This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft File: 3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft (raw, json) Hash identifier: OqxIMJ7EgyxpjxlhiBagxGwtzss3vhdVbJvdJw+rnKY= Subject key identifier: 59:F4:28:6E:0F:CA:D3:72:FC:0E:75:8F:2E:0D:D4:00:20:6D:09:9E Authority key identifier: DC:C4:3A:47:09:76:F3:74:7F:68:2E:32:D2:7C:3E:CA:CE:E0:CC:59 Certificate issuer: /CN=dcc43a470976f3747f682e32d27c3ecacee0cc59 Certificate serial: 019AF19AAC45B5C934EF8ECE7F22B1760B95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft Manifest number: 0202 Signing time: Sat 06 Dec 2025 03:00:36 +0000 Manifest this update: Sat 06 Dec 2025 03:00:36 +0000 Manifest next update: Sun 07 Dec 2025 03:00:36 +0000 Files and hashes: 1: 3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl (hash: VhnptaaXTXHOZwTXsBtz3Y5H6F+z2iOwRARdUxqG5Io=) 2: ttiSctxtKk--_TjJLyKyxsLTH5M.roa (hash: cExQTThTOKNeo7f6JBcYKDPiMo9ejsGy+rMa2dC0A4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ac:45:b5:c9:34:ef:8e:ce:7f:22:b1:76:0b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcc43a470976f3747f682e32d27c3ecacee0cc59 Validity Not Before: Dec 6 03:00:36 2025 GMT Not After : Dec 7 03:00:36 2025 GMT Subject: CN=59f4286e0fcad372fc0e758f2e0dd400206d099e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:45:a6:9f:7b:d2:8f:34:69:4d:d8:9a:57: ea:88:5b:9b:2a:b2:90:8f:18:72:19:4d:f6:87:45: 2e:45:4e:e5:3c:09:47:71:c0:53:ff:1f:30:eb:37: 39:75:7d:b6:91:32:fc:54:d1:6f:ce:cf:f4:27:de: 38:b5:7f:85:ff:4b:de:65:01:cc:81:91:5e:71:18: de:fd:1b:bc:e3:fc:ae:1e:5c:45:7c:df:65:ad:a1: f6:b9:e8:f6:54:b4:6c:f1:52:ce:a8:b9:0e:23:a4: 98:02:04:a4:62:23:de:58:31:63:d9:1a:d4:e8:44: bf:b5:68:b9:ce:39:8e:49:47:64:4e:49:48:b5:c8: d5:7a:11:31:f2:fa:43:ac:eb:e5:cc:b0:09:af:eb: 6f:7b:b9:11:1e:71:4c:ba:4e:d2:3f:60:80:ad:d3: 92:23:ab:7f:8d:06:f9:63:a5:a9:93:af:49:98:e6: 4a:df:df:66:ac:f7:0e:a3:33:df:a1:8a:8d:29:e9: 0f:7d:72:eb:e7:56:a3:15:53:1f:c6:71:c8:06:10: fa:ee:01:f4:9a:5d:dd:20:7f:36:9a:57:ff:fe:bb: aa:2b:37:4b:6b:97:9c:9e:97:3d:f8:03:08:67:96: 57:a7:14:5f:ee:72:4d:ae:8b:b0:d4:88:54:a2:3a: 0b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F4:28:6E:0F:CA:D3:72:FC:0E:75:8F:2E:0D:D4:00:20:6D:09:9E X509v3 Authority Key Identifier: keyid:DC:C4:3A:47:09:76:F3:74:7F:68:2E:32:D2:7C:3E:CA:CE:E0:CC:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a2:60:15:42:d3:71:25:08:4e:85:28:c4:f0:be:93:1f:1b: df:f2:cf:80:fa:b4:7e:4f:f6:50:61:67:66:c7:2b:22:80:87: 7f:f3:fc:bc:0b:d2:e2:ed:04:07:e5:09:3b:02:16:88:fa:6f: 91:f9:b8:cf:b0:60:b4:c2:4f:1e:66:1f:cf:ac:fa:6d:86:ab: 3c:d3:ac:ff:ad:bd:a2:4e:4b:e8:e3:85:6d:26:fb:d1:f9:93: 3e:9e:6f:67:16:c8:bb:49:87:d1:45:a7:05:c0:c8:6e:c1:0f: 99:48:67:68:69:30:b9:9c:c9:08:71:66:d6:76:37:94:20:48: 0a:6a:ac:79:86:39:65:c0:17:11:63:4d:f9:81:16:68:a0:c3: df:54:88:bb:3f:d7:38:bf:4c:b6:7a:f5:e5:a2:06:9b:f3:31: 31:68:9c:ee:58:bb:be:ef:b8:84:f3:7d:91:00:1a:bc:cb:13: 2f:8c:3c:de:dd:66:7d:fb:e5:99:18:0c:a8:49:23:e5:41:a1: f7:dc:f3:64:a6:9b:0b:85:f6:36:c5:68:fe:5c:cc:3b:db:92: 59:14:27:35:e0:ac:3f:fc:4e:78:de:ca:df:1d:46:03:3d:1f: 12:77:e3:cd:e5:39:64:02:64:69:3a:5c:0e:e9:72:78:c7:df: fd:b4:e4:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqxFtck0747OfyKxdguVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYzQzYTQ3MDk3NmYzNzQ3ZjY4MmUzMmQyN2MzZWNhY2Vl MGNjNTkwHhcNMjUxMjA2MDMwMDM2WhcNMjUxMjA3MDMwMDM2WjAzMTEwLwYDVQQD Eyg1OWY0Mjg2ZTBmY2FkMzcyZmMwZTc1OGYyZTBkZDQwMDIwNmQwOTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHlFpp970o80aU3YmlfqiFubKrKQ jxhyGU32h0UuRU7lPAlHccBT/x8w6zc5dX22kTL8VNFvzs/0J944tX+F/0veZQHM gZFecRje/Ru84/yuHlxFfN9lraH2uej2VLRs8VLOqLkOI6SYAgSkYiPeWDFj2RrU 6ES/tWi5zjmOSUdkTklItcjVehEx8vpDrOvlzLAJr+tve7kRHnFMuk7SP2CArdOS I6t/jQb5Y6Wpk69JmOZK399mrPcOozPfoYqNKekPfXLr51ajFVMfxnHIBhD67gH0 ml3dIH82mlf//ruqKzdLa5ecnpc9+AMIZ5ZXpxRf7nJNrouw1IhUojoLmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFn0KG4PytNy/A51jy4N1AAgbQmeMB8GA1UdIwQY MBaAFNzEOkcJdvN0f2guMtJ8PsrO4MxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM01RNlJ3bDI4M1JfYUM0eTBudy15czdnekZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS84YTcxZGMtOTM1Ni00ZDNmLTgwYTQt NTFjNmY2MGQ1OTc5LzEvM01RNlJ3bDI4M1JfYUM0eTBudy15czdnekZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS84YTcxZGMtOTM1Ni00ZDNmLTgwYTQtNTFjNmY2MGQ1OTc5 LzEvM01RNlJ3bDI4M1JfYUM0eTBudy15czdnekZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqJgFULT cSUIToUoxPC+kx8b3/LPgPq0fk/2UGFnZscrIoCHf/P8vAvS4u0EB+UJOwIWiPpv kfm4z7BgtMJPHmYfz6z6bYarPNOs/629ok5L6OOFbSb70fmTPp5vZxbIu0mH0UWn BcDIbsEPmUhnaGkwuZzJCHFm1nY3lCBICmqseYY5ZcAXEWNN+YEWaKDD31SIuz/X OL9Mtnr15aIGm/MxMWic7li7vu+4hPN9kQAavMsTL4w83t1mffvlmRgMqEkj5UGh 99zzZKabC4X2NsVo/lzMO9uSWRQnNeCsP/xOeN7K3x1GAz0fEnfjzeU5ZAJkaTpc DulyeMff/bTk6w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:47 2025 by rpki-client