This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json) Hash identifier: h5zwss2dWWnnAYz2L7FgZ9Oe0Aj24g844GttLPMt1xM= Subject key identifier: F7:80:6F:B3:04:28:68:09:3F:16:A0:C4:87:98:B1:AB:B7:FC:28:B9 Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84 Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984 Certificate serial: 019AF088CA83039AC450AB8026641B78B460 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft Manifest number: 0362 Signing time: Fri 05 Dec 2025 22:01:27 +0000 Manifest this update: Fri 05 Dec 2025 22:01:27 +0000 Manifest next update: Sat 06 Dec 2025 22:01:27 +0000 Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: EhHqECC09sXjRju3+vU1Ubv2EVd0tctKpY+LP5UWabc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:ca:83:03:9a:c4:50:ab:80:26:64:1b:78:b4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984 Validity Not Before: Dec 5 22:01:27 2025 GMT Not After : Dec 6 22:01:27 2025 GMT Subject: CN=f7806fb3042868093f16a0c48798b1abb7fc28b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b0:cf:0e:dd:ef:bc:50:d0:f7:07:46:8a:6f: 22:3e:32:d8:94:79:d6:bc:ea:be:94:e2:28:9e:c6: 16:09:47:4c:56:b1:18:9c:cb:e9:3f:39:98:8d:b0: 18:a4:44:a5:54:e4:07:f0:fc:e4:a1:ad:0c:b1:c3: 65:ce:ee:23:d8:ab:76:ab:fc:97:cb:a4:3c:fa:fa: 8b:3b:8f:75:93:89:47:c8:8a:40:45:bc:58:bb:f2: 8e:02:dd:b0:6e:df:07:39:81:a3:d9:16:b9:9d:cc: 21:6a:63:b1:56:89:f7:a3:c0:1f:ae:a9:40:af:36: ed:f8:8a:1e:ac:89:e7:68:24:8a:a7:32:64:95:a3: 33:d8:10:8a:a9:d4:13:7c:08:f4:60:d6:e5:44:18: 4d:a7:10:90:a7:9e:cc:2e:9f:3d:53:1d:39:36:6e: f2:0e:94:0a:c7:bd:cc:83:59:2d:68:b1:7a:24:ae: 0e:83:25:51:b9:2c:2d:1a:8e:58:16:fe:c9:07:bf: 85:10:ea:ce:09:d3:28:08:74:61:09:ba:46:74:f2: 32:ec:70:53:71:c2:57:c7:e6:ee:d5:5c:34:54:cc: 3a:a6:0e:7f:79:47:70:f0:47:f6:86:70:fa:7d:4e: 2e:d3:ee:d9:50:92:32:12:0a:23:ba:77:0a:f8:c8: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:80:6F:B3:04:28:68:09:3F:16:A0:C4:87:98:B1:AB:B7:FC:28:B9 X509v3 Authority Key Identifier: keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:9a:e5:19:e7:b7:28:9b:af:17:b8:31:ac:0e:a0:e5:00:0b: b1:0c:8a:82:1e:d2:de:76:0a:4a:d1:43:35:14:24:2d:57:6a: a7:86:54:00:0a:bd:c0:1c:25:98:3b:95:7c:82:fb:6a:03:b7: f0:65:95:eb:4e:91:d8:d4:fe:43:fe:f3:10:71:d1:39:f0:45: 8f:b6:4b:96:75:37:0a:c0:23:c6:49:f8:2b:3a:2e:20:b5:52: e5:15:18:4f:eb:63:79:74:a9:6f:94:d7:2f:91:ad:89:a9:3a: d0:70:0f:68:48:86:7f:b6:22:8d:d8:00:7a:db:ec:14:45:d8: 7b:e9:7a:a2:b8:24:8d:0f:ca:3c:0c:00:a1:d7:dc:99:1b:8f: bf:bc:b0:3c:11:11:2b:2d:f2:d4:c9:a7:f0:42:85:54:2a:4d: 32:85:9e:98:20:47:21:ce:40:5b:6d:99:01:98:6e:59:12:76: bf:79:21:bc:38:41:3c:87:d7:f0:ed:27:48:37:16:cb:79:dc: 44:d9:72:c8:cd:84:9f:2c:d5:e2:05:bb:cf:f6:4d:8d:04:2a: d0:61:1a:18:c1:fa:42:3a:ab:20:a1:ad:26:db:f1:4b:29:33: 57:76:5b:ad:3c:d9:c1:c5:6e:fc:9d:5b:50:02:da:09:6b:8c: f7:e1:96:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiMqDA5rEUKuAJmQbeLRgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTk3MTE2N2Y5M2ZjMzRiM2JjNDc5YmIyMWZmNjJkM2Jm M2M5ODQwHhcNMjUxMjA1MjIwMTI3WhcNMjUxMjA2MjIwMTI3WjAzMTEwLwYDVQQD EyhmNzgwNmZiMzA0Mjg2ODA5M2YxNmEwYzQ4Nzk4YjFhYmI3ZmMyOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rDPDt3vvFDQ9wdGim8iPjLYlHnW vOq+lOIonsYWCUdMVrEYnMvpPzmYjbAYpESlVOQH8Pzkoa0MscNlzu4j2Kt2q/yX y6Q8+vqLO491k4lHyIpARbxYu/KOAt2wbt8HOYGj2Ra5ncwhamOxVon3o8AfrqlA rzbt+IoerInnaCSKpzJklaMz2BCKqdQTfAj0YNblRBhNpxCQp57MLp89Ux05Nm7y DpQKx73Mg1ktaLF6JK4OgyVRuSwtGo5YFv7JB7+FEOrOCdMoCHRhCbpGdPIy7HBT ccJXx+bu1Vw0VMw6pg5/eUdw8Ef2hnD6fU4u0+7ZUJIyEgojuncK+MhekwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeAb7MEKGgJPxagxIeYsau3/Ci5MB8GA1UdIwQY MBaAFN6ZcRZ/k/w0s7xHm7If9i0788mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BseEZuLVRfRFN6dkVlYnNoXzJMVHZ6eVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kOWJlNDAtY2Q0Mi00YTZjLTlkNGUt MWRmYmQxZWZkNWQ0LzEvM3BseEZuLVRfRFN6dkVlYnNoXzJMVHZ6eVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9kOWJlNDAtY2Q0Mi00YTZjLTlkNGUtMWRmYmQxZWZkNWQ0 LzEvM3BseEZuLVRfRFN6dkVlYnNoXzJMVHZ6eVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJrlGee3 KJuvF7gxrA6g5QALsQyKgh7S3nYKStFDNRQkLVdqp4ZUAAq9wBwlmDuVfIL7agO3 8GWV606R2NT+Q/7zEHHROfBFj7ZLlnU3CsAjxkn4KzouILVS5RUYT+tjeXSpb5TX L5Gtiak60HAPaEiGf7YijdgAetvsFEXYe+l6orgkjQ/KPAwAodfcmRuPv7ywPBER Ky3y1Mmn8EKFVCpNMoWemCBHIc5AW22ZAZhuWRJ2v3khvDhBPIfX8O0nSDcWy3nc RNlyyM2EnyzV4gW7z/ZNjQQq0GEaGMH6QjqrIKGtJtvxSykzV3ZbrTzZwcVu/J1b UALaCWuM9+GWVw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:48 2025 by rpki-client