This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft File: t3RSzSU14-k1ff-IGIXq2RSQpGM.mft (raw, json) Hash identifier: niUDMpsKG4DojmZ2XVmn8C4UuGqTuTAnQfjRSUZLOM8= Subject key identifier: 9C:B8:50:07:F1:A0:F6:D9:86:8E:19:C0:AA:3C:71:44:AB:FA:2F:B7 Authority key identifier: B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63 Certificate issuer: /CN=b77452cd2535e3e9357dff881885ead91490a463 Certificate serial: 019B330CD007B5EA790CB5F2CC8480DEBCCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft Manifest number: 0738 Signing time: Thu 18 Dec 2025 20:00:36 +0000 Manifest this update: Thu 18 Dec 2025 20:00:36 +0000 Manifest next update: Fri 19 Dec 2025 20:00:36 +0000 Files and hashes: 1: t3RSzSU14-k1ff-IGIXq2RSQpGM.crl (hash: xeoi5NfpK1nWpxidYdD0gz+/wac1HlJL+zrxvS6+Awk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:d0:07:b5:ea:79:0c:b5:f2:cc:84:80:de:bc:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b77452cd2535e3e9357dff881885ead91490a463 Validity Not Before: Dec 18 20:00:36 2025 GMT Not After : Dec 19 20:00:36 2025 GMT Subject: CN=9cb85007f1a0f6d9868e19c0aa3c7144abfa2fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3e:4e:6a:80:96:51:c5:6c:91:6e:f6:87:ca: 75:9f:90:16:7d:fc:b2:c7:d2:45:8e:39:9f:01:22: 2f:7f:fa:7f:a6:2f:81:ca:7a:90:22:54:2e:aa:98: 82:2e:ea:3d:e4:80:df:d1:4d:2b:75:13:51:98:9a: 25:0d:2a:c2:69:dc:38:67:54:7b:b2:0e:95:b4:bb: 11:ad:44:c9:32:73:b2:e4:0d:b4:13:48:53:8c:08: a3:1c:b6:c8:1c:9a:de:62:49:6a:e1:7d:8e:40:b6: 81:8d:17:42:8c:13:03:73:c7:bf:8f:d5:e7:5f:85: 97:cb:62:18:a0:a3:5d:5b:bf:1e:a4:a7:b3:ee:33: ed:53:0e:ad:7c:9a:c1:53:0e:e9:2e:0f:93:04:62: f8:82:e6:f1:a8:58:5b:c4:73:fe:bb:ca:3b:aa:08: b8:f0:2a:d4:d7:ac:4b:d0:8d:89:48:62:0c:52:f9: 98:7c:af:98:e6:01:c6:e5:45:f1:79:76:47:e5:06: de:d2:50:66:a2:97:21:13:9f:94:2b:dc:a6:94:e2: 11:ad:9d:a0:03:1d:76:fc:68:7d:dd:c7:20:b3:c2: c7:b7:1b:14:64:63:f9:42:91:c7:ef:62:e0:ed:e5: 61:b9:e3:67:9e:b3:65:1d:9e:22:22:bf:d5:ca:16: bf:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B8:50:07:F1:A0:F6:D9:86:8E:19:C0:AA:3C:71:44:AB:FA:2F:B7 X509v3 Authority Key Identifier: keyid:B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:2f:47:fd:2a:3b:c3:ed:34:9a:26:0d:3e:3a:dd:37:98:dc: 55:0a:58:00:f9:df:04:3c:28:9c:0a:cb:a3:76:a1:6f:3c:23: a4:8b:46:e3:4f:c7:e1:3b:71:5c:e1:a4:b4:1e:60:9e:a7:fb: a8:21:e2:a4:d2:1b:fa:55:02:dc:27:38:75:4d:3e:7e:0d:a1: b2:5a:ba:aa:4f:ca:d8:83:5d:54:3c:7b:e9:20:c3:47:74:a6: 43:5b:5d:4b:f9:17:b3:6e:a1:5d:45:c3:2a:3d:a4:29:f3:ed: b8:36:71:1b:4f:a8:8f:31:12:7b:4e:0b:a8:46:98:53:96:bd: 51:a1:24:c5:ab:ee:17:2f:19:c9:33:2f:68:44:85:ad:c1:83: 62:2d:73:fe:15:90:5e:4a:c5:bb:94:3b:6c:ec:90:85:c6:12: 26:96:01:28:d1:70:e6:f9:22:3d:6a:49:46:d0:ba:9d:53:e8: 42:cc:0e:22:d6:bc:8b:79:ad:69:33:e5:95:42:88:06:0d:a3: 3f:16:b9:fd:5b:92:22:41:79:81:9a:00:59:dc:3a:6e:3a:bd: 79:53:0c:b8:1b:1a:35:18:9e:15:5f:98:34:0b:d3:e8:2a:9c: 3f:82:1c:1d:89:65:07:2c:a4:d3:06:d4:cd:45:41:67:bd:c9: c0:52:33:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDNAHtep5DLXyzISA3rzKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzQ1MmNkMjUzNWUzZTkzNTdkZmY4ODE4ODVlYWQ5MTQ5 MGE0NjMwHhcNMjUxMjE4MjAwMDM2WhcNMjUxMjE5MjAwMDM2WjAzMTEwLwYDVQQD Eyg5Y2I4NTAwN2YxYTBmNmQ5ODY4ZTE5YzBhYTNjNzE0NGFiZmEyZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj5OaoCWUcVskW72h8p1n5AWffyy x9JFjjmfASIvf/p/pi+BynqQIlQuqpiCLuo95IDf0U0rdRNRmJolDSrCadw4Z1R7 sg6VtLsRrUTJMnOy5A20E0hTjAijHLbIHJreYklq4X2OQLaBjRdCjBMDc8e/j9Xn X4WXy2IYoKNdW78epKez7jPtUw6tfJrBUw7pLg+TBGL4gubxqFhbxHP+u8o7qgi4 8CrU16xL0I2JSGIMUvmYfK+Y5gHG5UXxeXZH5Qbe0lBmopchE5+UK9ymlOIRrZ2g Ax12/Gh93ccgs8LHtxsUZGP5QpHH72Lg7eVhueNnnrNlHZ4iIr/Vyha/9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJy4UAfxoPbZho4ZwKo8cUSr+i+3MB8GA1UdIwQY MBaAFLd0Us0lNePpNX3/iBiF6tkUkKRjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNSU3pTVTE0LWsxZmYtSUdJWHEyUlNRcEdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mNmM3MWMtMmQ0MC00YzQxLWJiYmIt Yzc1NzU5YWYyZmNmLzEvdDNSU3pTVTE0LWsxZmYtSUdJWHEyUlNRcEdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mNmM3MWMtMmQ0MC00YzQxLWJiYmItYzc1NzU5YWYyZmNm LzEvdDNSU3pTVTE0LWsxZmYtSUdJWHEyUlNRcEdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcy9H/So7 w+00miYNPjrdN5jcVQpYAPnfBDwonArLo3ahbzwjpItG40/H4TtxXOGktB5gnqf7 qCHipNIb+lUC3Cc4dU0+fg2hslq6qk/K2INdVDx76SDDR3SmQ1tdS/kXs26hXUXD Kj2kKfPtuDZxG0+ojzESe04LqEaYU5a9UaEkxavuFy8ZyTMvaESFrcGDYi1z/hWQ XkrFu5Q7bOyQhcYSJpYBKNFw5vkiPWpJRtC6nVPoQswOIta8i3mtaTPllUKIBg2j Pxa5/VuSIkF5gZoAWdw6bjq9eVMMuBsaNRieFV+YNAvT6CqcP4IcHYllByyk0wbU zUVBZ73JwFIzaQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:34:33 2025 by rpki-client