This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft File: 3g1q1z4YioWTcrYTo6JwS5wzD-0.mft (raw, json) Hash identifier: xJPXr9b+zBrufVpa3H4WeEE7GVZcpoqidjApQFOsl24= Subject key identifier: 08:A4:91:23:02:A6:79:C0:36:F0:79:D6:C3:36:59:02:5F:E3:1C:51 Authority key identifier: DE:0D:6A:D7:3E:18:8A:85:93:72:B6:13:A3:A2:70:4B:9C:33:0F:ED Certificate issuer: /CN=de0d6ad73e188a859372b613a3a2704b9c330fed Certificate serial: 019AF23FBB6789BB62D012C532148B735C76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft Manifest number: 61 Signing time: Sat 06 Dec 2025 06:00:54 +0000 Manifest this update: Sat 06 Dec 2025 06:00:54 +0000 Manifest next update: Sun 07 Dec 2025 06:00:54 +0000 Files and hashes: 1: 3g1q1z4YioWTcrYTo6JwS5wzD-0.crl (hash: eJAYtUSo3KPXUmar8AYa+LW1VkGr2Zc+UppHzsVrdks=) 2: nIlbDkvyopl-3WYpmEvoZXqQSUk.roa (hash: I7qZ2TL0VhTQPFTNQyzHllm0ncLq1MQM+/15MkPJP8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.crl rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:bb:67:89:bb:62:d0:12:c5:32:14:8b:73:5c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0d6ad73e188a859372b613a3a2704b9c330fed Validity Not Before: Dec 6 06:00:54 2025 GMT Not After : Dec 7 06:00:54 2025 GMT Subject: CN=08a4912302a679c036f079d6c33659025fe31c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:49:88:87:70:cc:5e:0c:13:27:6c:5c:dd: dd:eb:94:6a:4c:e1:f7:ba:40:b2:41:ec:1e:23:8a: 31:8a:4e:9a:a0:75:f0:c0:ce:df:cc:b1:e7:f1:d0: 55:c5:a0:3e:c8:03:1d:7f:a4:8f:af:c3:82:c9:68: 81:00:54:2d:87:c0:66:7d:51:d9:af:05:37:73:d4: f3:09:ad:0e:7b:7d:72:97:28:40:72:df:fd:63:c2: d7:cd:a7:b4:f8:c3:fe:86:fd:4b:69:a8:e8:b5:f4: da:34:b0:52:3a:38:ff:2b:ac:d5:c2:84:b1:75:40: 4f:47:7c:c7:5d:65:00:63:b4:0f:27:3c:f5:1e:1f: 86:6f:01:e7:03:a3:7f:ee:74:de:f8:6b:c3:4e:b2: 70:1f:da:8d:66:19:a0:63:22:54:47:86:b0:dd:f7: 57:16:55:8d:ff:6a:24:94:77:ae:63:1b:94:c7:75: 30:a4:0b:46:e0:6d:22:c5:ae:87:50:15:ba:8b:cb: 12:f2:51:09:88:72:9e:e2:22:0c:60:b4:bf:cf:22: 26:39:0f:6e:fb:8a:d4:62:88:cf:4f:7f:3c:5c:e1: a2:b8:48:46:49:a5:fc:b0:b4:0a:f6:af:ac:a5:37: d7:c1:10:5c:ec:79:70:c9:f6:4a:12:9b:1d:3f:85: 2a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A4:91:23:02:A6:79:C0:36:F0:79:D6:C3:36:59:02:5F:E3:1C:51 X509v3 Authority Key Identifier: keyid:DE:0D:6A:D7:3E:18:8A:85:93:72:B6:13:A3:A2:70:4B:9C:33:0F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f1:d0:91:73:c5:d3:3f:cd:dc:26:4a:74:0b:d7:b5:b9:cf: 5e:c6:27:b6:a1:4b:46:55:38:a5:44:cf:1c:9b:4e:d6:b6:6a: 7d:88:d4:31:04:1e:3e:4e:05:68:82:ab:d3:78:3b:e0:a3:7a: ed:a1:7a:f0:52:a9:f6:9a:59:08:e8:e0:bc:b8:bd:ed:51:f7: 5a:bb:cd:83:26:74:59:38:87:39:4b:35:32:fd:b1:06:d7:62: 39:1a:a4:c5:a7:44:6e:0b:e4:c4:64:6b:ca:00:80:8c:2a:59: 76:37:c1:28:0f:ef:96:1c:96:5d:ff:9d:9d:c3:44:4c:17:43: 6d:49:ae:64:95:d4:85:8f:a0:0d:94:a2:53:52:94:04:46:17: da:95:22:1f:13:10:46:65:18:dd:db:2d:9e:a3:4f:c6:1f:82: f2:f8:b4:bf:02:35:14:55:a1:0c:76:e5:ea:97:ee:43:74:76: 69:cf:5a:8a:7b:ac:24:3b:a8:77:ae:63:9a:fd:8c:6b:e4:ba: 60:8d:12:13:d8:a5:79:c1:e5:62:67:d5:84:e2:38:8f:fd:b1: 4c:b6:36:e4:28:75:94:37:bb:5f:d0:d2:e2:25:47:ad:53:92: 48:3d:08:99:57:52:93:8f:2d:6d:55:cb:1d:07:4e:2d:4a:33: f8:45:45:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7tnibti0BLFMhSLc1x2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGQ2YWQ3M2UxODhhODU5MzcyYjYxM2EzYTI3MDRiOWMz MzBmZWQwHhcNMjUxMjA2MDYwMDU0WhcNMjUxMjA3MDYwMDU0WjAzMTEwLwYDVQQD EygwOGE0OTEyMzAyYTY3OWMwMzZmMDc5ZDZjMzM2NTkwMjVmZTMxYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosFJiIdwzF4MEydsXN3d65RqTOH3 ukCyQeweI4oxik6aoHXwwM7fzLHn8dBVxaA+yAMdf6SPr8OCyWiBAFQth8BmfVHZ rwU3c9TzCa0Oe31ylyhAct/9Y8LXzae0+MP+hv1LaajotfTaNLBSOjj/K6zVwoSx dUBPR3zHXWUAY7QPJzz1Hh+GbwHnA6N/7nTe+GvDTrJwH9qNZhmgYyJUR4aw3fdX FlWN/2oklHeuYxuUx3UwpAtG4G0ixa6HUBW6i8sS8lEJiHKe4iIMYLS/zyImOQ9u +4rUYojPT388XOGiuEhGSaX8sLQK9q+spTfXwRBc7HlwyfZKEpsdP4Uq+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAikkSMCpnnANvB51sM2WQJf4xxRMB8GA1UdIwQY MBaAFN4Natc+GIqFk3K2E6OicEucMw/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2cxcTF6NFlpb1dUY3JZVG82SndTNXd6RC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84MTExMTAtN2ZlNy00ZDM0LWFlYzAt ZjM4NWRmNmQ5NDRhLzEvM2cxcTF6NFlpb1dUY3JZVG82SndTNXd6RC0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84MTExMTAtN2ZlNy00ZDM0LWFlYzAtZjM4NWRmNmQ5NDRh LzEvM2cxcTF6NFlpb1dUY3JZVG82SndTNXd6RC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvHQkXPF 0z/N3CZKdAvXtbnPXsYntqFLRlU4pUTPHJtO1rZqfYjUMQQePk4FaIKr03g74KN6 7aF68FKp9ppZCOjgvLi97VH3WrvNgyZ0WTiHOUs1Mv2xBtdiORqkxadEbgvkxGRr ygCAjCpZdjfBKA/vlhyWXf+dncNETBdDbUmuZJXUhY+gDZSiU1KUBEYX2pUiHxMQ RmUY3dstnqNPxh+C8vi0vwI1FFWhDHbl6pfuQ3R2ac9ainusJDuod65jmv2Ma+S6 YI0SE9ilecHlYmfVhOI4j/2xTLY25Ch1lDe7X9DS4iVHrVOSSD0ImVdSk48tbVXL HQdOLUoz+EVFaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:43 2025 by rpki-client