This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json) Hash identifier: ra0ZfkZZxhtzEqEFX7l/mN4XyDWtamc5CQS7dj87Xlg= Subject key identifier: 00:F8:09:40:B2:0E:39:4F:7A:4A:E4:B3:3A:E0:A2:3E:BC:72:C9:AC Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf Certificate serial: 019AF1647B51E4C576A77258732B257795F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft Manifest number: 085A Signing time: Sat 06 Dec 2025 02:01:25 +0000 Manifest this update: Sat 06 Dec 2025 02:01:25 +0000 Manifest next update: Sun 07 Dec 2025 02:01:25 +0000 Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: 2stZFfqS9YMQPeR8zsgGuAdXYUR651+tx5JKvnc2kcc=) 2: xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa (hash: wP9kQODXoT56dWOB0bEFnWVWD/Y0ndzO5Fzna/QZSuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7b:51:e4:c5:76:a7:72:58:73:2b:25:77:95:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf Validity Not Before: Dec 6 02:01:25 2025 GMT Not After : Dec 7 02:01:25 2025 GMT Subject: CN=00f80940b20e394f7a4ae4b33ae0a23ebc72c9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:73:ec:14:b9:61:bf:3e:4b:60:f4:7a:6c:76: a0:00:0a:37:91:a5:9f:94:62:ff:c7:02:30:04:06: 8f:af:47:bd:55:ed:ac:a7:55:b7:2b:c6:43:0e:92: 7e:30:45:10:fc:7a:92:39:ce:64:34:aa:b8:aa:e2: 50:73:e0:6f:08:2b:0f:fb:ac:53:a6:06:3f:b9:55: 53:af:40:96:fb:bd:f0:8b:9b:b2:fc:c5:33:3c:bf: 4d:bd:6b:4c:3e:5c:d9:67:4b:36:ba:ec:49:fe:e6: 6f:66:05:09:a1:a2:62:14:9e:ac:c7:a9:0e:01:60: 64:33:a7:89:5b:25:e8:57:a7:91:7c:1d:03:b7:93: 14:fc:cf:2b:ed:86:ff:bc:8b:2c:13:46:27:64:c1: 85:2a:91:84:8f:10:12:31:db:a7:62:6e:d9:76:1b: bd:d3:95:bb:5d:65:fd:f0:ed:ac:1e:c0:c3:96:4e: da:b8:60:20:a6:98:7c:9a:ad:b4:df:c3:e6:ea:b7: 4a:4a:e1:3d:d5:4f:e1:68:29:f5:f4:22:1f:d0:4a: 43:56:9d:1c:3f:8a:b2:6f:db:e5:ae:2a:fc:fc:55: 82:96:e1:95:c2:66:63:a2:6c:5c:c7:ec:e8:45:29: 71:f6:6c:bd:4d:6a:db:e6:69:2e:c8:be:3a:f6:78: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F8:09:40:B2:0E:39:4F:7A:4A:E4:B3:3A:E0:A2:3E:BC:72:C9:AC X509v3 Authority Key Identifier: keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:96:38:1e:1d:60:e8:18:4b:aa:2f:c0:11:3b:eb:3b:44:be: 01:82:b7:7b:f6:34:10:18:2d:ae:6f:99:1f:1f:eb:70:c6:b2: 22:48:a7:4c:7d:d6:f1:ba:cf:e9:43:0f:65:37:bf:41:18:ea: af:37:63:d8:72:70:20:7f:99:ae:d5:20:e0:41:0d:d1:55:e2: d8:42:dd:66:bf:78:ff:0f:cb:6c:b7:d1:85:76:86:27:90:a7: ba:ed:16:22:ad:b4:72:ab:d5:0e:8b:74:99:6f:e5:bb:88:09: 44:a9:fb:ec:c2:65:4f:ee:6a:f0:81:c2:b7:81:61:de:52:c1: d3:80:2e:4c:bb:b5:50:a1:8d:28:16:fa:bf:e6:d3:b4:78:8b: 6d:e5:f2:10:ab:47:4a:f1:b9:39:5a:9e:ea:7a:1c:c5:c4:6c: cb:5a:25:1a:c1:55:73:af:ec:e0:b6:ee:d8:97:e5:80:74:25: 96:a6:a1:2d:6f:01:39:15:7f:f1:c7:b4:50:5d:43:3d:d0:4a: d6:86:92:50:a5:79:89:6d:8c:f9:68:ff:09:11:4e:72:cb:b8: 93:fe:3f:54:65:16:1d:c5:09:e3:a1:f0:58:28:8a:2a:74:db: 74:b4:b2:09:19:94:92:81:d3:99:dc:5a:bb:0d:81:5a:41:69: 33:9a:e0:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHtR5MV2p3JYcysld5X4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOGEzYTQzMzAxY2QyYzgwNDdlYjg1NDRmODBhYjRmZmNm ZTlhY2YwHhcNMjUxMjA2MDIwMTI1WhcNMjUxMjA3MDIwMTI1WjAzMTEwLwYDVQQD EygwMGY4MDk0MGIyMGUzOTRmN2E0YWU0YjMzYWUwYTIzZWJjNzJjOWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonPsFLlhvz5LYPR6bHagAAo3kaWf lGL/xwIwBAaPr0e9Ve2sp1W3K8ZDDpJ+MEUQ/HqSOc5kNKq4quJQc+BvCCsP+6xT pgY/uVVTr0CW+73wi5uy/MUzPL9NvWtMPlzZZ0s2uuxJ/uZvZgUJoaJiFJ6sx6kO AWBkM6eJWyXoV6eRfB0Dt5MU/M8r7Yb/vIssE0YnZMGFKpGEjxASMdunYm7Zdhu9 05W7XWX98O2sHsDDlk7auGAgpph8mq2038Pm6rdKSuE91U/haCn19CIf0EpDVp0c P4qyb9vlrir8/FWCluGVwmZjomxcx+zoRSlx9my9TWrb5mkuyL469ngN6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAD4CUCyDjlPekrkszrgoj68csmsMB8GA1UdIwQY MBaAFNyKOkMwHNLIBH64VE+Aq0/8/prPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kZjBmZjMtNTYxZS00Zjc3LWE3ZGQt ZmU4NDQwNjBhNDZkLzEvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9kZjBmZjMtNTYxZS00Zjc3LWE3ZGQtZmU4NDQwNjBhNDZk LzEvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4JY4Hh1g 6BhLqi/AETvrO0S+AYK3e/Y0EBgtrm+ZHx/rcMayIkinTH3W8brP6UMPZTe/QRjq rzdj2HJwIH+ZrtUg4EEN0VXi2ELdZr94/w/LbLfRhXaGJ5Cnuu0WIq20cqvVDot0 mW/lu4gJRKn77MJlT+5q8IHCt4Fh3lLB04AuTLu1UKGNKBb6v+bTtHiLbeXyEKtH SvG5OVqe6nocxcRsy1olGsFVc6/s4Lbu2JflgHQllqahLW8BORV/8ce0UF1DPdBK 1oaSUKV5iW2M+Wj/CRFOcsu4k/4/VGUWHcUJ46HwWCiKKnTbdLSyCRmUkoHTmdxa uw2BWkFpM5rgFw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:20 2025 by rpki-client