This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json) Hash identifier: nG6i9aainiRzmGdgz/K9K9455z377a6qxUx4AnWWbGw= Subject key identifier: 9D:62:82:25:09:A3:2C:88:98:23:D3:8E:BC:17:40:5C:DC:11:F4:B5 Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89 Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589 Certificate serial: 019AF23F7F69D9047A7FBAF60465AB0537DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft Manifest number: 13EA Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: t7xSUej5ZMMZEniE64abXjuOaW4fJQBRgB4To5QEvlA=) 2: _iwCmsjTAlw634BVcFH9x4y6od0.roa (hash: sGzYd7+zk4VbbBPH9QI8yNwz1RatcjDRVrzAv9yiEMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7f:69:d9:04:7a:7f:ba:f6:04:65:ab:05:37:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589 Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=9d62822509a32c889823d38ebc17405cdc11f4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a1:28:0e:c2:5f:49:49:1a:83:b1:5a:06:cf: cb:a1:8d:7d:af:af:3b:d0:5b:af:50:64:15:93:2d: b2:f9:f6:d1:0e:99:16:69:9c:05:85:a1:7c:d0:99: eb:34:aa:b3:12:31:24:d0:f6:1a:16:50:90:87:63: d2:6b:3f:07:b5:08:c6:ac:2a:96:1e:77:f4:5d:6a: 28:4d:cd:32:c7:81:44:fc:3c:31:5d:e4:71:29:5c: 42:84:69:3a:c0:5d:82:f7:51:8e:f8:a2:7d:15:3a: eb:8c:7f:c5:25:67:4d:b8:48:7c:14:e2:d7:1b:fd: 80:73:28:34:e0:92:c4:a5:8c:3c:f2:86:71:07:e0: ce:a0:7e:df:da:82:a6:42:34:dd:d3:0a:46:75:35: 9f:77:d3:e0:6d:20:b8:3b:a4:90:15:c9:e0:df:42: a9:d4:b3:ed:ca:5f:57:8c:75:6b:72:dc:b3:2e:da: 9b:3d:84:94:d7:92:9b:4f:61:81:5b:58:87:33:bc: 28:ad:c6:d0:12:96:ae:05:9f:7c:aa:2f:2f:f4:5a: 3f:6a:42:d6:42:42:b9:e7:49:19:bc:d1:d3:ce:1c: ef:ad:4c:d9:8f:40:4c:f5:84:b5:50:62:27:b4:c0: ec:8c:c7:76:b6:5f:0d:41:d7:4e:ac:47:d0:16:fe: ac:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:62:82:25:09:A3:2C:88:98:23:D3:8E:BC:17:40:5C:DC:11:F4:B5 X509v3 Authority Key Identifier: keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:89:16:df:46:9e:ee:c2:25:a8:0a:b9:70:9c:9d:70:66:0a: d3:3f:09:46:7c:80:56:71:c8:f5:51:cd:04:aa:fa:f9:35:6e: 5f:1b:f3:38:6c:8f:18:9f:d4:b8:c2:cf:f1:4c:fc:cc:28:f1: 76:88:5c:bc:49:a0:3b:79:33:fa:0f:7f:9c:81:d0:3d:1f:16: 26:1d:c7:e0:58:26:35:05:1d:25:e8:3c:d6:6f:00:9e:50:5a: 95:90:0b:2e:73:87:1d:58:60:1b:c0:ad:01:cb:43:5b:45:ee: af:bc:39:da:c5:c4:2c:d8:fe:7b:db:dc:79:0c:5f:88:8c:5d: 01:7f:9e:3f:28:91:9d:03:6f:7b:06:b6:08:93:52:18:8e:00: cf:7e:23:03:e5:7f:02:d4:ba:ca:6b:b6:f9:81:7f:45:4c:74: 97:85:5e:25:c7:ee:ad:06:7f:09:62:07:11:aa:ec:bc:b3:65: 59:e8:cc:35:98:91:30:86:1d:da:16:86:80:7c:70:40:82:69: 0c:1f:8e:ec:93:0c:4a:d1:58:a7:79:a8:bc:bc:e6:02:2d:ea: 07:93:63:7c:39:c0:07:36:3b:c7:3c:33:1b:50:6e:53:d2:19: 56:46:19:ea:de:06:ca:58:4f:a8:82:dc:52:a4:85:5a:47:79: c1:b1:24:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP39p2QR6f7r2BGWrBTfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDU1NTY5MTc3YTg4OWQzMzdmMDNmMmU2OThhY2FiY2Nj YmI1ODkwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD Eyg5ZDYyODIyNTA5YTMyYzg4OTgyM2QzOGViYzE3NDA1Y2RjMTFmNGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16EoDsJfSUkag7FaBs/LoY19r687 0FuvUGQVky2y+fbRDpkWaZwFhaF80JnrNKqzEjEk0PYaFlCQh2PSaz8HtQjGrCqW Hnf0XWooTc0yx4FE/DwxXeRxKVxChGk6wF2C91GO+KJ9FTrrjH/FJWdNuEh8FOLX G/2Acyg04JLEpYw88oZxB+DOoH7f2oKmQjTd0wpGdTWfd9PgbSC4O6SQFcng30Kp 1LPtyl9XjHVrctyzLtqbPYSU15KbT2GBW1iHM7worcbQEpauBZ98qi8v9Fo/akLW QkK550kZvNHTzhzvrUzZj0BM9YS1UGIntMDsjMd2tl8NQddOrEfQFv6sMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1igiUJoyyImCPTjrwXQFzcEfS1MB8GA1UdIwQY MBaAFN7VVWkXeoidM38D8uaYrKvMy7WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNmFjMmMtYmE2Yy00ZTU1LWIxN2Mt ODRhMWZlOWQ0Yjc4LzEvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iNmFjMmMtYmE2Yy00ZTU1LWIxN2MtODRhMWZlOWQ0Yjc4 LzEvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4kW30ae 7sIlqAq5cJydcGYK0z8JRnyAVnHI9VHNBKr6+TVuXxvzOGyPGJ/UuMLP8Uz8zCjx dohcvEmgO3kz+g9/nIHQPR8WJh3H4FgmNQUdJeg81m8AnlBalZALLnOHHVhgG8Ct ActDW0Xur7w52sXELNj+e9vceQxfiIxdAX+ePyiRnQNvewa2CJNSGI4Az34jA+V/ AtS6ymu2+YF/RUx0l4VeJcfurQZ/CWIHEarsvLNlWejMNZiRMIYd2haGgHxwQIJp DB+O7JMMStFYp3movLzmAi3qB5NjfDnABzY7xzwzG1BuU9IZVkYZ6t4GylhPqILc UqSFWkd5wbEkyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:10 2025 by rpki-client