This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft File: t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft (raw, json) Hash identifier: vbxXA96mig6ZFhL3wEWQeEk2GUNZ/4GvtllRFXQFsxw= Subject key identifier: 0F:03:E7:6D:55:36:F3:B3:96:7C:D8:BF:56:11:3B:10:69:CB:03:C4 Authority key identifier: B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5 Certificate issuer: /CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5 Certificate serial: 019B3231532A06F42D56703EAD071D2A887A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft Manifest number: 01B7 Signing time: Thu 18 Dec 2025 16:00:51 +0000 Manifest this update: Thu 18 Dec 2025 16:00:51 +0000 Manifest next update: Fri 19 Dec 2025 16:00:51 +0000 Files and hashes: 1: t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl (hash: 2jzZsittEV2WsxmejG3n+OEai4QqB/VOvisZQYRLF4M=) 2: vfts5VO11Lf49yWawFf1T10X7IA.roa (hash: o5JhQxo9WfUPfoKsbz0ZkfnOyZ6HVJldiK9KySDHufY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:53:2a:06:f4:2d:56:70:3e:ad:07:1d:2a:88:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5 Validity Not Before: Dec 18 16:00:51 2025 GMT Not After : Dec 19 16:00:51 2025 GMT Subject: CN=0f03e76d5536f3b3967cd8bf56113b1069cb03c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:75:cb:bc:ec:50:35:e2:70:10:b9:de:66: 16:ed:2c:6f:9d:9b:3d:1d:c0:b9:0d:90:1e:57:70: e0:dd:77:fb:8f:75:ad:f3:63:9a:bc:5e:8c:e2:a7: 14:19:10:0b:97:b2:fe:05:3e:15:4e:02:5d:cb:5e: d8:9a:f2:54:66:50:4d:fb:ab:40:d7:fc:07:15:91: 45:22:be:1b:ce:6f:17:e9:54:c5:18:89:02:1f:20: bd:79:4a:e0:a0:de:b8:84:6f:26:fb:76:c5:3e:80: fc:da:2e:5b:91:29:c4:93:c1:49:4b:56:f0:e8:4a: c6:4c:1f:de:40:17:a5:b1:fd:71:a5:2d:ea:9c:3b: da:ec:22:a5:fd:8b:23:5b:51:2e:25:0e:d4:e1:ca: d0:78:59:63:1a:48:ab:c6:6c:11:46:51:25:69:f1: 81:9e:4e:c1:02:87:36:06:37:05:28:39:12:68:55: d5:df:d9:d3:f6:12:0d:b4:31:00:c8:2c:ac:59:cf: 82:f4:06:7e:70:f9:41:7a:56:b6:13:05:f3:bc:28: 4b:91:83:29:f8:1e:aa:6b:a3:d8:ee:cb:03:02:4d: 5e:c5:de:40:6b:2c:f9:53:f9:fc:ce:8e:ac:bb:59: bc:58:3a:83:9b:bd:40:1c:32:ba:10:1d:82:a7:3b: cd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:03:E7:6D:55:36:F3:B3:96:7C:D8:BF:56:11:3B:10:69:CB:03:C4 X509v3 Authority Key Identifier: keyid:B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:20:47:03:c1:2c:bb:a1:db:d2:9b:65:18:d3:5d:cc:f9:43: 58:f3:26:cd:b4:26:11:46:3d:fd:54:3e:da:f0:e5:f0:13:cb: c3:9e:69:31:77:62:88:13:06:7b:07:68:be:21:ea:07:75:4d: b3:3d:6f:7e:f6:e0:db:3c:eb:c8:60:90:ea:3f:75:d2:1e:14: bb:51:13:47:df:0c:26:7b:45:35:be:c7:78:0f:38:3d:23:d1: df:ef:da:e2:bc:46:7f:0b:05:64:d3:d9:d1:85:e4:61:8a:5d: 50:22:ea:79:45:8f:42:e3:0b:5d:07:1f:e9:77:46:bd:19:2c: 88:d7:f5:fe:e2:89:83:3c:84:3c:b6:e1:44:8b:0b:e9:8d:09: 82:62:80:fd:03:1e:d0:77:c0:4b:f8:e2:c1:ae:d6:44:a4:58: 76:70:a5:4b:15:a1:56:b6:99:b0:8c:7f:03:e8:12:0c:70:a3: ec:7a:67:e1:be:63:17:77:6a:67:dc:77:42:37:4b:b9:29:9f: d1:90:40:6f:97:9b:b9:71:34:03:b5:2b:da:dd:b1:4c:3d:11: 78:a0:eb:74:f3:7c:f2:65:ce:ad:ce:61:dd:65:ac:1c:30:02: 28:3f:fa:d0:10:6b:71:42:96:b1:4c:77:60:f6:e0:b9:42:9b: b9:19:f7:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMVMqBvQtVnA+rQcdKoh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzRjN2I4YmFhMWQ5ZDQ3YzNhZjU1ZjNlOTdkZDZlNWQ2 ZTI3ZDUwHhcNMjUxMjE4MTYwMDUxWhcNMjUxMjE5MTYwMDUxWjAzMTEwLwYDVQQD EygwZjAzZTc2ZDU1MzZmM2IzOTY3Y2Q4YmY1NjExM2IxMDY5Y2IwM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEd1y7zsUDXicBC53mYW7SxvnZs9 HcC5DZAeV3Dg3Xf7j3Wt82OavF6M4qcUGRALl7L+BT4VTgJdy17YmvJUZlBN+6tA 1/wHFZFFIr4bzm8X6VTFGIkCHyC9eUrgoN64hG8m+3bFPoD82i5bkSnEk8FJS1bw 6ErGTB/eQBelsf1xpS3qnDva7CKl/YsjW1EuJQ7U4crQeFljGkirxmwRRlElafGB nk7BAoc2BjcFKDkSaFXV39nT9hINtDEAyCysWc+C9AZ+cPlBela2EwXzvChLkYMp +B6qa6PY7ssDAk1exd5Aayz5U/n8zo6su1m8WDqDm71AHDK6EB2CpzvNjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8D521VNvOzlnzYv1YROxBpywPEMB8GA1UdIwQY MBaAFLd0x7i6odnUfDr1Xz6X3W5dbifVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNUSHVMcWgyZFI4T3ZWZlBwZmRibDF1SjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMDg3OTQtMDA5NS00NzFiLWEzMDEt ZjAzODdlMGU2MjFiLzEvdDNUSHVMcWgyZFI4T3ZWZlBwZmRibDF1SjlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9lMDg3OTQtMDA5NS00NzFiLWEzMDEtZjAzODdlMGU2MjFi LzEvdDNUSHVMcWgyZFI4T3ZWZlBwZmRibDF1SjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCBHA8Es u6Hb0ptlGNNdzPlDWPMmzbQmEUY9/VQ+2vDl8BPLw55pMXdiiBMGewdoviHqB3VN sz1vfvbg2zzryGCQ6j910h4Uu1ETR98MJntFNb7HeA84PSPR3+/a4rxGfwsFZNPZ 0YXkYYpdUCLqeUWPQuMLXQcf6XdGvRksiNf1/uKJgzyEPLbhRIsL6Y0JgmKA/QMe 0HfAS/jiwa7WRKRYdnClSxWhVraZsIx/A+gSDHCj7Hpn4b5jF3dqZ9x3QjdLuSmf 0ZBAb5ebuXE0A7Ur2t2xTD0ReKDrdPN88mXOrc5h3WWsHDACKD/60BBrcUKWsUx3 YPbguUKbuRn3HQ== -----END CERTIFICATE-----Generated at Thu Dec 18 18:06:50 2025 by rpki-client