This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft File: 3f2U67jLmKHb31C9zWncwpFEiJ4.mft (raw, json) Hash identifier: Pm9we4I4rehtiQxyF82THq0PFql35S5D0POgCM6GIcs= Subject key identifier: EF:04:7D:EA:67:3C:57:EF:ED:16:14:4C:B7:71:8C:3A:2D:66:DE:A2 Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E Certificate issuer: /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e Certificate serial: 019AF509EC7E8525EC129526032DE30169FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft Manifest number: 0E4A Signing time: Sat 06 Dec 2025 19:00:59 +0000 Manifest this update: Sat 06 Dec 2025 19:00:59 +0000 Manifest next update: Sun 07 Dec 2025 19:00:59 +0000 Files and hashes: 1: 3f2U67jLmKHb31C9zWncwpFEiJ4.crl (hash: DEPAq92sWraKUyYHmDCrZaXFlu3jZBMah95iLcyiqgE=) 2: OMnuxUeA0haC1p_KDdRfwFA8Q2s.roa (hash: cDQVnRaiJ+Kb9nhkJ6FSjxN3vz7jN+QBdbH8z93gYFM=) 3: yOI7tiSRDXgdskD_bs5AhIY61n8.roa (hash: jCxGB8CWsOl2EvkB0hTjOgeBy34atnE5kB7r6h+CCmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ec:7e:85:25:ec:12:95:26:03:2d:e3:01:69:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e Validity Not Before: Dec 6 19:00:59 2025 GMT Not After : Dec 7 19:00:59 2025 GMT Subject: CN=ef047dea673c57efed16144cb7718c3a2d66dea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:bd:ef:84:e9:51:80:1e:51:9c:2b:fe:09: cf:9b:e2:74:3a:32:9b:68:8d:d9:d3:f6:73:0c:e3: b9:12:a5:a4:6d:f6:ff:0a:93:79:69:1c:df:55:76: 25:2f:d9:11:16:84:47:22:e5:18:06:d2:ad:7f:4c: 40:45:27:92:6f:74:5f:e2:a2:d6:3a:50:df:27:31: cf:b0:97:20:ca:52:0b:32:ae:fc:7d:77:38:35:7a: e1:27:f3:85:e5:b5:59:f1:66:3c:b7:b6:0c:79:ea: 9f:cc:40:d8:e2:dd:e2:21:48:a8:10:ef:98:51:22: fc:59:c7:e7:33:b6:ea:51:7d:05:72:b2:f0:5c:35: 24:b4:2f:24:37:87:24:a5:5d:54:28:9a:44:14:c6: 46:cf:5a:5b:c9:a3:5b:54:73:6a:e7:8f:52:47:76: 18:de:5c:df:83:73:82:b6:0a:78:d4:66:df:c7:e3: 0d:36:49:85:0b:6e:86:f7:cd:6d:da:35:86:d9:c2: e1:48:15:2f:04:ab:78:57:5b:86:0b:24:1e:c3:37: 6a:af:57:64:82:2d:26:61:fa:aa:f9:11:48:94:57: 95:fe:bc:77:ad:f9:b8:45:73:51:3d:54:7c:bc:98: 12:1b:7c:02:4b:64:e8:20:d9:f4:68:3c:b4:5c:1a: 63:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:04:7D:EA:67:3C:57:EF:ED:16:14:4C:B7:71:8C:3A:2D:66:DE:A2 X509v3 Authority Key Identifier: keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:22:01:04:d0:d6:36:94:46:62:7e:8a:78:d5:b8:e6:31:06: cd:40:20:e6:3f:b3:f1:b5:94:5d:d7:d6:1a:ee:a1:f9:3c:b4: 63:c3:bd:10:0d:8f:81:c5:f3:89:67:90:c1:88:87:b9:a6:4d: b8:a7:f7:13:88:25:b3:3e:2f:16:94:fc:f6:b5:e4:19:db:67: 75:cf:40:3f:34:65:5f:70:1c:3d:a9:c2:e5:0c:75:e6:bb:f7: b6:86:37:74:cf:52:a0:1c:65:e3:52:95:4e:23:14:ee:6f:f6: 53:1f:eb:86:63:bb:bb:80:5e:5a:00:32:e5:50:1f:5c:5f:47: a4:96:79:73:48:b8:47:fa:0a:08:b2:b8:df:27:7f:f9:7d:41: f0:c5:24:28:39:88:30:b5:44:6e:18:6f:bf:f9:90:09:f5:43: d1:cc:e0:3f:73:62:f1:b4:26:20:08:71:06:7d:96:55:21:05: e8:6d:41:9c:fd:3a:22:0e:8b:76:f7:66:e6:b9:b1:64:fd:7d: 6a:ab:77:9f:c1:5a:68:98:54:9f:42:a8:03:b6:88:25:11:f2: a8:b9:5a:71:e2:5c:41:73:7c:49:34:16:ab:35:74:11:da:3a: a8:ab:22:91:7f:42:5b:6d:34:dd:6b:4e:ab:47:52:bd:44:0f: 00:3b:2e:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cex+hSXsEpUmAy3jAWn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZmQ5NGViYjhjYjk4YTFkYmRmNTBiZGNkNjlkY2MyOTE0 NDg4OWUwHhcNMjUxMjA2MTkwMDU5WhcNMjUxMjA3MTkwMDU5WjAzMTEwLwYDVQQD EyhlZjA0N2RlYTY3M2M1N2VmZWQxNjE0NGNiNzcxOGMzYTJkNjZkZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFW974TpUYAeUZwr/gnPm+J0OjKb aI3Z0/ZzDOO5EqWkbfb/CpN5aRzfVXYlL9kRFoRHIuUYBtKtf0xARSeSb3Rf4qLW OlDfJzHPsJcgylILMq78fXc4NXrhJ/OF5bVZ8WY8t7YMeeqfzEDY4t3iIUioEO+Y USL8WcfnM7bqUX0FcrLwXDUktC8kN4ckpV1UKJpEFMZGz1pbyaNbVHNq549SR3YY 3lzfg3OCtgp41Gbfx+MNNkmFC26G981t2jWG2cLhSBUvBKt4V1uGCyQewzdqr1dk gi0mYfqq+RFIlFeV/rx3rfm4RXNRPVR8vJgSG3wCS2ToINn0aDy0XBpjxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8EfepnPFfv7RYUTLdxjDotZt6iMB8GA1UdIwQY MBaAFN39lOu4y5ih299Qvc1p3MKRRIieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2YyVTY3akxtS0hiMzFDOXpXbmN3cEZFaUo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hNmY1MDYtNjk0OC00Y2VmLTg1NDgt YzkzYzFlZTg5OGJlLzEvM2YyVTY3akxtS0hiMzFDOXpXbmN3cEZFaUo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9hNmY1MDYtNjk0OC00Y2VmLTg1NDgtYzkzYzFlZTg5OGJl LzEvM2YyVTY3akxtS0hiMzFDOXpXbmN3cEZFaUo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriIBBNDW NpRGYn6KeNW45jEGzUAg5j+z8bWUXdfWGu6h+Ty0Y8O9EA2PgcXziWeQwYiHuaZN uKf3E4glsz4vFpT89rXkGdtndc9APzRlX3AcPanC5Qx15rv3toY3dM9SoBxl41KV TiMU7m/2Ux/rhmO7u4BeWgAy5VAfXF9HpJZ5c0i4R/oKCLK43yd/+X1B8MUkKDmI MLVEbhhvv/mQCfVD0czgP3Ni8bQmIAhxBn2WVSEF6G1BnP06Ig6Ldvdm5rmxZP19 aqt3n8FaaJhUn0KoA7aIJRHyqLlaceJcQXN8STQWqzV0Edo6qKsikX9CW2003WtO q0dSvUQPADsuJw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:07:44 2025 by rpki-client