This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json) Hash identifier: DFF9vcBi6K4Zgdws1o55MoC1NV2zS+HihoeY7DvEJoo= Subject key identifier: C9:B1:71:1D:05:52:2A:90:2E:9B:5E:E6:B9:CA:9E:C8:3A:85:0E:F3 Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38 Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538 Certificate serial: 019AF42DFCAE74A5A475257D8D43192B3C70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft Manifest number: 09F6 Signing time: Sat 06 Dec 2025 15:00:45 +0000 Manifest this update: Sat 06 Dec 2025 15:00:45 +0000 Manifest next update: Sun 07 Dec 2025 15:00:45 +0000 Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: YdDZ6D8ZWowlzbWIIAPKQQBagGicb+aAB5FGbbTYbvM=) 2: ij43C7xr8xTz-pjXAc9irjAaFXA.roa (hash: TchsYLXYDpTrG6rR/zLX/7ji8qJkl2gfrI50UG67KC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:fc:ae:74:a5:a4:75:25:7d:8d:43:19:2b:3c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538 Validity Not Before: Dec 6 15:00:45 2025 GMT Not After : Dec 7 15:00:45 2025 GMT Subject: CN=c9b1711d05522a902e9b5ee6b9ca9ec83a850ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:55:4b:0c:47:44:39:7a:e6:57:26:f4:0a: e5:98:84:df:36:cb:a4:63:d6:ce:99:2d:4d:e5:10: 54:6e:92:a6:b2:db:37:d4:43:ec:2f:1b:ca:22:fe: 5b:27:9d:3c:5b:7b:68:8f:07:b0:c9:22:44:00:aa: 39:3f:73:16:cc:8c:4c:61:dc:a5:6a:a2:68:0e:0d: d7:18:b8:98:63:7c:90:55:bf:95:92:d1:7f:31:85: 40:d7:16:0b:1b:f5:19:35:81:9b:f0:03:56:48:39: d4:cc:b9:00:ba:64:6c:09:da:06:8b:ee:1a:1b:12: 11:6a:a3:2e:02:1f:8b:03:9e:bf:b3:50:1b:82:0e: ea:ee:fb:55:c2:19:05:f4:93:be:59:f5:09:9a:02: 80:51:84:e0:8b:cb:0e:a5:ff:c6:67:06:d7:7c:6a: 0a:7a:0f:44:15:08:2a:ad:29:88:48:a2:c6:3e:32: 4f:84:68:28:fc:83:ab:b6:58:d9:9a:cc:4e:5d:d6: 8a:4c:20:c2:03:17:67:c8:c7:fa:5f:9c:f0:b4:bb: 6a:50:c2:12:ef:5b:e3:04:9a:03:68:7c:ea:44:41: 99:60:17:80:5a:ff:80:c5:10:fd:e9:81:c4:5b:76: 42:db:1c:80:5f:ab:b4:fd:29:a7:76:33:6e:9c:6e: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B1:71:1D:05:52:2A:90:2E:9B:5E:E6:B9:CA:9E:C8:3A:85:0E:F3 X509v3 Authority Key Identifier: keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7a:2b:3a:e6:c8:4b:75:02:4c:27:ca:86:4b:53:83:1e:36: cd:81:e0:63:e9:07:fd:20:bd:11:ed:5c:f7:1b:70:92:24:92: 30:93:e8:6f:4c:be:3d:56:3a:52:a5:ca:fa:a0:0f:f7:16:92: 83:d4:cd:ef:58:45:57:64:50:5e:96:84:5e:65:80:a8:ef:95: 28:e5:1c:88:41:eb:6a:3d:94:71:1f:ac:c1:33:0f:96:1c:70: 5f:79:58:78:0f:17:3f:a9:bd:8c:d5:f4:70:97:92:71:a7:63: 5a:7a:d5:fe:30:3d:13:90:08:f3:b4:12:35:fe:45:06:2e:ff: 1a:fd:55:bf:fa:09:7c:0c:ca:61:42:7f:0f:63:8d:13:63:90: 5f:c6:72:c4:81:c9:ec:7f:09:36:67:ee:46:f5:89:f4:00:8f: bd:21:85:f7:a2:29:91:35:8f:4a:3a:dc:d9:84:38:bb:4c:71: 7f:8b:89:76:df:d1:b4:a5:6c:5b:05:08:42:dd:0d:26:4c:e2: 9a:16:7a:b3:5e:f6:11:c3:55:65:6b:04:46:32:e9:81:a6:e2: 08:4e:1d:b8:91:71:e8:52:9c:00:09:27:91:01:1c:75:db:66: 8a:6d:d0:6d:e0:83:97:2f:69:17:74:cf:15:23:36:23:81:73: 59:94:95:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LfyudKWkdSV9jUMZKzxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYmU1MTdlNzQ3NWUxN2MwNjk2NDM5MTBmZDZmNzdiMzE3 Yjg1MzgwHhcNMjUxMjA2MTUwMDQ1WhcNMjUxMjA3MTUwMDQ1WjAzMTEwLwYDVQQD EyhjOWIxNzExZDA1NTIyYTkwMmU5YjVlZTZiOWNhOWVjODNhODUwZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuahVSwxHRDl65lcm9ArlmITfNsuk Y9bOmS1N5RBUbpKmsts31EPsLxvKIv5bJ508W3tojwewySJEAKo5P3MWzIxMYdyl aqJoDg3XGLiYY3yQVb+VktF/MYVA1xYLG/UZNYGb8ANWSDnUzLkAumRsCdoGi+4a GxIRaqMuAh+LA56/s1Abgg7q7vtVwhkF9JO+WfUJmgKAUYTgi8sOpf/GZwbXfGoK eg9EFQgqrSmISKLGPjJPhGgo/IOrtljZmsxOXdaKTCDCAxdnyMf6X5zwtLtqUMIS 71vjBJoDaHzqREGZYBeAWv+AxRD96YHEW3ZC2xyAX6u0/SmndjNunG4KpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmxcR0FUiqQLpte5rnKnsg6hQ7zMB8GA1UdIwQY MBaAFN6+UX50deF8BpZDkQ/W93sxe4U4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zODUwYzktOWM2OC00NjEzLWE4NzAt ODlmNWM0ZjMyOTcwLzEvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zODUwYzktOWM2OC00NjEzLWE4NzAtODlmNWM0ZjMyOTcw LzEvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHorOubI S3UCTCfKhktTgx42zYHgY+kH/SC9Ee1c9xtwkiSSMJPob0y+PVY6UqXK+qAP9xaS g9TN71hFV2RQXpaEXmWAqO+VKOUciEHraj2UcR+swTMPlhxwX3lYeA8XP6m9jNX0 cJeScadjWnrV/jA9E5AI87QSNf5FBi7/Gv1Vv/oJfAzKYUJ/D2ONE2OQX8ZyxIHJ 7H8JNmfuRvWJ9ACPvSGF96IpkTWPSjrc2YQ4u0xxf4uJdt/RtKVsWwUIQt0NJkzi mhZ6s172EcNVZWsERjLpgabiCE4duJFx6FKcAAknkQEcddtmim3QbeCDly9pF3TP FSM2I4FzWZSVRw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:21:22 2025 by rpki-client