This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft File: a3YD1VVBw1n46HRHfL6K8h9peHw.mft (raw, json) Hash identifier: eMqvBXFd/RVsadTTpTkQt7ZiPobwM5qTclynAK7NuZ4= Subject key identifier: 44:0C:F9:84:2D:68:8E:B9:13:E8:82:DC:58:A3:93:DC:C1:0B:79:B0 Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C Certificate issuer: /CN=6b7603d55541c359f8e874477cbe8af21f69787c Certificate serial: 019AF31C3DC0F547DC0CCFB0ED85E5335890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft Manifest number: 045A Signing time: Sat 06 Dec 2025 10:01:45 +0000 Manifest this update: Sat 06 Dec 2025 10:01:45 +0000 Manifest next update: Sun 07 Dec 2025 10:01:45 +0000 Files and hashes: 1: a3YD1VVBw1n46HRHfL6K8h9peHw.crl (hash: LR3bufYmOQdDVqVRswgzSm/jdtFuvB/m8iRLMDgWuVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:3d:c0:f5:47:dc:0c:cf:b0:ed:85:e5:33:58:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c Validity Not Before: Dec 6 10:01:45 2025 GMT Not After : Dec 7 10:01:45 2025 GMT Subject: CN=440cf9842d688eb913e882dc58a393dcc10b79b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:35:e2:a8:1f:7b:68:b2:8b:83:cc:1d:9b: b1:4c:2b:f6:1c:85:93:d7:54:e4:fb:5b:e8:49:14: af:3b:20:f4:1d:ee:7d:3e:64:39:51:0e:5f:12:52: 86:87:f6:0d:6b:c9:fc:ac:dc:1a:75:bc:d2:fa:4a: e8:8a:1b:30:2a:f9:a7:7f:e7:0e:e2:84:73:26:2d: bc:33:a0:f8:5b:98:99:8a:aa:0f:75:b5:4b:c1:b3: fa:5b:2c:87:44:82:53:88:de:91:8f:0d:11:31:dc: 56:bb:0b:a3:51:1b:79:51:1a:49:47:c2:c7:ab:82: 39:a0:16:a4:24:00:f7:5c:af:01:be:5e:66:3d:a9: a2:bc:c3:25:5d:5c:bf:5a:c3:de:21:da:f1:89:86: e7:05:3b:95:41:e1:75:29:0a:42:f9:74:52:7d:04: a0:d2:3d:51:b4:73:9c:a7:0d:2a:60:18:44:7a:53: ab:cf:c6:d8:45:96:5f:6c:99:f5:45:fa:82:45:5c: 0b:c8:e3:5d:58:f2:6b:0d:04:2d:cb:59:a8:6f:34: eb:ba:77:b8:d6:6f:67:d8:2e:81:fa:9a:25:f9:c9: 25:87:bb:45:8c:76:5d:98:6f:be:e6:c0:73:13:3f: 2b:83:90:bb:31:b6:65:ed:4e:0f:c9:d4:e9:e5:fe: c9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0C:F9:84:2D:68:8E:B9:13:E8:82:DC:58:A3:93:DC:C1:0B:79:B0 X509v3 Authority Key Identifier: keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b9:dd:6e:70:d8:58:c3:b5:95:f9:45:75:57:91:6d:b3:53: e2:76:18:cb:4f:ec:37:b3:cd:9a:86:1b:4a:e1:0e:c8:29:ff: b0:c7:6f:07:b4:3d:02:e8:b6:78:ca:98:aa:77:b5:d4:82:e5: 69:39:cd:cc:0f:a4:5b:1f:27:1d:7d:15:78:85:ca:55:43:c2: 53:bb:9d:0f:bf:d7:1f:3f:0d:2f:f6:2c:8e:0b:52:8f:8a:cb: 6b:3d:9a:2d:7d:16:70:24:bb:b1:28:9b:30:7d:ed:fe:ae:60: a0:e4:83:11:15:91:4d:e9:45:f8:a3:ed:c4:46:92:be:cf:ea: d0:ef:2d:8c:76:78:e5:ca:ed:95:e5:8e:ed:cf:05:dd:38:76: e9:2d:6a:7d:c5:4a:99:f6:49:30:42:6b:de:bb:01:d6:3a:af: 84:db:1f:96:08:6d:a7:d2:f0:93:53:9e:fc:6d:00:ef:32:0b: e9:e4:60:80:c4:ae:f9:b9:bc:cd:ff:9d:47:89:50:48:6c:cb: 2b:17:27:8d:e5:a0:28:63:89:bf:1a:a2:dc:75:85:6c:71:b4: 79:f4:7d:89:d0:1d:11:1a:4a:50:ae:c8:c5:f5:25:04:01:11: 46:03:ca:55:37:aa:9a:93:7a:bd:0e:2e:0e:a9:12:10:95:26: e0:16:68:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHD3A9UfcDM+w7YXlM1iQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNzYwM2Q1NTU0MWMzNTlmOGU4NzQ0NzdjYmU4YWYyMWY2 OTc4N2MwHhcNMjUxMjA2MTAwMTQ1WhcNMjUxMjA3MTAwMTQ1WjAzMTEwLwYDVQQD Eyg0NDBjZjk4NDJkNjg4ZWI5MTNlODgyZGM1OGEzOTNkY2MxMGI3OWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuk14qgfe2iyi4PMHZuxTCv2HIWT 11Tk+1voSRSvOyD0He59PmQ5UQ5fElKGh/YNa8n8rNwadbzS+kroihswKvmnf+cO 4oRzJi28M6D4W5iZiqoPdbVLwbP6WyyHRIJTiN6Rjw0RMdxWuwujURt5URpJR8LH q4I5oBakJAD3XK8Bvl5mPamivMMlXVy/WsPeIdrxiYbnBTuVQeF1KQpC+XRSfQSg 0j1RtHOcpw0qYBhEelOrz8bYRZZfbJn1RfqCRVwLyONdWPJrDQQty1mobzTrune4 1m9n2C6B+pol+cklh7tFjHZdmG++5sBzEz8rg5C7MbZl7U4PydTp5f7JtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQM+YQtaI65E+iC3Fijk9zBC3mwMB8GA1UdIwQY MBaAFGt2A9VVQcNZ+Oh0R3y+ivIfaXh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTNZRDFWVkJ3MW40NkhSSGZMNks4aDlwZUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYzU4OWYtMmJkMi00OWJkLWJkODEt NTdlNjMyMGIxMThmLzEvYTNZRDFWVkJ3MW40NkhSSGZMNks4aDlwZUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zYzU4OWYtMmJkMi00OWJkLWJkODEtNTdlNjMyMGIxMThm LzEvYTNZRDFWVkJ3MW40NkhSSGZMNks4aDlwZUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLndbnDY WMO1lflFdVeRbbNT4nYYy0/sN7PNmoYbSuEOyCn/sMdvB7Q9Aui2eMqYqne11ILl aTnNzA+kWx8nHX0VeIXKVUPCU7udD7/XHz8NL/YsjgtSj4rLaz2aLX0WcCS7sSib MH3t/q5goOSDERWRTelF+KPtxEaSvs/q0O8tjHZ45crtleWO7c8F3Th26S1qfcVK mfZJMEJr3rsB1jqvhNsflghtp9Lwk1Oe/G0A7zIL6eRggMSu+bm8zf+dR4lQSGzL KxcnjeWgKGOJvxqi3HWFbHG0efR9idAdERpKUK7IxfUlBAERRgPKVTeqmpN6vQ4u DqkSEJUm4BZo8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:35:25 2025 by rpki-client