This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: 3h62oELB4pfALGfr15kRF8dXZZTbuyRALEmyZ9b2XWo= Subject key identifier: 61:5C:D9:C1:15:43:AD:D1:B9:55:34:83:3D:42:7A:CB:68:43:22:71 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019AA68059DF3379E6E2B2D98CCA79D729C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 1303 Signing time: Fri 21 Nov 2025 13:00:20 +0000 Manifest this update: Fri 21 Nov 2025 13:00:20 +0000 Manifest next update: Sat 22 Nov 2025 13:00:20 +0000 Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: GqrTcFBs/wOSN8zBjEL/L821Ld5eec86rwdUN7OWyb4=) 3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=) 4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=) 5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=) 6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=) 7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=) 8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 13:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:80:59:df:33:79:e6:e2:b2:d9:8c:ca:79:d7:29:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Nov 21 13:00:20 2025 GMT Not After : Nov 22 13:00:20 2025 GMT Subject: CN=615cd9c11543add1b95534833d427acb68432271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b2:0b:e5:f8:c7:7a:12:e0:d0:c8:09:99:a7: bf:9a:84:20:65:e4:72:6a:2a:e4:b8:ca:35:e3:f4: b1:86:f1:83:a4:b2:ad:e9:aa:cf:6c:74:26:2f:58: 3f:26:97:9e:bd:dc:d1:ea:77:df:ff:08:51:15:0c: 6f:b2:b1:dd:37:06:42:cd:23:25:0a:97:f5:12:46: 1e:36:e3:c9:8f:68:ed:65:b9:a4:31:00:e3:11:e9: 8c:8c:db:4e:08:50:42:93:fe:91:6c:c0:b8:45:a3: 07:e7:03:c9:95:fa:d1:95:d1:6b:39:19:95:70:80: 0c:3b:26:c5:c1:9e:b1:6a:f6:8a:61:07:e8:38:4c: ad:4c:0d:3f:02:8f:73:04:1e:a5:29:84:2a:d5:76: d3:b9:f5:7a:ce:57:e1:09:2a:25:81:b4:4a:e2:ee: 59:51:18:39:80:97:8a:78:1a:c6:0b:df:98:d2:18: 9e:7d:6c:cd:27:26:f9:0f:c2:1d:4c:73:92:1c:d9: 9e:ad:c7:f8:cc:a9:39:b5:31:4e:80:fa:b2:ae:81: 00:a4:cf:f2:0e:ed:db:b2:37:24:1e:d6:2f:92:f7: a0:16:85:2f:b0:64:dd:87:38:df:1c:64:42:50:ae: 10:6e:c3:7a:82:bb:13:18:db:5f:f8:64:bc:88:9d: b6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5C:D9:C1:15:43:AD:D1:B9:55:34:83:3D:42:7A:CB:68:43:22:71 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c1:fa:97:1c:f2:fe:c2:47:ee:16:42:b0:72:9d:12:6d:81: 63:56:9b:82:16:cf:bb:a4:9c:e1:ec:fa:f2:3c:a5:b2:66:66: bd:f4:98:b6:be:1a:69:c9:04:07:33:7f:9d:7c:03:d9:59:d9: 25:21:db:c1:46:06:58:0f:2f:06:8f:29:79:c3:1f:c4:4b:f3: 66:4a:05:59:2d:c9:c3:20:09:8a:1c:9c:a5:0b:e4:6f:77:97: 0d:28:eb:44:f1:a8:51:50:76:46:8f:0b:90:33:ca:21:27:54: 0b:98:d7:e9:54:4b:2e:95:f5:82:ab:0c:e1:b7:eb:af:6a:bc: 4c:79:48:42:ae:98:e0:f4:f3:e4:7b:46:68:ba:54:44:69:a1: ab:88:fe:6c:58:a1:6c:5d:68:9f:8d:8c:b7:08:a9:a2:a6:20: 41:f9:eb:bf:31:1f:70:f0:23:9d:7b:17:ac:dc:79:56:20:26: 26:56:59:d1:69:8a:d7:43:08:08:f0:45:35:b9:a6:90:62:6f: 9a:b3:3f:8c:ae:ad:0f:17:8f:cd:f2:dd:7c:41:5a:3a:d4:e6: d6:5d:58:45:45:4f:ef:db:04:65:33:29:13:b3:00:07:4f:c6: b8:fa:fe:5a:f1:76:7a:e1:44:c4:91:60:f4:90:f2:ca:37:1f: 67:c4:5f:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqmgFnfM3nm4rLZjMp51ynJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjUxMTIxMTMwMDIwWhcNMjUxMTIyMTMwMDIwWjAzMTEwLwYDVQQD Eyg2MTVjZDljMTE1NDNhZGQxYjk1NTM0ODMzZDQyN2FjYjY4NDMyMjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrIL5fjHehLg0MgJmae/moQgZeRy airkuMo14/SxhvGDpLKt6arPbHQmL1g/JpeevdzR6nff/whRFQxvsrHdNwZCzSMl Cpf1EkYeNuPJj2jtZbmkMQDjEemMjNtOCFBCk/6RbMC4RaMH5wPJlfrRldFrORmV cIAMOybFwZ6xavaKYQfoOEytTA0/Ao9zBB6lKYQq1XbTufV6zlfhCSolgbRK4u5Z URg5gJeKeBrGC9+Y0hiefWzNJyb5D8IdTHOSHNmercf4zKk5tTFOgPqyroEApM/y Du3bsjckHtYvkvegFoUvsGTdhzjfHGRCUK4QbsN6grsTGNtf+GS8iJ22cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFc2cEVQ63RuVU0gz1CestoQyJxMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8H6lxzy /sJH7hZCsHKdEm2BY1abghbPu6Sc4ez68jylsmZmvfSYtr4aackEBzN/nXwD2VnZ JSHbwUYGWA8vBo8pecMfxEvzZkoFWS3JwyAJihycpQvkb3eXDSjrRPGoUVB2Ro8L kDPKISdUC5jX6VRLLpX1gqsM4bfrr2q8THlIQq6Y4PTz5HtGaLpURGmhq4j+bFih bF1on42MtwipoqYgQfnrvzEfcPAjnXsXrNx5ViAmJlZZ0WmK10MICPBFNbmmkGJv mrM/jK6tDxePzfLdfEFaOtTm1l1YRUVP79sEZTMpE7MAB0/GuPr+WvF2euFExJFg 9JDyyjcfZ8Rf8w== -----END CERTIFICATE-----Generated at Fri Nov 21 20:32:05 2025 by rpki-client