This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft File: 3pj4NjKYKX-6uupodyArXEQOWpA.mft (raw, json) Hash identifier: 120ZKd26oSPLyG9Jgy9A4oa6JV050UScthL0zBCzrmA= Subject key identifier: 93:4E:EE:9D:41:00:C5:C9:99:D3:EB:BD:CA:27:1B:E8:92:0E:88:C3 Authority key identifier: DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90 Certificate issuer: /CN=de98f8363298297fbabaea6877202b5c440e5a90 Certificate serial: 019AF12CCFD29A6513EFBE7CE3E7C8BF272C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft Manifest number: 0DF0 Signing time: Sat 06 Dec 2025 01:00:37 +0000 Manifest this update: Sat 06 Dec 2025 01:00:37 +0000 Manifest next update: Sun 07 Dec 2025 01:00:37 +0000 Files and hashes: 1: 3pj4NjKYKX-6uupodyArXEQOWpA.crl (hash: XP+20bL0Q/ns9oEJXm+Ml8pzZb07dqEHSstRbql+xew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:cf:d2:9a:65:13:ef:be:7c:e3:e7:c8:bf:27:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de98f8363298297fbabaea6877202b5c440e5a90 Validity Not Before: Dec 6 01:00:37 2025 GMT Not After : Dec 7 01:00:37 2025 GMT Subject: CN=934eee9d4100c5c999d3ebbdca271be8920e88c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:a4:44:8c:c3:4b:a3:ad:1e:e2:d2:a6:80: 28:1d:44:bf:f1:20:96:53:55:fc:81:f4:d6:7c:ee: 85:28:3c:fb:e7:3f:32:2f:00:69:16:4a:90:ec:51: b0:3b:41:cd:02:ff:93:b9:c6:31:1f:fb:25:2a:90: 01:1e:b5:95:36:25:96:cc:2d:25:61:da:c7:94:7f: 97:92:b2:50:d6:e8:24:b2:e4:c6:8f:5d:b4:12:c1: ec:93:4b:64:58:c3:0c:70:cc:f0:11:b6:f8:8b:2e: 2f:21:d8:ec:2e:f0:e6:62:b8:58:36:3d:7d:46:9c: 34:ae:f4:fa:23:b6:3e:03:fc:28:1e:f6:6e:14:53: fa:c0:70:00:61:88:05:67:42:90:d9:f3:db:cb:09: 60:46:33:ae:b9:79:ae:a1:93:8d:ea:66:de:97:5b: 40:e8:e3:72:59:ed:ed:b3:ec:6f:e8:7f:9b:38:fc: 5f:93:24:80:ac:e7:cc:8b:fc:00:20:be:9a:00:ed: 88:08:7b:ed:1d:5f:30:5f:5e:ce:01:ab:c3:b5:2d: b0:87:6f:5f:0d:31:7c:bb:d8:53:77:3c:1a:8b:50: 2c:84:b0:9a:6b:ef:9b:04:34:79:69:7d:9f:9c:5c: ac:db:af:ab:aa:d2:7e:5e:1f:0b:28:06:b2:98:52: 6c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4E:EE:9D:41:00:C5:C9:99:D3:EB:BD:CA:27:1B:E8:92:0E:88:C3 X509v3 Authority Key Identifier: keyid:DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:40:3a:22:a3:a5:2f:32:1b:cf:7a:23:9a:38:97:d7:8c:db: 15:00:f8:10:4b:e1:2f:69:3c:45:4d:20:4c:fd:a6:f0:82:9e: 28:b2:1e:5b:c2:b4:f4:1f:8f:23:33:95:88:df:75:5d:a9:af: 3c:34:4d:d0:3f:91:9c:fa:24:c3:65:0d:ee:48:ee:b3:3c:50: 51:fb:e6:af:db:e6:37:2e:42:93:8d:c4:d6:af:b4:52:31:dc: 2f:a5:d0:dc:2c:ee:34:00:04:96:6f:36:a8:f2:4f:14:a2:bc: f1:52:be:62:33:74:fa:76:e0:ef:7c:4c:07:5b:dd:28:cf:74: 41:0e:76:49:da:11:3f:d8:0e:07:fc:1e:1d:d1:ac:8e:76:06: 14:12:4e:b8:59:f3:41:9e:43:ce:1f:35:d7:c0:28:03:96:46: e6:dc:21:50:4a:2c:1f:30:45:06:f0:e2:d4:82:4a:9d:4a:62: 53:bc:f8:00:45:e0:af:ca:fd:6b:c7:fc:d0:25:ca:c4:21:f6: 85:5b:fd:59:96:06:ac:d0:cb:e6:82:9c:27:c9:1f:73:39:32: ed:7a:fd:30:85:15:74:84:00:31:68:51:0f:06:3c:e4:5b:6a: 32:95:9f:ca:df:77:cd:7b:de:a6:dd:44:12:66:70:59:03:03: 2a:e7:0b:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLM/SmmUT77584+fIvycsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOThmODM2MzI5ODI5N2ZiYWJhZWE2ODc3MjAyYjVjNDQw ZTVhOTAwHhcNMjUxMjA2MDEwMDM3WhcNMjUxMjA3MDEwMDM3WjAzMTEwLwYDVQQD Eyg5MzRlZWU5ZDQxMDBjNWM5OTlkM2ViYmRjYTI3MWJlODkyMGU4OGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkikRIzDS6OtHuLSpoAoHUS/8SCW U1X8gfTWfO6FKDz75z8yLwBpFkqQ7FGwO0HNAv+TucYxH/slKpABHrWVNiWWzC0l YdrHlH+XkrJQ1ugksuTGj120EsHsk0tkWMMMcMzwEbb4iy4vIdjsLvDmYrhYNj19 Rpw0rvT6I7Y+A/woHvZuFFP6wHAAYYgFZ0KQ2fPbywlgRjOuuXmuoZON6mbel1tA 6ONyWe3ts+xv6H+bOPxfkySArOfMi/wAIL6aAO2ICHvtHV8wX17OAavDtS2wh29f DTF8u9hTdzwai1AshLCaa++bBDR5aX2fnFys26+rqtJ+Xh8LKAaymFJsTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNO7p1BAMXJmdPrvconG+iSDojDMB8GA1UdIwQY MBaAFN6Y+DYymCl/urrqaHcgK1xEDlqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ODBlMjktN2Q4My00NTU4LWI0MTEt ZTdmYmQ1MGUwMzQ5LzEvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82ODBlMjktN2Q4My00NTU4LWI0MTEtZTdmYmQ1MGUwMzQ5 LzEvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUA6IqOl LzIbz3ojmjiX14zbFQD4EEvhL2k8RU0gTP2m8IKeKLIeW8K09B+PIzOViN91Xamv PDRN0D+RnPokw2UN7kjuszxQUfvmr9vmNy5Ck43E1q+0UjHcL6XQ3CzuNAAElm82 qPJPFKK88VK+YjN0+nbg73xMB1vdKM90QQ52SdoRP9gOB/weHdGsjnYGFBJOuFnz QZ5Dzh8118AoA5ZG5twhUEosHzBFBvDi1IJKnUpiU7z4AEXgr8r9a8f80CXKxCH2 hVv9WZYGrNDL5oKcJ8kfczky7Xr9MIUVdIQAMWhRDwY85FtqMpWfyt93zXvept1E EmZwWQMDKucLJg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:03 2025 by rpki-client