This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json) Hash identifier: 73W5N1y8EhORrdMm8v/ef3W7FrmYVzHgPci0cQrnxuc= Subject key identifier: 97:DD:E0:AA:20:F1:D2:70:B6:D5:2E:63:38:5E:23:88:91:55:49:9B Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Certificate serial: 019B071035CF6218B926EDD1759B1F4C6FA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft Manifest number: 176E Signing time: Wed 10 Dec 2025 07:01:01 +0000 Manifest this update: Wed 10 Dec 2025 07:01:01 +0000 Manifest next update: Thu 11 Dec 2025 07:01:01 +0000 Files and hashes: 1: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: Q96jOY0EtfoNxO/OJ29N/NRyOUWuXf49kSmIAOzo3kM=) 2: Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa (hash: jrXo/rmKfJlmke1E58p0Fv3ALUTTjd9LLG6tbA+jiaw=) 3: V04OCx0o1Bg0TgD8MO6kNsFMhog.roa (hash: 3a02UAIxWYHpz8tUKE7mHvONTRM/Wnqwu/RQszMGhpw=) 4: js9oNFtAP6uoXkguET2ifOtGxFk.roa (hash: xlI8bBSGf/iOY2KLlBGfTCvLGclFsfTElrxGe6FfxvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:10:35:cf:62:18:b9:26:ed:d1:75:9b:1f:4c:6f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Validity Not Before: Dec 10 07:01:01 2025 GMT Not After : Dec 11 07:01:01 2025 GMT Subject: CN=97dde0aa20f1d270b6d52e63385e23889155499b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:18:af:60:b9:8c:80:bf:67:b6:be:1f:5c:33: 82:42:b6:89:68:5b:67:e4:23:53:ef:e6:2d:bb:8a: 05:35:18:40:03:aa:82:4d:cc:a6:43:c2:63:55:a3: b5:7f:73:e2:d6:69:a4:22:34:d8:ad:61:5e:9e:5c: 09:8e:5a:1d:e8:49:1f:c6:ca:46:ce:83:e9:86:0a: a6:a8:bd:08:27:95:93:db:a6:a3:a6:ea:2f:77:a1: 52:c7:2e:90:23:ac:67:1f:b6:e7:f4:49:f5:30:11: 84:bb:fa:ec:c3:06:c1:42:c7:0c:a4:fc:b4:52:2e: 16:78:7c:7a:e8:dc:c4:f1:45:e9:04:96:42:3b:fa: 2c:d2:05:3c:1a:a0:52:22:80:ff:a0:0c:0b:93:e4: e8:7d:b1:05:aa:32:c5:82:03:08:9b:3e:a0:17:01: e3:d3:84:95:95:00:75:db:b7:5a:3c:03:9d:c8:4d: 8b:3f:02:4f:b0:eb:9f:04:47:f7:03:9a:b7:6d:35: 1e:2c:bf:35:c9:1e:07:37:61:62:25:8c:93:fa:a1: e8:bc:bb:c0:2c:97:ae:a0:43:a8:04:e0:56:62:c5: 1c:03:0d:ca:3d:1d:2d:64:4d:3a:55:da:6f:fc:bc: a5:62:20:96:09:f2:76:a5:85:a5:72:28:3e:b3:fe: d3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DD:E0:AA:20:F1:D2:70:B6:D5:2E:63:38:5E:23:88:91:55:49:9B X509v3 Authority Key Identifier: keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:8f:c0:93:ef:40:98:ed:21:41:b2:c7:4a:0b:7a:2f:a2:9d: f3:d0:7d:9f:52:7f:a7:bb:70:3e:bb:8a:7a:fa:33:53:4e:a8: 76:64:48:50:20:21:83:56:b4:a4:5c:0c:26:ab:4e:68:1b:dc: a8:74:ab:eb:3a:81:92:84:e9:1a:d0:3f:37:f0:a2:7c:dd:f8: ba:43:9c:3c:c5:bb:9c:14:31:b1:f6:cd:38:3f:82:80:c7:a7: c9:e3:2e:eb:2c:05:6e:84:08:d4:97:5b:64:b8:87:5d:0c:a5: 78:b9:48:df:ff:ae:0b:19:4b:08:4e:27:9e:8a:c6:7c:c5:bf: e5:6e:c7:6b:9e:c5:9b:5e:e0:ce:dd:e3:93:55:95:73:80:a5: 2f:08:ba:d3:3b:fb:d4:6f:98:02:ee:83:8d:b5:1c:d2:af:0a: 66:88:ae:2b:a5:0a:0d:f2:6e:df:9e:7f:4d:ea:2f:c5:6f:4a: 44:16:e4:b5:78:ba:14:b7:22:08:dd:6d:83:95:d9:a0:91:76: 6c:e8:9d:33:df:20:f8:df:bc:46:d9:d4:39:9b:73:f8:43:d0: 5f:93:44:20:48:e3:7d:76:2e:d0:7b:68:47:18:3c:dc:56:db: c8:19:26:a6:6c:9b:66:f1:27:8b:6d:b3:ef:1e:8d:6a:d1:76: 8c:42:b5:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHEDXPYhi5Ju3RdZsfTG+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGRlM2FkMThkZDBhZTE0MzYyZDBlODRkZWMwNDNkMzc5 Y2MyNDIwHhcNMjUxMjEwMDcwMTAxWhcNMjUxMjExMDcwMTAxWjAzMTEwLwYDVQQD Eyg5N2RkZTBhYTIwZjFkMjcwYjZkNTJlNjMzODVlMjM4ODkxNTU0OTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRivYLmMgL9ntr4fXDOCQraJaFtn 5CNT7+Ytu4oFNRhAA6qCTcymQ8JjVaO1f3Pi1mmkIjTYrWFenlwJjlod6EkfxspG zoPphgqmqL0IJ5WT26ajpuovd6FSxy6QI6xnH7bn9En1MBGEu/rswwbBQscMpPy0 Ui4WeHx66NzE8UXpBJZCO/os0gU8GqBSIoD/oAwLk+TofbEFqjLFggMImz6gFwHj 04SVlQB127daPAOdyE2LPwJPsOufBEf3A5q3bTUeLL81yR4HN2FiJYyT+qHovLvA LJeuoEOoBOBWYsUcAw3KPR0tZE06Vdpv/LylYiCWCfJ2pYWlcig+s/7TQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfd4Kog8dJwttUuYzheI4iRVUmbMB8GA1UdIwQY MBaAFCCN460Y3QrhQ2LQ6E3sBD03nMJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjIt YmRmNmU0Mjk0YzJlLzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjItYmRmNmU0Mjk0YzJl LzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANI/Ak+9A mO0hQbLHSgt6L6Kd89B9n1J/p7twPruKevozU06odmRIUCAhg1a0pFwMJqtOaBvc qHSr6zqBkoTpGtA/N/CifN34ukOcPMW7nBQxsfbNOD+CgMenyeMu6ywFboQI1Jdb ZLiHXQyleLlI3/+uCxlLCE4nnorGfMW/5W7Ha57Fm17gzt3jk1WVc4ClLwi60zv7 1G+YAu6DjbUc0q8KZoiuK6UKDfJu355/TeovxW9KRBbktXi6FLciCN1tg5XZoJF2 bOidM98g+N+8RtnUOZtz+EPQX5NEIEjjfXYu0HtoRxg83FbbyBkmpmybZvEni22z 7x6NatF2jEK11g== -----END CERTIFICATE-----Generated at Wed Dec 10 12:03:59 2025 by rpki-client