This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json) Hash identifier: EUlY8YFwzY2tIfjGCk/jjMRLKZ4rnZanRomze77Prng= Subject key identifier: EB:3F:C1:EC:20:3C:E4:0B:7D:7B:78:C2:13:04:F4:89:07:7F:E9:2F Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38 Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338 Certificate serial: 019B0AED43BD6FE8CA12761CF6924EC7C43B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft Manifest number: 1615 Signing time: Thu 11 Dec 2025 01:01:20 +0000 Manifest this update: Thu 11 Dec 2025 01:01:20 +0000 Manifest next update: Fri 12 Dec 2025 01:01:20 +0000 Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: X/h13h76AuaNVxScuvciSwQk+SQ4Wu8X+ajMFOsVhEQ=) 2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=) 3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:ed:43:bd:6f:e8:ca:12:76:1c:f6:92:4e:c7:c4:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338 Validity Not Before: Dec 11 01:01:20 2025 GMT Not After : Dec 12 01:01:20 2025 GMT Subject: CN=eb3fc1ec203ce40b7d7b78c21304f489077fe92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:46:91:08:17:ff:dd:df:5a:ab:9d:9a:2e:3b: 6a:5a:08:10:f5:95:98:7c:59:cb:da:54:96:11:f7: e1:99:e8:76:bf:34:05:b0:c2:93:1d:61:a7:54:2d: 22:bc:15:39:4c:b8:c7:5f:04:73:ed:f3:8d:95:2f: c8:75:f9:72:ab:8d:7e:db:59:55:ee:e4:4c:31:16: da:56:bd:ed:01:d1:1a:0b:1a:cb:a7:65:a3:dd:4b: f4:07:7d:13:83:26:2c:9c:0e:e9:9e:fc:35:0d:2f: fd:33:91:1c:f4:fb:d0:ec:46:e0:7a:b9:6b:15:5d: 73:11:a7:3c:ae:b8:e9:1b:77:6f:3f:53:65:1f:12: 28:77:bb:f2:db:27:3a:39:72:cd:3b:52:8a:e9:44: 2c:78:92:e1:8c:d8:8c:18:c7:18:e4:ac:e7:e9:fc: 05:b5:89:52:c2:5c:d6:aa:df:48:9e:57:a5:68:a9: ce:66:aa:bf:75:c1:5f:38:55:60:9e:ac:96:c9:25: 44:3b:6b:28:20:36:75:4b:05:e7:25:5a:f6:3a:3a: a7:38:c0:4b:fd:cc:49:27:f6:dd:f2:78:88:d3:d8: bb:76:75:7e:7f:65:72:74:de:39:26:6d:65:fe:4d: 58:cd:a6:a5:42:d5:5e:87:e7:f7:29:a2:41:b0:99: 03:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3F:C1:EC:20:3C:E4:0B:7D:7B:78:C2:13:04:F4:89:07:7F:E9:2F X509v3 Authority Key Identifier: keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:17:c2:20:83:a2:21:9a:3a:24:17:3e:7d:c4:36:d7:73:29: ae:86:4c:60:ee:76:5a:3e:fd:03:07:d1:29:04:4b:c2:db:2b: 9a:dd:aa:4d:4f:1f:4b:a9:0f:4b:09:67:28:b2:e2:39:1d:d9: e6:b9:31:d5:4b:ac:e3:46:cb:9d:5f:7b:c4:5f:ba:75:84:9c: c0:11:85:33:1c:5c:c8:36:cf:64:5c:57:d1:bb:bb:9d:fd:40: cd:b6:89:b9:91:b9:be:b7:e6:d0:76:fa:5b:fa:7d:57:88:59: 28:c5:06:1f:32:59:09:bc:9c:4c:5a:59:f7:64:4e:3e:7e:23: b6:f2:b4:2c:f1:39:6b:5b:76:44:5a:87:38:c6:14:12:19:23: e3:3f:e2:e1:7b:33:d7:12:2b:86:8e:18:f4:0f:64:34:29:c7: dd:db:f7:14:93:23:e7:12:73:a9:fb:aa:bf:34:dd:29:12:e2: 88:09:c4:ea:a8:e4:14:89:55:c8:3b:df:b9:7a:65:9e:e6:73: 85:f9:f6:c8:2e:1e:f2:53:f5:29:44:ce:86:b0:8a:27:96:12: 7b:46:9e:7d:dc:c0:13:e9:73:89:ad:b3:f8:f5:31:ce:77:72: df:e7:54:9c:b3:5d:85:8a:43:ed:15:c0:80:44:79:b6:6c:ba: 92:69:59:b0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsK7UO9b+jKEnYc9pJOx8Q7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzgyYjc4ZjIwYTZlNGI3MDY0MzA1MmJkMWE0MGFmMTVh NTYzMzgwHhcNMjUxMjExMDEwMTIwWhcNMjUxMjEyMDEwMTIwWjAzMTEwLwYDVQQD EyhlYjNmYzFlYzIwM2NlNDBiN2Q3Yjc4YzIxMzA0ZjQ4OTA3N2ZlOTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EaRCBf/3d9aq52aLjtqWggQ9ZWY fFnL2lSWEffhmeh2vzQFsMKTHWGnVC0ivBU5TLjHXwRz7fONlS/Idflyq41+21lV 7uRMMRbaVr3tAdEaCxrLp2Wj3Uv0B30TgyYsnA7pnvw1DS/9M5Ec9PvQ7Ebgerlr FV1zEac8rrjpG3dvP1NlHxIod7vy2yc6OXLNO1KK6UQseJLhjNiMGMcY5Kzn6fwF tYlSwlzWqt9InlelaKnOZqq/dcFfOFVgnqyWySVEO2soIDZ1SwXnJVr2OjqnOMBL /cxJJ/bd8niI09i7dnV+f2VydN45Jm1l/k1YzaalQtVeh+f3KaJBsJkDKwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOs/wewgPOQLfXt4whME9IkHf+kvMB8GA1UdIwQY MBaAFPt4K3jyCm5LcGQwUr0aQK8VpWM4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zZ3JlUElLYmt0d1pEQlN2UnBBcnhXbFl6Zy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOWRjOTMzLTVjMGQtNDQ2MS1hNDVk LThmN2Q1NjkxYzFiZS8xLzEtM2dyZVBJS2JrdHdaREJTdlJwQXJ4V2xZemcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2UzLzlkYzkzMy01YzBkLTQ0NjEtYTQ1ZC04ZjdkNTY5MWMx YmUvMS8xLTNncmVQSUtia3R3WkRCU3ZScEFyeFdsWXpnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRfC IIOiIZo6JBc+fcQ213MproZMYO52Wj79AwfRKQRLwtsrmt2qTU8fS6kPSwlnKLLi OR3Z5rkx1Uus40bLnV97xF+6dYScwBGFMxxcyDbPZFxX0bu7nf1AzbaJuZG5vrfm 0Hb6W/p9V4hZKMUGHzJZCbycTFpZ92ROPn4jtvK0LPE5a1t2RFqHOMYUEhkj4z/i 4Xsz1xIrho4Y9A9kNCnH3dv3FJMj5xJzqfuqvzTdKRLiiAnE6qjkFIlVyDvfuXpl nuZzhfn2yC4e8lP1KUTOhrCKJ5YSe0aefdzAE+lzia2z+PUxzndy3+dUnLNdhYpD 7RXAgER5tmy6kmlZsA== -----END CERTIFICATE-----Generated at Thu Dec 11 06:46:49 2025 by rpki-client