This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json) Hash identifier: WvAmC3X1MzYG/XG/WMGdpNO28GddL9sgmB9gcaEaZEQ= Subject key identifier: D3:FE:ED:A5:A9:43:06:B4:65:C9:B1:4F:E6:F0:03:F8:64:D8:89:C7 Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4 Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4 Certificate serial: 019B0E5BACBDD0C74A91A986A67A1E63FA8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft Manifest number: 024A Signing time: Thu 11 Dec 2025 17:00:47 +0000 Manifest this update: Thu 11 Dec 2025 17:00:47 +0000 Manifest next update: Fri 12 Dec 2025 17:00:47 +0000 Files and hashes: 1: 1-zM-AxIs8xBhVggB7kaXu3nKz6g.roa (hash: LftIky1Ihf5BPrdrifEnWJNrxUQ7AoG9kgjyQfCqmf0=) 2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: fYnqeAdCb//HnR7dXDqq4SgtOuZ9Usx9IgmNmRNYmmU=) 3: g2bIRp1_Ofi7tBEEaDVHCapdwAY.roa (hash: mKK0SH1X7uOReLc+h1naUYfsSMGvNovIT24/wKrbp8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:ac:bd:d0:c7:4a:91:a9:86:a6:7a:1e:63:fa:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4 Validity Not Before: Dec 11 17:00:47 2025 GMT Not After : Dec 12 17:00:47 2025 GMT Subject: CN=d3feeda5a94306b465c9b14fe6f003f864d889c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:99:87:36:df:35:22:dc:d5:ca:f6:66:2f: 22:f1:77:8d:b1:02:83:62:50:da:fa:7f:e6:b1:e6: d2:e3:fa:9d:e3:88:c4:a8:61:25:67:6e:46:29:1b: 84:7e:81:54:00:ec:95:7a:de:91:93:b1:41:9f:81: 8e:e4:c3:0c:2c:e0:f2:35:35:3e:43:73:b6:a7:bb: f3:5a:a5:a1:f9:af:8f:a8:f1:a0:49:0e:be:e7:81: 1b:d5:38:4b:7b:d7:99:6b:7e:a4:93:a6:cf:63:2c: ba:1c:d2:c3:d6:e7:3a:e7:89:cf:85:34:46:44:e4: 55:de:91:ef:b9:b1:0e:f1:db:e3:96:f2:9e:d8:43: 5e:ef:7c:a1:55:47:6d:d6:7f:47:84:46:b8:5e:a5: 65:87:07:b2:ad:ed:2e:39:62:d6:f0:8e:28:b7:1f: 36:85:ba:a1:b0:3b:9a:b0:e9:68:34:60:6f:ba:32: 7c:33:cc:98:9d:2d:46:9b:ae:bf:f1:dc:da:28:d4: ca:cf:2b:12:11:04:44:17:b0:4a:10:73:de:76:f5: 52:ca:8a:a1:21:46:3f:0d:16:9b:3d:a9:d1:69:09: 69:8f:5a:41:f9:ae:ea:14:31:f6:f9:05:64:bd:0b: 64:ff:66:80:06:de:e0:78:24:2d:02:63:70:f7:c8: 5f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FE:ED:A5:A9:43:06:B4:65:C9:B1:4F:E6:F0:03:F8:64:D8:89:C7 X509v3 Authority Key Identifier: keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:1d:0a:77:ba:df:77:1e:47:05:aa:c0:ed:b8:b9:04:07:f6: d6:1e:db:0d:3b:75:ce:88:b9:ac:9a:d9:43:9c:f0:31:3c:7f: 77:f4:f2:9c:40:a9:67:76:59:63:22:33:d3:27:da:a2:fe:ad: bd:20:d2:7a:e6:6d:b8:46:fb:a2:76:a6:81:86:11:43:d2:29: c2:0c:13:ce:a4:7e:f4:7c:90:de:a6:01:62:e8:78:f7:73:95: 16:12:2e:97:c2:a6:44:3b:8a:d1:7b:c9:db:f1:b6:0a:b1:a1: 32:50:f7:1e:74:a2:ba:68:49:68:77:e1:9d:e6:3d:68:cf:e9: f9:73:30:5a:55:a7:87:f7:6d:ca:88:e2:63:17:2e:80:be:9f: 46:45:83:00:e4:86:f4:6c:e1:8b:cd:b7:14:fd:3d:50:c8:9c: db:1b:10:fd:c2:84:76:0e:c7:ec:e8:f3:85:e8:8f:dc:32:2d: 29:7a:c1:e5:72:e7:07:c5:5a:11:84:92:d1:af:af:d1:71:fe: df:ab:f0:b0:0f:4a:61:e2:99:ac:29:19:e8:22:ca:16:e2:7f: 30:92:59:72:d5:d7:a5:44:9e:d7:0a:4e:c7:31:eb:13:e4:59: 07:74:c9:a4:dd:7a:7e:d4:38:a7:a5:f9:bb:ea:02:f7:22:f0: b3:a8:b7:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW6y90MdKkamGpnoeY/qLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNzNiMDU2ZjhkMGZhOTk2ZDY4MzNjMzBiMWZkNzhlN2Q5 NzlhYzQwHhcNMjUxMjExMTcwMDQ3WhcNMjUxMjEyMTcwMDQ3WjAzMTEwLwYDVQQD EyhkM2ZlZWRhNWE5NDMwNmI0NjVjOWIxNGZlNmYwMDNmODY0ZDg4OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG+ZhzbfNSLc1cr2Zi8i8XeNsQKD YlDa+n/msebS4/qd44jEqGElZ25GKRuEfoFUAOyVet6Rk7FBn4GO5MMMLODyNTU+ Q3O2p7vzWqWh+a+PqPGgSQ6+54Eb1ThLe9eZa36kk6bPYyy6HNLD1uc654nPhTRG RORV3pHvubEO8dvjlvKe2ENe73yhVUdt1n9HhEa4XqVlhweyre0uOWLW8I4otx82 hbqhsDuasOloNGBvujJ8M8yYnS1Gm66/8dzaKNTKzysSEQREF7BKEHPedvVSyoqh IUY/DRabPanRaQlpj1pB+a7qFDH2+QVkvQtk/2aABt7geCQtAmNw98hf0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNP+7aWpQwa0ZcmxT+bwA/hk2InHMB8GA1UdIwQY MBaAFE9zsFb40PqZbWgzwwsf1459l5rEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDNPd1Z2alEtcGx0YURQREN4X1hqbjJYbXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yYWNiOGYtMjIyZi00NDczLTkyMDUt MTM5MGEyZDk5ZTBiLzEvVDNPd1Z2alEtcGx0YURQREN4X1hqbjJYbXNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yYWNiOGYtMjIyZi00NDczLTkyMDUtMTM5MGEyZDk5ZTBi LzEvVDNPd1Z2alEtcGx0YURQREN4X1hqbjJYbXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiB0Kd7rf dx5HBarA7bi5BAf21h7bDTt1zoi5rJrZQ5zwMTx/d/TynECpZ3ZZYyIz0yfaov6t vSDSeuZtuEb7onamgYYRQ9IpwgwTzqR+9HyQ3qYBYuh493OVFhIul8KmRDuK0XvJ 2/G2CrGhMlD3HnSiumhJaHfhneY9aM/p+XMwWlWnh/dtyojiYxcugL6fRkWDAOSG 9Gzhi823FP09UMic2xsQ/cKEdg7H7OjzheiP3DItKXrB5XLnB8VaEYSS0a+v0XH+ 36vwsA9KYeKZrCkZ6CLKFuJ/MJJZctXXpUSe1wpOxzHrE+RZB3TJpN16ftQ4p6X5 u+oC9yLws6i3fw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:18:38 2025 by rpki-client