This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json) Hash identifier: L1xdsUl8Ag0znOBflis9J/paKPLvEN1GTKmp5vBDNOY= Subject key identifier: 8F:9E:EC:F2:0A:3F:AD:E0:8B:88:DE:80:1F:B5:9D:CD:7B:DF:A2:7D Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1 Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1 Certificate serial: 019AF4651405C0BF0AF0C2E0358BBB77F618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:00:56 +0000 Manifest this update: Sat 06 Dec 2025 16:00:56 +0000 Manifest next update: Sun 07 Dec 2025 16:00:56 +0000 Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: oFLr/nedyFysS+O5Cqbqb8DHIe5HfIF1yk2D913/yZk=) 2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=) 3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:14:05:c0:bf:0a:f0:c2:e0:35:8b:bb:77:f6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1 Validity Not Before: Dec 6 16:00:56 2025 GMT Not After : Dec 7 16:00:56 2025 GMT Subject: CN=8f9eecf20a3fade08b88de801fb59dcd7bdfa27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:97:9e:66:d8:e2:71:ce:bf:fd:01:c1:66:11: ef:14:22:41:3f:a0:b3:26:4c:c4:61:e7:be:11:25: 59:6a:84:40:d0:f7:49:df:60:c0:fc:6b:73:66:33: f8:21:4a:f4:70:2e:aa:de:05:96:d6:9e:92:da:aa: 77:70:44:54:0b:c5:b7:f8:6d:dd:16:9b:05:95:8b: 7f:c3:4c:18:e7:59:22:1b:8f:a3:3b:bf:5c:dd:7b: 18:dc:ee:35:36:28:97:94:65:c9:45:c6:20:99:5e: 55:f3:6c:bd:27:4d:a0:b1:d7:90:52:bd:6b:60:ad: c7:36:00:8e:22:8f:ae:3e:5b:1a:40:28:57:c4:c7: e8:1d:85:90:e4:00:5d:80:0d:ec:a5:a1:6d:c7:a2: 5a:50:c7:5c:dc:45:2f:3e:5c:1a:f2:6d:05:47:dc: 9d:cb:2d:ec:8e:90:c9:3e:6b:10:66:55:c4:61:31: 48:6c:b7:35:1e:cd:42:50:df:2b:a0:53:f4:8a:0b: cb:66:e5:ee:74:fe:3d:37:cd:10:84:11:5c:35:ac: 71:11:38:53:8a:0a:63:98:91:c7:a3:b6:bc:93:6b: 86:17:cb:14:07:92:f9:e1:e8:53:49:2d:18:28:e0: 89:1c:6e:a6:0c:c7:e9:c2:c5:db:c5:b1:d1:99:45: 3d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9E:EC:F2:0A:3F:AD:E0:8B:88:DE:80:1F:B5:9D:CD:7B:DF:A2:7D X509v3 Authority Key Identifier: keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:2e:e0:e9:8d:bd:4a:a5:11:95:6f:c3:44:2f:94:53:ce:b5: b6:a7:51:d1:09:95:27:2a:9e:71:b0:22:d6:9e:fb:a9:11:fb: a3:b5:7a:8e:fa:a8:38:42:75:53:2e:5e:84:e6:d2:23:ca:e5: 3c:47:16:ac:38:19:09:e0:00:14:64:a1:06:81:13:79:53:c2: 1d:49:6a:0f:2c:e4:ef:08:1c:40:29:80:80:b2:71:49:9c:7b: cb:a3:00:ba:a0:92:d0:3b:b4:ac:f6:45:f7:c1:20:ca:7e:f4: f0:ee:66:53:98:b3:4f:45:de:4f:3f:96:4d:5c:94:dc:48:ee: 00:ff:fe:65:7c:2d:8e:d5:17:bc:6e:c2:86:ad:de:58:10:3d: 91:17:c0:b7:76:b6:75:5a:6b:77:be:0f:cd:fa:12:17:90:46: a5:1f:1c:7c:ef:5d:1f:84:10:69:bb:d0:11:d8:6f:52:aa:5d: 19:cf:e2:65:50:e4:57:2c:da:d3:d9:16:78:c7:59:23:67:1c: 4f:41:0e:50:55:bd:46:3f:fc:a3:4f:5c:7b:11:8d:1c:9f:76: 54:c5:cc:1f:65:90:63:bd:f4:47:b7:59:c3:3f:1b:46:92:02: 36:4c:69:02:24:36:d3:8f:d4:a1:7a:9d:d2:d6:33:42:16:6d: 58:49:c2:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRQFwL8K8MLgNYu7d/YYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYTQ2ZWFhZTdhZWYyZjQ0ZmU2NjAxNjJiYjlkYzcwZDY1 MjVhZjEwHhcNMjUxMjA2MTYwMDU2WhcNMjUxMjA3MTYwMDU2WjAzMTEwLwYDVQQD Eyg4ZjllZWNmMjBhM2ZhZGUwOGI4OGRlODAxZmI1OWRjZDdiZGZhMjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35eeZtjicc6//QHBZhHvFCJBP6Cz JkzEYee+ESVZaoRA0PdJ32DA/GtzZjP4IUr0cC6q3gWW1p6S2qp3cERUC8W3+G3d FpsFlYt/w0wY51kiG4+jO79c3XsY3O41NiiXlGXJRcYgmV5V82y9J02gsdeQUr1r YK3HNgCOIo+uPlsaQChXxMfoHYWQ5ABdgA3spaFtx6JaUMdc3EUvPlwa8m0FR9yd yy3sjpDJPmsQZlXEYTFIbLc1Hs1CUN8roFP0igvLZuXudP49N80QhBFcNaxxEThT igpjmJHHo7a8k2uGF8sUB5L54ehTSS0YKOCJHG6mDMfpwsXbxbHRmUU9XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+e7PIKP63gi4jegB+1nc1736J9MB8GA1UdIwQY MBaAFN6kbqrnrvL0T+ZgFiu53HDWUlrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEt MWZhOWFjNTgwYjhlLzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEtMWZhOWFjNTgwYjhl LzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqC7g6Y29 SqURlW/DRC+UU861tqdR0QmVJyqecbAi1p77qRH7o7V6jvqoOEJ1Uy5ehObSI8rl PEcWrDgZCeAAFGShBoETeVPCHUlqDyzk7wgcQCmAgLJxSZx7y6MAuqCS0Du0rPZF 98Egyn708O5mU5izT0XeTz+WTVyU3EjuAP/+ZXwtjtUXvG7Chq3eWBA9kRfAt3a2 dVprd74PzfoSF5BGpR8cfO9dH4QQabvQEdhvUqpdGc/iZVDkVyza09kWeMdZI2cc T0EOUFW9Rj/8o09cexGNHJ92VMXMH2WQY730R7dZwz8bRpICNkxpAiQ204/UoXqd 0tYzQhZtWEnCpg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:15:58 2025 by rpki-client