This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json) Hash identifier: 9qMfRu/8VIq6dUujeIrSqq8mur5mWsoVIg+T9+QYkP0= Subject key identifier: 24:23:33:1E:5A:1F:19:77:80:C0:3C:FB:DC:3C:8B:E5:72:1D:80:9D Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44 Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44 Certificate serial: 019B0E26C891255EFF59A4E08ED546475B2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft Manifest number: 0737 Signing time: Thu 11 Dec 2025 16:03:01 +0000 Manifest this update: Thu 11 Dec 2025 16:03:01 +0000 Manifest next update: Fri 12 Dec 2025 16:03:01 +0000 Files and hashes: 1: DgYaKXLAfCciJB45PdY6jb3nvSM.roa (hash: 3wQZIj5q2hejLISAuXVPv02HNSLvrU3fDX6SOnePruk=) 2: iLJZ457a-7z02PhFWjv4cGHT93U.roa (hash: NESsCi8hLaoKvM16NOOEv6MVC+cF28ZWv23JeL3C9tw=) 3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: ZWd/boFgTwtPkKsmXl8ccdKcbWStuuGG2ns/2z/II6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:c8:91:25:5e:ff:59:a4:e0:8e:d5:46:47:5b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44 Validity Not Before: Dec 11 16:03:01 2025 GMT Not After : Dec 12 16:03:01 2025 GMT Subject: CN=2423331e5a1f197780c03cfbdc3c8be5721d809d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:34:29:49:81:0e:e7:62:66:ef:61:ef:b3: 2f:5f:a9:d7:ac:58:a3:da:25:a4:63:d6:1f:70:96: 8a:75:73:5e:36:50:da:e2:f6:c5:0b:32:cd:e3:84: ff:fa:77:9c:10:c0:0e:e0:e0:a9:4e:c0:24:89:30: 51:d7:0e:16:2d:0c:c8:2e:95:2e:fc:03:0d:21:bd: a2:d8:6f:c9:a3:9f:aa:5c:ea:cb:16:ba:17:2c:71: ae:44:62:2e:ae:30:82:61:be:d5:b3:ef:0a:1f:9d: 6d:82:85:b1:66:e6:5b:8d:f6:c0:32:c9:8b:92:52: 93:53:19:dd:e9:fd:e0:ef:06:28:eb:11:cb:d8:cb: a5:c8:10:3e:05:91:d9:38:d0:85:85:34:b1:2f:bf: 7e:89:66:02:3c:3c:6f:63:60:5f:e6:69:97:8c:9b: e0:0c:0c:91:6b:de:04:53:df:92:50:4d:68:6e:5c: 63:ca:75:92:0d:ba:5e:d5:8b:9d:b5:f8:ff:c5:7f: bc:0f:18:5f:5e:45:43:70:d9:7c:3a:29:36:f9:bf: c4:56:42:a8:5b:b3:6d:7f:4f:f3:36:40:46:05:36: 54:66:a8:f0:cf:57:75:34:1a:99:90:16:1a:88:70: 35:41:ff:88:a6:91:e5:c9:f3:d1:11:35:4f:5b:a5: 32:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:23:33:1E:5A:1F:19:77:80:C0:3C:FB:DC:3C:8B:E5:72:1D:80:9D X509v3 Authority Key Identifier: keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0f:18:2e:58:75:8a:c4:67:1c:00:17:05:29:8e:0b:5b:27: 35:03:60:98:78:4a:c3:4b:d4:31:14:84:77:d6:eb:f5:f8:f8: ef:c3:8b:7d:1c:55:0d:35:17:16:0f:4e:0a:ee:b5:28:f3:ce: 56:d8:da:6e:4b:47:83:8a:89:2a:9f:94:54:89:e4:2e:29:fb: 8f:ba:23:a4:5f:4a:14:be:9f:fe:8b:ca:cb:25:45:ca:7c:8e: 65:3f:60:51:e8:b9:95:58:6e:ff:68:ec:2e:5f:32:94:1b:3b: 57:a0:a8:69:d5:b7:b2:dd:2c:67:cf:33:4c:59:71:81:bb:69: 09:7f:a5:91:2a:ee:39:90:9e:e9:c4:2b:c8:b8:f0:cc:b0:2c: 35:85:26:c7:ec:c5:da:7f:bf:1a:a2:af:7d:ed:ae:8d:42:0b: 2e:fc:2a:36:74:f3:30:7d:e1:9b:92:09:a0:76:88:40:0a:e6: 49:2a:5e:7a:e1:44:0f:63:c1:de:f2:56:e8:5d:78:4a:a4:c2: 8b:1a:f2:fb:3e:51:c2:c3:92:c5:45:1f:50:5d:05:59:68:19: f6:b0:4e:2d:ab:96:7d:16:2c:1c:43:f7:5d:e2:d1:50:c0:65: 61:70:fc:b8:01:fe:b1:d3:63:60:7d:74:91:37:45:bb:f2:33: 39:04:71:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJsiRJV7/WaTgjtVGR1svMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNzRiODUzZGZkOTk3M2YyY2Q5OTRiMmUzYjc1NDYxZDlh M2ZjNDQwHhcNMjUxMjExMTYwMzAxWhcNMjUxMjEyMTYwMzAxWjAzMTEwLwYDVQQD EygyNDIzMzMxZTVhMWYxOTc3ODBjMDNjZmJkYzNjOGJlNTcyMWQ4MDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSk0KUmBDudiZu9h77MvX6nXrFij 2iWkY9YfcJaKdXNeNlDa4vbFCzLN44T/+necEMAO4OCpTsAkiTBR1w4WLQzILpUu /AMNIb2i2G/Jo5+qXOrLFroXLHGuRGIurjCCYb7Vs+8KH51tgoWxZuZbjfbAMsmL klKTUxnd6f3g7wYo6xHL2MulyBA+BZHZONCFhTSxL79+iWYCPDxvY2Bf5mmXjJvg DAyRa94EU9+SUE1oblxjynWSDbpe1Yudtfj/xX+8DxhfXkVDcNl8Oik2+b/EVkKo W7Ntf0/zNkBGBTZUZqjwz1d1NBqZkBYaiHA1Qf+IppHlyfPRETVPW6UypwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQjMx5aHxl3gMA8+9w8i+VyHYCdMB8GA1UdIwQY MBaAFJN0uFPf2Zc/LNmUsuO3VGHZo/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQt NjViY2M4Y2VmZGQyLzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQtNjViY2M4Y2VmZGQy LzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjg8YLlh1 isRnHAAXBSmOC1snNQNgmHhKw0vUMRSEd9br9fj478OLfRxVDTUXFg9OCu61KPPO VtjabktHg4qJKp+UVInkLin7j7ojpF9KFL6f/ovKyyVFynyOZT9gUei5lVhu/2js Ll8ylBs7V6CoadW3st0sZ88zTFlxgbtpCX+lkSruOZCe6cQryLjwzLAsNYUmx+zF 2n+/GqKvfe2ujUILLvwqNnTzMH3hm5IJoHaIQArmSSpeeuFED2PB3vJW6F14SqTC ixry+z5RwsOSxUUfUF0FWWgZ9rBOLauWfRYsHEP3XeLRUMBlYXD8uAH+sdNjYH10 kTdFu/IzOQRxBQ== -----END CERTIFICATE-----Generated at Thu Dec 11 19:20:52 2025 by rpki-client