This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft File: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft (raw, json) Hash identifier: TfaAOsu/ZZOz6fwKJta0DMnec+TaXVsOtikicsd8eYc= Subject key identifier: 29:66:F3:98:FE:C6:E8:0A:D5:D3:36:F8:3E:28:56:28:4B:4C:69:B9 Authority key identifier: DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B Certificate issuer: /CN=dea85f21668a98d7e81a74183f0cce513086601b Certificate serial: 019AF31B213D93F5B1E556A52755574B5C17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft Manifest number: 06F5 Signing time: Sat 06 Dec 2025 10:00:32 +0000 Manifest this update: Sat 06 Dec 2025 10:00:32 +0000 Manifest next update: Sun 07 Dec 2025 10:00:32 +0000 Files and hashes: 1: 3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl (hash: N9quKHr06OpWPLb2OGMyG9nerX7NDqbDIFDbUd/NmIM=) 2: Vnw9H8iqt-gts3LY3CEVf7p6PaE.roa (hash: s2vDBc3kUppwqWxQSMIljxY/yV7+Xm77EH+5A9yGbgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:21:3d:93:f5:b1:e5:56:a5:27:55:57:4b:5c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dea85f21668a98d7e81a74183f0cce513086601b Validity Not Before: Dec 6 10:00:32 2025 GMT Not After : Dec 7 10:00:32 2025 GMT Subject: CN=2966f398fec6e80ad5d336f83e2856284b4c69b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e1:de:0e:ee:ed:d7:85:b6:41:b7:79:11:e9: 98:d4:fc:6b:ce:03:56:1c:ec:56:4a:91:09:c8:14: 2b:fb:3f:30:98:81:81:6b:d1:c3:82:4c:95:11:eb: 12:f2:1f:fa:bd:7d:bf:1f:8a:60:93:c4:dd:ca:21: fa:4d:7e:eb:80:a0:8c:d8:5f:b8:f9:ef:1f:c7:ba: 21:a9:71:46:07:a2:09:ed:ec:53:49:64:64:ae:d5: e7:d4:60:8e:37:e8:19:52:8b:d6:05:11:ff:f6:85: fe:d6:22:9d:b4:15:e2:06:11:06:24:9c:39:27:5a: d1:e7:87:8d:b0:e4:4c:1f:37:ac:c3:25:99:f7:82: b3:c2:fc:73:6d:10:bc:ec:e7:3f:70:bd:b6:ad:f6: 72:b8:a6:c3:26:18:85:7a:c8:8b:82:e6:30:d7:5d: c1:aa:c6:8c:08:ec:0b:1b:ad:97:66:08:6a:92:ca: fe:5e:02:87:83:cd:d4:38:39:23:7f:7c:bf:b9:2f: 86:43:2f:47:a4:21:16:68:5f:64:99:d9:30:11:2b: 0b:5f:2c:0a:21:4e:7f:93:e4:72:b4:3f:9d:92:11: 56:b2:41:00:ca:62:e5:a5:36:b3:14:c6:48:b7:26: 02:ad:7f:cb:cf:11:29:04:a7:3d:59:4d:2d:a5:e0: 44:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:66:F3:98:FE:C6:E8:0A:D5:D3:36:F8:3E:28:56:28:4B:4C:69:B9 X509v3 Authority Key Identifier: keyid:DE:A8:5F:21:66:8A:98:D7:E8:1A:74:18:3F:0C:CE:51:30:86:60:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qhfIWaKmNfoGnQYPwzOUTCGYBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/949daa-1ed1-4088-9c4b-52f8ff18d069/1/3qhfIWaKmNfoGnQYPwzOUTCGYBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b3:34:73:b9:0b:4c:51:2b:73:0e:c0:b1:67:98:c9:86:59: fa:79:ed:e0:2b:df:24:3b:9f:7d:5f:93:c6:7f:68:8d:17:f7: 1a:2d:74:0c:9d:d9:11:c3:e6:1a:f1:07:a5:b4:9e:25:92:2c: 7a:4e:a5:b7:e3:f5:9e:c2:1c:63:fd:ce:fe:92:cf:9c:d5:a4: 5b:5a:5e:30:6f:9a:74:b2:16:a5:b0:64:32:4c:b9:f5:37:80: 34:04:2c:be:23:d7:86:87:a3:61:5f:44:b7:bd:03:a1:35:63: 96:3d:7d:8f:9f:24:0e:26:09:77:9e:61:22:34:30:67:a3:de: 33:fd:26:40:f1:8a:3d:5a:db:41:38:4c:7d:10:0b:ee:00:78: 97:e6:ad:b9:46:62:80:da:f5:c6:b1:ed:41:32:4c:3a:7b:ec: 34:ce:4f:60:37:2f:47:2c:04:25:7b:13:02:4b:2f:53:27:b2: dd:b6:de:27:b2:cb:6b:44:82:7e:c0:00:ad:2a:51:cc:b0:e9: b4:dd:5b:6e:ae:3d:a5:95:5e:25:4b:ce:fd:df:32:cf:bf:63: ab:4f:c2:0d:da:64:24:41:d6:29:3c:77:1a:cb:d4:7a:f8:cf: bd:27:f6:c4:c1:2a:4c:88:95:30:07:fc:02:21:86:11:1b:fa: bc:4b:22:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGyE9k/Wx5ValJ1VXS1wXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYTg1ZjIxNjY4YTk4ZDdlODFhNzQxODNmMGNjZTUxMzA4 NjYwMWIwHhcNMjUxMjA2MTAwMDMyWhcNMjUxMjA3MTAwMDMyWjAzMTEwLwYDVQQD EygyOTY2ZjM5OGZlYzZlODBhZDVkMzM2ZjgzZTI4NTYyODRiNGM2OWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9eHeDu7t14W2Qbd5EemY1PxrzgNW HOxWSpEJyBQr+z8wmIGBa9HDgkyVEesS8h/6vX2/H4pgk8TdyiH6TX7rgKCM2F+4 +e8fx7ohqXFGB6IJ7exTSWRkrtXn1GCON+gZUovWBRH/9oX+1iKdtBXiBhEGJJw5 J1rR54eNsORMHzeswyWZ94KzwvxzbRC87Oc/cL22rfZyuKbDJhiFesiLguYw113B qsaMCOwLG62XZghqksr+XgKHg83UODkjf3y/uS+GQy9HpCEWaF9kmdkwESsLXywK IU5/k+RytD+dkhFWskEAymLlpTazFMZItyYCrX/LzxEpBKc9WU0tpeBErQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClm85j+xugK1dM2+D4oVihLTGm5MB8GA1UdIwQY MBaAFN6oXyFmipjX6Bp0GD8MzlEwhmAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3FoZklXYUttTmZvR25RWVB3ek9VVENHWUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85NDlkYWEtMWVkMS00MDg4LTljNGIt NTJmOGZmMThkMDY5LzEvM3FoZklXYUttTmZvR25RWVB3ek9VVENHWUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85NDlkYWEtMWVkMS00MDg4LTljNGItNTJmOGZmMThkMDY5 LzEvM3FoZklXYUttTmZvR25RWVB3ek9VVENHWUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAubM0c7kL TFErcw7AsWeYyYZZ+nnt4CvfJDuffV+Txn9ojRf3Gi10DJ3ZEcPmGvEHpbSeJZIs ek6lt+P1nsIcY/3O/pLPnNWkW1peMG+adLIWpbBkMky59TeANAQsviPXhoejYV9E t70DoTVjlj19j58kDiYJd55hIjQwZ6PeM/0mQPGKPVrbQThMfRAL7gB4l+atuUZi gNr1xrHtQTJMOnvsNM5PYDcvRywEJXsTAksvUyey3bbeJ7LLa0SCfsAArSpRzLDp tN1bbq49pZVeJUvO/d8yz79jq0/CDdpkJEHWKTx3GsvUevjPvSf2xMEqTIiVMAf8 AiGGERv6vEsirA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:01:33 2025 by rpki-client