This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json) Hash identifier: Zk61iTgSMKMibFgfM/RTDgj9/VZONjyBHj08cXQXZNs= Subject key identifier: 58:3C:43:8D:B1:B7:47:42:BC:EF:7E:1E:B8:2D:F4:7A:D9:B0:10:7A Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3 Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3 Certificate serial: 019B10EED03C1D0145039CBB0C6910F94D63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft Manifest number: 1358 Signing time: Fri 12 Dec 2025 05:00:44 +0000 Manifest this update: Fri 12 Dec 2025 05:00:44 +0000 Manifest next update: Sat 13 Dec 2025 05:00:44 +0000 Files and hashes: 1: Dx1gAqycGcxk0c3DOzDhmsNycjk.roa (hash: DxcHYS8M2M1yYvT8l/4w2YI9cemThALPivyuAHPlg0M=) 2: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: 9noDeFPxjpxQ/IMAHgdVtBXuf2axUoWJEgrmJg5RZ3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ee:d0:3c:1d:01:45:03:9c:bb:0c:69:10:f9:4d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3 Validity Not Before: Dec 12 05:00:44 2025 GMT Not After : Dec 13 05:00:44 2025 GMT Subject: CN=583c438db1b74742bcef7e1eb82df47ad9b0107a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:be:27:a6:ee:02:76:bb:87:1c:6c:fe:db: f3:cd:ae:a0:f6:e1:7a:0c:5e:c1:ed:1c:8a:be:32: 84:bc:ff:21:7f:ba:f3:b9:ca:a7:76:e9:61:d3:c9: 55:7c:58:a9:c5:7b:40:b1:4a:dd:1e:0e:2c:d3:21: 0a:8c:35:fe:84:f0:2a:bb:7d:7a:6a:b4:bc:27:4c: 2c:3d:27:d1:9c:19:b0:62:7a:1a:3f:2d:36:92:7c: 2e:5c:43:70:46:f8:9d:6d:d7:bf:8c:dc:ff:a7:9c: 3c:3f:ac:61:4d:43:8b:01:23:a4:ba:26:dd:f7:dc: 1a:c6:61:fe:b3:82:61:4c:8e:82:2d:b6:c7:7d:b3: fd:67:cf:3a:bf:d8:1a:95:e3:1a:2b:d0:12:04:e4: cf:74:75:85:68:79:e9:1e:f8:f5:f9:21:f2:08:ae: e1:f8:b7:0d:ff:74:75:0a:d9:4d:f1:e7:95:49:de: 05:b7:e0:0f:fd:b2:9b:7e:11:ed:09:36:1c:1a:73: db:b3:bc:50:6e:25:1b:c4:65:b9:2e:9a:7a:7d:44: 27:e3:98:0d:86:74:fb:c8:1f:d9:99:43:2e:5f:de: 4e:c9:b3:ec:34:f0:58:2f:29:20:46:ca:85:42:5f: c5:3f:e3:e4:26:f4:0b:9e:c1:de:ef:23:1e:0d:04: 1c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3C:43:8D:B1:B7:47:42:BC:EF:7E:1E:B8:2D:F4:7A:D9:B0:10:7A X509v3 Authority Key Identifier: keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5e:b1:6d:25:a0:09:c3:93:cf:61:0a:0c:57:4a:39:15:77: 93:77:3a:15:28:06:f0:a1:82:86:f9:8a:2c:f7:21:8b:e4:4f: d3:e1:08:07:fe:5f:fc:1d:ec:1d:d9:62:f5:90:74:d7:e6:26: 02:ac:31:46:3b:e2:8f:83:9f:ca:22:97:c0:e5:ba:4d:e1:dc: 27:b7:88:46:80:47:b0:75:81:4e:c4:b8:32:03:3b:e0:93:83: 60:8f:df:11:d6:66:f3:36:4e:91:96:3d:2c:c1:1b:36:9b:81: 6d:82:23:61:11:4c:fc:d7:5f:5d:5c:df:a5:a9:3f:42:a5:6c: f5:0f:27:36:b1:4a:f4:dc:95:6f:24:e7:c5:5f:8f:81:57:29: 07:ee:39:3b:c4:f0:57:9d:5c:2f:c7:6e:0f:02:f1:74:26:fb: 6b:0b:1c:53:cc:eb:64:c5:6e:3d:2c:26:45:bc:ce:f5:51:7a: aa:c8:b0:08:07:bc:9c:b6:9a:e6:49:2d:25:2d:e9:a8:f1:6a: 1c:54:31:cc:33:c8:04:fe:37:3d:c3:d0:4f:a5:17:8e:d5:83: 62:97:60:d4:32:18:68:b2:82:b7:ca:ae:4c:18:76:74:ed:52: e9:c1:c3:7b:e2:9a:b3:b8:f0:ef:fe:05:e3:6b:9b:ff:9b:71: 61:df:b8:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7tA8HQFFA5y7DGkQ+U1jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODBiNzcxMGIxMzk4NDQyNzVjOWRlOWM4ZTc2NGViNjQy ZTE4YzMwHhcNMjUxMjEyMDUwMDQ0WhcNMjUxMjEzMDUwMDQ0WjAzMTEwLwYDVQQD Eyg1ODNjNDM4ZGIxYjc0NzQyYmNlZjdlMWViODJkZjQ3YWQ5YjAxMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspK+J6buAna7hxxs/tvzza6g9uF6 DF7B7RyKvjKEvP8hf7rzucqndulh08lVfFipxXtAsUrdHg4s0yEKjDX+hPAqu316 arS8J0wsPSfRnBmwYnoaPy02knwuXENwRvidbde/jNz/p5w8P6xhTUOLASOkuibd 99waxmH+s4JhTI6CLbbHfbP9Z886v9galeMaK9ASBOTPdHWFaHnpHvj1+SHyCK7h +LcN/3R1CtlN8eeVSd4Ft+AP/bKbfhHtCTYcGnPbs7xQbiUbxGW5Lpp6fUQn45gN hnT7yB/ZmUMuX95OybPsNPBYLykgRsqFQl/FP+PkJvQLnsHe7yMeDQQcxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFg8Q42xt0dCvO9+Hrgt9HrZsBB6MB8GA1UdIwQY MBaAFP+At3ELE5hEJ1yd6cjnZOtkLhjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRDM2NRc1RtRVFuWEozcHlPZGs2MlF1R01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOGEwYTUtYjE4NS00OWE1LTg1YWQt MTMzZWZmNzg0NDJiLzEvXzRDM2NRc1RtRVFuWEozcHlPZGs2MlF1R01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOGEwYTUtYjE4NS00OWE1LTg1YWQtMTMzZWZmNzg0NDJi LzEvXzRDM2NRc1RtRVFuWEozcHlPZGs2MlF1R01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPV6xbSWg CcOTz2EKDFdKORV3k3c6FSgG8KGChvmKLPchi+RP0+EIB/5f/B3sHdli9ZB01+Ym AqwxRjvij4OfyiKXwOW6TeHcJ7eIRoBHsHWBTsS4MgM74JODYI/fEdZm8zZOkZY9 LMEbNpuBbYIjYRFM/NdfXVzfpak/QqVs9Q8nNrFK9NyVbyTnxV+PgVcpB+45O8Tw V51cL8duDwLxdCb7awscU8zrZMVuPSwmRbzO9VF6qsiwCAe8nLaa5kktJS3pqPFq HFQxzDPIBP43PcPQT6UXjtWDYpdg1DIYaLKCt8quTBh2dO1S6cHDe+Kas7jw7/4F 42ub/5txYd+4Nw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:11:18 2025 by rpki-client