This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json) Hash identifier: UpBq+0rjzCA/l/SIVjqDU0M/YOBA4yBqBEDIRbDQzMg= Subject key identifier: CA:70:63:5A:04:CF:76:1A:09:07:B5:97:53:4B:B0:D4:FB:3B:36:BA Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96 Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196 Certificate serial: 019AF42DC59C682636738407189659794B3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 15:00:31 +0000 Manifest this update: Sat 06 Dec 2025 15:00:31 +0000 Manifest next update: Sun 07 Dec 2025 15:00:31 +0000 Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: pEzxpqlzI7C+RAQZaAxfDBtj/s8bdnOyN4EzN/Ml/bk=) 2: h-YJMMunIS0_gIZ5p26lgKRQyKc.roa (hash: bR5opkzZodiPK85GQ+pJiSPCVteQ0JuW261tZcQfTgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:c5:9c:68:26:36:73:84:07:18:96:59:79:4b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196 Validity Not Before: Dec 6 15:00:31 2025 GMT Not After : Dec 7 15:00:31 2025 GMT Subject: CN=ca70635a04cf761a0907b597534bb0d4fb3b36ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:79:c4:98:df:4a:1f:60:2b:68:d2:3e:ef:04: b6:db:bd:d2:b9:78:74:66:2e:82:55:f5:bb:71:13: a8:d8:21:70:c5:92:f8:d9:88:55:38:c4:e5:ca:c6: ec:d6:f9:34:0d:55:ba:83:53:20:56:17:5e:86:1b: fa:f0:60:65:20:96:e4:6b:20:ed:85:6b:b3:b4:d8: c1:40:d4:f7:a9:71:2f:ad:4c:8b:85:a7:23:e1:9d: e6:9a:23:84:2f:50:0a:2f:e9:c0:10:87:7d:c6:e4: ac:b3:e5:61:74:45:0a:7d:3c:bb:96:1c:f5:3f:a3: 3c:86:d5:46:d0:e8:50:19:e5:5e:11:e0:f0:1b:c9: 7c:15:cb:eb:14:fd:ce:22:b4:24:73:6d:2d:dc:31: eb:b9:1b:6c:35:0b:f6:29:11:9f:13:de:67:a3:e7: 7c:17:fb:0a:f0:4c:27:fa:5c:3e:e0:30:7f:9f:6b: 2c:84:30:bc:b5:16:36:bd:e8:7d:88:0a:74:b7:f7: 57:80:95:fc:cb:a7:9f:17:4d:84:c1:ba:35:f2:df: 99:ff:b1:39:e9:19:1c:4f:3e:cf:4d:45:71:d1:13: 4c:d8:94:20:ae:5d:58:a0:f4:55:b6:f2:cb:42:e6: 01:64:be:0c:f4:a1:e0:1d:3c:d0:1b:3f:ec:60:8d: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:70:63:5A:04:CF:76:1A:09:07:B5:97:53:4B:B0:D4:FB:3B:36:BA X509v3 Authority Key Identifier: keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e9:79:17:78:b3:f4:1f:d9:4e:94:0e:e1:61:4c:b3:28:8b: 2e:7c:28:3c:4c:b0:d8:f6:70:33:24:9f:22:6d:3c:46:67:cb: 29:98:05:8b:35:91:82:17:fa:63:e3:bd:d4:b1:e9:0e:21:3a: dd:35:63:f0:5a:40:07:74:a3:f6:ef:ab:12:a4:40:85:8b:74: 28:08:c1:94:83:e1:6c:a2:d7:cc:82:e5:a7:94:25:41:98:a4: e2:b8:b7:79:09:82:7e:00:ea:e6:bb:35:99:44:37:0c:48:f7: 7a:e7:5f:8d:63:14:50:cd:79:a1:d4:2e:a6:ab:87:d8:2f:a8: 4d:0e:38:e5:f2:a1:9f:17:55:7a:08:52:23:8b:bf:30:b8:ed: 4d:9d:99:bb:12:04:80:76:15:e5:7a:40:da:f2:ec:00:0d:72: b7:e9:78:86:a7:d5:e2:13:89:5b:95:a7:39:cf:c0:24:d6:11: 17:e5:11:84:2e:07:b7:3c:3f:87:ca:a6:4f:89:ef:ac:bf:d2: 4f:52:b6:2a:57:10:0a:12:87:79:80:d3:6b:46:3a:b1:73:d4: 95:9a:aa:db:45:d8:0d:20:b4:4b:c0:7e:6d:bc:bf:11:84:8d: e0:9d:81:20:7c:dc:6a:ed:66:b0:c9:4f:99:64:44:c1:58:57: 58:9c:6d:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LcWcaCY2c4QHGJZZeUs+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNmJhYTYwMTIzNmFiOWJlYTI5ZjgwN2E2NjkyMGVkNTY1 NmExOTYwHhcNMjUxMjA2MTUwMDMxWhcNMjUxMjA3MTUwMDMxWjAzMTEwLwYDVQQD EyhjYTcwNjM1YTA0Y2Y3NjFhMDkwN2I1OTc1MzRiYjBkNGZiM2IzNmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XnEmN9KH2AraNI+7wS2273SuXh0 Zi6CVfW7cROo2CFwxZL42YhVOMTlysbs1vk0DVW6g1MgVhdehhv68GBlIJbkayDt hWuztNjBQNT3qXEvrUyLhacj4Z3mmiOEL1AKL+nAEId9xuSss+VhdEUKfTy7lhz1 P6M8htVG0OhQGeVeEeDwG8l8FcvrFP3OIrQkc20t3DHruRtsNQv2KRGfE95no+d8 F/sK8Ewn+lw+4DB/n2sshDC8tRY2veh9iAp0t/dXgJX8y6efF02Ewbo18t+Z/7E5 6RkcTz7PTUVx0RNM2JQgrl1YoPRVtvLLQuYBZL4M9KHgHTzQGz/sYI1dNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpwY1oEz3YaCQe1l1NLsNT7Oza6MB8GA1UdIwQY MBaAFNxrqmASNqub6in4B6ZpIO1WVqGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YmQyZTMtZjNjNS00OTU1LWI5YTEt MzRhMTIzN2YxNjcwLzEvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83YmQyZTMtZjNjNS00OTU1LWI5YTEtMzRhMTIzN2YxNjcw LzEvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOl5F3iz 9B/ZTpQO4WFMsyiLLnwoPEyw2PZwMySfIm08RmfLKZgFizWRghf6Y+O91LHpDiE6 3TVj8FpAB3Sj9u+rEqRAhYt0KAjBlIPhbKLXzILlp5QlQZik4ri3eQmCfgDq5rs1 mUQ3DEj3eudfjWMUUM15odQupquH2C+oTQ445fKhnxdVeghSI4u/MLjtTZ2ZuxIE gHYV5XpA2vLsAA1yt+l4hqfV4hOJW5WnOc/AJNYRF+URhC4Htzw/h8qmT4nvrL/S T1K2KlcQChKHeYDTa0Y6sXPUlZqq20XYDSC0S8B+bby/EYSN4J2BIHzcau1msMlP mWREwVhXWJxt7g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:44 2025 by rpki-client