This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft File: 3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json) Hash identifier: 9n/LdqC+KzDPFvxH//pDCcHCPSoKqn5N8Bk/neRX01U= Subject key identifier: 1C:A6:55:89:A9:54:1B:46:9E:FD:4E:85:E6:33:A2:85:03:8A:02:FD Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8 Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8 Certificate serial: 019AAD278AEA1D4580AB05ADD46CA2455FD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft Manifest number: 1424 Signing time: Sat 22 Nov 2025 20:00:41 +0000 Manifest this update: Sat 22 Nov 2025 20:00:41 +0000 Manifest next update: Sun 23 Nov 2025 20:00:41 +0000 Files and hashes: 1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: te27rDkHdzWWubwpHOob/gHxUk/w9oKQnR6oarwJZfg=) 2: AFa9BeMRC9KZa5ESZVY3qezRhqo.roa (hash: kFgjZZQAO7DQ4A//2mPuGomN/dVKyDVTDikOVl1cxRM=) 3: oTU6jls5Cbp2h-8jJVa1y-YZLoo.roa (hash: UlQbXDO/2Z5fLH/VOiXf6qQdUrJ+q43vGjJDK0Fi6XA=) 4: onN6KmPVXQwrcGzs19GCsiDsKrQ.roa (hash: z68kDOoDWacxs1gAQw1w/1PdDLWcZUVC2dAlyVoGWL0=) 5: rrglEeDtNMMTRuZ3vbypZH_RQmE.roa (hash: urqCGELvaxYkBx+UEtrFXZNDg3RBmJzxwZn3ZWt36zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ad:27:8a:ea:1d:45:80:ab:05:ad:d4:6c:a2:45:5f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8 Validity Not Before: Nov 22 20:00:41 2025 GMT Not After : Nov 23 20:00:41 2025 GMT Subject: CN=1ca65589a9541b469efd4e85e633a285038a02fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:fd:61:be:c0:db:b4:6b:82:1a:90:e8:56: b9:9f:68:70:16:58:73:fc:a2:6d:37:49:c0:23:9a: d1:2a:44:af:c2:0c:32:61:01:90:bb:a1:de:35:e5: d9:38:c2:07:fc:44:4d:6b:01:5a:83:e1:a7:36:22: 6b:e9:be:17:d7:b9:86:2e:02:5e:c9:07:df:31:17: a6:c8:45:37:8a:64:6b:03:6f:d8:dd:2b:94:42:5a: 40:c2:df:48:d3:57:0a:94:91:55:61:d2:0d:02:df: d2:f6:b9:ca:3f:06:00:b0:eb:cf:c0:c8:10:46:3b: 79:75:8f:1d:f9:bb:c3:3a:db:62:5a:3e:d3:1d:81: d2:62:ec:ff:24:c8:06:04:94:f7:18:40:25:e7:db: 99:cd:cc:d9:58:61:ee:b3:af:f5:b3:ba:73:56:5c: f5:91:72:31:39:c2:01:7c:3f:5e:bc:05:e7:6d:b1: 95:bd:db:3a:9a:77:42:6f:75:f4:9f:9f:e5:7b:e7: 00:c0:0b:a0:95:00:9f:83:9c:0e:14:69:76:c2:5a: a8:7c:3c:08:ca:1d:70:a0:a9:43:89:f6:dd:6a:47: 6d:80:f3:0a:b2:29:91:d0:52:ad:5b:4c:f9:b8:97: f6:fc:57:75:e7:d5:61:eb:39:04:02:44:bf:b7:8f: e0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A6:55:89:A9:54:1B:46:9E:FD:4E:85:E6:33:A2:85:03:8A:02:FD X509v3 Authority Key Identifier: keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:66:85:cc:a0:e1:ba:6d:ec:93:55:d9:8d:2e:1d:76:79:f8: b6:7a:32:d8:7c:a8:bd:40:88:4f:52:8e:3c:27:b0:c5:ce:25: 18:5a:73:b8:e0:c3:67:6c:a1:cb:13:31:7c:7b:44:f8:12:52: 59:23:76:55:94:32:d4:d0:15:73:0f:c6:d3:3b:8b:76:f5:90: ef:07:f5:f5:dc:1d:ff:37:7a:0c:19:09:d9:e4:42:5e:f6:41: 6d:56:8d:a2:74:5d:a4:a2:9b:ef:69:01:56:47:25:d2:3d:31: 7b:22:0c:40:ff:90:fd:4d:85:f9:a3:a8:da:bd:47:2a:4a:15: 69:6a:17:b2:bf:f7:fc:bc:1e:1c:4c:94:e7:52:d0:b5:ba:95: db:59:c0:58:b3:80:e0:e9:98:79:77:2e:93:57:fd:5a:71:eb: 8d:6f:a0:59:99:77:44:40:e2:7a:de:e9:66:c8:6e:a1:a2:06: 78:e4:60:3f:62:c2:c6:cf:87:6d:c8:95:08:b0:b1:b5:06:0a: e2:d2:15:41:fd:01:b5:98:12:83:ce:db:1b:dd:1d:d1:db:ae: 18:c1:6b:8c:b6:81:47:77:99:89:2d:e3:e1:41:73:d2:1a:57: b5:1e:41:bd:15:94:f9:2c:43:26:4d:94:f0:36:24:c9:00:76: 03:be:0a:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqtJ4rqHUWAqwWt1GyiRV/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZmFlN2Q0ZTY5ZDQyZTRmNGM5NWQ5OWY0ODJiOWE5NDRk YmVmYzgwHhcNMjUxMTIyMjAwMDQxWhcNMjUxMTIzMjAwMDQxWjAzMTEwLwYDVQQD EygxY2E2NTU4OWE5NTQxYjQ2OWVmZDRlODVlNjMzYTI4NTAzOGEwMmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkj9Yb7A27RrghqQ6Fa5n2hwFlhz /KJtN0nAI5rRKkSvwgwyYQGQu6HeNeXZOMIH/ERNawFag+GnNiJr6b4X17mGLgJe yQffMRemyEU3imRrA2/Y3SuUQlpAwt9I01cKlJFVYdINAt/S9rnKPwYAsOvPwMgQ Rjt5dY8d+bvDOttiWj7THYHSYuz/JMgGBJT3GEAl59uZzczZWGHus6/1s7pzVlz1 kXIxOcIBfD9evAXnbbGVvds6mndCb3X0n5/le+cAwAuglQCfg5wOFGl2wlqofDwI yh1woKlDifbdakdtgPMKsimR0FKtW0z5uJf2/Fd159Vh6zkEAkS/t4/gBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBymVYmpVBtGnv1OheYzooUDigL9MB8GA1UdIwQY MBaAFNz659TmnULk9MldmfSCualE2+/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYt MzcyNzNkZjM5MDFjLzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYtMzcyNzNkZjM5MDFj LzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWaFzKDh um3sk1XZjS4ddnn4tnoy2HyovUCIT1KOPCewxc4lGFpzuODDZ2yhyxMxfHtE+BJS WSN2VZQy1NAVcw/G0zuLdvWQ7wf19dwd/zd6DBkJ2eRCXvZBbVaNonRdpKKb72kB Vkcl0j0xeyIMQP+Q/U2F+aOo2r1HKkoVaWoXsr/3/LweHEyU51LQtbqV21nAWLOA 4OmYeXcuk1f9WnHrjW+gWZl3REDiet7pZshuoaIGeORgP2LCxs+HbciVCLCxtQYK 4tIVQf0BtZgSg87bG90d0duuGMFrjLaBR3eZiS3j4UFz0hpXtR5BvRWU+SxDJk2U 8DYkyQB2A74Kgg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:50:03 2025 by rpki-client