This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json) Hash identifier: CSFg9q75mikJ99WHh8UY1RX6WgO0iuIG85AfkXi8NiI= Subject key identifier: 30:2E:79:0C:BB:1F:A6:52:38:C1:8D:3A:53:B4:2E:51:31:5E:A9:FF Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5 Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5 Certificate serial: 019AF1D1AE09F107ABF0FD2A83F474B28AA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft Manifest number: 0D8A Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: ONDbogPJlyTZaAsbtU+R56e03TsIBB5/fs+S1wrFDvE=) 2: Iq-f1EnfL9Yhl-QlX-qFh7tpN7I.roa (hash: WJuJSZpxmjSdIh4Z1HVT6GKRflZm//sdti8VMNi88hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ae:09:f1:07:ab:f0:fd:2a:83:f4:74:b2:8a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=302e790cbb1fa65238c18d3a53b42e51315ea9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ca:0f:55:41:21:5b:c6:d7:46:03:c4:63:f9: 5d:9f:13:44:0e:bc:db:7a:bf:87:2f:4e:cf:99:59: 87:14:c9:e5:f4:41:9e:7e:c6:a2:40:47:3c:7b:7f: 68:61:e7:7d:98:e6:bf:d2:8e:dd:c3:a6:88:0f:bb: 33:b3:05:cb:eb:ae:64:e7:ae:9b:39:2a:a2:a1:c8: 60:08:1b:ab:e6:39:aa:cd:2c:f1:84:57:96:f7:eb: 2c:0d:27:71:76:53:fb:32:02:0e:3d:a5:48:1f:86: 8b:e6:4d:fb:e6:75:07:62:86:f7:62:ed:41:4a:df: aa:f3:2b:18:b4:46:64:2f:ff:2f:88:77:77:4c:77: 65:85:e0:74:5f:6a:d1:36:e0:9d:24:bb:f9:9a:21: 33:66:b3:0a:24:44:d8:74:be:e1:1c:db:fd:ba:82: 33:91:85:bb:0b:0e:04:c2:ca:08:5e:9a:de:74:a5: 68:83:5d:de:ae:21:a0:d1:5f:74:97:f2:1d:53:94: d0:21:be:a3:92:bb:82:00:7f:27:3d:24:37:11:5b: 07:b5:ef:86:d7:d3:e3:2a:e9:aa:1f:d5:f4:06:fe: 5b:89:e0:b3:85:9f:d4:95:2a:99:2f:2d:d5:ff:36: 11:d5:67:7e:d4:17:1d:60:76:41:7e:a9:06:ca:b9: 56:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2E:79:0C:BB:1F:A6:52:38:C1:8D:3A:53:B4:2E:51:31:5E:A9:FF X509v3 Authority Key Identifier: keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:0c:1a:5b:13:ff:61:40:3d:f2:73:4a:6b:ed:eb:0e:4c:06: eb:62:20:e8:28:7c:3a:d5:c9:2a:c6:2c:c4:3f:0b:2e:a9:ee: 24:47:e7:0d:72:10:f6:bc:79:e6:39:bb:64:e5:9f:5f:b5:cd: 6b:f3:d6:33:c3:4f:2f:54:7a:95:9c:1c:10:ad:8a:f3:19:9b: 9b:a4:61:50:4d:ea:02:f3:42:1e:20:2c:07:32:6b:c8:b7:ec: 91:f9:94:4a:5f:b3:78:7b:a1:10:e0:7f:a6:0e:87:56:0e:68: cd:3d:e1:da:72:c8:ac:90:93:ce:80:a3:18:5e:72:d6:50:67: f3:e3:52:d1:3e:f1:50:87:1c:e2:b9:f0:09:96:e7:23:67:a1: bb:48:95:81:1a:63:95:3d:b5:d0:ac:ff:35:96:8f:f3:4c:19: c1:2d:40:09:58:b3:eb:df:53:c1:24:e6:e8:0d:46:00:28:c2: ff:35:04:37:1b:15:80:dc:c9:04:12:a4:e2:94:9e:08:17:c6: 73:d1:0f:45:3e:cf:4b:f8:b6:59:62:08:5c:da:71:19:b2:8f: ab:83:05:4d:21:b9:8b:47:06:d4:b0:71:fc:9f:7e:bd:7c:c6: 94:75:02:23:e0:d9:a6:fa:c9:55:5c:64:b4:5f:6e:25:49:03: 9a:a3:98:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0a4J8Qer8P0qg/R0soqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2 NGZhYTUwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD EygzMDJlNzkwY2JiMWZhNjUyMzhjMThkM2E1M2I0MmU1MTMxNWVhOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0soPVUEhW8bXRgPEY/ldnxNEDrzb er+HL07PmVmHFMnl9EGefsaiQEc8e39oYed9mOa/0o7dw6aID7szswXL665k566b OSqiochgCBur5jmqzSzxhFeW9+ssDSdxdlP7MgIOPaVIH4aL5k375nUHYob3Yu1B St+q8ysYtEZkL/8viHd3THdlheB0X2rRNuCdJLv5miEzZrMKJETYdL7hHNv9uoIz kYW7Cw4EwsoIXpredKVog13eriGg0V90l/IdU5TQIb6jkruCAH8nPSQ3EVsHte+G 19PjKumqH9X0Bv5bieCzhZ/UlSqZLy3V/zYR1Wd+1BcdYHZBfqkGyrlWbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAueQy7H6ZSOMGNOlO0LlExXqn/MB8GA1UdIwQY MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3 LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwwaWxP/ YUA98nNKa+3rDkwG62Ig6Ch8OtXJKsYsxD8LLqnuJEfnDXIQ9rx55jm7ZOWfX7XN a/PWM8NPL1R6lZwcEK2K8xmbm6RhUE3qAvNCHiAsBzJryLfskfmUSl+zeHuhEOB/ pg6HVg5ozT3h2nLIrJCTzoCjGF5y1lBn8+NS0T7xUIcc4rnwCZbnI2ehu0iVgRpj lT210Kz/NZaP80wZwS1ACViz699TwSTm6A1GACjC/zUENxsVgNzJBBKk4pSeCBfG c9EPRT7PS/i2WWIIXNpxGbKPq4MFTSG5i0cG1LBx/J9+vXzGlHUCI+DZpvrJVVxk tF9uJUkDmqOYvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:30:24 2025 by rpki-client