This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft File: Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json) Hash identifier: mBTZl6++dWSXQieON5wlk9QLQhgwv8QzNcLTgfRcsAs= Subject key identifier: 7C:0F:86:BF:17:41:16:D7:6D:FC:CD:94:F0:84:7E:FA:2C:CD:7E:72 Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19 Certificate issuer: /CN=32bdecf2b1a410f6523c20e630826709cb6dac19 Certificate serial: 019B1B04B72BDE97E88B4B0FB97B39CD8D0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft Manifest number: 0F91 Signing time: Sun 14 Dec 2025 04:00:52 +0000 Manifest this update: Sun 14 Dec 2025 04:00:52 +0000 Manifest next update: Mon 15 Dec 2025 04:00:52 +0000 Files and hashes: 1: 1ykQwAr7tjzYeu5N5mzq1ApyYvM.roa (hash: 5NLaYiuNwek7qbqlr2qTFyj4HJSwenOAixDp+ZTkHiw=) 2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: 3x3iWtWPKOqo9FQY0P4nNXUTIgiELQQvzofNdFRaMEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:04:b7:2b:de:97:e8:8b:4b:0f:b9:7b:39:cd:8d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19 Validity Not Before: Dec 14 04:00:52 2025 GMT Not After : Dec 15 04:00:52 2025 GMT Subject: CN=7c0f86bf174116d76dfccd94f0847efa2ccd7e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:f8:62:8c:f7:d9:f1:e6:c9:49:04:b0:d5: f4:17:6f:47:cc:65:48:24:95:44:d7:5a:26:aa:2e: 04:68:15:5b:09:60:b4:ed:91:44:04:3c:2c:3c:4a: d2:e9:37:ae:1f:5b:c7:30:0d:8d:42:cc:03:f3:82: 4c:37:9c:27:14:a0:15:d5:d3:e9:d0:5e:7c:d7:8f: 58:d8:39:68:90:ce:34:cf:94:74:89:3f:0a:8c:56: 37:f3:40:1d:20:a4:20:27:0a:fd:ad:a2:df:19:d1: 84:a1:1e:4c:fd:f8:77:20:23:37:30:47:7c:ef:b1: 97:4c:44:54:92:22:00:3d:b2:e9:9b:fd:61:fd:09: fd:f4:55:3a:e3:b0:80:86:df:c6:25:dc:b0:b6:e6: 80:2a:fe:16:2d:97:ef:a8:4b:78:f7:c7:8f:82:8d: 7e:ae:74:79:81:70:4b:13:17:03:f2:af:95:1c:2c: e0:35:1f:81:90:c7:27:42:ed:9b:cb:f6:1b:04:56: 0d:ce:70:ed:c9:28:56:fc:5c:ac:0a:6b:fd:9e:0d: e5:24:2f:82:46:31:7a:5d:31:40:c6:2f:3a:8a:43: 4e:62:49:ed:ee:fe:74:e3:18:b2:ea:bb:66:f9:7a: 60:b8:07:d6:64:a6:f1:a9:da:b4:ca:11:db:08:b2: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0F:86:BF:17:41:16:D7:6D:FC:CD:94:F0:84:7E:FA:2C:CD:7E:72 X509v3 Authority Key Identifier: keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b7:13:d0:01:43:04:a4:00:18:b1:3e:75:27:a5:1a:7b:0e: 52:03:9e:d8:14:72:42:08:85:92:ff:bc:3d:18:87:88:1d:93: b6:0f:74:64:ad:76:7d:81:b4:94:f1:dd:3f:be:49:2f:8b:42: f8:d9:12:6b:ec:57:de:1f:07:62:ed:5e:f8:51:e5:51:bc:6e: b2:9d:52:a6:2d:26:f2:30:2d:99:51:21:63:cd:9f:98:36:5c: b5:3e:ae:96:26:51:7b:5f:27:a2:a6:99:e5:74:ec:1a:74:d3: 89:d1:35:bf:f2:f9:40:32:24:bf:e0:2e:c6:77:23:75:e7:07: 0b:63:38:2d:a3:26:f8:4f:dd:0d:c2:f7:f6:32:be:ab:85:34: ee:f3:51:da:6b:87:39:96:85:18:bb:52:24:97:9e:5d:af:35: a7:07:27:65:e2:3a:54:65:c0:c1:f6:39:9b:25:1e:80:a9:05: 31:01:06:89:58:5a:84:4f:91:df:c4:85:99:3a:56:ac:60:29: 85:28:7b:f3:6e:b3:ca:ca:ac:7d:18:0d:3a:5f:02:38:4a:a2: bb:54:d3:01:db:6a:e4:38:0b:17:17:c3:3d:6a:96:de:7b:3f: 94:cb:17:54:06:c6:e0:26:67:a3:5a:0b:2d:96:a3:18:fc:d3: 71:34:e0:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBLcr3pfoi0sPuXs5zY0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYmRlY2YyYjFhNDEwZjY1MjNjMjBlNjMwODI2NzA5Y2I2 ZGFjMTkwHhcNMjUxMjE0MDQwMDUyWhcNMjUxMjE1MDQwMDUyWjAzMTEwLwYDVQQD Eyg3YzBmODZiZjE3NDExNmQ3NmRmY2NkOTRmMDg0N2VmYTJjY2Q3ZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hT4Yoz32fHmyUkEsNX0F29HzGVI JJVE11omqi4EaBVbCWC07ZFEBDwsPErS6TeuH1vHMA2NQswD84JMN5wnFKAV1dPp 0F58149Y2DlokM40z5R0iT8KjFY380AdIKQgJwr9raLfGdGEoR5M/fh3ICM3MEd8 77GXTERUkiIAPbLpm/1h/Qn99FU647CAht/GJdywtuaAKv4WLZfvqEt498ePgo1+ rnR5gXBLExcD8q+VHCzgNR+BkMcnQu2by/YbBFYNznDtyShW/FysCmv9ng3lJC+C RjF6XTFAxi86ikNOYknt7v504xiy6rtm+XpguAfWZKbxqdq0yhHbCLKMDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwPhr8XQRbXbfzNlPCEfvoszX5yMB8GA1UdIwQY MBaAFDK97PKxpBD2Ujwg5jCCZwnLbawZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXIzczhyR2tFUFpTUENEbU1JSm5DY3R0ckJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lMTU0NGItMWIyYy00ZWJkLTg2NTgt Nzc4MzllYjVmODIwLzEvTXIzczhyR2tFUFpTUENEbU1JSm5DY3R0ckJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9lMTU0NGItMWIyYy00ZWJkLTg2NTgtNzc4MzllYjVmODIw LzEvTXIzczhyR2tFUFpTUENEbU1JSm5DY3R0ckJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbcT0AFD BKQAGLE+dSelGnsOUgOe2BRyQgiFkv+8PRiHiB2Ttg90ZK12fYG0lPHdP75JL4tC +NkSa+xX3h8HYu1e+FHlUbxusp1Spi0m8jAtmVEhY82fmDZctT6uliZRe18noqaZ 5XTsGnTTidE1v/L5QDIkv+AuxncjdecHC2M4LaMm+E/dDcL39jK+q4U07vNR2muH OZaFGLtSJJeeXa81pwcnZeI6VGXAwfY5myUegKkFMQEGiVhahE+R38SFmTpWrGAp hSh7826zysqsfRgNOl8COEqiu1TTAdtq5DgLFxfDPWqW3ns/lMsXVAbG4CZno1oL LZajGPzTcTTg7Q== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:11 2025 by rpki-client