This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json) Hash identifier: qoVTzTCiEQE/EabE1fYmxiMSX2mUK9RuuVoYurDEtSs= Subject key identifier: FB:EC:ED:39:3D:91:08:13:A4:78:61:47:E0:64:FC:9C:C3:D9:4E:5C Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8 Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8 Certificate serial: 019AF19BB76DE8B84F19C1256D0E87B1D932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft Manifest number: 0D61 Signing time: Sat 06 Dec 2025 03:01:45 +0000 Manifest this update: Sat 06 Dec 2025 03:01:45 +0000 Manifest next update: Sun 07 Dec 2025 03:01:45 +0000 Files and hashes: 1: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: HHDmxwBXWQQXQwosgmP+6r/WR9ThBEEdaTy7glmR5ko=) 2: hfSj4Acr0ZdBdVZF-bmfhSWxDR0.roa (hash: qMvzKdtsac1CrAS5/GB10mnE0HZEb+d2b/OglfbpJc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b7:6d:e8:b8:4f:19:c1:25:6d:0e:87:b1:d9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8 Validity Not Before: Dec 6 03:01:45 2025 GMT Not After : Dec 7 03:01:45 2025 GMT Subject: CN=fbeced393d910813a4786147e064fc9cc3d94e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:28:ac:0d:e0:49:3a:aa:e9:d0:ca:67:b2: ba:4f:b3:83:af:57:11:30:93:b5:8e:3c:fe:c6:a0: 5a:28:61:02:a3:5a:f1:48:71:06:c6:b8:10:2e:0e: 4b:fc:a4:31:7d:9c:22:a4:44:a2:b3:ac:bd:71:8b: 90:8f:31:89:f1:ff:e7:ce:40:05:ff:9b:aa:9d:e4: 31:36:5d:f3:bf:f3:69:a7:9d:25:a5:e6:2c:af:a1: 7d:29:d4:61:b4:41:11:e7:00:44:8c:e5:bb:6a:5a: d4:83:41:a4:86:5c:fa:7d:9c:2b:43:d3:d2:1f:a0: be:76:90:2a:4c:3e:62:0c:7e:f6:18:25:02:16:57: 01:37:f7:15:9f:d3:01:97:67:74:7f:b9:e5:cd:e9: 99:d0:bc:2c:b8:19:d7:49:df:fa:be:75:50:f5:e2: 5e:26:a8:09:78:27:9f:a2:23:d4:a5:5d:bb:71:f7: f0:c9:c1:1d:53:2b:24:f1:4e:9b:37:db:65:91:0e: 4d:ea:67:55:62:2c:a8:bf:2a:a6:f4:c6:3c:ac:28: aa:4a:23:b5:7d:c7:e8:09:ad:37:6d:0a:96:9d:c0: 5f:dc:e0:29:f9:d0:fa:fa:5e:ea:2f:da:8e:57:48: 0d:88:73:cc:94:a8:e2:cc:0a:f2:27:a7:c7:e0:13: b6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EC:ED:39:3D:91:08:13:A4:78:61:47:E0:64:FC:9C:C3:D9:4E:5C X509v3 Authority Key Identifier: keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fb:29:14:80:f2:b3:63:b2:08:e0:7e:e5:e4:2f:19:45:f8: 63:aa:cc:05:39:1c:c6:1d:fb:de:ad:ca:1c:9d:a3:d9:4d:73: 69:24:a3:40:76:9c:ce:e4:1f:69:39:a9:89:81:54:91:15:27: 5a:a0:23:b7:ae:a9:69:54:bc:8f:21:85:3e:b1:fd:ac:d6:d6: ac:f5:fc:81:08:81:26:90:a9:3c:02:0e:f3:2d:77:9b:74:d0: d2:bc:5e:ef:61:50:eb:1f:43:aa:9a:21:5a:f8:66:1c:00:d1: 83:29:b9:28:7b:89:ee:76:d5:6f:32:ba:7f:b2:ae:b9:b9:f9: 04:19:54:2a:08:5a:62:03:90:ee:87:c3:80:f9:b4:28:44:f7: 68:87:4e:50:f4:90:d2:65:e8:f0:d7:5b:9a:9d:41:d1:e5:d4: 19:9b:a2:1b:ab:d6:3c:09:ce:50:b1:10:95:a9:d3:8c:d3:61: fb:8e:f1:db:89:15:d1:be:fb:54:fd:6b:d1:19:c7:71:5f:0c: 4e:da:ad:50:dd:59:6c:58:90:83:26:e2:d6:44:a6:c4:a6:f2: 14:d9:29:ba:2c:df:51:db:7c:ad:18:96:d0:5a:31:f7:9a:cd: 67:10:bf:98:8a:a2:b6:09:10:93:af:3c:4b:26:41:40:75:c2: 58:91:48:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7dt6LhPGcElbQ6HsdkyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNTJhZDA5MGI1NDY3OGUwOTY4ZTY5OTU1YzI1MDQ5NDM0 ZDk2YzgwHhcNMjUxMjA2MDMwMTQ1WhcNMjUxMjA3MDMwMTQ1WjAzMTEwLwYDVQQD EyhmYmVjZWQzOTNkOTEwODEzYTQ3ODYxNDdlMDY0ZmM5Y2MzZDk0ZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxworA3gSTqq6dDKZ7K6T7ODr1cR MJO1jjz+xqBaKGECo1rxSHEGxrgQLg5L/KQxfZwipESis6y9cYuQjzGJ8f/nzkAF /5uqneQxNl3zv/Npp50lpeYsr6F9KdRhtEER5wBEjOW7alrUg0Gkhlz6fZwrQ9PS H6C+dpAqTD5iDH72GCUCFlcBN/cVn9MBl2d0f7nlzemZ0LwsuBnXSd/6vnVQ9eJe JqgJeCefoiPUpV27cffwycEdUysk8U6bN9tlkQ5N6mdVYiyovyqm9MY8rCiqSiO1 fcfoCa03bQqWncBf3OAp+dD6+l7qL9qOV0gNiHPMlKjizAryJ6fH4BO2BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvs7Tk9kQgTpHhhR+Bk/JzD2U5cMB8GA1UdIwQY MBaAFN1SrQkLVGeOCWjmmVXCUElDTZbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmIt ZDMwNTczMGI1MzY4LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmItZDMwNTczMGI1MzY4 LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/spFIDy s2OyCOB+5eQvGUX4Y6rMBTkcxh373q3KHJ2j2U1zaSSjQHaczuQfaTmpiYFUkRUn WqAjt66paVS8jyGFPrH9rNbWrPX8gQiBJpCpPAIO8y13m3TQ0rxe72FQ6x9Dqpoh WvhmHADRgym5KHuJ7nbVbzK6f7Kuubn5BBlUKghaYgOQ7ofDgPm0KET3aIdOUPSQ 0mXo8Ndbmp1B0eXUGZuiG6vWPAnOULEQlanTjNNh+47x24kV0b77VP1r0RnHcV8M TtqtUN1ZbFiQgybi1kSmxKbyFNkpuizfUdt8rRiW0Fox95rNZxC/mIqitgkQk688 SyZBQHXCWJFIMA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:26:16 2025 by rpki-client