This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft File: R3BGWvTHI2RwAFnnll08iepGPNc.mft (raw, json) Hash identifier: J/leRaEGSbUsTOX/xa8tIWyp1nTpPn9VTWt2hK8agMI= Subject key identifier: C8:0A:43:9D:15:51:79:9B:D3:54:BD:E7:CB:70:C7:7F:56:71:33:2F Authority key identifier: 47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7 Certificate issuer: /CN=4770465af4c72364700059e7965d3c89ea463cd7 Certificate serial: 019B2EFA624ED8AC613A2F656BA388AB2908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft Manifest number: 1137 Signing time: Thu 18 Dec 2025 01:01:59 +0000 Manifest this update: Thu 18 Dec 2025 01:01:59 +0000 Manifest next update: Fri 19 Dec 2025 01:01:59 +0000 Files and hashes: 1: R3BGWvTHI2RwAFnnll08iepGPNc.crl (hash: JmdppeXxYVbriji1p/SqfsEWBClVDi6fUhdG8yPP6g4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:62:4e:d8:ac:61:3a:2f:65:6b:a3:88:ab:29:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4770465af4c72364700059e7965d3c89ea463cd7 Validity Not Before: Dec 18 01:01:59 2025 GMT Not After : Dec 19 01:01:59 2025 GMT Subject: CN=c80a439d1551799bd354bde7cb70c77f5671332f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:58:c4:e0:dd:5f:00:ab:20:e8:68:29:13: 29:8b:7c:ae:7e:f2:97:e5:9b:8a:ca:02:50:07:33: f1:78:7f:d1:15:16:1a:51:02:40:2b:e2:e4:27:92: da:2f:61:db:fa:4a:6c:ca:e9:09:9c:eb:e8:e6:04: f1:39:02:35:68:1f:2a:86:c3:7b:cb:21:e4:67:79: da:f0:c8:dd:1b:2c:11:7d:58:74:f2:f4:d1:05:78: cf:bb:bf:1c:9f:cf:b9:65:97:25:84:ae:c8:3b:7e: 7b:0f:d8:8b:59:df:09:14:74:08:7d:ed:ae:d7:f0: 73:e8:13:f3:09:5e:31:86:d7:87:9c:8f:c0:2a:4e: 77:7a:02:d9:fa:bb:c2:cf:bd:f8:d0:12:7e:ae:8e: 25:40:2f:c3:fc:ea:4d:e4:f1:15:f2:5d:64:56:ed: 0d:06:e7:93:7f:19:3f:3a:98:c7:0b:07:96:d4:ec: e3:9f:02:7c:6f:c3:a1:a4:05:95:73:ca:f5:5d:d1: 8a:25:c0:75:d1:c1:0e:b7:27:ba:10:9f:21:39:dc: 95:c1:13:ff:52:0c:b7:30:18:c6:97:79:72:71:ac: 0d:bc:30:c2:a4:16:df:f8:e0:08:66:1c:5e:11:24: fa:29:c6:c8:8d:db:ef:02:37:a0:42:23:9c:be:7b: 3b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0A:43:9D:15:51:79:9B:D3:54:BD:E7:CB:70:C7:7F:56:71:33:2F X509v3 Authority Key Identifier: keyid:47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8c:0a:19:a3:36:2e:33:42:22:15:90:60:0b:be:71:d3:ac: 5a:bf:a3:e4:a5:21:3c:95:44:af:ea:ba:05:7a:76:38:54:74: 45:bf:01:65:d1:b6:d6:04:c9:be:d5:d9:2b:21:de:5c:74:76: e6:1d:af:66:83:22:00:65:de:66:6d:4a:6a:1c:d2:23:2b:fc: 9a:4e:fa:ef:88:2e:4d:c8:5f:34:11:85:b8:34:ca:b1:69:b0: 85:6a:2e:07:6a:12:cd:ea:60:95:e5:ee:4e:a0:b6:0c:34:09: 24:cf:fe:77:26:e4:92:54:fc:47:7b:30:27:1f:89:4d:33:4c: 5b:db:83:e7:49:37:7c:f2:02:c7:7b:26:cd:75:73:f7:c8:18: e6:8d:3d:7f:8e:4f:58:32:11:9e:8f:d2:b9:9e:24:cb:57:31: dd:86:4e:28:7f:aa:75:7f:58:96:b0:d2:3d:a8:23:7a:d7:e1: b2:27:2e:26:54:7d:be:61:49:a0:5d:3b:a7:36:10:98:67:dd: bf:a4:6e:1d:f1:46:0a:e0:95:47:20:ea:d4:30:a1:ab:69:99: 45:66:fe:91:9e:b2:b7:47:40:f7:63:01:e3:d4:9d:37:13:bb: 6e:37:1b:98:3d:60:4f:11:e1:93:c2:08:de:b0:d9:74:d4:31: 45:41:2e:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+mJO2KxhOi9la6OIqykIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzA0NjVhZjRjNzIzNjQ3MDAwNTllNzk2NWQzYzg5ZWE0 NjNjZDcwHhcNMjUxMjE4MDEwMTU5WhcNMjUxMjE5MDEwMTU5WjAzMTEwLwYDVQQD EyhjODBhNDM5ZDE1NTE3OTliZDM1NGJkZTdjYjcwYzc3ZjU2NzEzMzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxJYxODdXwCrIOhoKRMpi3yufvKX 5ZuKygJQBzPxeH/RFRYaUQJAK+LkJ5LaL2Hb+kpsyukJnOvo5gTxOQI1aB8qhsN7 yyHkZ3na8MjdGywRfVh08vTRBXjPu78cn8+5ZZclhK7IO357D9iLWd8JFHQIfe2u 1/Bz6BPzCV4xhteHnI/AKk53egLZ+rvCz7340BJ+ro4lQC/D/OpN5PEV8l1kVu0N BueTfxk/OpjHCweW1OzjnwJ8b8OhpAWVc8r1XdGKJcB10cEOtye6EJ8hOdyVwRP/ Ugy3MBjGl3lycawNvDDCpBbf+OAIZhxeEST6KcbIjdvvAjegQiOcvns7XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgKQ50VUXmb01S958twx39WcTMvMB8GA1UdIwQY MBaAFEdwRlr0xyNkcABZ55ZdPInqRjzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85N2QwOWItZTVlMS00N2Y4LWIyNWYt OGE5MmUwOWJmZTFiLzEvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85N2QwOWItZTVlMS00N2Y4LWIyNWYtOGE5MmUwOWJmZTFi LzEvUjNCR1d2VEhJMlJ3QUZubmxsMDhpZXBHUE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4wKGaM2 LjNCIhWQYAu+cdOsWr+j5KUhPJVEr+q6BXp2OFR0Rb8BZdG21gTJvtXZKyHeXHR2 5h2vZoMiAGXeZm1KahzSIyv8mk7674guTchfNBGFuDTKsWmwhWouB2oSzepgleXu TqC2DDQJJM/+dybkklT8R3swJx+JTTNMW9uD50k3fPICx3smzXVz98gY5o09f45P WDIRno/SuZ4ky1cx3YZOKH+qdX9YlrDSPagjetfhsicuJlR9vmFJoF07pzYQmGfd v6RuHfFGCuCVRyDq1DChq2mZRWb+kZ6yt0dA92MB49SdNxO7bjcbmD1gTxHhk8II 3rDZdNQxRUEuBQ== -----END CERTIFICATE-----Generated at Thu Dec 18 08:03:10 2025 by rpki-client