This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json) Hash identifier: Nr/Uwqe+jLpz7iZheFPFjemVrc77pj23+zVMBULASmw= Subject key identifier: 48:52:FE:EB:B8:27:E1:08:1D:72:E7:75:8D:E5:96:86:71:62:77:48 Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3 Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3 Certificate serial: 019AF3F741168FFE56990C31889E097B80C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:00:58 +0000 Manifest this update: Sat 06 Dec 2025 14:00:58 +0000 Manifest next update: Sun 07 Dec 2025 14:00:58 +0000 Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: MEvoAJYQv44j99vhS8gfcyd64LOiGdLfGf/yq/KhIbU=) 2: 57HaC7393494-Kydk1JdAp5sP5I.roa (hash: MC5zLYnL7jsECqxeDtP30qM0sWScy6N43eUhfx207aw=) 3: m5gUSNnJ2hKaiWTW0ODmWqqDw-s.roa (hash: EE2S7AYIPyyJZqEsdRi77q99LaNKBqMzcLpUq4bS+A8=) 4: nX1l9uEaP3hKft0f6nr66330FaY.roa (hash: Ify3evSlWibc6XFuSTIlXp6BEPgQD/cUtILAv8sgqKU=) 5: rYOTmI6zBWy0_qXug-7vEbI5-NE.roa (hash: WCnXAEMnH2mCY9gWHiuKlZ1HO6eQUoArgriFfc+fAVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:41:16:8f:fe:56:99:0c:31:88:9e:09:7b:80:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3 Validity Not Before: Dec 6 14:00:58 2025 GMT Not After : Dec 7 14:00:58 2025 GMT Subject: CN=4852feebb827e1081d72e7758de5968671627748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d6:38:78:44:3a:31:5c:52:aa:2f:2b:5e:80: 88:39:04:be:97:8e:77:0e:60:ca:59:6a:70:47:93: 3c:18:8a:68:c1:8e:2b:38:90:22:33:14:3f:07:f3: fe:e4:89:1e:47:2f:84:8a:38:1f:7b:23:53:2f:26: 4f:89:0f:1e:97:b6:04:9e:47:22:25:a7:32:03:29: 76:30:82:c2:93:86:5d:a3:2f:1d:18:8a:27:6f:a4: a7:b9:e1:aa:a8:02:8d:66:47:cf:ed:96:4a:a6:ae: a0:8b:40:43:8d:d5:4e:c5:fd:12:5b:9a:9f:5b:e6: 79:95:48:6e:de:ec:05:cc:c7:e6:92:e0:33:80:c1: 7b:34:44:e4:fd:f4:38:d1:42:ae:2a:18:cb:0d:6f: a4:ac:72:7e:fc:ab:82:f1:11:d8:23:c2:3e:1b:db: e5:5e:0d:93:95:91:5a:16:96:6e:09:44:5b:40:de: d1:9d:74:4b:ff:c0:81:bf:05:c8:de:06:6c:df:23: fa:bc:1c:4a:12:5d:ec:97:fc:45:39:b1:01:5a:da: e7:5c:62:ef:00:82:cb:9f:ce:a3:39:2f:46:46:66: 51:ae:9d:97:99:fc:69:ac:22:0b:26:94:cf:a5:ca: d0:5c:a8:73:0f:31:78:bf:b3:bc:6b:5e:a7:e1:0f: 32:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:52:FE:EB:B8:27:E1:08:1D:72:E7:75:8D:E5:96:86:71:62:77:48 X509v3 Authority Key Identifier: keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1f:80:9a:c5:aa:0b:97:68:8f:e6:1e:a0:f1:63:50:ac:9f: c9:6c:df:0a:2c:10:ee:12:6e:81:87:80:8e:81:c7:f6:c6:e6: 3b:cb:87:d4:d7:84:6e:7f:f9:fd:53:5d:d7:bc:44:b0:4f:3c: 7c:aa:28:9b:55:97:17:ee:2c:96:54:3c:94:dd:7d:b8:dc:3a: 78:80:a3:7e:55:28:25:69:33:d5:0d:40:c8:88:59:eb:e8:52: 29:05:0c:92:13:5e:30:83:bd:fc:36:08:37:06:47:e2:d6:76: 8c:6c:12:4d:d7:cf:13:13:9d:90:d3:14:dc:12:20:26:fc:6f: d4:ce:bc:8b:a3:40:10:5c:8c:bd:76:2a:06:9c:d4:d6:99:60: 1e:58:d3:26:5a:d4:96:07:63:ee:24:bf:5c:46:d0:17:42:0f: c6:98:d4:44:fe:96:67:ab:0f:23:fc:de:3e:32:41:09:5c:e7: 09:c6:b4:5e:04:29:f1:d3:4f:b5:87:cb:eb:ea:18:19:1a:7d: a1:6e:99:ad:19:c3:4f:09:81:c5:c4:f0:7c:3e:3c:9f:57:da: 17:b9:ca:b8:59:c2:40:f1:d8:92:2b:2b:a4:af:71:f8:76:3a: 5b:53:97:1c:05:cf:6f:ef:8c:73:08:0a:78:6e:4d:07:20:20: 52:df:ef:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90EWj/5WmQwxiJ4Je4DFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTA4OWM5NDJiNjgwMzM2ODNiNGRkNTA2YzBjMzZmNzRi ZTBlYTMwHhcNMjUxMjA2MTQwMDU4WhcNMjUxMjA3MTQwMDU4WjAzMTEwLwYDVQQD Eyg0ODUyZmVlYmI4MjdlMTA4MWQ3MmU3NzU4ZGU1OTY4NjcxNjI3NzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9Y4eEQ6MVxSqi8rXoCIOQS+l453 DmDKWWpwR5M8GIpowY4rOJAiMxQ/B/P+5IkeRy+EijgfeyNTLyZPiQ8el7YEnkci JacyAyl2MILCk4Zdoy8dGIonb6SnueGqqAKNZkfP7ZZKpq6gi0BDjdVOxf0SW5qf W+Z5lUhu3uwFzMfmkuAzgMF7NETk/fQ40UKuKhjLDW+krHJ+/KuC8RHYI8I+G9vl Xg2TlZFaFpZuCURbQN7RnXRL/8CBvwXI3gZs3yP6vBxKEl3sl/xFObEBWtrnXGLv AILLn86jOS9GRmZRrp2XmfxprCILJpTPpcrQXKhzDzF4v7O8a16n4Q8yMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhS/uu4J+EIHXLndY3lloZxYndIMB8GA1UdIwQY MBaAFNwQiclCtoAzaDtN1QbAw290vg6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDkt Y2I1NmVkM2VhN2ZhLzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDktY2I1NmVkM2VhN2Zh LzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALh+AmsWq C5doj+YeoPFjUKyfyWzfCiwQ7hJugYeAjoHH9sbmO8uH1NeEbn/5/VNd17xEsE88 fKoom1WXF+4sllQ8lN19uNw6eICjflUoJWkz1Q1AyIhZ6+hSKQUMkhNeMIO9/DYI NwZH4tZ2jGwSTdfPExOdkNMU3BIgJvxv1M68i6NAEFyMvXYqBpzU1plgHljTJlrU lgdj7iS/XEbQF0IPxpjURP6WZ6sPI/zePjJBCVznCca0XgQp8dNPtYfL6+oYGRp9 oW6ZrRnDTwmBxcTwfD48n1faF7nKuFnCQPHYkisrpK9x+HY6W1OXHAXPb++McwgK eG5NByAgUt/v4w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:16 2025 by rpki-client