This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft File: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json) Hash identifier: VMv73/XikCOMQeIiw1UNyIFU+UtDYUcUvLjcUn7tzaM= Subject key identifier: 83:38:BA:EF:18:EF:D0:58:49:8D:E8:5E:B1:DA:31:AB:AF:D7:7C:28 Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Certificate serial: 019ABD08CFC55B1A7EB85DC652EE17C0BE8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft Manifest number: 1511 Signing time: Tue 25 Nov 2025 22:01:02 +0000 Manifest this update: Tue 25 Nov 2025 22:01:02 +0000 Manifest next update: Wed 26 Nov 2025 22:01:02 +0000 Files and hashes: 1: 29TbMLufIPxRE020kIvBxrijcXE.roa (hash: yaWCKyUE+f0tiisSqvZhHpxJTfa3UwVcLIOHWKNCXpA=) 2: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: 42FCMPOD9esmVuPdUVroiaL4v5sgRlCBXFgiYl9QKGA=) 3: EpG6DN4aBjhttZAw1Q1XQqE7-1s.roa (hash: l6KmPb3Emr7cpoLQVZzViHX9jNPkSHPfBrkC7M4zEOg=) 4: bCHjuq-GwNDHZjsTd3pAyP2Si4w.roa (hash: M+Njn6Jry+REmQlQYvUz0vQnUhP0EbBt8o0lYes6W+o=) 5: hn5_PzzfTec18eIUGShu0x__N3w.roa (hash: +8CUvj+aURe4BOcdllxHMI3BGLO88+PbI/02n/kq4Ik=) 6: pYZCrMGmxkKgeeR3OB7Sabq_PhY.roa (hash: xXgcQpyaaoiy7n7zCgLujfBrckf/0cL3u4clvozeQMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 22:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bd:08:cf:c5:5b:1a:7e:b8:5d:c6:52:ee:17:c0:be:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Validity Not Before: Nov 25 22:01:02 2025 GMT Not After : Nov 26 22:01:02 2025 GMT Subject: CN=8338baef18efd058498de85eb1da31abafd77c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:25:94:65:4f:aa:37:b4:09:20:62:57:0d: 55:76:0d:05:d5:ca:42:04:e1:a7:c6:6f:a0:f9:db: 70:20:7d:51:43:78:c5:9b:6f:fd:f4:86:43:6d:72: 5d:a6:dd:ab:7c:c9:2a:32:a6:7c:af:92:41:fb:0c: 5e:0c:de:49:cf:2a:0f:bc:58:9e:c8:c6:3d:42:5f: 2a:e5:f7:f1:2a:5a:9f:da:73:00:5f:42:c6:a7:a5: e5:b6:75:c2:a8:f5:e7:31:fb:2c:9b:eb:10:4c:a5: 3e:73:b6:69:0f:42:21:f4:04:9e:22:dd:2d:8b:e5: 12:23:6d:01:96:af:dc:f5:4d:e3:d0:01:87:30:0a: f4:63:75:c5:53:ef:43:99:5c:64:f1:4f:5e:76:ef: 44:c4:17:e2:7c:86:ad:cf:a7:bc:92:1d:7f:71:71: 45:20:96:ac:41:b9:ec:e4:59:6d:00:2d:d3:c4:4e: 23:65:5f:d7:6b:77:05:91:2b:6e:74:67:99:5b:ce: 23:7b:79:57:4d:50:02:08:17:c9:68:f8:0c:b1:86: 00:55:2a:99:1d:ef:ec:a6:0c:e1:be:eb:d3:12:d3: 0c:9d:64:58:10:81:53:78:7a:e6:62:05:92:e5:7a: f1:86:3a:4e:a7:10:0f:d8:2d:92:64:78:10:d7:c0: ec:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:38:BA:EF:18:EF:D0:58:49:8D:E8:5E:B1:DA:31:AB:AF:D7:7C:28 X509v3 Authority Key Identifier: keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:33:f5:38:04:cf:c8:15:cd:0e:ab:7c:21:e8:dc:24:3f:df: 24:bb:86:93:90:19:d0:3c:09:db:b1:d8:5a:bc:97:fe:e2:02: a4:b9:bc:30:6a:32:13:b1:52:d3:8c:20:e7:ec:60:54:40:d7: d1:8a:b1:84:a9:bd:21:7d:8b:fb:d6:af:d5:1e:38:44:e7:89: fd:ee:af:62:61:db:2b:80:c9:1e:dd:bc:e5:00:04:15:68:e7: 0d:40:9c:72:74:f8:4e:f1:02:f3:32:24:91:38:53:25:ad:f5: e7:de:52:b5:56:be:8c:5d:3d:0b:4b:bc:25:5b:1a:bb:fc:7e: f7:f0:38:15:2d:e1:de:b5:84:21:ac:96:7e:2a:6a:f9:24:4c: c7:e5:5c:07:60:75:97:9f:58:43:57:9b:9c:cb:e9:e0:8a:2c: 50:06:52:23:ec:62:e0:f5:14:33:5c:b1:f1:c5:14:97:65:0b: 25:07:eb:4b:1f:21:2a:0c:0c:ab:59:11:d1:04:02:f0:ee:7b: 3d:9f:71:07:aa:42:5f:2f:90:c7:7d:68:51:82:8f:49:3a:17: bd:7f:10:0a:eb:4a:36:cb:83:8d:08:65:79:d2:df:54:2e:74: 0b:e5:f3:71:5b:97:b2:0e:f7:35:e3:6f:9d:ca:73:92:35:9b: c3:ae:fe:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq9CM/FWxp+uF3GUu4XwL6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl ZTQzYzAwHhcNMjUxMTI1MjIwMTAyWhcNMjUxMTI2MjIwMTAyWjAzMTEwLwYDVQQD Eyg4MzM4YmFlZjE4ZWZkMDU4NDk4ZGU4NWViMWRhMzFhYmFmZDc3YzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSollGVPqje0CSBiVw1Vdg0F1cpC BOGnxm+g+dtwIH1RQ3jFm2/99IZDbXJdpt2rfMkqMqZ8r5JB+wxeDN5JzyoPvFie yMY9Ql8q5ffxKlqf2nMAX0LGp6XltnXCqPXnMfssm+sQTKU+c7ZpD0Ih9ASeIt0t i+USI20Blq/c9U3j0AGHMAr0Y3XFU+9DmVxk8U9edu9ExBfifIatz6e8kh1/cXFF IJasQbns5FltAC3TxE4jZV/Xa3cFkStudGeZW84je3lXTVACCBfJaPgMsYYAVSqZ He/spgzhvuvTEtMMnWRYEIFTeHrmYgWS5XrxhjpOpxAP2C2SZHgQ18DsOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIM4uu8Y79BYSY3oXrHaMauv13woMB8GA1UdIwQY MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt OWM4ZTU5YzI3NzFjLzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjP1OATP yBXNDqt8IejcJD/fJLuGk5AZ0DwJ27HYWryX/uICpLm8MGoyE7FS04wg5+xgVEDX 0YqxhKm9IX2L+9av1R44ROeJ/e6vYmHbK4DJHt285QAEFWjnDUCccnT4TvEC8zIk kThTJa31595StVa+jF09C0u8JVsau/x+9/A4FS3h3rWEIayWfipq+SRMx+VcB2B1 l59YQ1ebnMvp4IosUAZSI+xi4PUUM1yx8cUUl2ULJQfrSx8hKgwMq1kR0QQC8O57 PZ9xB6pCXy+Qx31oUYKPSToXvX8QCutKNsuDjQhledLfVC50C+XzcVuXsg73NeNv ncpzkjWbw67+1g== -----END CERTIFICATE-----Generated at Wed Nov 26 02:04:18 2025 by rpki-client