This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: EaDtASOfmoKmxtallyvh7KBnZyK3iRNdqPhUIXJSey8= Subject key identifier: E4:0B:11:E0:0A:5B:78:34:5B:25:7B:DA:08:5A:ED:20:A0:DB:17:59 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019ACB32384522DA1AD84916087CB27CDFF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 1316 Signing time: Fri 28 Nov 2025 16:00:57 +0000 Manifest this update: Fri 28 Nov 2025 16:00:57 +0000 Manifest next update: Sat 29 Nov 2025 16:00:57 +0000 Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: GAye32NIJjefVDQ/NjO/45I+2s1Wz7Fi/0Ignz96yFE=) 3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=) 4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=) 5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=) 6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=) 7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=) 8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:32:38:45:22:da:1a:d8:49:16:08:7c:b2:7c:df:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Nov 28 16:00:57 2025 GMT Not After : Nov 29 16:00:57 2025 GMT Subject: CN=e40b11e00a5b78345b257bda085aed20a0db1759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:41:a4:1b:e5:57:93:14:b9:91:ec:a5:1f:56: 4c:93:90:fd:25:e4:c3:ca:aa:2c:d7:ea:ec:a3:31: a6:00:f9:27:5a:85:31:bb:0f:5f:8e:66:56:c2:a7: 98:92:33:8e:a6:68:14:09:49:68:f8:a4:7e:81:e9: 20:6c:d2:3c:6b:3b:35:9b:1b:60:0d:8f:cb:85:df: 94:a4:e7:43:d4:dc:d3:98:fd:7a:78:f3:a3:f9:76: e2:ab:e5:29:15:bc:3d:91:07:59:07:8e:f5:83:93: 02:82:35:a6:40:92:f8:96:d0:76:d3:20:b2:72:f7: 91:88:68:f0:5e:91:f6:c3:41:53:b8:2b:00:e1:ff: 28:52:ee:55:e6:b1:ba:09:aa:43:52:3a:d9:e1:46: f6:a3:eb:44:8f:79:52:a4:26:ec:e8:7b:dc:6e:fc: 9c:74:e0:ca:88:e4:5b:3b:63:58:ec:93:cc:99:09: 9e:b9:2f:36:d6:9e:6d:64:28:5f:db:b5:90:54:64: 3b:15:63:55:be:11:18:ce:f8:4a:e3:ff:e0:b2:f5: 4b:b9:d8:29:eb:ed:14:7d:3b:e8:ac:fd:31:a4:20: cb:c9:6a:3a:73:7d:1a:cd:b4:25:f3:a5:ff:39:f7: bc:82:27:7e:3d:22:e7:c9:a7:2f:5c:e8:d3:e1:2d: 59:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0B:11:E0:0A:5B:78:34:5B:25:7B:DA:08:5A:ED:20:A0:DB:17:59 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:39:ff:72:a2:ab:e8:b2:96:dd:9f:6d:fe:85:9b:9b:0c:6d: 64:37:12:c3:95:b7:08:4e:cc:db:e6:3b:30:f6:89:fd:da:8f: 30:fc:bc:9c:64:90:01:5f:d2:90:aa:94:09:ec:e5:82:71:c9: 19:90:63:29:e8:9c:a0:89:50:84:82:ab:f4:20:dd:e5:b4:43: d5:d5:93:29:35:d1:32:c0:9e:ec:e8:39:72:36:62:5b:c1:2a: 0a:b2:34:8e:7b:af:94:58:27:f6:31:9e:6a:1f:23:93:03:61: 1d:f6:f3:d4:41:5d:b7:c0:c0:ef:ea:f8:f2:e4:80:b3:e8:bb: fd:94:a7:5b:16:0c:b1:ad:4f:71:98:78:a3:cf:aa:72:30:e8: df:68:2b:8e:2f:86:58:26:11:d2:10:c5:32:72:08:b3:cc:0b: 3b:1e:b8:54:e7:1a:b9:9a:23:09:81:6f:06:66:d8:9e:f1:4f: 70:bf:01:42:8c:e8:7a:65:46:b7:14:eb:91:c7:99:e7:ac:cf: c9:19:79:f9:85:63:6e:15:ef:5f:71:0f:62:41:f4:22:52:eb: f5:95:c8:74:1b:57:a9:33:d1:a5:b8:4b:41:1d:bf:8a:39:61: 03:78:e0:f1:7c:4f:3b:c3:68:45:e5:73:c7:80:2e:e8:2e:0a: 7f:ed:d4:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrLMjhFItoa2EkWCHyyfN/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjUxMTI4MTYwMDU3WhcNMjUxMTI5MTYwMDU3WjAzMTEwLwYDVQQD EyhlNDBiMTFlMDBhNWI3ODM0NWIyNTdiZGEwODVhZWQyMGEwZGIxNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kGkG+VXkxS5keylH1ZMk5D9JeTD yqos1+rsozGmAPknWoUxuw9fjmZWwqeYkjOOpmgUCUlo+KR+gekgbNI8azs1mxtg DY/Lhd+UpOdD1NzTmP16ePOj+Xbiq+UpFbw9kQdZB471g5MCgjWmQJL4ltB20yCy cveRiGjwXpH2w0FTuCsA4f8oUu5V5rG6CapDUjrZ4Ub2o+tEj3lSpCbs6Hvcbvyc dODKiORbO2NY7JPMmQmeuS821p5tZChf27WQVGQ7FWNVvhEYzvhK4//gsvVLudgp 6+0UfTvorP0xpCDLyWo6c30azbQl86X/Ofe8gid+PSLnyacvXOjT4S1ZMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQLEeAKW3g0WyV72gha7SCg2xdZMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjn/cqKr 6LKW3Z9t/oWbmwxtZDcSw5W3CE7M2+Y7MPaJ/dqPMPy8nGSQAV/SkKqUCezlgnHJ GZBjKeicoIlQhIKr9CDd5bRD1dWTKTXRMsCe7Og5cjZiW8EqCrI0jnuvlFgn9jGe ah8jkwNhHfbz1EFdt8DA7+r48uSAs+i7/ZSnWxYMsa1PcZh4o8+qcjDo32grji+G WCYR0hDFMnIIs8wLOx64VOcauZojCYFvBmbYnvFPcL8BQozoemVGtxTrkceZ56zP yRl5+YVjbhXvX3EPYkH0IlLr9ZXIdBtXqTPRpbhLQR2/ijlhA3jg8XxPO8NoReVz x4Au6C4Kf+3U8A== -----END CERTIFICATE-----Generated at Fri Nov 28 21:39:50 2025 by rpki-client