This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json) Hash identifier: OJGndk6/Epq0IULGXJ4Fv7KCFUHf5IgNG2R7dlo+wfk= Subject key identifier: 06:5C:C4:B5:6D:D1:D5:61:10:94:F9:A9:3D:A7:7C:5B:D6:B4:84:80 Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29 Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729 Certificate serial: 019AF12DC13C11D8E4893D8DFB89E371EEB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft Manifest number: 09A3 Signing time: Sat 06 Dec 2025 01:01:38 +0000 Manifest this update: Sat 06 Dec 2025 01:01:38 +0000 Manifest next update: Sun 07 Dec 2025 01:01:38 +0000 Files and hashes: 1: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: HAYpvf4S8XkUCQ4shv9Cog3cjYx1fkVhX5ay3L6ySHU=) 2: W8Dpmpt_1-01qSbotVM15n3GSek.roa (hash: 8bMbdbcHjYf7KXHu+ym0lwgv0cPY/hCCrTp1Qv0O4sU=) 3: d-If6rwOnPiVqU22C8IZzGvMPvc.roa (hash: giLRuwy5wW+MIOBjFAF7Pd0PEoYtI2K0pgdHGw83fkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c1:3c:11:d8:e4:89:3d:8d:fb:89:e3:71:ee:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729 Validity Not Before: Dec 6 01:01:38 2025 GMT Not After : Dec 7 01:01:38 2025 GMT Subject: CN=065cc4b56dd1d5611094f9a93da77c5bd6b48480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:90:88:4b:7f:07:f7:92:ea:c3:4d:a9:b0:52: 2a:80:89:b1:2b:1f:76:ad:b2:0e:70:07:5b:0b:71: c6:93:a5:87:92:88:5f:8d:8d:58:10:78:54:5b:19: a9:c0:ac:51:60:d8:0a:f7:6d:f0:4b:99:f2:25:42: e6:97:9e:56:71:8c:03:5c:ed:8a:bb:ea:a6:3c:cb: 78:89:f1:51:34:17:99:46:f2:16:09:3f:ff:d0:b7: 53:97:c4:d1:78:a3:08:f2:76:83:f1:da:5b:da:08: 69:18:e7:57:7c:e0:7f:2b:be:17:7d:3f:c0:56:8a: 74:c9:d6:0d:9a:28:71:1a:b9:22:43:95:71:b3:60: 13:b2:3a:a6:a6:82:14:3e:8b:56:51:2d:77:2c:d1: f4:b4:46:e4:ec:04:de:f7:be:86:5b:c3:30:a0:3a: 86:06:1b:1c:89:96:8b:f3:d5:0c:26:58:94:2d:90: 62:db:79:78:12:fa:5e:1f:c9:48:d3:78:e8:c9:c7: c3:4d:7b:93:3f:e4:7d:07:fe:07:b7:04:56:8c:bf: d0:1b:d6:37:4b:50:97:3d:09:08:2e:cb:4a:9f:6d: fd:04:42:67:92:6d:02:4d:72:43:f4:bb:e4:bb:3a: 03:81:39:a8:a6:cd:c2:09:a4:de:31:ce:55:26:5d: 46:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5C:C4:B5:6D:D1:D5:61:10:94:F9:A9:3D:A7:7C:5B:D6:B4:84:80 X509v3 Authority Key Identifier: keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:3e:9a:c4:f9:6d:61:ea:3f:ea:6a:de:06:f0:d7:18:1f:8a: ac:31:5a:dd:8e:f0:82:f4:8b:56:8d:62:ef:7b:c3:e9:54:c1: d0:63:62:80:26:df:b0:d9:a6:f6:ab:0b:52:58:2d:a9:b8:a0: 59:6d:89:57:2c:25:d7:35:c9:4d:79:bd:03:48:ba:ad:3b:0d: 29:7f:60:17:51:b2:64:0f:8d:29:24:2a:f7:11:01:db:97:a3: cb:3b:7c:fd:bf:a1:0c:98:f5:b9:71:01:13:97:a3:e7:c3:57: e6:b4:07:63:bc:84:f1:b7:60:d4:ec:f7:93:23:90:dc:a9:fc: 8e:aa:cd:3d:52:44:74:fb:c3:e1:de:84:cb:ce:2f:d4:3b:bd: a2:74:5d:ce:cf:c0:24:0d:df:78:4f:fc:4f:8a:fc:bf:69:29: e9:af:c5:1b:97:36:b9:76:c3:09:52:a4:2a:3c:fa:96:aa:06: 5c:05:f8:fb:9a:4e:c0:93:d5:b6:84:60:2b:e7:54:b1:ef:7d: 9c:4d:47:6e:71:99:42:9f:c3:87:64:18:86:31:f1:12:1a:5e: f7:59:4d:3d:7b:12:7e:23:c5:b9:c8:ff:7f:34:88:b3:4d:c6: 02:f9:0f:e8:10:a9:fb:b9:7e:2c:93:17:aa:b2:96:b1:23:69: 30:6c:09:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcE8EdjkiT2N+4njce64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMDEwOTM4ZDllZjcyMTU4ZmM5OGJkNDVkZTcxYjBiMWE5 ZmY3MjkwHhcNMjUxMjA2MDEwMTM4WhcNMjUxMjA3MDEwMTM4WjAzMTEwLwYDVQQD EygwNjVjYzRiNTZkZDFkNTYxMTA5NGY5YTkzZGE3N2M1YmQ2YjQ4NDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35CIS38H95Lqw02psFIqgImxKx92 rbIOcAdbC3HGk6WHkohfjY1YEHhUWxmpwKxRYNgK923wS5nyJULml55WcYwDXO2K u+qmPMt4ifFRNBeZRvIWCT//0LdTl8TReKMI8naD8dpb2ghpGOdXfOB/K74XfT/A Vop0ydYNmihxGrkiQ5Vxs2ATsjqmpoIUPotWUS13LNH0tEbk7ATe976GW8MwoDqG BhsciZaL89UMJliULZBi23l4EvpeH8lI03joycfDTXuTP+R9B/4HtwRWjL/QG9Y3 S1CXPQkILstKn239BEJnkm0CTXJD9LvkuzoDgTmops3CCaTeMc5VJl1GlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZcxLVt0dVhEJT5qT2nfFvWtISAMB8GA1UdIwQY MBaAFN0BCTjZ73IVj8mL1F3nGwsan/cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYt Y2VmZjU0NmM5MzNlLzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYtY2VmZjU0NmM5MzNl LzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYT6axPlt Yeo/6mreBvDXGB+KrDFa3Y7wgvSLVo1i73vD6VTB0GNigCbfsNmm9qsLUlgtqbig WW2JVywl1zXJTXm9A0i6rTsNKX9gF1GyZA+NKSQq9xEB25ejyzt8/b+hDJj1uXEB E5ej58NX5rQHY7yE8bdg1Oz3kyOQ3Kn8jqrNPVJEdPvD4d6Ey84v1Du9onRdzs/A JA3feE/8T4r8v2kp6a/FG5c2uXbDCVKkKjz6lqoGXAX4+5pOwJPVtoRgK+dUse99 nE1HbnGZQp/Dh2QYhjHxEhpe91lNPXsSfiPFucj/fzSIs03GAvkP6BCp+7l+LJMX qrKWsSNpMGwJjg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:29 2025 by rpki-client