This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json) Hash identifier: 5sDGb7M+8iDd3S63CafwThtt52tRfFbMy9+qmr1XeO0= Subject key identifier: C1:C4:11:2E:5D:C8:2A:45:8C:7E:DD:02:C2:6D:55:D8:83:35:F1:55 Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06 Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06 Certificate serial: 019B20629148115DDEFFA397430F5147469B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft Manifest number: 0DA8 Signing time: Mon 15 Dec 2025 05:01:28 +0000 Manifest this update: Mon 15 Dec 2025 05:01:28 +0000 Manifest next update: Tue 16 Dec 2025 05:01:28 +0000 Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: wkldRWdXZjpGElyLEumpEhwQXmtglvPUjgMgxxXWCZ4=) 2: NH9bJkmOLcBYnLsAYTfcsFMJkSM.roa (hash: sPNuwdbSLXSgaPh+BpoER3Hzbei/qqQBt4s/TVbjmVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:91:48:11:5d:de:ff:a3:97:43:0f:51:47:46:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06 Validity Not Before: Dec 15 05:01:28 2025 GMT Not After : Dec 16 05:01:28 2025 GMT Subject: CN=c1c4112e5dc82a458c7edd02c26d55d88335f155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d2:db:30:e8:f7:04:eb:83:fa:f8:ca:9f:bb: 7c:64:0b:99:97:fd:0d:8a:c4:96:f0:33:8a:b9:d9: bc:c6:d2:81:73:19:25:6f:ca:b1:f3:ff:6a:88:09: 51:38:76:33:c5:33:27:7a:39:2f:eb:a1:81:19:16: bb:00:62:09:01:79:e2:bc:97:ca:3a:d7:86:a3:be: 7c:95:58:3c:22:e3:94:38:ca:af:d7:d4:3e:6d:a7: cf:45:2d:c8:23:f0:ac:f3:6d:a8:d8:29:74:67:e7: 26:5c:0f:37:42:6c:73:b1:2b:53:74:21:aa:21:7d: 59:31:71:2e:35:f3:a3:40:c2:12:32:c7:13:46:4a: 92:18:a3:89:46:fb:06:c4:f5:ec:3b:83:95:9f:1a: 32:3a:57:e4:32:3d:ec:2b:d9:30:86:e2:ed:d5:7f: 4e:c1:88:a4:77:a3:c6:a2:7a:d2:2f:39:e9:01:01: e0:04:a7:4e:e3:26:55:80:91:6d:8d:44:4b:7e:af: ee:4f:b8:73:47:d4:51:5d:f7:73:d5:31:0f:58:f9: 9d:4d:cb:f3:d7:4b:09:bd:ae:c8:53:33:f2:34:4a: 3f:1a:7e:57:c1:a6:3b:8e:1a:42:13:51:be:28:db: 85:8a:16:be:aa:8f:37:13:a4:ee:69:0f:f7:40:ff: 8f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C4:11:2E:5D:C8:2A:45:8C:7E:DD:02:C2:6D:55:D8:83:35:F1:55 X509v3 Authority Key Identifier: keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f2:66:95:ad:4e:8a:97:be:9d:bb:9f:fb:f6:90:8d:07:40: cd:f8:d2:3b:6e:96:66:3f:7e:79:8a:73:23:9e:0d:47:56:36: 0c:3f:8d:c3:47:d7:c6:6a:58:76:ca:49:bd:cf:00:29:00:55: b7:c8:6f:32:7e:fc:32:9f:6f:0a:58:23:62:68:49:47:05:5a: 07:a3:2b:98:ae:98:b6:f4:bc:26:fb:eb:30:e5:47:00:21:3e: a7:d2:ca:96:09:b3:f9:51:20:eb:35:f3:5d:8b:37:98:0c:31: 27:22:ca:21:8f:2d:8c:8d:9a:0c:65:ea:1c:7d:c9:8a:84:96: b0:98:31:d8:7b:15:0e:48:7d:a6:56:63:6b:69:9e:d6:b3:56: b7:8b:52:06:8c:57:9e:fc:4e:74:bc:a6:b2:e7:94:04:81:74: ca:59:54:bc:16:d6:b4:69:2a:6c:cd:f0:41:8b:09:ff:50:57: 26:25:88:12:39:0f:36:8b:c3:3c:c8:52:4d:e0:d4:54:f6:d8: a7:7d:20:ab:80:85:3e:11:98:31:e0:20:4f:5d:a9:63:60:7b: c9:ca:69:a8:d7:17:fb:ed:07:6b:3e:6e:31:ed:2f:2f:f1:7c: c3:ba:28:9d:79:a3:89:d6:f1:b5:74:41:29:a3:f4:3c:0d:f6: 9e:63:8d:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYpFIEV3e/6OXQw9RR0abMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNzJmNWQxMThhYmQxMjkxYWUyNDhlNmM2OWQ2NGE5OWE5 YWVmMDYwHhcNMjUxMjE1MDUwMTI4WhcNMjUxMjE2MDUwMTI4WjAzMTEwLwYDVQQD EyhjMWM0MTEyZTVkYzgyYTQ1OGM3ZWRkMDJjMjZkNTVkODgzMzVmMTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dLbMOj3BOuD+vjKn7t8ZAuZl/0N isSW8DOKudm8xtKBcxklb8qx8/9qiAlROHYzxTMnejkv66GBGRa7AGIJAXnivJfK OteGo758lVg8IuOUOMqv19Q+bafPRS3II/Cs822o2Cl0Z+cmXA83QmxzsStTdCGq IX1ZMXEuNfOjQMISMscTRkqSGKOJRvsGxPXsO4OVnxoyOlfkMj3sK9kwhuLt1X9O wYikd6PGonrSLznpAQHgBKdO4yZVgJFtjURLfq/uT7hzR9RRXfdz1TEPWPmdTcvz 10sJva7IUzPyNEo/Gn5XwaY7jhpCE1G+KNuFiha+qo83E6TuaQ/3QP+PEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHEES5dyCpFjH7dAsJtVdiDNfFVMB8GA1UdIwQY MBaAFDNy9dEYq9EpGuJI5sadZKmamu8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMt ZDJkOTI0MWVjNWRiLzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMtZDJkOTI0MWVjNWRi LzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/Jmla1O ipe+nbuf+/aQjQdAzfjSO26WZj9+eYpzI54NR1Y2DD+Nw0fXxmpYdspJvc8AKQBV t8hvMn78Mp9vClgjYmhJRwVaB6MrmK6YtvS8JvvrMOVHACE+p9LKlgmz+VEg6zXz XYs3mAwxJyLKIY8tjI2aDGXqHH3JioSWsJgx2HsVDkh9plZja2me1rNWt4tSBoxX nvxOdLymsueUBIF0yllUvBbWtGkqbM3wQYsJ/1BXJiWIEjkPNovDPMhSTeDUVPbY p30gq4CFPhGYMeAgT12pY2B7ycppqNcX++0Haz5uMe0vL/F8w7oonXmjidbxtXRB KaP0PA32nmONFQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:39:36 2025 by rpki-client