This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json) Hash identifier: iKoi8gGM0kUcntJvNYVq5VR0UQ4y80+P3jLobKV57IU= Subject key identifier: 3B:C1:0C:8F:61:CE:1F:AD:98:5D:7D:37:7B:3A:A4:38:AF:71:BD:17 Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26 Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26 Certificate serial: 019AF3527997D9A0E71E8C3F26A1F1BD6756 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft Manifest number: 1148 Signing time: Sat 06 Dec 2025 11:00:59 +0000 Manifest this update: Sat 06 Dec 2025 11:00:59 +0000 Manifest next update: Sun 07 Dec 2025 11:00:59 +0000 Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: 2doCQglyFBD8jDC6jVR97PUrGDotSYbnigI+sfQ1wQ4=) 2: HbrG3H8i4MVchy7ux-rBNewfgN4.roa (hash: ZEnkqludW6ORRLo4vaUnR4azLQNvPJWfXdiBq5telHQ=) 3: eqT6wyPQANegQWczS_E8NsRIGH0.roa (hash: uVTDWyi87OupvvigMLyo7l17Ar6OD8Dv20/y/RB28lE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:79:97:d9:a0:e7:1e:8c:3f:26:a1:f1:bd:67:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26 Validity Not Before: Dec 6 11:00:59 2025 GMT Not After : Dec 7 11:00:59 2025 GMT Subject: CN=3bc10c8f61ce1fad985d7d377b3aa438af71bd17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:80:de:66:74:e2:37:46:80:17:a5:88:b9:c1: 3f:24:00:0e:2d:a4:e5:0b:b4:8f:95:ba:13:f8:fc: e6:d7:7b:c9:a6:b3:9e:85:3e:79:d9:81:8a:c5:e6: 74:98:88:4d:02:69:9b:ec:bd:3c:c7:22:5b:22:11: f2:3f:e4:cb:0c:40:7f:6f:5f:06:d3:cd:a6:5b:c1: 8f:83:b9:31:38:7a:bb:4e:cc:f6:53:05:cf:3e:21: ed:ce:1f:2d:4e:c2:eb:af:3b:96:d4:ac:ac:0b:ef: e6:26:f4:b9:cf:ab:a1:3c:19:50:bc:11:be:0a:65: 85:af:40:2a:82:cc:b8:0c:ab:4c:60:bd:f3:af:a5: dd:30:65:1f:93:e3:0a:97:0f:fe:75:cf:3b:a4:1c: 18:71:9e:64:f1:11:a3:62:56:2c:42:7d:9c:f2:d2: 79:6e:75:15:33:51:1b:ad:d0:4e:1d:65:cc:35:0b: 2b:ec:63:a6:49:94:9e:04:1f:de:d3:07:88:f4:47: b6:8d:3e:d9:c4:7b:50:3d:96:1d:31:26:5c:39:6c: 57:91:72:75:c2:51:7c:0d:53:01:af:30:1c:92:0b: 95:d9:39:84:a9:7a:c6:ce:c0:99:e2:dd:e0:6e:d0: 01:64:02:70:bc:1f:09:e3:f1:52:97:75:32:72:42: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C1:0C:8F:61:CE:1F:AD:98:5D:7D:37:7B:3A:A4:38:AF:71:BD:17 X509v3 Authority Key Identifier: keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ba:06:0c:f4:44:a1:91:52:f9:e1:12:66:97:02:57:0b:ea: dc:62:23:21:9d:35:ba:2f:22:6a:9d:74:17:38:40:fa:20:c0: 72:72:3a:f8:8a:f8:5f:37:84:61:48:37:cb:61:e4:3f:a8:4d: d1:2a:8b:f9:54:fe:e0:a9:6c:06:5d:3d:bf:cc:1d:d3:c7:83: 05:f4:ba:dc:b7:c7:8b:8f:b8:8f:6c:88:86:5c:60:71:bd:1b: e2:8e:81:e2:fd:8e:6a:e9:99:f6:a6:49:fd:18:3f:75:4f:92: 11:fa:99:c9:b1:7c:ca:01:27:ef:7e:70:b1:d9:81:ee:8c:b3: 5d:f2:4d:b6:13:29:d9:08:8f:f3:7c:10:96:86:c5:9f:55:a7: a2:7a:9c:26:7c:76:83:0f:b5:a4:42:f4:79:03:d8:ac:5f:ac: 8e:a7:fa:95:2c:9c:92:03:f0:44:77:00:8e:69:73:2f:24:66: 1b:b0:3f:ac:bd:64:4b:b3:19:66:8b:f5:58:91:4a:19:4e:8f: 91:93:d0:90:ae:f4:40:86:ed:47:eb:c7:6f:00:f1:af:c7:86: 86:25:61:3c:48:dc:1c:c4:0a:ff:fa:65:e0:7c:73:43:9f:ef: 1a:ff:8c:91:f9:32:1b:1b:4e:84:0f:3b:67:27:8b:ab:ac:a5: ce:6f:4e:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnmX2aDnHow/JqHxvWdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTRhNDI5ZTY2NThhYmI3MGEzNzkyYzE3MmQ3ZWQ2MmVi OGZhMjYwHhcNMjUxMjA2MTEwMDU5WhcNMjUxMjA3MTEwMDU5WjAzMTEwLwYDVQQD EygzYmMxMGM4ZjYxY2UxZmFkOTg1ZDdkMzc3YjNhYTQzOGFmNzFiZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34DeZnTiN0aAF6WIucE/JAAOLaTl C7SPlboT+Pzm13vJprOehT552YGKxeZ0mIhNAmmb7L08xyJbIhHyP+TLDEB/b18G 082mW8GPg7kxOHq7Tsz2UwXPPiHtzh8tTsLrrzuW1KysC+/mJvS5z6uhPBlQvBG+ CmWFr0Aqgsy4DKtMYL3zr6XdMGUfk+MKlw/+dc87pBwYcZ5k8RGjYlYsQn2c8tJ5 bnUVM1EbrdBOHWXMNQsr7GOmSZSeBB/e0weI9Ee2jT7ZxHtQPZYdMSZcOWxXkXJ1 wlF8DVMBrzAckguV2TmEqXrGzsCZ4t3gbtABZAJwvB8J4/FSl3UyckKWJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvBDI9hzh+tmF19N3s6pDivcb0XMB8GA1UdIwQY MBaAFN4UpCnmZYq7cKN5LBctftYuuPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEt MDVkOWMxY2Q3NDI1LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEtMDVkOWMxY2Q3NDI1 LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQroGDPRE oZFS+eESZpcCVwvq3GIjIZ01ui8iap10FzhA+iDAcnI6+Ir4XzeEYUg3y2HkP6hN 0SqL+VT+4KlsBl09v8wd08eDBfS63LfHi4+4j2yIhlxgcb0b4o6B4v2OaumZ9qZJ /Rg/dU+SEfqZybF8ygEn735wsdmB7oyzXfJNthMp2QiP83wQlobFn1WnonqcJnx2 gw+1pEL0eQPYrF+sjqf6lSyckgPwRHcAjmlzLyRmG7A/rL1kS7MZZov1WJFKGU6P kZPQkK70QIbtR+vHbwDxr8eGhiVhPEjcHMQK//pl4HxzQ5/vGv+MkfkyGxtOhA87 ZyeLq6ylzm9ORg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:45 2025 by rpki-client