This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json) Hash identifier: RXi2kkaVQoNMvZz7BX1az8ukLOl8xQNFf0v5y1wEjsw= Subject key identifier: 70:CC:3F:19:08:E9:9F:AB:AC:EF:28:BD:BF:C1:43:59:91:03:A4:FB Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad Certificate serial: 019AF19B9F2E27CC09477D5BAEA8C257AD91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft Manifest number: 0494 Signing time: Sat 06 Dec 2025 03:01:39 +0000 Manifest this update: Sat 06 Dec 2025 03:01:39 +0000 Manifest next update: Sun 07 Dec 2025 03:01:39 +0000 Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: CncJ3zF1FcsV9j24vZOfX7JlbigS0njkwBCAc/mRd4I=) 2: 4QrqTeH17AXNTy8pbTdrujVUbQI.roa (hash: FZeq9SJr8r+vs6lCOy39Gvb+wDR+3HmqIg9DlvmdZfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9f:2e:27:cc:09:47:7d:5b:ae:a8:c2:57:ad:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad Validity Not Before: Dec 6 03:01:39 2025 GMT Not After : Dec 7 03:01:39 2025 GMT Subject: CN=70cc3f1908e99fabacef28bdbfc143599103a4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:04:0a:9c:0e:c2:14:87:66:d1:b1:1b:ff: 21:d6:e4:c7:9c:09:67:18:d3:fb:18:27:26:7a:12: 87:d1:b4:2e:01:4e:da:f0:66:ee:07:09:21:a8:56: 3d:6b:2e:fb:b8:61:8c:b5:fa:7b:45:cc:d8:04:c2: f3:07:f0:b1:64:86:95:83:93:d7:ee:b6:d6:34:9f: de:b0:64:3a:46:97:98:34:21:1b:09:33:b4:5e:6a: 5d:30:12:90:0d:90:29:fb:26:26:1a:86:ae:31:10: c3:dc:da:86:e1:4f:77:74:4b:ed:d8:4d:c9:77:05: 99:d2:f4:33:27:36:01:be:c2:96:a5:82:0b:e0:1c: 68:4a:d7:2c:30:de:6d:3f:9f:8b:7a:27:41:8b:99: 64:e0:da:31:18:aa:5b:71:d2:07:1e:d1:9d:d0:00: df:5c:4b:77:99:cf:8e:a3:90:ce:a6:dc:f1:15:c6: 50:a7:41:60:79:4b:33:b0:41:5f:c7:4b:39:00:f3: 35:be:a2:0e:d9:56:d4:b2:db:b3:6c:c2:78:e0:dd: 31:a9:8d:42:39:5f:18:c9:e2:45:01:c7:22:d2:23: 83:46:b5:96:74:62:26:c4:4a:c8:54:c9:9c:b1:08: 89:00:79:e0:f3:4b:21:41:36:2c:48:51:a3:d1:8a: 76:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CC:3F:19:08:E9:9F:AB:AC:EF:28:BD:BF:C1:43:59:91:03:A4:FB X509v3 Authority Key Identifier: keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c3:4d:51:c1:1b:16:7a:e2:5f:3b:b6:29:80:97:64:54:5e: 1a:29:4a:e6:9e:d2:69:8a:e2:ca:75:8d:9d:f3:18:6d:13:ea: 1a:42:39:7d:6e:98:93:07:8b:b5:4c:bc:ae:25:ca:ae:fb:de: cd:c1:0e:89:4f:f9:12:3b:0f:06:7e:a4:b3:e9:7d:c4:ca:40: eb:00:ea:c7:8d:ad:25:0f:da:d3:a8:3e:bf:ff:00:cb:84:ae: 01:ea:03:6d:d4:71:3d:79:65:65:74:45:28:eb:ff:06:93:e5: f9:e5:dc:33:69:bf:b6:6b:fe:26:51:4a:27:e1:d0:4f:03:30: 2c:01:10:f1:d0:31:49:22:47:60:bc:73:1b:50:7b:66:ac:94: c5:eb:64:29:d6:9e:42:cd:30:a4:89:32:e3:5b:2f:47:6c:5b: 66:4b:cb:10:f6:db:5a:ed:09:f9:df:22:a7:48:a2:92:6c:8f: f9:5b:ae:ca:67:ff:2a:22:94:0b:a2:b1:af:80:d9:e9:02:10: 07:80:43:5e:5d:1f:f6:cd:00:54:f7:6c:79:43:55:68:ba:c1: c4:91:10:cc:77:b3:d8:68:bc:5a:2d:bc:8d:5a:d5:b3:f3:e3: 05:07:0b:0c:68:27:fe:1e:c7:f7:b4:85:af:0f:fc:1f:42:2a: 1a:8e:fe:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm58uJ8wJR31brqjCV62RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjA5Y2Y5NmU1ZmM4NzRlZTkzOTA5N2M1NjUxYzhiZDg0 MmU2YWQwHhcNMjUxMjA2MDMwMTM5WhcNMjUxMjA3MDMwMTM5WjAzMTEwLwYDVQQD Eyg3MGNjM2YxOTA4ZTk5ZmFiYWNlZjI4YmRiZmMxNDM1OTkxMDNhNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt88ECpwOwhSHZtGxG/8h1uTHnAln GNP7GCcmehKH0bQuAU7a8GbuBwkhqFY9ay77uGGMtfp7RczYBMLzB/CxZIaVg5PX 7rbWNJ/esGQ6RpeYNCEbCTO0XmpdMBKQDZAp+yYmGoauMRDD3NqG4U93dEvt2E3J dwWZ0vQzJzYBvsKWpYIL4BxoStcsMN5tP5+LeidBi5lk4NoxGKpbcdIHHtGd0ADf XEt3mc+Oo5DOptzxFcZQp0FgeUszsEFfx0s5APM1vqIO2VbUstuzbMJ44N0xqY1C OV8YyeJFAcci0iODRrWWdGImxErIVMmcsQiJAHng80shQTYsSFGj0Yp2RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDMPxkI6Z+rrO8ovb/BQ1mRA6T7MB8GA1UdIwQY MBaAFN3wnPluX8h07pOQl8VlHIvYQuatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZDYy1XNWZ5SFR1azVDWHhXVWNpOWhDNXEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wMDc5ZTgtYzI0Ni00YzM4LTkwNTIt NjczNjcwZTZlZjA5LzEvM2ZDYy1XNWZ5SFR1azVDWHhXVWNpOWhDNXEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wMDc5ZTgtYzI0Ni00YzM4LTkwNTItNjczNjcwZTZlZjA5 LzEvM2ZDYy1XNWZ5SFR1azVDWHhXVWNpOWhDNXEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8NNUcEb FnriXzu2KYCXZFReGilK5p7SaYriynWNnfMYbRPqGkI5fW6YkweLtUy8riXKrvve zcEOiU/5EjsPBn6ks+l9xMpA6wDqx42tJQ/a06g+v/8Ay4SuAeoDbdRxPXllZXRF KOv/BpPl+eXcM2m/tmv+JlFKJ+HQTwMwLAEQ8dAxSSJHYLxzG1B7ZqyUxetkKdae Qs0wpIky41svR2xbZkvLEPbbWu0J+d8ip0iikmyP+Vuuymf/KiKUC6Kxr4DZ6QIQ B4BDXl0f9s0AVPdseUNVaLrBxJEQzHez2Gi8Wi28jVrVs/PjBQcLDGgn/h7H97SF rw/8H0IqGo7+ow== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:09 2025 by rpki-client