This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json) Hash identifier: h82DA6yU6WDOJ9YuE2LtE51Ey7yJWnjvova3I9LyfvM= Subject key identifier: FE:91:92:9D:68:BC:2B:01:94:0B:9A:FD:FB:57:6D:55:28:A2:EF:4E Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53 Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153 Certificate serial: 019AF6F8AE8A5FAD671CD8597682B2DCC1A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft Manifest number: 0E4B Signing time: Sun 07 Dec 2025 04:01:23 +0000 Manifest this update: Sun 07 Dec 2025 04:01:23 +0000 Manifest next update: Mon 08 Dec 2025 04:01:23 +0000 Files and hashes: 1: QrB38IR31JfmSrfp5ttgTReGTWo.roa (hash: tObzEsfYNmXi9X+/o+rGLlyYSek2LoSQ9N7PVMYEfqA=) 2: n3iPjhImnBjarzP2Rj2tOx0dNiE.roa (hash: lUEC9I8tI5NUjUJh9guJCH2H+g0KkZWinekNZT2+2Io=) 3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: ohO7C4IPApJcmIsvzuy3bQpm2ULVyXSQ1Nnuwdd1V7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:ae:8a:5f:ad:67:1c:d8:59:76:82:b2:dc:c1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153 Validity Not Before: Dec 7 04:01:23 2025 GMT Not After : Dec 8 04:01:23 2025 GMT Subject: CN=fe91929d68bc2b01940b9afdfb576d5528a2ef4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:43:a5:65:4d:c9:a9:5b:71:d4:35:eb:55:17: a0:72:b3:b3:d6:e7:1c:6b:a8:33:fd:79:de:e0:4b: a6:03:ea:58:42:0d:62:20:3d:3a:c2:71:74:a1:95: f4:0d:3a:9c:84:fa:d3:8a:dc:90:58:da:7e:c4:f7: a8:c5:cc:1f:8f:c3:81:2c:aa:3d:7d:e0:c5:26:78: 15:33:f3:b0:f1:68:d0:5d:79:cb:a3:d6:32:5c:93: e9:e8:44:ab:65:ab:54:d6:b8:c2:5e:bf:e1:0b:e8: d5:7c:c2:3b:21:ff:c5:10:18:3d:a4:b6:f9:1a:b2: 3e:8e:8e:11:73:87:10:6f:9a:80:13:e9:b4:5d:2f: 61:d6:bc:28:9d:5e:8c:cc:91:92:88:eb:c8:8f:f2: bc:6b:9b:0c:29:8d:ce:70:4e:07:8f:6f:c0:68:e9: ae:ad:0f:35:c8:51:fe:3f:a5:22:90:63:87:08:07: 28:60:96:83:e4:c0:c4:25:a3:0b:67:24:0d:51:6e: 54:5b:74:67:c9:63:1f:be:50:8b:19:41:72:07:b6: 4a:c4:8f:03:f1:ad:5f:d6:47:a2:31:8b:3a:3b:fc: 88:c5:07:73:d9:03:3c:70:11:ad:b4:0c:71:51:a2: f0:9c:6c:b0:b4:7f:8a:57:93:71:ba:cc:e1:a7:9d: 04:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:91:92:9D:68:BC:2B:01:94:0B:9A:FD:FB:57:6D:55:28:A2:EF:4E X509v3 Authority Key Identifier: keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:47:d2:a6:12:1c:09:68:97:20:e0:31:d5:af:fa:2f:12:5e: fd:ee:96:01:d9:2c:5b:e7:4b:1c:ce:7e:16:cb:fb:25:4e:88: e4:bd:55:e4:b5:d1:2c:db:53:f4:13:65:f1:53:20:42:15:a8: 2e:e6:5f:6c:85:6b:6f:67:8b:7a:bd:63:bd:77:0b:51:d5:5e: 31:94:d0:6e:d8:c8:43:af:a3:9a:ac:65:e5:1c:0e:56:43:2f: f6:10:bf:c3:8e:2b:fd:5d:10:fb:7b:3a:4b:10:30:09:b2:b7: f1:da:b5:65:e3:72:57:73:8b:62:f6:c5:fc:a4:4b:5b:30:e4: 57:7f:6d:40:46:10:3d:ec:b5:7d:b6:e3:0a:21:ba:07:b9:3d: f1:67:50:5e:ee:18:d4:3b:18:16:4e:88:fa:a7:07:39:7c:80: a1:32:a9:db:dc:47:8a:27:e5:8f:fc:79:f0:8a:74:bb:1c:70: e5:6f:a5:3e:55:64:c2:e5:31:b4:d7:5a:2c:ce:73:79:1b:05: c8:c9:da:0c:8b:1c:87:dc:a3:19:ae:88:db:45:a2:5e:52:3f: 07:1e:8f:f9:dc:a4:be:15:5b:19:75:c8:7f:fb:24:3c:0b:d6: 36:31:8c:46:d5:f6:18:06:18:c7:7b:d7:37:f5:99:db:ea:49: 61:4b:98:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+K6KX61nHNhZdoKy3MGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmRlYWQ0ZjFkMWM4ZGRhOTZkMWNkMTc4OWQ5ZGQzZTIz YmYxNTMwHhcNMjUxMjA3MDQwMTIzWhcNMjUxMjA4MDQwMTIzWjAzMTEwLwYDVQQD EyhmZTkxOTI5ZDY4YmMyYjAxOTQwYjlhZmRmYjU3NmQ1NTI4YTJlZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EOlZU3JqVtx1DXrVRegcrOz1ucc a6gz/Xne4EumA+pYQg1iID06wnF0oZX0DTqchPrTityQWNp+xPeoxcwfj8OBLKo9 feDFJngVM/Ow8WjQXXnLo9YyXJPp6ESrZatU1rjCXr/hC+jVfMI7If/FEBg9pLb5 GrI+jo4Rc4cQb5qAE+m0XS9h1rwonV6MzJGSiOvIj/K8a5sMKY3OcE4Hj2/AaOmu rQ81yFH+P6UikGOHCAcoYJaD5MDEJaMLZyQNUW5UW3RnyWMfvlCLGUFyB7ZKxI8D 8a1f1keiMYs6O/yIxQdz2QM8cBGttAxxUaLwnGywtH+KV5Nxuszhp50ExwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6Rkp1ovCsBlAua/ftXbVUoou9OMB8GA1UdIwQY MBaAFK696tTx0cjdqW0c0XidndPiO/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjIt ODgzN2NhNjllMzk2LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjItODgzN2NhNjllMzk2 LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkfSphIc CWiXIOAx1a/6LxJe/e6WAdksW+dLHM5+Fsv7JU6I5L1V5LXRLNtT9BNl8VMgQhWo LuZfbIVrb2eLer1jvXcLUdVeMZTQbtjIQ6+jmqxl5RwOVkMv9hC/w44r/V0Q+3s6 SxAwCbK38dq1ZeNyV3OLYvbF/KRLWzDkV39tQEYQPey1fbbjCiG6B7k98WdQXu4Y 1DsYFk6I+qcHOXyAoTKp29xHiiflj/x58Ip0uxxw5W+lPlVkwuUxtNdaLM5zeRsF yMnaDIsch9yjGa6I20WiXlI/Bx6P+dykvhVbGXXIf/skPAvWNjGMRtX2GAYYx3vX N/WZ2+pJYUuY1w== -----END CERTIFICATE-----Generated at Sun Dec 7 10:49:37 2025 by rpki-client