This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json) Hash identifier: e2Glvba4K7SlJCXxgR8tJOC9m4IXlfAm9Mp1NT4KKcU= Subject key identifier: 29:7C:9A:40:E9:EF:8F:2E:6C:5F:80:3A:67:50:06:4E:34:3B:75:93 Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93 Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93 Certificate serial: 019AF209063BEC90EF99A68BF95A3F7D6AFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft Manifest number: 070A Signing time: Sat 06 Dec 2025 05:01:08 +0000 Manifest this update: Sat 06 Dec 2025 05:01:08 +0000 Manifest next update: Sun 07 Dec 2025 05:01:08 +0000 Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: B6y5k2v1gd6RJ7pauDDCWaoWMARKkUc+UFFLY6+o4Hc=) 2: Q6We2_Kzknmf_FU65X_ThS9Li9U.roa (hash: T5kdvis2FcaJDZX7ZiymCfqr46qyRqmHtR1xf7wekhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:06:3b:ec:90:ef:99:a6:8b:f9:5a:3f:7d:6a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93 Validity Not Before: Dec 6 05:01:08 2025 GMT Not After : Dec 7 05:01:08 2025 GMT Subject: CN=297c9a40e9ef8f2e6c5f803a6750064e343b7593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5c:db:44:e4:a0:84:89:64:66:34:e6:48:3d: 83:33:34:6f:1d:d0:67:a9:b2:77:4c:a8:d1:f7:81: 8e:af:3a:b8:06:9f:9e:4d:28:97:74:f6:a3:34:f0: a1:97:81:47:72:4e:a1:b4:24:18:d6:04:07:4a:a5: d4:3d:b7:5e:dd:0c:ee:bb:66:00:ba:16:e7:41:d6: b3:0b:01:29:7a:f2:a8:c7:96:f1:b7:f5:e0:03:9b: 4a:1b:cd:cb:05:fd:ce:ca:75:6c:7b:10:a4:ba:c6: bc:1c:b1:d0:ab:bb:ac:72:aa:57:ad:54:18:51:dd: 16:80:1d:0d:b3:8b:2d:05:14:24:06:cc:da:61:de: 46:9a:14:5c:98:24:f0:78:33:4f:f3:22:06:9f:c5: 2b:eb:c5:3e:a4:a8:f6:48:fa:e1:59:00:3b:04:c5: 5b:d2:51:8f:b8:17:ba:29:5d:94:2c:a9:58:f8:7a: 78:6b:56:a3:d8:5d:1c:3f:15:15:3e:18:28:50:32: b3:07:14:a1:08:28:ab:45:08:21:89:e5:57:84:7a: 27:49:37:58:e3:90:ee:51:ea:86:e9:0d:1a:a5:d3: 37:5f:9b:e7:e2:ba:76:ea:c8:77:5c:f2:7c:8e:5d: fa:76:1e:45:ab:1f:06:2e:13:1e:08:9d:f5:ec:65: 62:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7C:9A:40:E9:EF:8F:2E:6C:5F:80:3A:67:50:06:4E:34:3B:75:93 X509v3 Authority Key Identifier: keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2c:f5:da:e9:a9:f7:f0:4a:5c:aa:9e:3b:ce:67:64:89:ad: 25:1d:31:70:28:2e:9a:15:30:55:b2:5e:3f:ec:8a:14:a7:2a: 88:39:2b:6f:4d:63:a2:f6:2b:56:24:8d:b3:82:41:de:7c:ea: 1c:0d:1c:2f:76:eb:08:b0:b5:1a:72:9c:ed:ae:f2:61:89:f1: 3e:b4:9b:8c:84:bb:27:0e:e6:1d:ae:76:b4:8e:23:db:34:6e: af:96:d7:18:8b:94:f2:bf:2d:88:6f:26:14:e1:00:56:c8:9f: b4:bd:42:14:f7:d2:b2:21:f9:81:33:32:07:eb:ac:6b:4d:82: be:29:79:10:eb:d7:e1:c5:79:04:be:64:3d:93:b8:33:73:ae: 6a:cc:51:b1:59:b1:72:ca:9d:10:20:7a:01:37:62:52:e0:75: 54:1b:27:9c:9d:a7:9c:73:d6:14:88:44:d4:4f:55:17:fa:fd: 92:9c:32:9a:98:b7:26:a5:63:62:df:17:68:8c:32:54:6e:83: ad:a3:78:3c:5a:a9:7b:75:95:67:36:ef:1e:29:83:b5:18:4e: 7c:d4:38:75:9d:ae:c5:e3:8f:ac:48:a6:b2:3a:40:9e:80:dd: 9a:1a:35:28:81:f0:cd:3e:e6:8f:f5:00:81:9e:7d:59:ed:b9: b6:52:a8:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQY77JDvmaaL+Vo/fWr9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGI0YTE4YTdlMTUxYTM3ZGE1ZTRjY2RhYTllN2RiZDg4 ZTlkOTMwHhcNMjUxMjA2MDUwMTA4WhcNMjUxMjA3MDUwMTA4WjAzMTEwLwYDVQQD EygyOTdjOWE0MGU5ZWY4ZjJlNmM1ZjgwM2E2NzUwMDY0ZTM0M2I3NTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1zbROSghIlkZjTmSD2DMzRvHdBn qbJ3TKjR94GOrzq4Bp+eTSiXdPajNPChl4FHck6htCQY1gQHSqXUPbde3Qzuu2YA uhbnQdazCwEpevKox5bxt/XgA5tKG83LBf3OynVsexCkusa8HLHQq7uscqpXrVQY Ud0WgB0Ns4stBRQkBszaYd5GmhRcmCTweDNP8yIGn8Ur68U+pKj2SPrhWQA7BMVb 0lGPuBe6KV2ULKlY+Hp4a1aj2F0cPxUVPhgoUDKzBxShCCirRQghieVXhHonSTdY 45DuUeqG6Q0apdM3X5vn4rp26sh3XPJ8jl36dh5Fqx8GLhMeCJ317GVi0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCl8mkDp748ubF+AOmdQBk40O3WTMB8GA1UdIwQY MBaAFNxLShin4VGjfaXkzNqp59vYjp2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUt M2RkMjkzZjc0ZTVlLzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUtM2RkMjkzZjc0ZTVl LzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCz12ump 9/BKXKqeO85nZImtJR0xcCgumhUwVbJeP+yKFKcqiDkrb01jovYrViSNs4JB3nzq HA0cL3brCLC1GnKc7a7yYYnxPrSbjIS7Jw7mHa52tI4j2zRur5bXGIuU8r8tiG8m FOEAVsiftL1CFPfSsiH5gTMyB+usa02Cvil5EOvX4cV5BL5kPZO4M3OuasxRsVmx csqdECB6ATdiUuB1VBsnnJ2nnHPWFIhE1E9VF/r9kpwympi3JqVjYt8XaIwyVG6D raN4PFqpe3WVZzbvHimDtRhOfNQ4dZ2uxeOPrEimsjpAnoDdmho1KIHwzT7mj/UA gZ59We25tlKoGg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:22 2025 by rpki-client