This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json) Hash identifier: ih3IH21HCXgfGOaSxy2MN0lCkca4ODgAjCUp4v3urQY= Subject key identifier: FB:90:69:A0:AF:58:43:1E:BC:56:98:67:5C:75:0A:42:9F:F3:FB:AD Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0 Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0 Certificate serial: 019B1203117E86C01B092160F1D4670F0275 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft Manifest number: 1775 Signing time: Fri 12 Dec 2025 10:02:29 +0000 Manifest this update: Fri 12 Dec 2025 10:02:29 +0000 Manifest next update: Sat 13 Dec 2025 10:02:29 +0000 Files and hashes: 1: JlKwrg5m2lqERiKY6JmlhVBin6Y.roa (hash: BkRh9N3Osfkv0XYuGUi4VGfe9yFTNu672Q4bahAacS8=) 2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: N8MNfif9J6NrgHb0JQF0yDPYpXgJnD9WGhMUMKiRWSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:03:11:7e:86:c0:1b:09:21:60:f1:d4:67:0f:02:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0 Validity Not Before: Dec 12 10:02:29 2025 GMT Not After : Dec 13 10:02:29 2025 GMT Subject: CN=fb9069a0af58431ebc5698675c750a429ff3fbad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:76:0c:60:99:8b:23:d9:fe:f2:70:da:50:ca: 1c:e9:ae:aa:f5:1e:a2:40:de:6c:0b:9a:db:e3:10: 2b:87:68:48:2b:8e:b3:11:07:05:38:eb:da:b3:c9: 2b:ac:a4:3d:2b:e3:d9:c7:60:7b:90:19:c4:db:b8: b0:0a:12:d8:2a:5a:5a:e3:3b:22:68:63:39:cd:be: 4b:5c:aa:d6:2d:94:17:97:0e:90:ac:ea:d7:9b:9b: 38:4e:e3:9b:75:d1:46:4a:58:89:f5:12:ba:ae:ef: 45:5d:31:73:5f:5f:5d:f2:12:50:c8:91:85:cb:f3: 17:44:e7:45:88:fc:32:8f:87:10:1c:13:23:7a:c6: ed:1e:f5:95:e8:7c:c8:e6:83:50:b2:c5:bd:ed:83: 29:25:9b:27:a4:31:56:a8:88:64:15:d9:5d:cb:c9: 01:88:ed:ca:c2:68:e2:a0:00:75:23:72:3b:5e:a2: 88:64:af:6b:11:25:a9:0f:01:34:b9:cd:5b:38:9f: 76:e0:73:6f:41:55:34:bc:d9:42:5b:26:98:a9:48: 01:42:1b:78:b6:3e:cf:71:df:26:fb:f4:f5:29:f2: 53:fc:00:3a:54:06:ed:81:c4:fa:3d:07:c4:87:ae: 41:6a:c1:3a:a1:f8:5a:39:5a:32:b9:80:4f:f3:0b: f4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:90:69:A0:AF:58:43:1E:BC:56:98:67:5C:75:0A:42:9F:F3:FB:AD X509v3 Authority Key Identifier: keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:a2:a9:38:6f:d0:96:b3:bc:2a:dc:0c:84:34:51:22:33:c1: 8b:dd:d1:b2:04:24:ea:1d:9a:9f:fb:d0:88:6b:73:0d:ec:9c: cc:09:1f:39:0e:be:39:15:33:0b:93:8b:19:ab:90:fd:b9:73: f5:01:c0:ac:50:3a:e5:6e:ce:c7:09:67:1c:26:c3:60:bb:6f: 1d:aa:ae:80:92:07:a0:ad:6c:25:43:b2:c7:67:e1:de:35:2f: a1:3d:83:d1:86:b9:77:32:ba:90:f1:68:01:c8:9b:e4:5e:6b: 4d:eb:d4:bd:00:35:04:81:65:47:ea:8c:45:73:a8:c7:45:f6: 31:dd:de:db:11:74:1f:0c:e2:5c:21:50:e4:9c:c9:fc:f1:1a: c1:49:97:34:1c:4f:2f:f8:a8:e4:4a:21:97:cf:25:a5:03:a8: 89:d5:1e:84:02:f7:ee:e2:e3:8f:cb:eb:08:47:93:2a:5a:41: 68:e4:fb:91:d7:29:cc:13:d9:b2:b4:fa:7d:25:c3:46:9a:33: 1d:45:01:10:02:05:6a:f4:08:b9:96:9a:7f:e2:c5:0f:6b:0a: 36:f0:08:4c:82:6f:e9:3e:db:9c:4e:97:1b:82:8c:90:99:45: dd:b4:ab:60:c6:df:a2:c6:a4:ec:56:c0:da:1c:02:cd:ff:7b: 1c:04:8a:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAxF+hsAbCSFg8dRnDwJ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNzQ5ZWExYjk5NzliZmYyY2QzMDY2OTQ4ZjgzNWRkNTRj ZWRlYzAwHhcNMjUxMjEyMTAwMjI5WhcNMjUxMjEzMTAwMjI5WjAzMTEwLwYDVQQD EyhmYjkwNjlhMGFmNTg0MzFlYmM1Njk4Njc1Yzc1MGE0MjlmZjNmYmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23YMYJmLI9n+8nDaUMoc6a6q9R6i QN5sC5rb4xArh2hIK46zEQcFOOvas8krrKQ9K+PZx2B7kBnE27iwChLYKlpa4zsi aGM5zb5LXKrWLZQXlw6QrOrXm5s4TuObddFGSliJ9RK6ru9FXTFzX19d8hJQyJGF y/MXROdFiPwyj4cQHBMjesbtHvWV6HzI5oNQssW97YMpJZsnpDFWqIhkFdldy8kB iO3KwmjioAB1I3I7XqKIZK9rESWpDwE0uc1bOJ924HNvQVU0vNlCWyaYqUgBQht4 tj7Pcd8m+/T1KfJT/AA6VAbtgcT6PQfEh65BasE6ofhaOVoyuYBP8wv0LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuQaaCvWEMevFaYZ1x1CkKf8/utMB8GA1UdIwQY MBaAFLN0nqG5l5v/LNMGaUj4Nd1Uzt7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hYzM3YzMtY2M0Zi00NDU2LWI5NTgt ZTM1OTA5MDE4YTMzLzEvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9hYzM3YzMtY2M0Zi00NDU2LWI5NTgtZTM1OTA5MDE4YTMz LzEvczNTZW9ibVhtXzhzMHdacFNQZzEzVlRPM3NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyKKpOG/Q lrO8KtwMhDRRIjPBi93RsgQk6h2an/vQiGtzDeyczAkfOQ6+ORUzC5OLGauQ/blz 9QHArFA65W7OxwlnHCbDYLtvHaqugJIHoK1sJUOyx2fh3jUvoT2D0Ya5dzK6kPFo Acib5F5rTevUvQA1BIFlR+qMRXOox0X2Md3e2xF0HwziXCFQ5JzJ/PEawUmXNBxP L/io5Eohl88lpQOoidUehAL37uLjj8vrCEeTKlpBaOT7kdcpzBPZsrT6fSXDRpoz HUUBEAIFavQIuZaaf+LFD2sKNvAITIJv6T7bnE6XG4KMkJlF3bSrYMbfosak7FbA 2hwCzf97HASKEw== -----END CERTIFICATE-----Generated at Fri Dec 12 14:19:43 2025 by rpki-client