This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json) Hash identifier: IBpkdVZV3Yldbwov9h008VTOeoPn8xpWU5C50JjTrQU= Subject key identifier: CC:5F:6A:E3:66:C4:C6:E3:AB:28:66:39:B1:9C:DC:BA:10:66:3C:EF Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b Certificate serial: 019B1C4E8B30E7198AA0041F90B0E2981547 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft Manifest number: 1789 Signing time: Sun 14 Dec 2025 10:01:08 +0000 Manifest this update: Sun 14 Dec 2025 10:01:08 +0000 Manifest next update: Mon 15 Dec 2025 10:01:08 +0000 Files and hashes: 1: MTPWLW2wZKUX3rd5H2fglwcmRP8.roa (hash: NV6d77rjaDRaqkT0W7HOp+x3FnU/qH62m4QIfaIEmLM=) 2: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: axOhGMkdcwTha7VL45Ounvx2M2RZjeFH47MMg5LgMWY=) 3: zMsRcKOONscECgINX74a-U1WNU0.roa (hash: 6TWMzzay/K1ed+s9hSmFCHo0y4lDFCLVPqVrZje4kuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 10:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:8b:30:e7:19:8a:a0:04:1f:90:b0:e2:98:15:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b Validity Not Before: Dec 14 10:01:08 2025 GMT Not After : Dec 15 10:01:08 2025 GMT Subject: CN=cc5f6ae366c4c6e3ab286639b19cdcba10663cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:dc:6d:63:eb:ef:e3:1a:66:8b:44:96:05: c2:af:e4:d8:d5:2c:c7:0d:97:9e:a3:6c:ed:33:f0: d3:a9:4b:6e:bd:4b:5b:a4:ca:01:1c:d9:22:02:9f: e5:aa:f7:7f:1a:64:ce:36:cc:cd:95:a8:25:bf:90: 5f:af:10:68:07:11:ac:2e:31:db:f0:89:e4:93:e9: a0:66:8c:ea:f9:f3:d6:0e:4c:f7:75:1d:4a:46:b7: c8:9e:4f:9e:6f:73:0e:33:a5:87:b1:49:a1:58:64: a3:be:67:21:3b:15:8b:19:ff:8b:b0:67:33:65:0c: 15:a3:56:d5:b1:ce:93:c5:e7:58:05:3f:c8:c5:8d: 06:a9:cf:0c:6f:46:83:9d:39:35:0a:ea:af:6b:d0: 4a:71:a0:a0:f9:74:4e:17:3b:60:3f:b2:d8:f0:90: b1:43:fa:63:34:5d:29:a0:df:e1:f1:6a:f0:01:22: c4:5c:e8:41:cf:42:dd:4e:3a:5a:d3:ee:ba:9a:da: 2c:49:98:79:f4:53:8d:9e:c3:f3:d8:41:8f:75:fa: cd:fc:7f:a2:2d:36:f0:ee:81:b1:4f:f9:3f:a7:9d: 2c:1f:59:27:37:ce:8a:66:5c:c1:e4:2b:bf:20:58: 93:62:59:97:9a:81:ff:19:4b:10:21:a9:f0:4e:ca: 4d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5F:6A:E3:66:C4:C6:E3:AB:28:66:39:B1:9C:DC:BA:10:66:3C:EF X509v3 Authority Key Identifier: keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fd:86:22:34:ad:97:93:7f:fe:58:2c:7c:53:7a:5b:88:78: a5:74:1a:b0:a1:48:a2:d3:55:f6:4e:47:96:a4:57:0b:06:36: b2:44:e7:7b:7c:02:10:78:57:ea:9c:ff:06:cf:dd:76:0a:52: a8:55:52:d2:f0:7e:f9:d7:ed:4f:cf:09:e9:59:51:b5:54:f4: f6:53:c9:45:c5:51:0e:03:81:6c:07:b3:c3:45:64:f2:7f:96: 1f:5d:e3:32:08:91:f1:f9:6f:8f:f2:59:5f:bd:91:40:2a:00: 19:ee:bf:0c:3f:48:b3:d6:87:63:b5:b9:5c:a7:b3:1e:1e:45: 3f:dd:b0:e7:41:e4:a2:4a:51:32:1d:a4:46:71:71:7e:2a:b6: 05:25:a6:7f:f7:ec:d7:da:43:1b:fd:df:51:c0:52:2c:e2:f9: 94:1b:01:de:20:d0:8f:03:72:f9:d7:91:24:15:52:67:81:08: 8c:c7:da:80:7a:08:77:bf:08:5d:3a:f8:16:e3:61:c0:63:69: 1b:2f:b5:3a:90:96:c8:ff:10:47:65:62:31:e9:56:8e:5e:38: 34:4f:56:78:15:f3:e1:80:52:c0:e0:15:2e:94:05:62:18:a4: 0c:0a:7f:03:79:82:a7:8f:fe:5d:b1:ad:76:84:ea:7f:85:83: ef:f4:21:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTosw5xmKoAQfkLDimBVHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzMzZTlkZTk0ODViNDQ2NzFjOGU1MTFkYTIyMWU0MTUz YzcxMWIwHhcNMjUxMjE0MTAwMTA4WhcNMjUxMjE1MTAwMTA4WjAzMTEwLwYDVQQD EyhjYzVmNmFlMzY2YzRjNmUzYWIyODY2MzliMTljZGNiYTEwNjYzY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtjcbWPr7+MaZotElgXCr+TY1SzH DZeeo2ztM/DTqUtuvUtbpMoBHNkiAp/lqvd/GmTONszNlaglv5BfrxBoBxGsLjHb 8Inkk+mgZozq+fPWDkz3dR1KRrfInk+eb3MOM6WHsUmhWGSjvmchOxWLGf+LsGcz ZQwVo1bVsc6TxedYBT/IxY0Gqc8Mb0aDnTk1Cuqva9BKcaCg+XROFztgP7LY8JCx Q/pjNF0poN/h8WrwASLEXOhBz0LdTjpa0+66mtosSZh59FONnsPz2EGPdfrN/H+i LTbw7oGxT/k/p50sH1knN86KZlzB5Cu/IFiTYlmXmoH/GUsQIanwTspNNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxfauNmxMbjqyhmObGc3LoQZjzvMB8GA1UdIwQY MBaAFLdzPp3pSFtEZxyOUR2iIeQVPHEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUt NTE4Y2QxNDcxM2ViLzEvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUtNTE4Y2QxNDcxM2Vi LzEvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/2GIjSt l5N//lgsfFN6W4h4pXQasKFIotNV9k5HlqRXCwY2skTne3wCEHhX6pz/Bs/ddgpS qFVS0vB++dftT88J6VlRtVT09lPJRcVRDgOBbAezw0Vk8n+WH13jMgiR8flvj/JZ X72RQCoAGe6/DD9Is9aHY7W5XKezHh5FP92w50HkokpRMh2kRnFxfiq2BSWmf/fs 19pDG/3fUcBSLOL5lBsB3iDQjwNy+deRJBVSZ4EIjMfagHoId78IXTr4FuNhwGNp Gy+1OpCWyP8QR2ViMelWjl44NE9WeBXz4YBSwOAVLpQFYhikDAp/A3mCp4/+XbGt doTqf4WD7/QhGQ== -----END CERTIFICATE-----Generated at Sun Dec 14 19:15:37 2025 by rpki-client