This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft File: 3tRskpaCjJwCVTCqaEFgmt8FaaA.mft (raw, json) Hash identifier: PF48RuDBcoMix5VM5NC23YPhnDlp2jq4I0BkldVTJwY= Subject key identifier: 15:CB:D3:34:BC:97:44:9E:E7:9E:89:5B:F7:A0:0D:FA:D2:9B:35:7B Authority key identifier: DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0 Certificate issuer: /CN=ded46c9296828c9c025530aa6841609adf0569a0 Certificate serial: 019AF2400D7E9125C0B5E496C69B5454B42A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft Manifest number: 0479 Signing time: Sat 06 Dec 2025 06:01:15 +0000 Manifest this update: Sat 06 Dec 2025 06:01:15 +0000 Manifest next update: Sun 07 Dec 2025 06:01:15 +0000 Files and hashes: 1: 3tRskpaCjJwCVTCqaEFgmt8FaaA.crl (hash: sFdUtP57HEQt5IK2lIU8Q4i/XXbr+YZT1+Zvb3X6JDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0d:7e:91:25:c0:b5:e4:96:c6:9b:54:54:b4:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded46c9296828c9c025530aa6841609adf0569a0 Validity Not Before: Dec 6 06:01:15 2025 GMT Not After : Dec 7 06:01:15 2025 GMT Subject: CN=15cbd334bc97449ee79e895bf7a00dfad29b357b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:89:df:b7:64:e6:20:c9:5a:64:9a:63:ee: ef:a2:3e:8a:9c:08:24:b1:8b:be:29:5d:bf:bd:63: 29:ca:70:ed:06:d0:68:54:28:cc:02:53:72:f3:42: db:0d:07:1a:b2:9a:88:30:53:a9:f7:1d:3c:e2:ae: 10:92:9a:49:79:32:e4:e1:2f:36:52:29:87:cb:d7: 0f:c6:22:4b:fe:1b:85:a0:b7:35:73:25:01:91:47: fd:ec:a2:8c:c9:80:a8:d7:1a:2a:84:a6:09:44:c4: b3:a6:22:78:e0:65:ff:58:df:11:f8:58:78:88:7a: a8:53:41:fd:47:aa:52:5b:92:25:86:82:9e:81:4c: b4:c8:c9:70:a2:3d:c0:53:2b:87:8e:dd:f5:d9:cd: fb:88:ff:c3:99:55:9e:a6:7d:6d:f3:72:97:63:17: 76:f9:ba:be:cf:19:a7:e2:58:b3:1d:4e:10:13:97: 28:75:22:71:dc:e2:e6:1a:e9:72:70:d0:3b:5c:0f: 99:52:95:a0:00:7d:b5:a6:3f:2d:66:e2:a2:c8:48: be:a5:e7:f6:6e:5e:de:92:7c:dd:64:12:ed:28:f9: 9b:fe:39:21:99:5e:30:a3:a9:e7:79:94:52:c4:a3: 24:11:33:7d:b9:59:ee:29:44:8e:67:9a:63:30:74: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CB:D3:34:BC:97:44:9E:E7:9E:89:5B:F7:A0:0D:FA:D2:9B:35:7B X509v3 Authority Key Identifier: keyid:DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:5b:1b:c4:ff:9d:0d:28:f9:5f:d7:93:d4:57:e3:78:bf:87: fe:7e:b9:3d:f2:df:7b:70:e1:91:31:29:84:b7:f0:02:a9:83: 3d:11:ce:44:b9:af:de:62:41:73:26:25:0d:42:e5:e0:d5:11: 61:96:6a:8b:bf:11:5e:7c:77:25:3b:2c:1c:cb:d0:de:f2:06: 88:71:b0:fd:af:38:77:b1:ed:4d:f9:93:35:54:61:b7:1a:17: ae:f6:f3:bd:af:72:fb:61:8b:22:88:2c:6b:be:c7:fd:a3:e9: be:91:e1:ff:de:b6:7b:03:bb:7c:b3:ff:74:dd:17:12:43:a3: 79:b9:73:d6:10:54:85:5d:18:90:a5:ce:11:99:19:08:0a:94: 06:c3:e1:82:bb:93:5d:b6:8c:a9:b2:21:1b:9b:77:c3:5f:d9: 34:11:f1:8a:4e:4b:4c:04:bf:39:2b:74:93:6b:20:43:a5:23: d2:c6:32:cd:6a:04:04:f1:dd:d1:2a:63:3d:70:10:01:dc:bb: 05:39:99:11:c0:68:39:d2:ea:6d:fb:a2:e9:7f:11:24:c5:c4: 97:ff:96:a2:77:f7:0b:d8:30:f3:74:17:3a:ad:5e:dc:59:c1: b7:5d:82:6f:d2:73:9f:8e:c7:6b:94:b0:9c:0d:46:7d:c1:10: 5a:66:d1:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQA1+kSXAteSWxptUVLQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDQ2YzkyOTY4MjhjOWMwMjU1MzBhYTY4NDE2MDlhZGYw NTY5YTAwHhcNMjUxMjA2MDYwMTE1WhcNMjUxMjA3MDYwMTE1WjAzMTEwLwYDVQQD EygxNWNiZDMzNGJjOTc0NDllZTc5ZTg5NWJmN2EwMGRmYWQyOWIzNTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgiJ37dk5iDJWmSaY+7voj6KnAgk sYu+KV2/vWMpynDtBtBoVCjMAlNy80LbDQcaspqIMFOp9x084q4QkppJeTLk4S82 UimHy9cPxiJL/huFoLc1cyUBkUf97KKMyYCo1xoqhKYJRMSzpiJ44GX/WN8R+Fh4 iHqoU0H9R6pSW5IlhoKegUy0yMlwoj3AUyuHjt312c37iP/DmVWepn1t83KXYxd2 +bq+zxmn4lizHU4QE5codSJx3OLmGulycNA7XA+ZUpWgAH21pj8tZuKiyEi+pef2 bl7eknzdZBLtKPmb/jkhmV4wo6nneZRSxKMkETN9uVnuKUSOZ5pjMHQ4LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXL0zS8l0Se556JW/egDfrSmzV7MB8GA1UdIwQY MBaAFN7UbJKWgoycAlUwqmhBYJrfBWmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3RSc2twYUNqSndDVlRDcWFFRmdtdDhGYWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85MzZmOTMtMDkyMi00ZjVkLThlM2Et YTAwMDdiZDVhY2U3LzEvM3RSc2twYUNqSndDVlRDcWFFRmdtdDhGYWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85MzZmOTMtMDkyMi00ZjVkLThlM2EtYTAwMDdiZDVhY2U3 LzEvM3RSc2twYUNqSndDVlRDcWFFRmdtdDhGYWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVsbxP+d DSj5X9eT1FfjeL+H/n65PfLfe3DhkTEphLfwAqmDPRHORLmv3mJBcyYlDULl4NUR YZZqi78RXnx3JTssHMvQ3vIGiHGw/a84d7HtTfmTNVRhtxoXrvbzva9y+2GLIogs a77H/aPpvpHh/962ewO7fLP/dN0XEkOjeblz1hBUhV0YkKXOEZkZCAqUBsPhgruT XbaMqbIhG5t3w1/ZNBHxik5LTAS/OSt0k2sgQ6Uj0sYyzWoEBPHd0SpjPXAQAdy7 BTmZEcBoOdLqbfui6X8RJMXEl/+Wonf3C9gw83QXOq1e3FnBt12Cb9Jzn47Ha5Sw nA1GfcEQWmbRwg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:03 2025 by rpki-client