This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft File: r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json) Hash identifier: exV0TbQLpdhI6nunBWiFhia8ITOBXeCP4t2ATlmMbII= Subject key identifier: D4:62:40:D2:FF:CA:75:6F:FE:53:E4:8C:50:33:28:6C:B5:0A:8D:38 Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8 Certificate serial: 019B0D12D3A77A4D47F8F29FF0DD29AACBCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft Manifest number: 146B Signing time: Thu 11 Dec 2025 11:01:35 +0000 Manifest this update: Thu 11 Dec 2025 11:01:35 +0000 Manifest next update: Fri 12 Dec 2025 11:01:35 +0000 Files and hashes: 1: 5sSVXjXvJmErWd1wKwIQK6a_mpc.roa (hash: Gd8tIJeuQDrvoiYueaVU9NtycnUD3d9hfBsHWs7XkBs=) 2: 9CxZ9k_t9hMo55L6uAnbiDEpetU.roa (hash: tBRk1oTOlBeUNCjuxG7yQre7lmz4lVGM1tEKGpkI/Jw=) 3: ZFFTSBF1NQ53TJQyiivhv4BruEg.roa (hash: esbw11uLHSDej7o2u5hst3yF9WrjTIkF3AwgO1jVCEY=) 4: _QlwePF5KSD64MN37dzbnwJZX0o.roa (hash: yQzkXp66l3AI/3AeWTVHitzx2cjJY16vfj7/ymQ7U4I=) 5: _oQumNiqQjEmqfG-Z2kvjeREVg8.roa (hash: ubcPWAcBDBBYn8/decWZtzMXul10trwf3OOXs9omIUY=) 6: dF7YZ7xhhmrQW1zMuEQT2F67QgM.roa (hash: UM139eCTeIEHK7o36JJKhXZkKIHCIOEh5IFneXZnhNg=) 7: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: K2yo/l7OYSaB5tbGhVzZDXnCRgsJWCHEk43uT+IllA4=) 8: vBCHQIvxYnn49XpOGJSE4wjSlGw.roa (hash: 7CO1i5aTkd/bHcAyF+TmsIBuS1Bs7EA5n3iwLviSKeY=) 9: zj6uyef49nXvuOQ5HnBYE21EEbo.roa (hash: sFC56MynYpbNdgBV5ulPA1mcU1LFECyTpsEz7+G4BXY=) 10: zy6JMMIZp4iT7e139le0NYBhce8.roa (hash: 7ppyWguuo1KWIsZnXyQq/hp4jdvBZxKn909Zkp3QprY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 11:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:12:d3:a7:7a:4d:47:f8:f2:9f:f0:dd:29:aa:cb:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8 Validity Not Before: Dec 11 11:01:35 2025 GMT Not After : Dec 12 11:01:35 2025 GMT Subject: CN=d46240d2ffca756ffe53e48c5033286cb50a8d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:d8:90:51:e8:e4:4a:31:d8:af:25:19:c4: b5:66:25:28:65:f9:11:89:7b:c4:25:93:fb:9c:c1: 10:ba:5b:e7:90:a9:de:05:67:0e:20:fa:51:83:ca: 60:59:54:e9:0f:17:85:0a:85:7e:cf:21:5d:e2:1b: 10:5a:1c:08:40:a4:49:de:26:92:29:73:35:13:70: 12:2f:a3:4a:03:b3:b3:de:ae:42:dd:69:d8:49:d3: 07:72:a9:7c:79:8e:26:32:c2:f3:e4:6d:86:b4:e4: e3:30:4d:db:6f:ae:d9:54:c9:e1:73:76:5b:ed:fb: 3a:3f:14:79:54:5b:b3:ea:d1:06:40:1e:7a:64:17: e2:68:8e:87:19:7f:c9:bd:de:b6:eb:94:9f:8c:37: 23:4e:c4:d1:2d:1a:93:4f:e0:c0:e4:2b:fd:80:9e: fd:24:33:44:5c:04:38:b3:32:ee:7a:27:b0:11:3f: 3e:ee:92:f0:4f:9f:1c:da:d5:d2:ae:f2:36:ac:90: 27:98:b1:9f:57:17:83:07:e9:a0:86:d8:59:df:21: 0c:c1:48:b9:21:44:61:60:1d:40:1e:b9:9f:68:e5: c4:44:26:b6:88:eb:b0:27:53:5a:e1:f4:30:5c:05: b4:20:c5:b0:b5:5d:e5:7d:8c:a3:ac:fd:72:cb:eb: 73:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:62:40:D2:FF:CA:75:6F:FE:53:E4:8C:50:33:28:6C:B5:0A:8D:38 X509v3 Authority Key Identifier: keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:55:92:ea:d4:ee:f3:4e:9d:f6:ae:88:65:b8:e2:97:f4:5d: ae:1f:b1:4a:83:86:64:37:d6:04:b0:79:da:bc:2b:9a:5e:24: e6:17:b5:e3:9b:e7:0f:4e:fe:65:c3:fc:25:1f:a1:1d:f9:a3: 1b:1d:9a:b6:4b:27:27:ed:7a:cc:9b:a1:57:e3:bd:0f:0b:e9: b6:9a:43:ec:e0:01:ed:f4:44:4f:10:fe:28:9b:28:34:e1:0a: e6:eb:b4:52:8d:51:bd:c4:c8:0d:c7:f1:fd:1e:61:36:5e:cb: e1:63:15:78:dd:b0:20:75:4e:55:3f:84:5a:ca:ad:83:9d:93: c8:ea:7d:db:93:b0:45:7c:84:15:82:34:da:b8:05:6b:ac:54: cb:9a:f1:36:b4:08:ef:1f:5e:85:05:c0:f5:fc:1f:a6:39:98: d9:51:e3:2a:22:3f:c1:0e:5f:f2:1b:e9:cb:28:84:fb:48:e5: f4:ea:9d:ef:69:1a:f0:20:75:a5:e9:66:61:4b:78:ed:5d:74: c7:fd:69:d1:dd:2c:49:3f:ee:ac:cd:2e:3f:9c:8e:97:eb:35: dc:b2:00:88:fc:ed:06:34:d2:bb:d8:0a:70:56:ea:4c:e5:64: 4a:64:f9:1f:2e:2e:2f:b0:51:2d:64:a3:ae:93:6c:1d:28:f8: 87:00:a3:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNEtOnek1H+PKf8N0pqsvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk ZmQ5YTgwHhcNMjUxMjExMTEwMTM1WhcNMjUxMjEyMTEwMTM1WjAzMTEwLwYDVQQD EyhkNDYyNDBkMmZmY2E3NTZmZmU1M2U0OGM1MDMzMjg2Y2I1MGE4ZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0frYkFHo5Eox2K8lGcS1ZiUoZfkR iXvEJZP7nMEQulvnkKneBWcOIPpRg8pgWVTpDxeFCoV+zyFd4hsQWhwIQKRJ3iaS KXM1E3ASL6NKA7Oz3q5C3WnYSdMHcql8eY4mMsLz5G2GtOTjME3bb67ZVMnhc3Zb 7fs6PxR5VFuz6tEGQB56ZBfiaI6HGX/Jvd6265SfjDcjTsTRLRqTT+DA5Cv9gJ79 JDNEXAQ4szLueiewET8+7pLwT58c2tXSrvI2rJAnmLGfVxeDB+mghthZ3yEMwUi5 IURhYB1AHrmfaOXERCa2iOuwJ1Na4fQwXAW0IMWwtV3lfYyjrP1yy+tziQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRiQNL/ynVv/lPkjFAzKGy1Co04MB8GA1UdIwQY MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt MThkMWE0MDZhYWVkLzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVWS6tTu 806d9q6IZbjil/Rdrh+xSoOGZDfWBLB52rwrml4k5he145vnD07+ZcP8JR+hHfmj Gx2atksnJ+16zJuhV+O9DwvptppD7OAB7fRETxD+KJsoNOEK5uu0Uo1RvcTIDcfx /R5hNl7L4WMVeN2wIHVOVT+EWsqtg52TyOp925OwRXyEFYI02rgFa6xUy5rxNrQI 7x9ehQXA9fwfpjmY2VHjKiI/wQ5f8hvpyyiE+0jl9Oqd72ka8CB1pelmYUt47V10 x/1p0d0sST/urM0uP5yOl+s13LIAiPztBjTSu9gKcFbqTOVkSmT5Hy4uL7BRLWSj rpNsHSj4hwCjPg== -----END CERTIFICATE-----Generated at Thu Dec 11 19:20:48 2025 by rpki-client