This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft File: R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json) Hash identifier: 36TQmcY2h3iJgZzvMDQd6lzI9lSVvSng1qnOWQiWrxc= Subject key identifier: 1D:FA:AC:17:24:11:9E:71:AD:8D:3E:36:0A:C0:A2:BF:BD:9A:93:CE Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f Certificate serial: 019B5A88D314EE5F8B15839009F669F9C4E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 12:01:14 +0000 Manifest this update: Fri 26 Dec 2025 12:01:14 +0000 Manifest next update: Sat 27 Dec 2025 12:01:14 +0000 Files and hashes: 1: K4szTGDgWu8YAkp3B3AunTFhsNY.roa (hash: ZlMWPu4zKIGTz35MfDokFAisIKFFE+qRN3bSmh9wdso=) 2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: LHfVOdDjvZCnyaipffDqlAmT5clMTJ40HFnWpJ31AtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:d3:14:ee:5f:8b:15:83:90:09:f6:69:f9:c4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f Validity Not Before: Dec 26 12:01:14 2025 GMT Not After : Dec 27 12:01:14 2025 GMT Subject: CN=1dfaac1724119e71ad8d3e360ac0a2bfbd9a93ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:0f:4b:bf:3b:1e:23:de:99:fb:b1:62:dd: 78:99:19:71:40:76:6e:c7:f6:ff:de:57:16:2d:52: 35:91:1f:fa:1e:bc:0a:1e:39:a4:b8:11:57:0a:9d: 1b:3b:e4:15:40:36:ab:23:96:29:31:09:21:81:1f: 08:1a:ae:22:7f:9f:af:b9:6d:34:40:60:1b:e1:9f: 9d:78:41:06:f1:f6:e9:6b:da:da:20:09:14:1c:a9: e8:e4:7e:e4:d7:75:ba:c0:15:2a:f3:f0:f2:9f:4f: 40:f6:4f:f7:ec:c6:1a:27:54:2f:2f:59:0d:f8:04: 98:2d:e7:a5:26:07:b5:14:d2:2e:e3:a1:48:68:44: a6:76:57:b7:bb:03:d5:d3:5b:76:7a:12:f7:cf:8d: 88:52:0a:54:d5:12:9c:6e:83:57:00:44:8b:17:0a: 7c:f3:73:e4:77:bc:bb:36:1e:ea:85:be:9a:59:30: 1e:55:ba:d9:e8:29:78:da:38:38:04:3a:3f:10:ab: c9:46:02:67:07:52:41:95:92:63:91:8a:fe:12:9a: 9c:43:f7:aa:33:45:eb:ce:61:8b:03:6f:9f:8f:ef: 50:57:91:ac:84:0f:25:de:16:8c:1c:41:a1:45:4f: 77:9b:6e:4f:f9:29:88:d6:f4:39:8f:02:df:47:34: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FA:AC:17:24:11:9E:71:AD:8D:3E:36:0A:C0:A2:BF:BD:9A:93:CE X509v3 Authority Key Identifier: keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8d:51:df:c8:15:c2:2d:22:38:69:ad:4f:65:7c:3e:ba:60: 1a:f1:7e:a5:74:48:a4:fd:9c:52:05:8f:06:64:55:f2:8b:21: 8a:e5:ae:c8:64:2d:f2:4d:79:ac:10:43:6e:cd:07:4e:ac:7d: af:cb:26:a4:78:1c:f7:3e:9e:28:36:47:ef:4d:a6:c3:54:39: 47:9e:82:a4:a1:55:d2:d6:5a:2a:01:68:72:c8:40:2e:34:c1: f2:65:09:38:2a:cb:d4:93:80:39:bc:b0:b9:fe:23:25:32:20: 97:f7:4c:41:24:ad:dc:c8:57:db:29:ee:a5:56:d0:68:f5:58: 13:40:86:64:70:f5:29:84:c4:0d:57:26:2d:b0:77:41:ac:bd: 82:26:7e:1a:18:6c:5c:b7:31:76:3c:d9:e2:2f:c4:2c:92:b8: 57:76:18:ff:7b:d1:90:10:95:c9:18:9a:b8:71:32:40:1e:6d: b0:4c:03:26:2d:8c:8c:f1:56:c5:76:9b:e2:39:34:f2:e5:9d: 2f:4e:51:84:b3:b8:7d:fa:70:4a:e0:78:55:16:46:e9:f6:15: 67:4d:e9:12:d2:ea:5a:76:59:b9:f6:c0:ba:e6:85:6c:b2:2a: fa:b4:56:6a:a3:0a:7d:84:0b:95:21:92:95:e6:0f:3e:67:7a: b0:af:0d:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiNMU7l+LFYOQCfZp+cTgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzQxZTdjNzU4ZDQ4MDQxM2I1ZjFiMDA2MDYxMTI5N2U0 NDAzNmYwHhcNMjUxMjI2MTIwMTE0WhcNMjUxMjI3MTIwMTE0WjAzMTEwLwYDVQQD EygxZGZhYWMxNzI0MTE5ZTcxYWQ4ZDNlMzYwYWMwYTJiZmJkOWE5M2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9QPS787HiPemfuxYt14mRlxQHZu x/b/3lcWLVI1kR/6HrwKHjmkuBFXCp0bO+QVQDarI5YpMQkhgR8IGq4if5+vuW00 QGAb4Z+deEEG8fbpa9raIAkUHKno5H7k13W6wBUq8/Dyn09A9k/37MYaJ1QvL1kN +ASYLeelJge1FNIu46FIaESmdle3uwPV01t2ehL3z42IUgpU1RKcboNXAESLFwp8 83Pkd7y7Nh7qhb6aWTAeVbrZ6Cl42jg4BDo/EKvJRgJnB1JBlZJjkYr+EpqcQ/eq M0XrzmGLA2+fj+9QV5GshA8l3haMHEGhRU93m25P+SmI1vQ5jwLfRzRPAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB36rBckEZ5xrY0+NgrAor+9mpPOMB8GA1UdIwQY MBaAFEd0Hnx1jUgEE7XxsAYGESl+RANvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81MDI5NGQtOGNjNS00OWQzLTkzMTIt NzI3YjFiNTgzZWI2LzEvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy81MDI5NGQtOGNjNS00OWQzLTkzMTItNzI3YjFiNTgzZWI2 LzEvUjNRZWZIV05TQVFUdGZHd0JnWVJLWDVFQTI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP41R38gV wi0iOGmtT2V8PrpgGvF+pXRIpP2cUgWPBmRV8oshiuWuyGQt8k15rBBDbs0HTqx9 r8smpHgc9z6eKDZH702mw1Q5R56CpKFV0tZaKgFocshALjTB8mUJOCrL1JOAObyw uf4jJTIgl/dMQSSt3MhX2ynupVbQaPVYE0CGZHD1KYTEDVcmLbB3Qay9giZ+Ghhs XLcxdjzZ4i/ELJK4V3YY/3vRkBCVyRiauHEyQB5tsEwDJi2MjPFWxXab4jk08uWd L05RhLO4ffpwSuB4VRZG6fYVZ03pEtLqWnZZufbAuuaFbLIq+rRWaqMKfYQLlSGS leYPPmd6sK8NWQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:50 2025 by rpki-client