This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json) Hash identifier: IU+Q/NeRuog0dtMBcyHcOINnjgME/dqeyccvO1IoTWI= Subject key identifier: DD:0F:32:6B:78:07:7B:27:47:99:98:9B:1E:AB:61:D0:5C:9A:D3:A8 Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4 Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4 Certificate serial: 019B59AD37AACDF02286E9DE55574715D53B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft Manifest number: 01A7 Signing time: Fri 26 Dec 2025 08:01:22 +0000 Manifest this update: Fri 26 Dec 2025 08:01:22 +0000 Manifest next update: Sat 27 Dec 2025 08:01:22 +0000 Files and hashes: 1: EshCzxO86qcL07tz5uc1JfugV7o.roa (hash: LPE3JzJOmXyXyccfoQvv4I0FBt2vRf2Wt20kp5/Xotw=) 2: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: WmPPwtxoG7Ri0jIb+zZC4kH+LBFZlpZn9VnjIzavRco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:37:aa:cd:f0:22:86:e9:de:55:57:47:15:d5:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4 Validity Not Before: Dec 26 08:01:22 2025 GMT Not After : Dec 27 08:01:22 2025 GMT Subject: CN=dd0f326b78077b274799989b1eab61d05c9ad3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:90:66:93:94:60:5f:75:f9:78:36:96:68: 81:ef:50:64:6b:83:75:fe:52:48:6c:f6:ff:76:b1: a2:91:bc:51:0c:6a:0b:69:e1:f4:3a:d3:af:d1:e5: cd:c5:6c:7b:d7:e3:46:4a:60:25:33:a8:25:b8:cb: df:eb:cf:e9:32:26:84:d9:12:dd:4e:dd:77:05:be: 3c:ee:6a:1b:8f:8a:9e:92:bd:0d:35:ad:47:4f:c7: c8:77:73:49:a8:68:67:f3:de:b7:ea:50:1b:ed:50: 5d:b4:e2:46:80:66:36:c7:70:af:12:cd:9c:62:32: dd:3e:a7:6a:e0:c6:8d:45:36:e2:dd:1a:75:02:ee: 41:3f:ca:56:fc:4b:03:07:3f:d5:e8:54:bd:2b:a4: 7b:40:44:c0:89:3f:a0:df:1a:1c:55:e5:67:dd:de: 73:66:fb:ba:1e:15:3d:83:5f:41:37:17:bc:93:26: d6:ff:0b:42:a5:65:d6:67:20:ce:09:75:46:49:b5: a6:c2:d6:8a:6f:e8:f3:18:36:8e:f1:d0:71:1c:89: 2f:3e:c0:bc:54:f8:c7:cf:d7:4c:b4:eb:46:bb:9f: 3b:ac:8b:49:c2:cd:cf:a3:c3:ea:8d:25:84:d1:26: 5a:ae:c6:e1:8e:92:96:f1:64:1a:4b:4e:68:9c:65: 4a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0F:32:6B:78:07:7B:27:47:99:98:9B:1E:AB:61:D0:5C:9A:D3:A8 X509v3 Authority Key Identifier: keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a0:7d:09:43:c2:b9:c6:0a:d8:bf:61:33:0c:57:3a:eb:1a: 76:b9:02:9b:9e:c0:40:34:11:44:54:1c:7f:ac:ad:16:7a:9b: 2b:aa:37:62:40:62:4c:0e:1d:6b:fc:80:f5:11:13:0d:87:dd: 36:4a:03:ee:0c:41:4c:85:14:1d:37:d2:8c:b1:5e:11:85:b6: 22:2a:0f:7e:88:7c:04:93:1d:71:f0:b2:57:8e:47:36:74:08: 3c:fa:26:53:55:15:96:c5:de:12:8b:b1:9c:5b:61:d9:97:ab: df:4c:61:a9:0f:c1:3b:6f:1d:a1:c9:08:c5:2e:f7:05:ed:2a: 71:22:a2:60:93:04:33:16:22:72:b3:7e:fd:22:c7:2b:0a:82: a7:a4:0f:dc:db:1d:81:71:98:b5:2b:b2:6a:20:b0:6a:8a:4f: a3:6c:98:ae:d9:31:c6:3b:51:b7:83:b1:f9:74:15:b4:6b:bf: 6e:46:ed:92:50:ed:57:be:4e:e7:0a:b4:20:9b:4f:fb:e2:a1: 0c:f8:8c:7b:88:9f:82:78:e8:01:6e:45:ee:d4:14:c5:f4:5e: a4:a9:8c:09:31:ec:e9:c0:20:2a:ec:60:7e:18:e2:58:f8:ae: da:f0:bf:80:88:8c:25:cd:28:4c:63:5a:71:33:63:db:c0:98: 3f:ed:0c:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrTeqzfAihuneVVdHFdU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzMyNDMwODFlYWRjMWVmNGFlMzIzNGY4NmIyYmQ3MjYy MmI1YzQwHhcNMjUxMjI2MDgwMTIyWhcNMjUxMjI3MDgwMTIyWjAzMTEwLwYDVQQD EyhkZDBmMzI2Yjc4MDc3YjI3NDc5OTk4OWIxZWFiNjFkMDVjOWFkM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiaQZpOUYF91+Xg2lmiB71Bka4N1 /lJIbPb/drGikbxRDGoLaeH0OtOv0eXNxWx71+NGSmAlM6gluMvf68/pMiaE2RLd Tt13Bb487mobj4qekr0NNa1HT8fId3NJqGhn89636lAb7VBdtOJGgGY2x3CvEs2c YjLdPqdq4MaNRTbi3Rp1Au5BP8pW/EsDBz/V6FS9K6R7QETAiT+g3xocVeVn3d5z Zvu6HhU9g19BNxe8kybW/wtCpWXWZyDOCXVGSbWmwtaKb+jzGDaO8dBxHIkvPsC8 VPjHz9dMtOtGu587rItJws3Po8PqjSWE0SZarsbhjpKW8WQaS05onGVKOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0PMmt4B3snR5mYmx6rYdBcmtOoMB8GA1UdIwQY MBaAFEdzJDCB6twe9K4yNPhrK9cmIrXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2It MzRhOTQ5YzkyMDc0LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2ItMzRhOTQ5YzkyMDc0 LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6B9CUPC ucYK2L9hMwxXOusadrkCm57AQDQRRFQcf6ytFnqbK6o3YkBiTA4da/yA9RETDYfd NkoD7gxBTIUUHTfSjLFeEYW2IioPfoh8BJMdcfCyV45HNnQIPPomU1UVlsXeEoux nFth2Zer30xhqQ/BO28dockIxS73Be0qcSKiYJMEMxYicrN+/SLHKwqCp6QP3Nsd gXGYtSuyaiCwaopPo2yYrtkxxjtRt4Ox+XQVtGu/bkbtklDtV75O5wq0IJtP++Kh DPiMe4ifgnjoAW5F7tQUxfRepKmMCTHs6cAgKuxgfhjiWPiu2vC/gIiMJc0oTGNa cTNj28CYP+0MOQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:36 2025 by rpki-client