This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json) Hash identifier: 5vExEO52p1fQ13lod+hRm0znGvYqXJJg2Uv6Tbce2+U= Subject key identifier: 11:46:9B:CD:21:ED:FA:F5:4E:98:4A:35:20:97:96:B3:A7:1F:D2:30 Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c Certificate serial: 019AF5E5F1AA16F92C1B93A5ED11D20C8CC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft Manifest number: 1109 Signing time: Sat 06 Dec 2025 23:01:18 +0000 Manifest this update: Sat 06 Dec 2025 23:01:18 +0000 Manifest next update: Sun 07 Dec 2025 23:01:18 +0000 Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: 3OWMvv7TpYURjGvA0Rz2itMqJVjxvCB3vKCDNduzlfY=) 2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=) 3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:f1:aa:16:f9:2c:1b:93:a5:ed:11:d2:0c:8c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c Validity Not Before: Dec 6 23:01:18 2025 GMT Not After : Dec 7 23:01:18 2025 GMT Subject: CN=11469bcd21edfaf54e984a35209796b3a71fd230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:fa:42:76:a9:5d:a9:21:02:71:e7:a0:a9: b1:18:8d:76:de:7b:7c:00:a8:5e:e6:69:7b:13:da: cc:c0:9e:a8:c8:56:30:95:c3:f2:e5:ad:55:74:a2: c1:ca:4c:61:e8:0d:3d:33:dc:64:8d:09:51:f3:47: 67:0e:61:a5:d0:37:58:2c:d4:0f:be:44:81:7b:bd: ec:73:df:a0:dd:f1:4b:2d:5b:0d:7e:dc:23:00:20: 14:5c:7d:af:ae:ac:fd:c9:20:e8:98:12:ad:a0:80: 35:3f:a1:bb:a7:25:d8:29:a9:86:0f:da:e0:1f:98: 39:b5:83:82:18:80:c9:60:6e:9d:79:e4:54:65:70: dc:21:d2:bc:3d:f8:f0:a3:23:70:fa:a7:b9:f9:64: 96:ae:04:bc:bc:26:27:f8:f2:66:fc:79:7d:80:be: ce:bb:f0:1b:44:25:13:18:54:e6:f2:2d:97:9d:81: d8:5b:4b:6b:26:e7:4f:2a:6a:92:e3:02:76:b9:f4: df:a3:4c:10:62:78:47:ed:64:aa:9b:e7:34:46:fd: 40:71:90:9b:34:3a:68:b8:0d:3a:ae:7e:1d:12:8e: 82:f3:32:24:0e:3f:cb:2e:9d:fe:cf:61:39:07:49: 71:72:f4:86:90:02:a6:32:95:ed:ba:1b:4c:e5:c6: d5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:46:9B:CD:21:ED:FA:F5:4E:98:4A:35:20:97:96:B3:A7:1F:D2:30 X509v3 Authority Key Identifier: keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:04:f0:5e:d6:6a:1e:af:29:34:32:dd:6f:bb:5d:13:70:01: 18:3f:0d:fe:03:27:c3:4c:ba:9a:56:ad:72:48:37:27:ce:00: 77:b0:9e:fc:77:6f:fc:c8:0b:9f:29:64:2c:47:15:f9:1d:fb: 3f:e4:5b:46:f1:a0:e7:81:be:28:3f:3b:81:35:48:7f:70:c2: e9:25:f7:cd:b6:44:38:5f:d5:12:36:12:25:45:de:0d:0d:0d: 55:29:42:d5:17:7a:15:6d:ea:93:5f:38:8b:48:d4:b6:63:8c: 28:09:7a:42:0b:bd:a3:d0:4c:10:01:26:99:91:33:27:84:71: a9:8e:19:56:e1:a0:80:31:59:de:9a:14:3d:5f:ec:d0:68:7a: 72:c2:73:90:4e:f3:be:23:18:26:c9:2e:ca:0e:f3:79:00:86: b9:da:81:4d:ae:d1:a1:a8:21:28:e5:a2:99:7b:56:2b:64:3e: 3b:5a:0a:b5:8d:34:79:0d:ea:30:de:45:16:b0:31:00:6d:64: 02:ea:d4:90:ef:c1:ab:37:2b:92:69:cc:51:b1:f7:9c:fb:34: 97:cd:5e:97:89:fc:20:a1:1c:3c:37:f1:90:ca:f9:36:38:07: 16:82:62:bf:29:e4:15:8b:59:3d:84:6a:e5:7f:0f:c9:ae:d5: b6:28:e9:d6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr15fGqFvksG5Ol7RHSDIzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzBkZTg0MGZkNmJmNGIwYWZkMTI3NGU0NGVmZDFiODY2 NTc2MmMwHhcNMjUxMjA2MjMwMTE4WhcNMjUxMjA3MjMwMTE4WjAzMTEwLwYDVQQD EygxMTQ2OWJjZDIxZWRmYWY1NGU5ODRhMzUyMDk3OTZiM2E3MWZkMjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVr6QnapXakhAnHnoKmxGI123nt8 AKhe5ml7E9rMwJ6oyFYwlcPy5a1VdKLBykxh6A09M9xkjQlR80dnDmGl0DdYLNQP vkSBe73sc9+g3fFLLVsNftwjACAUXH2vrqz9ySDomBKtoIA1P6G7pyXYKamGD9rg H5g5tYOCGIDJYG6deeRUZXDcIdK8PfjwoyNw+qe5+WSWrgS8vCYn+PJm/Hl9gL7O u/AbRCUTGFTm8i2XnYHYW0trJudPKmqS4wJ2ufTfo0wQYnhH7WSqm+c0Rv1AcZCb NDpouA06rn4dEo6C8zIkDj/LLp3+z2E5B0lxcvSGkAKmMpXtuhtM5cbV3wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBFGm80h7fr1TphKNSCXlrOnH9IwMB8GA1UdIwQY MBaAFPtw3oQP1r9LCv0SdORO/RuGZXYsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zRGVoQV9XdjBzS19SSjA1RTc5RzRabGRpdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvOWEzZWFjLWY4NjItNDc4OS1hYzIx LWQ5NDQ0YTNkMGNlMC8xLzEtM0RlaEFfV3Ywc0tfUkowNUU3OUc0WmxkaXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRhLzlhM2VhYy1mODYyLTQ3ODktYWMyMS1kOTQ0NGEzZDBj ZTAvMS8xLTNEZWhBX1d2MHNLX1JKMDVFNzlHNFpsZGl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgTw XtZqHq8pNDLdb7tdE3ABGD8N/gMnw0y6mlatckg3J84Ad7Ce/Hdv/MgLnylkLEcV +R37P+RbRvGg54G+KD87gTVIf3DC6SX3zbZEOF/VEjYSJUXeDQ0NVSlC1Rd6FW3q k184i0jUtmOMKAl6Qgu9o9BMEAEmmZEzJ4RxqY4ZVuGggDFZ3poUPV/s0Gh6csJz kE7zviMYJskuyg7zeQCGudqBTa7RoaghKOWimXtWK2Q+O1oKtY00eQ3qMN5FFrAx AG1kAurUkO/BqzcrkmnMUbH3nPs0l81el4n8IKEcPDfxkMr5NjgHFoJivynkFYtZ PYRq5X8Pya7Vtijp1g== -----END CERTIFICATE-----Generated at Sun Dec 7 05:16:50 2025 by rpki-client