This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft File: tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft (raw, json) Hash identifier: FVenaQqE1eN29SQv/9ybzGV2171yWhLI5cIX1jBcD3c= Subject key identifier: 82:CD:28:1A:9A:66:3E:AB:93:C4:AB:5D:DD:9F:41:DD:38:DF:FC:CF Authority key identifier: B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0 Certificate issuer: /CN=b6bde8794b0a0d88f92967f5084e4c38199613a0 Certificate serial: 019B59E3FC13D90CCA03BC7F80B30A351406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft Manifest number: 1F Signing time: Fri 26 Dec 2025 09:01:12 +0000 Manifest this update: Fri 26 Dec 2025 09:01:12 +0000 Manifest next update: Sat 27 Dec 2025 09:01:12 +0000 Files and hashes: 1: YJtWWkd40LeFmgY7B3XEmPng2QU.roa (hash: rjscWRDiq39+sDx2H9BVMRCDWFFnJdKD35VGGtGde4k=) 2: tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl (hash: OJSskxZ10WkRdP1LVJLY7Dq1PY5v2K11nb4yTrq7Lko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:fc:13:d9:0c:ca:03:bc:7f:80:b3:0a:35:14:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6bde8794b0a0d88f92967f5084e4c38199613a0 Validity Not Before: Dec 26 09:01:12 2025 GMT Not After : Dec 27 09:01:12 2025 GMT Subject: CN=82cd281a9a663eab93c4ab5ddd9f41dd38dffccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:e7:44:b7:d2:ae:47:a2:5a:b1:c3:6c:15: e3:48:8f:05:09:5d:04:8b:06:48:79:ba:10:f0:68: 22:fd:4f:7d:98:da:1f:93:62:fc:f4:16:c7:83:05: be:59:8d:e1:80:c6:e1:f2:f6:6b:a2:08:6b:e3:53: f8:26:c7:af:89:96:73:29:68:a9:f7:0b:0d:25:0e: 80:c1:6f:e4:c4:ab:6c:e6:97:d8:a0:c0:41:76:0f: ec:c0:c5:e0:4b:c3:6b:f6:e7:4a:37:44:64:be:e3: b0:7b:97:30:1f:59:4c:6f:05:29:f3:f9:20:69:6f: c7:15:50:87:d7:fb:ad:e9:62:61:07:d3:9a:f1:84: f9:f6:da:b2:e1:a2:e5:85:0b:a6:ef:61:6d:28:1c: 49:a2:45:83:d4:90:f2:36:1f:3d:b5:db:07:f0:b1: 68:dd:4c:92:a5:cd:9a:24:ef:bb:7d:36:79:b4:b2: b8:82:0d:91:c8:46:81:10:aa:e0:6d:10:33:2d:4f: ee:ab:4a:3e:23:76:27:f3:63:47:77:c1:58:00:1e: 38:f0:6a:25:69:4c:74:d3:62:26:e3:42:2b:f4:f7: 6f:15:9b:12:c5:71:8f:16:37:ee:16:d6:44:75:2e: 75:70:c7:90:ce:c3:c7:31:bb:fd:eb:be:d6:c4:07: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CD:28:1A:9A:66:3E:AB:93:C4:AB:5D:DD:9F:41:DD:38:DF:FC:CF X509v3 Authority Key Identifier: keyid:B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e3:82:15:57:fc:cb:87:25:71:dd:ba:60:ae:d6:23:c1:f7: c1:f6:48:f6:fb:65:08:eb:01:dc:ee:81:a6:26:58:2f:43:5f: a9:d9:d2:35:68:1b:5e:d4:53:0e:22:a3:a8:3f:45:a4:e5:d3: 5a:99:65:b7:fb:03:a2:6c:32:8b:05:c4:01:b8:24:6f:ce:61: 70:93:5d:50:5d:fd:0a:6b:32:c8:17:3a:b1:c8:fd:10:32:b0: ec:c0:35:ea:08:fe:ea:fa:ab:7e:47:c3:ee:cb:25:27:a8:35: 72:a1:df:9d:5e:f8:4b:95:ff:84:ed:b8:83:ae:ca:d2:7a:47: 6a:03:1f:fd:63:25:20:bf:b0:14:07:03:ec:84:4d:bc:e4:bf: 54:60:5a:b7:1b:60:6e:29:f8:61:2f:e7:e1:03:44:59:12:60: 16:56:0d:fd:5c:b0:0b:b3:e2:ab:dc:c7:5f:d6:03:e2:61:1f: 07:ab:49:32:da:44:9e:0c:68:3a:78:c3:d6:19:6c:90:f4:6b: b3:e6:f8:b2:6b:8a:22:c9:05:a5:80:c7:1d:09:cf:76:43:70: be:bf:84:f4:e2:af:95:4f:d9:8a:53:1c:89:01:89:75:06:74: 0f:dc:aa:5e:84:c1:a2:41:26:5e:82:d4:d4:00:38:09:ff:75: 89:35:21:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4/wT2QzKA7x/gLMKNRQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YmRlODc5NGIwYTBkODhmOTI5NjdmNTA4NGU0YzM4MTk5 NjEzYTAwHhcNMjUxMjI2MDkwMTEyWhcNMjUxMjI3MDkwMTEyWjAzMTEwLwYDVQQD Eyg4MmNkMjgxYTlhNjYzZWFiOTNjNGFiNWRkZDlmNDFkZDM4ZGZmY2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/PnRLfSrkeiWrHDbBXjSI8FCV0E iwZIeboQ8Ggi/U99mNofk2L89BbHgwW+WY3hgMbh8vZroghr41P4JseviZZzKWip 9wsNJQ6AwW/kxKts5pfYoMBBdg/swMXgS8Nr9udKN0RkvuOwe5cwH1lMbwUp8/kg aW/HFVCH1/ut6WJhB9Oa8YT59tqy4aLlhQum72FtKBxJokWD1JDyNh89tdsH8LFo 3UySpc2aJO+7fTZ5tLK4gg2RyEaBEKrgbRAzLU/uq0o+I3Yn82NHd8FYAB448Gol aUx002Im40Ir9PdvFZsSxXGPFjfuFtZEdS51cMeQzsPHMbv9677WxAca0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILNKBqaZj6rk8SrXd2fQd043/zPMB8GA1UdIwQY MBaAFLa96HlLCg2I+Sln9QhOTDgZlhOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHIzb2VVc0tEWWo1S1dmMUNFNU1PQm1XRTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85OGFhMGItZDhiMy00MTA5LThmOGIt MjBlNTljZjkyNjg2LzEvdHIzb2VVc0tEWWo1S1dmMUNFNU1PQm1XRTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85OGFhMGItZDhiMy00MTA5LThmOGItMjBlNTljZjkyNjg2 LzEvdHIzb2VVc0tEWWo1S1dmMUNFNU1PQm1XRTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOOCFVf8 y4clcd26YK7WI8H3wfZI9vtlCOsB3O6BpiZYL0NfqdnSNWgbXtRTDiKjqD9FpOXT Wpllt/sDomwyiwXEAbgkb85hcJNdUF39CmsyyBc6scj9EDKw7MA16gj+6vqrfkfD 7sslJ6g1cqHfnV74S5X/hO24g67K0npHagMf/WMlIL+wFAcD7IRNvOS/VGBatxtg bin4YS/n4QNEWRJgFlYN/VywC7Piq9zHX9YD4mEfB6tJMtpEngxoOnjD1hlskPRr s+b4smuKIskFpYDHHQnPdkNwvr+E9OKvlU/ZilMciQGJdQZ0D9yqXoTBokEmXoLU 1AA4Cf91iTUhng== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:22 2025 by rpki-client