This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft File: t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json) Hash identifier: velaXyJ/vzyiodpA0yj3ZZiO9+9Rx7CC2stnQN21ZSU= Subject key identifier: 2C:4C:DB:59:E9:39:5A:82:EC:37:1A:55:6C:C2:AB:82:49:E1:0F:6B Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b Certificate serial: 019B26649DD4C52033AA5EADE5C20CFC3DAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 09:01:26 +0000 Manifest this update: Tue 16 Dec 2025 09:01:26 +0000 Manifest next update: Wed 17 Dec 2025 09:01:26 +0000 Files and hashes: 1: 4tvYqBz30c-0SHwQf2CtT0VNBPQ.roa (hash: qCyQEU6OdMbxdWiqsxkcJvwc0b3lfRGI0KL0oWxXAXQ=) 2: 5BiiR8tyxMqnVkrCR-JVCe5thJE.roa (hash: Hg2Lr4BrUeLiGXPiTTswxDVsunI16iUbiaP/wD6FGp4=) 3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: sH90EiDMHhzf6f2uk5xA+ChavHB9Ma5dm09Cw3WqMwY=) 4: zmgQ_aWhp6cEGx4y0seWn4Gsss4.roa (hash: /bqbphYKFU51MVxXzZqrdhuQ80/Caxadp1A0xOJ6vp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:9d:d4:c5:20:33:aa:5e:ad:e5:c2:0c:fc:3d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b Validity Not Before: Dec 16 09:01:26 2025 GMT Not After : Dec 17 09:01:26 2025 GMT Subject: CN=2c4cdb59e9395a82ec371a556cc2ab8249e10f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:9d:90:d7:84:05:9f:af:a8:de:01:50:16: 5c:cd:1a:15:c2:55:95:ad:67:1a:0c:66:cd:ed:44: 50:62:21:53:21:18:2d:a3:d4:75:1e:04:2a:8d:41: 71:80:1f:40:b1:10:11:07:d7:f7:fc:65:7b:e6:28: bd:17:c5:f4:8d:e7:91:67:82:9f:de:90:c2:3c:5f: bb:85:b7:39:3d:eb:8b:8a:b0:98:c6:44:9c:32:90: ec:bb:38:48:0d:70:bd:19:33:40:d5:f0:ef:a1:a3: bc:fd:ec:4a:5f:06:bc:11:90:20:b9:f9:29:77:78: 29:cd:7a:89:5d:fe:0b:f1:d9:bf:e6:69:b2:74:31: 96:9b:de:c5:50:b8:98:6c:ec:3f:13:82:ac:cc:18: 2d:2b:26:e2:f7:c7:b7:90:86:d6:e9:83:5d:6b:13: 1d:33:80:db:6e:4f:a2:25:d7:be:2a:e0:b8:61:ed: 81:dc:bf:1c:24:a4:ae:8c:50:50:2f:b9:0e:2b:d9: 90:6a:19:8a:8e:dc:49:b0:1c:d7:9c:58:c2:30:31: c9:05:b5:cd:08:82:1f:d8:c9:fa:e2:32:b8:66:43: f7:7d:b3:ae:37:ad:10:63:95:64:f8:90:7f:86:25: dd:8f:91:9e:18:01:bf:09:1b:6a:c5:14:b2:60:3b: 2c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4C:DB:59:E9:39:5A:82:EC:37:1A:55:6C:C2:AB:82:49:E1:0F:6B X509v3 Authority Key Identifier: keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a2:98:62:4b:21:6a:08:47:4a:05:26:e4:e8:ba:e3:f3:8f: df:15:57:22:5d:c3:06:17:16:f8:50:08:41:79:30:15:6a:73: aa:d3:16:85:a2:68:cb:ca:17:9c:83:ba:d0:3a:93:cd:4e:cb: e5:67:f7:1d:98:0e:4b:a0:76:98:77:e2:fb:5d:d9:4d:51:60: 6e:b9:89:ea:0b:6b:22:ea:06:eb:6d:db:77:ef:18:94:5f:7c: a0:e8:35:b4:52:67:f0:d4:45:cb:da:0a:16:1d:97:47:a9:7b: 44:55:ea:7d:5e:13:a3:93:1c:f9:54:e0:3a:55:c4:19:28:01: a8:bb:92:5e:24:29:17:77:e7:34:7e:dd:3a:56:bc:3f:87:de: be:0c:b1:35:24:a9:71:e9:34:dc:43:7d:56:b8:7b:50:20:40: ae:06:17:76:cf:78:81:8f:ad:6e:8e:03:a6:f9:83:b3:37:c2: 3d:ff:03:4e:9b:e0:ac:1f:d0:0b:cd:2b:5a:78:22:72:97:b4: 50:82:6f:bd:b8:e5:ca:c1:1f:db:de:29:ad:f5:52:7c:43:49: 5b:3c:ae:65:53:65:9e:22:3b:24:d0:b6:25:24:9c:37:00:72: 7d:49:56:9d:6c:3c:ad:f2:18:f8:fe:4a:f4:39:0b:4d:29:42: 6b:93:31:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZJ3UxSAzql6t5cIM/D2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Nzg1YTMwZDg1MTJkMGQ4YWI2Mzc4MTJiNzlmYTQ1Mjlh MWVmMWIwHhcNMjUxMjE2MDkwMTI2WhcNMjUxMjE3MDkwMTI2WjAzMTEwLwYDVQQD EygyYzRjZGI1OWU5Mzk1YTgyZWMzNzFhNTU2Y2MyYWI4MjQ5ZTEwZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVidkNeEBZ+vqN4BUBZczRoVwlWV rWcaDGbN7URQYiFTIRgto9R1HgQqjUFxgB9AsRARB9f3/GV75ii9F8X0jeeRZ4Kf 3pDCPF+7hbc5PeuLirCYxkScMpDsuzhIDXC9GTNA1fDvoaO8/exKXwa8EZAgufkp d3gpzXqJXf4L8dm/5mmydDGWm97FULiYbOw/E4KszBgtKybi98e3kIbW6YNdaxMd M4Dbbk+iJde+KuC4Ye2B3L8cJKSujFBQL7kOK9mQahmKjtxJsBzXnFjCMDHJBbXN CIIf2Mn64jK4ZkP3fbOuN60QY5Vk+JB/hiXdj5GeGAG/CRtqxRSyYDssBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxM21npOVqC7DcaVWzCq4JJ4Q9rMB8GA1UdIwQY MBaAFLd4WjDYUS0NirY3gSt5+kUpoe8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEt NjIxOWIzMjEyMmQwLzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEtNjIxOWIzMjEyMmQw LzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6KYYksh aghHSgUm5Oi64/OP3xVXIl3DBhcW+FAIQXkwFWpzqtMWhaJoy8oXnIO60DqTzU7L 5Wf3HZgOS6B2mHfi+13ZTVFgbrmJ6gtrIuoG623bd+8YlF98oOg1tFJn8NRFy9oK Fh2XR6l7RFXqfV4To5Mc+VTgOlXEGSgBqLuSXiQpF3fnNH7dOla8P4fevgyxNSSp cek03EN9Vrh7UCBArgYXds94gY+tbo4DpvmDszfCPf8DTpvgrB/QC80rWngicpe0 UIJvvbjlysEf294prfVSfENJWzyuZVNlniI7JNC2JSScNwByfUlWnWw8rfIY+P5K 9DkLTSlCa5Mxig== -----END CERTIFICATE-----Generated at Tue Dec 16 16:12:59 2025 by rpki-client