This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json) Hash identifier: rdZgUXPs8iOJqYlz0IGwrekE5xfeBorYOKB4B9WCbFg= Subject key identifier: 9B:C2:65:BB:E8:60:2C:AF:B6:F9:83:E9:EA:2C:F5:9E:5E:42:57:C1 Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b Certificate serial: 019AF23F7C1D3EA23CF198A1D503A7C4DBF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: EE9PSxSGd3Q/aUQ9Azd2AOrhK1U1znWvigeTmAFslP8=) 2: ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa (hash: bVgUBiwiMttSarotQ+bYBGzvg0m/rWkM8yb5LV2CZwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7c:1d:3e:a2:3c:f1:98:a1:d5:03:a7:c4:db:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=9bc265bbe8602cafb6f983e9ea2cf59e5e4257c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:20:7a:c7:c5:72:b4:38:b8:9c:fe:99:63: 73:ea:ba:74:64:0c:b4:15:4d:72:89:b7:02:f8:56: 21:8a:da:35:0a:8a:3e:f4:80:24:90:2e:bd:2f:86: e8:4f:6a:56:da:a1:b4:82:e8:c6:b6:05:86:00:13: 22:72:3e:89:31:fe:2b:55:4d:a3:95:54:cf:89:4e: d7:2e:bf:ad:51:f9:3c:6e:e1:02:f3:59:82:77:17: e9:a3:f5:55:37:57:15:66:ab:69:4f:66:58:70:53: ee:88:f9:cb:e6:7e:09:56:3d:e3:73:87:c1:2f:c4: 65:d9:fa:97:6b:e6:05:44:f9:63:40:01:a0:c1:ae: 33:f0:75:87:f2:25:de:09:4c:f4:20:47:fe:36:6e: 36:61:21:31:e4:f5:89:15:81:c0:07:7a:80:31:66: c7:92:28:4f:60:92:ee:05:0d:26:44:0b:13:b7:9f: 86:a2:23:64:4c:03:39:2b:b2:46:dd:fe:75:64:e6: 09:4a:01:0f:b4:2f:58:3e:44:f4:a3:ff:18:d8:2c: 02:07:2d:67:15:19:22:3c:55:13:ef:96:9c:c2:2b: 6c:66:d2:c9:fb:2f:b0:d1:38:56:22:cd:5e:4b:97: 2e:63:b3:f3:12:4d:16:7a:4f:82:46:0b:27:f0:4f: 90:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C2:65:BB:E8:60:2C:AF:B6:F9:83:E9:EA:2C:F5:9E:5E:42:57:C1 X509v3 Authority Key Identifier: keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:95:4b:1e:0f:b1:72:92:e2:bf:7f:5c:9e:c4:03:a3:74:04: ae:0f:d3:be:08:06:07:54:f1:26:3b:6f:f1:6f:96:82:f9:01: 12:4f:5f:63:55:bc:a8:cb:ca:30:eb:d5:13:0a:64:88:84:fc: 3e:90:89:07:7e:31:36:1e:ba:20:2f:2b:5e:71:09:7f:cb:65: 5d:25:fa:d5:63:7e:82:c2:08:0e:5e:15:14:20:17:69:49:c0: c6:1f:68:06:89:9a:5e:e6:f3:24:83:7c:c4:29:18:a9:1b:ed: e6:23:5c:28:fd:ac:c0:3d:3d:ef:c4:82:2c:e8:08:8d:ac:c4: 23:7c:c6:eb:84:df:1c:e6:7a:d4:0d:ef:59:c7:89:20:c3:41: 80:84:c7:be:69:84:97:fb:73:8d:51:29:af:f4:8b:ae:67:ba: 0a:24:5a:d2:ac:33:61:33:35:d1:3e:97:d4:49:b4:d7:06:52: bc:01:da:20:e8:fc:d4:f6:27:1c:35:57:28:4a:56:5d:45:db: 8a:d5:7a:e5:33:ae:59:33:87:38:ce:05:39:ca:cc:ec:99:c9: bf:f5:1e:7b:ff:f4:09:ce:72:f6:4d:41:6d:b2:6b:85:dc:ef: e2:a2:1a:7a:e9:4b:00:b8:aa:96:a4:f6:ca:63:44:6a:2d:18: 72:3d:ad:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3wdPqI88Zih1QOnxNv1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMmE2OTVjNDEyMjFkZDhlZGRjZmM1YzRiNWNjMGI3ODlj Yjk1M2IwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD Eyg5YmMyNjViYmU4NjAyY2FmYjZmOTgzZTllYTJjZjU5ZTVlNDI1N2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz8gesfFcrQ4uJz+mWNz6rp0ZAy0 FU1yibcC+FYhito1Coo+9IAkkC69L4boT2pW2qG0gujGtgWGABMicj6JMf4rVU2j lVTPiU7XLr+tUfk8buEC81mCdxfpo/VVN1cVZqtpT2ZYcFPuiPnL5n4JVj3jc4fB L8Rl2fqXa+YFRPljQAGgwa4z8HWH8iXeCUz0IEf+Nm42YSEx5PWJFYHAB3qAMWbH kihPYJLuBQ0mRAsTt5+GoiNkTAM5K7JG3f51ZOYJSgEPtC9YPkT0o/8Y2CwCBy1n FRkiPFUT75acwitsZtLJ+y+w0ThWIs1eS5cuY7PzEk0Wek+CRgsn8E+QDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvCZbvoYCyvtvmD6eos9Z5eQlfBMB8GA1UdIwQY MBaAFN0qaVxBIh3Y7dz8XEtcwLeJy5U7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85NGFjMTctZjlkZC00OWY2LWE4OGEt MjA4ZGMwNjhkNTNjLzEvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85NGFjMTctZjlkZC00OWY2LWE4OGEtMjA4ZGMwNjhkNTNj LzEvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5VLHg+x cpLiv39cnsQDo3QErg/TvggGB1TxJjtv8W+WgvkBEk9fY1W8qMvKMOvVEwpkiIT8 PpCJB34xNh66IC8rXnEJf8tlXSX61WN+gsIIDl4VFCAXaUnAxh9oBomaXubzJIN8 xCkYqRvt5iNcKP2swD0978SCLOgIjazEI3zG64TfHOZ61A3vWceJIMNBgITHvmmE l/tzjVEpr/SLrme6CiRa0qwzYTM10T6X1Em01wZSvAHaIOj81PYnHDVXKEpWXUXb itV65TOuWTOHOM4FOcrM7JnJv/Uee//0Cc5y9k1BbbJrhdzv4qIaeulLALiqlqT2 ymNEai0Ycj2tAg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:52 2025 by rpki-client