This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: BMTi226oj7sbWJmzAyzIYcopcZAArQj7iqlUa7dTxyA= Subject key identifier: 74:02:D6:52:B5:01:41:FF:C5:AC:71:76:CB:05:77:8D:11:27:42:94 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019A970E1DED6B0F6C4725383962B5C1367E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 12FB Signing time: Tue 18 Nov 2025 13:01:16 +0000 Manifest this update: Tue 18 Nov 2025 13:01:16 +0000 Manifest next update: Wed 19 Nov 2025 13:01:16 +0000 Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: Ciqugv1LS0xCpK8BZjZ08SrVsGsP4NsrCb5JEmTzEeI=) 3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=) 4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=) 5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=) 6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=) 7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=) 8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 19 Nov 2025 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:0e:1d:ed:6b:0f:6c:47:25:38:39:62:b5:c1:36:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Nov 18 13:01:16 2025 GMT Not After : Nov 19 13:01:16 2025 GMT Subject: CN=7402d652b50141ffc5ac7176cb05778d11274294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:05:d8:58:b8:60:28:2f:05:32:de:30:bc:a7: 14:06:57:c2:cd:b6:05:85:f3:a6:fa:cf:af:53:d0: 57:63:0f:73:ea:a1:9b:02:71:7a:26:c7:85:d0:0f: 09:a3:6d:9d:5b:51:db:cf:06:a3:24:5a:c2:05:fb: 8c:05:30:0c:52:9f:c6:9a:ca:43:bc:a2:f8:cc:8c: 2d:fb:72:d9:fd:b7:95:63:62:76:58:a6:f9:65:88: b7:8d:63:ce:e7:e6:7b:c7:58:56:29:ee:33:05:99: f3:98:07:d2:d9:91:65:89:44:03:46:67:bd:fb:5e: a9:0d:06:68:d1:e2:cb:42:ec:36:8d:64:96:b2:9e: e8:b0:1f:de:eb:f6:32:31:84:71:36:45:84:4a:fe: f0:c7:a7:e1:66:bc:bd:54:cf:dc:9e:3d:e1:a9:30: c6:fe:64:81:76:32:87:be:13:fe:cc:1f:b3:c7:e6: 9c:4e:af:8c:a7:04:0f:54:fe:47:3f:82:a5:e1:e3: d1:49:cc:4b:3d:9d:b0:fa:94:ec:fd:91:0b:b5:75: b9:49:27:92:82:a6:c2:99:86:b1:67:84:38:1a:1d: 1d:9b:3c:29:eb:7d:07:73:1c:cb:2d:df:88:9f:00: 08:90:ba:7e:97:b1:04:6b:2a:cc:fa:fd:c7:54:f7: 19:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:02:D6:52:B5:01:41:FF:C5:AC:71:76:CB:05:77:8D:11:27:42:94 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2b:3f:7f:0d:0b:bf:49:b8:bc:e2:c4:f1:d0:b7:cc:87:31: b0:2b:3d:d4:eb:d3:5a:5b:fd:62:a5:53:5c:b6:d5:78:69:c7: b1:08:4e:4f:c0:98:a5:94:ed:dc:70:7c:e9:f1:6d:97:30:62: fe:5d:c5:b9:6b:3b:79:71:3b:a8:d4:d2:7e:2a:9e:3b:04:a2: 29:45:9e:bf:a1:18:b6:4d:96:26:4b:c9:b9:f3:e0:c7:11:26: e0:88:1a:6a:9f:17:f0:96:3c:cc:45:de:17:97:26:b7:76:65: 87:7c:e4:b4:b2:4e:aa:bd:f9:86:50:52:dc:42:af:10:45:2a: 25:fe:4a:cb:04:12:75:17:96:97:ea:ca:0d:fb:91:7e:23:42: 59:fe:8d:c7:2f:11:b9:2a:48:62:80:27:cb:68:4d:d4:24:ad: db:32:74:5b:03:c4:81:44:6e:4a:7d:f9:4c:55:6d:e9:09:46: 60:99:07:97:dc:00:51:9a:6b:ba:25:e4:4c:34:fa:a4:f6:3a: 48:97:45:bd:57:46:fc:01:ad:2c:0c:f2:5c:d1:53:60:27:a5: 91:1a:61:43:9c:cd:2d:d2:ac:c1:f8:91:42:f0:d1:ce:13:0c: bc:0a:2a:40:d2:e4:fd:09:f0:82:dd:dc:9c:f4:ad:a9:63:2a: 87:e3:29:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqXDh3taw9sRyU4OWK1wTZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjUxMTE4MTMwMTE2WhcNMjUxMTE5MTMwMTE2WjAzMTEwLwYDVQQD Eyg3NDAyZDY1MmI1MDE0MWZmYzVhYzcxNzZjYjA1Nzc4ZDExMjc0Mjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgXYWLhgKC8FMt4wvKcUBlfCzbYF hfOm+s+vU9BXYw9z6qGbAnF6JseF0A8Jo22dW1HbzwajJFrCBfuMBTAMUp/GmspD vKL4zIwt+3LZ/beVY2J2WKb5ZYi3jWPO5+Z7x1hWKe4zBZnzmAfS2ZFliUQDRme9 +16pDQZo0eLLQuw2jWSWsp7osB/e6/YyMYRxNkWESv7wx6fhZry9VM/cnj3hqTDG /mSBdjKHvhP+zB+zx+acTq+MpwQPVP5HP4Kl4ePRScxLPZ2w+pTs/ZELtXW5SSeS gqbCmYaxZ4Q4Gh0dmzwp630HcxzLLd+InwAIkLp+l7EEayrM+v3HVPcZGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQC1lK1AUH/xaxxdssFd40RJ0KUMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCs/fw0L v0m4vOLE8dC3zIcxsCs91OvTWlv9YqVTXLbVeGnHsQhOT8CYpZTt3HB86fFtlzBi /l3FuWs7eXE7qNTSfiqeOwSiKUWev6EYtk2WJkvJufPgxxEm4Igaap8X8JY8zEXe F5cmt3Zlh3zktLJOqr35hlBS3EKvEEUqJf5KywQSdReWl+rKDfuRfiNCWf6Nxy8R uSpIYoAny2hN1CSt2zJ0WwPEgURuSn35TFVt6QlGYJkHl9wAUZpruiXkTDT6pPY6 SJdFvVdG/AGtLAzyXNFTYCelkRphQ5zNLdKswfiRQvDRzhMMvAoqQNLk/Qnwgt3c nPStqWMqh+Mppg== -----END CERTIFICATE-----Generated at Tue Nov 18 21:13:35 2025 by rpki-client