This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft File: ADn3QWhtoR55rnxeSGqikICMsbc.mft (raw, json) Hash identifier: T24evFpfmLM1TqIN5je5Ig8fvUngrlg0942AdLUEAz8= Subject key identifier: F9:CF:78:80:FD:4D:9E:2D:F2:B0:49:91:EF:DC:33:0E:1E:5D:85:3C Authority key identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7 Certificate issuer: /CN=0039f741686da11e79ae7c5e486aa290808cb1b7 Certificate serial: 019B1049F4E85ACB295068B3D7A7C75C986C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft Manifest number: 141D Signing time: Fri 12 Dec 2025 02:00:40 +0000 Manifest this update: Fri 12 Dec 2025 02:00:40 +0000 Manifest next update: Sat 13 Dec 2025 02:00:40 +0000 Files and hashes: 1: ADn3QWhtoR55rnxeSGqikICMsbc.crl (hash: YHPfmmUHviLJYuiT6llkdGcE09kwMsnEXpcJDNO6QoY=) 2: Y3i7R5k-pr2oJ6IrDbTR9kOWSc4.roa (hash: GTNPbNy0VtCzCDFPUyJZWkGeAio7wlfXOb9TWYRV6sE=) 3: e9a8ONYDtpKM0KoJ-RMqjCOdosE.roa (hash: tuQ0e/czULwl9GWCOBeKLYiHJIJXkYnYmwwjDNg8QOE=) 4: xewexu8qO3LGfnqqWqfVcH7b-hQ.roa (hash: foDGso9eJE+J/6Qu10A3sNz/jBAeKKZ8zvRJtBdUh9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:49:f4:e8:5a:cb:29:50:68:b3:d7:a7:c7:5c:98:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0039f741686da11e79ae7c5e486aa290808cb1b7 Validity Not Before: Dec 12 02:00:40 2025 GMT Not After : Dec 13 02:00:40 2025 GMT Subject: CN=f9cf7880fd4d9e2df2b04991efdc330e1e5d853c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:c1:54:34:d6:13:8c:7f:27:14:a3:a1:63: 42:01:10:d9:85:61:e6:2d:10:a3:50:da:e2:5b:6e: 95:76:c4:eb:f0:2c:91:13:e7:96:05:e8:19:ec:77: 90:ec:44:d4:36:f3:32:74:f6:b7:e9:5f:fd:4a:5e: aa:78:c4:38:b5:b6:00:c4:34:e9:8c:18:8b:ac:53: eb:7c:9e:14:19:4e:ae:34:4f:d3:04:4b:c6:a2:0c: 29:1d:d1:94:70:90:74:d3:5e:f1:d1:c8:3d:c8:46: 66:b3:ff:61:83:5a:96:50:2a:16:91:1f:96:d9:cd: be:14:df:96:b3:b6:88:e4:e4:84:ed:ba:53:05:67: 8b:3d:10:b8:66:9f:0d:8d:6b:d2:52:ca:2f:2d:1c: 6b:48:8e:7a:49:08:0f:ed:b9:3c:76:86:0d:e2:3d: 5f:16:53:c7:06:2a:9c:48:91:02:a5:59:e8:a7:68: 5f:27:ca:15:5a:44:17:da:2b:14:bc:b3:81:73:71: a0:12:54:58:d1:06:49:69:8e:11:29:91:a4:90:6f: 93:e6:8b:74:d0:dd:3a:99:5f:12:6e:f9:74:54:48: aa:1e:9f:6b:a7:e4:97:e6:7e:c2:d0:f2:eb:ff:a4: 90:14:d2:50:29:93:b6:29:34:f8:e5:94:e3:93:04: f7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CF:78:80:FD:4D:9E:2D:F2:B0:49:91:EF:DC:33:0E:1E:5D:85:3C X509v3 Authority Key Identifier: keyid:00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:30:c9:06:8e:3e:38:8b:07:bb:fc:e4:13:35:37:6a:02:42: 0b:2f:5e:e6:07:7a:5f:04:2a:20:25:7f:94:c5:71:50:47:e7: a6:a7:d9:ee:44:bf:49:80:52:ef:b2:ce:5a:2c:54:44:b1:e5: 02:ea:e4:9c:96:5b:18:d6:c9:86:fc:5f:6a:aa:c9:20:ab:cc: 08:8d:a5:88:14:e5:24:26:88:49:26:8b:e0:e0:47:2c:ac:57: e2:8c:e6:44:23:73:40:63:79:0d:2f:69:b6:ad:e5:22:d8:fb: dc:33:d9:21:58:5e:3c:de:0a:14:8e:bf:1e:f0:77:92:fd:3e: da:30:e1:ba:2e:05:70:22:ad:7c:b5:38:63:96:50:54:ee:67: 37:08:5d:3b:23:30:3d:34:55:35:4a:a3:99:0e:a6:fb:9d:0a: 1a:fa:55:58:71:be:8f:79:2a:c1:a9:d7:57:04:d9:4c:4b:37: 0b:26:5c:fd:6d:70:f7:7b:ef:ff:13:af:4c:bf:b5:31:32:48: 10:7e:10:31:6a:4b:5b:ab:2f:42:47:46:a8:00:91:fa:32:42: e1:29:1c:26:3a:15:37:3f:6c:79:84:a5:ad:72:d1:28:11:29: 16:b5:70:ea:f8:34:ab:58:87:41:e0:0f:1d:76:68:3f:90:ac: 4f:bb:8b:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSfToWsspUGiz16fHXJhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMzlmNzQxNjg2ZGExMWU3OWFlN2M1ZTQ4NmFhMjkwODA4 Y2IxYjcwHhcNMjUxMjEyMDIwMDQwWhcNMjUxMjEzMDIwMDQwWjAzMTEwLwYDVQQD EyhmOWNmNzg4MGZkNGQ5ZTJkZjJiMDQ5OTFlZmRjMzMwZTFlNWQ4NTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukfBVDTWE4x/JxSjoWNCARDZhWHm LRCjUNriW26VdsTr8CyRE+eWBegZ7HeQ7ETUNvMydPa36V/9Sl6qeMQ4tbYAxDTp jBiLrFPrfJ4UGU6uNE/TBEvGogwpHdGUcJB0017x0cg9yEZms/9hg1qWUCoWkR+W 2c2+FN+Ws7aI5OSE7bpTBWeLPRC4Zp8NjWvSUsovLRxrSI56SQgP7bk8doYN4j1f FlPHBiqcSJECpVnop2hfJ8oVWkQX2isUvLOBc3GgElRY0QZJaY4RKZGkkG+T5ot0 0N06mV8Sbvl0VEiqHp9rp+SX5n7C0PLr/6SQFNJQKZO2KTT45ZTjkwT3gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnPeID9TZ4t8rBJke/cMw4eXYU8MB8GA1UdIwQY MBaAFAA590FobaEeea58XkhqopCAjLG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQURuM1FXaHRvUjU1cm54ZVNHcWlrSUNNc2JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8zYzYxNmYtMDEzOC00ZmZiLWFmMTct NTVmNDFmZGYwZTYzLzEvQURuM1FXaHRvUjU1cm54ZVNHcWlrSUNNc2JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8zYzYxNmYtMDEzOC00ZmZiLWFmMTctNTVmNDFmZGYwZTYz LzEvQURuM1FXaHRvUjU1cm54ZVNHcWlrSUNNc2JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDDJBo4+ OIsHu/zkEzU3agJCCy9e5gd6XwQqICV/lMVxUEfnpqfZ7kS/SYBS77LOWixURLHl AurknJZbGNbJhvxfaqrJIKvMCI2liBTlJCaISSaL4OBHLKxX4ozmRCNzQGN5DS9p tq3lItj73DPZIVhePN4KFI6/HvB3kv0+2jDhui4FcCKtfLU4Y5ZQVO5nNwhdOyMw PTRVNUqjmQ6m+50KGvpVWHG+j3kqwanXVwTZTEs3CyZc/W1w93vv/xOvTL+1MTJI EH4QMWpLW6svQkdGqACR+jJC4SkcJjoVNz9seYSlrXLRKBEpFrVw6vg0q1iHQeAP HXZoP5CsT7uLPQ== -----END CERTIFICATE-----Generated at Fri Dec 12 03:21:14 2025 by rpki-client