This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft File: 3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json) Hash identifier: ZS8Av59d/hV+KOG1WkZUSk2rOq79VZ2CHiOg36YZiPc= Subject key identifier: 8E:C8:5C:F3:DC:DC:7B:B1:96:34:1C:DA:DF:70:4C:65:3D:65:C8:DA Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1 Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1 Certificate serial: 019AF2AD3963BBF138127A30063888D2F313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft Manifest number: 153B Signing time: Sat 06 Dec 2025 08:00:29 +0000 Manifest this update: Sat 06 Dec 2025 08:00:29 +0000 Manifest next update: Sun 07 Dec 2025 08:00:29 +0000 Files and hashes: 1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: Zt1WsiI+EM/MPnEGCs0YATjP+iFNhY74WlOrDX5gXCA=) 2: _TZfk1Rmeyf1zvc7aTw1N_o9jl4.roa (hash: YhjRwkXWYnkbx6aMihX7dtN/B/p9Fk3n2XWBk8oSMZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:39:63:bb:f1:38:12:7a:30:06:38:88:d2:f3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1 Validity Not Before: Dec 6 08:00:29 2025 GMT Not After : Dec 7 08:00:29 2025 GMT Subject: CN=8ec85cf3dcdc7bb196341cdadf704c653d65c8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:0d:75:8b:93:84:51:d7:da:89:b6:8a:f7: 15:0b:a7:66:b7:55:c1:b8:bc:4e:df:71:2e:ce:20: f0:bb:89:8f:f9:a2:54:dd:1d:fe:68:36:b7:46:ef: f2:2e:de:c9:ec:cc:21:64:e4:e0:11:bd:ab:66:55: ac:35:a2:ed:00:63:e2:8d:28:87:a7:c0:ba:f3:a3: 2c:42:10:76:ef:39:c6:05:f0:bc:d9:90:63:be:bb: 4f:d2:86:11:58:bb:d1:25:1d:d7:d6:c4:e1:d7:56: 76:f1:28:0e:12:b1:fa:43:04:65:de:ca:eb:b1:a8: 62:de:ff:12:09:a8:ad:74:b2:5d:8f:ba:a0:a1:bd: fe:f8:96:ac:88:3a:e2:27:d8:62:c8:7f:9f:f7:37: 27:45:8d:3f:56:23:4e:df:c5:59:5d:5d:4f:41:fe: 8b:eb:be:74:8f:cf:b5:27:16:a1:8f:28:d8:64:4d: fb:a2:92:2c:24:c1:71:00:31:24:2d:6e:cc:e1:2f: d3:72:35:b5:6c:f7:53:56:1c:62:63:0a:84:97:e4: af:bc:11:5d:a2:a2:b4:9f:89:89:82:d4:e5:e9:b9: b5:e8:ca:d2:71:4c:7b:43:d3:cd:63:1e:a4:e4:c4: 2a:7c:d6:31:81:86:ee:ab:26:f9:c5:5b:d3:d0:28: d2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C8:5C:F3:DC:DC:7B:B1:96:34:1C:DA:DF:70:4C:65:3D:65:C8:DA X509v3 Authority Key Identifier: keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:68:f3:49:fb:fa:85:e9:26:76:a7:a0:bd:cb:b4:84:83:11: 5b:b7:3e:f1:d2:06:e8:7f:de:40:f2:cb:8f:04:2d:a2:2b:4d: 4a:90:93:05:66:e5:60:5d:43:50:40:ce:4a:3e:b2:4b:3f:d1: 73:18:81:9e:84:80:ac:e7:ac:b0:db:f2:fd:61:32:aa:de:4f: fd:c8:62:4a:5d:db:1d:62:7d:8a:fe:92:63:e4:d6:82:4f:08: c5:2d:5a:ce:77:78:55:53:e7:d6:7c:e1:fb:c2:2f:51:db:fc: 43:49:1a:ce:f4:29:15:44:fe:98:ea:3b:f3:0d:32:1a:ce:60: 87:91:43:1c:d6:21:fa:c0:cb:c0:1a:0f:c9:21:f8:63:0b:b9: 7c:f4:de:42:d2:58:78:21:8e:97:2c:52:df:9e:c8:56:cb:ee: 53:8d:78:6c:84:b6:7d:45:08:e4:37:29:2e:99:6a:b0:76:aa: fd:e5:24:3b:09:de:f3:28:77:68:d1:5a:82:a3:fe:aa:3b:bb: 5a:6d:0a:eb:df:1c:c7:e2:75:4e:bf:47:a8:3d:53:63:cf:9a: af:02:4c:ff:51:7f:6c:58:d7:74:a8:cd:42:a1:25:49:25:48: 89:5e:27:66:3b:f3:92:8c:27:52:33:a2:88:dd:7b:ec:31:d4: 7a:b7:f0:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrTlju/E4EnowBjiI0vMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMjQ5NmZlZmY5OTEyNzZiZDFiODUzMzZiNzY5N2E5ODAw Zjg0YzEwHhcNMjUxMjA2MDgwMDI5WhcNMjUxMjA3MDgwMDI5WjAzMTEwLwYDVQQD Eyg4ZWM4NWNmM2RjZGM3YmIxOTYzNDFjZGFkZjcwNGM2NTNkNjVjOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgcNdYuThFHX2om2ivcVC6dmt1XB uLxO33EuziDwu4mP+aJU3R3+aDa3Ru/yLt7J7MwhZOTgEb2rZlWsNaLtAGPijSiH p8C686MsQhB27znGBfC82ZBjvrtP0oYRWLvRJR3X1sTh11Z28SgOErH6QwRl3srr sahi3v8SCaitdLJdj7qgob3++JasiDriJ9hiyH+f9zcnRY0/ViNO38VZXV1PQf6L 6750j8+1JxahjyjYZE37opIsJMFxADEkLW7M4S/TcjW1bPdTVhxiYwqEl+SvvBFd oqK0n4mJgtTl6bm16MrScUx7Q9PNYx6k5MQqfNYxgYbuqyb5xVvT0CjSnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7IXPPc3HuxljQc2t9wTGU9ZcjaMB8GA1UdIwQY MBaAFN0klv7/mRJ2vRuFM2t2l6mAD4TBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS80NjQ3N2EtODcwOC00YjM3LTg3NWIt NjcwMDMwZGNhYzMwLzEvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS80NjQ3N2EtODcwOC00YjM3LTg3NWItNjcwMDMwZGNhYzMw LzEvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuWjzSfv6 hekmdqegvcu0hIMRW7c+8dIG6H/eQPLLjwQtoitNSpCTBWblYF1DUEDOSj6ySz/R cxiBnoSArOessNvy/WEyqt5P/chiSl3bHWJ9iv6SY+TWgk8IxS1aznd4VVPn1nzh +8IvUdv8Q0kazvQpFUT+mOo78w0yGs5gh5FDHNYh+sDLwBoPySH4Ywu5fPTeQtJY eCGOlyxS357IVsvuU414bIS2fUUI5DcpLplqsHaq/eUkOwne8yh3aNFagqP+qju7 Wm0K698cx+J1Tr9HqD1TY8+arwJM/1F/bFjXdKjNQqElSSVIiV4nZjvzkownUjOi iN177DHUerfwRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:31 2025 by rpki-client