rpki-client