This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json) Hash identifier: 5yqHSEt1sKzZLlbmwpe1yz7fGiSpyQ/dtjP1d4uxrpM= Subject key identifier: E0:39:94:4D:7C:91:EF:0F:F1:4F:AD:58:7E:67:0D:82:27:FB:5E:57 Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Certificate serial: 019AF31C950EC2A11DEC9AE19927CF77B90B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft Manifest number: 1203 Signing time: Sat 06 Dec 2025 10:02:07 +0000 Manifest this update: Sat 06 Dec 2025 10:02:07 +0000 Manifest next update: Sun 07 Dec 2025 10:02:07 +0000 Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: MW8fd4QUbxZrHftQxwhJb1Gubul8AlLBGfqKijmdMQI=) 2: FmBFQOhNzhtYDdGU28d2mOWYxkg.roa (hash: AVAVJ+z2q5E9uU0vpHh6beNWBbBTBuDWNk3vwtJ8KHM=) 3: a8dfbuD_49og8AJXwHhNJcwaxsI.roa (hash: W1ipPbq868Ly393rgOf3eds1bM0F3aTAdVR1mM1YvM4=) 4: ebI6lo6FFyrxH7BnniqczSoCpEU.roa (hash: VWIQku3g+eu08iWePk/+zF+lAvowuzYaw8AhxuX9/iY=) 5: h_jTHer5Aq23wlLkPIW1wlKNXPE.roa (hash: nVtfZn1IYIFfisIxpB4xff8+atfWV/QRp+DmC3kUKFE=) 6: iEjwphsnsCkTvYcagBPKufnt2-g.roa (hash: exQmAtQ6POft9PaSsq76nVkrM+e0e7z6aqVk5GRVWO8=) 7: rhaUzcqQYW4tC3EdQCdaNLWOPbA.roa (hash: PvCUNKVTR3gGQiqq6yWqtNwJ314FXo4VLynnYKTFbJo=) 8: uEehilTaJNTK6wTZHHdxxqFauYo.roa (hash: tRIraXpN8mX3nJ3uL7fIgHQ/edV3rhiXldnw6ddpk0I=) 9: x6Fr-1VeTypvMg38CuYZL6Aoelo.roa (hash: ajAlNUJcOgM2msZH/aiPOA3cqagu5/2Oq4Xgzqwcm3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:95:0e:c2:a1:1d:ec:9a:e1:99:27:cf:77:b9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Validity Not Before: Dec 6 10:02:07 2025 GMT Not After : Dec 7 10:02:07 2025 GMT Subject: CN=e039944d7c91ef0ff14fad587e670d8227fb5e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:59:5c:bd:6c:14:05:57:33:ce:37:0d:eb: 6d:df:d6:41:e9:93:35:ac:50:1a:ec:dc:bc:de:19: a6:b3:bb:c5:cd:06:bb:29:df:2e:df:18:63:f0:75: 82:7f:b6:02:53:26:e8:b4:7a:1b:03:cf:b8:ee:89: 2d:55:51:48:4b:4f:04:bd:a1:45:b9:af:35:e1:12: 78:3d:f2:86:a1:6a:30:0e:11:b5:32:8f:ca:ba:0d: 50:af:57:02:a3:ba:bf:0f:52:fa:03:d2:31:9d:91: e0:84:a3:4e:c3:f9:e9:f4:a1:85:83:77:5e:4d:e8: 7f:49:76:64:ac:94:a4:42:fd:a1:4d:d6:29:3e:2e: 3f:73:b9:d0:8d:07:7c:2d:8b:4c:49:bb:d0:1b:57: e9:ee:13:90:2b:d0:0f:91:0b:63:e3:29:e0:12:f8: d7:6a:52:86:d9:6f:9b:35:aa:fd:6b:7b:90:86:e4: 0b:51:61:ed:00:3e:e6:3a:2d:f7:94:20:02:f6:3a: 59:33:a4:73:1b:64:89:99:18:0e:f1:05:6f:23:5e: fd:f3:dd:bb:91:bc:72:c6:72:c4:06:5a:e2:bf:38: c8:aa:8e:5b:73:01:4c:ba:4e:d9:7e:da:07:23:b6: e7:51:4e:c8:9b:cd:35:17:dc:7d:c0:f5:57:c4:94: 61:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:39:94:4D:7C:91:EF:0F:F1:4F:AD:58:7E:67:0D:82:27:FB:5E:57 X509v3 Authority Key Identifier: keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:33:91:6b:1e:2e:e8:c6:68:40:86:b2:ad:f1:fb:1d:20:17: cc:e0:f9:83:22:b3:a4:a9:c9:15:57:3b:06:6d:53:9f:f9:54: d5:47:23:ce:ae:1a:16:cb:a9:94:66:48:ea:37:22:1d:86:b2: 54:a3:dd:92:98:8a:f0:01:2d:9b:a1:9d:83:f6:11:7d:ae:d4: 23:80:c2:e0:e4:aa:6f:81:09:9f:ed:ab:06:25:6b:a4:c8:64: d9:fe:a3:42:b2:dd:0a:1c:c7:b4:9e:c0:7b:43:cd:4f:ce:54: d9:c2:01:84:57:8b:fa:96:bf:a0:66:fc:91:b9:30:ef:c0:cf: 5a:3e:3f:63:f8:f1:1f:00:25:ca:7f:d4:00:3a:85:11:d9:f2: 69:dd:a3:bd:0d:20:f0:7e:c4:10:b5:eb:87:6a:40:4d:e6:c8: 2a:d7:7a:6a:29:c8:bd:22:dd:15:4d:74:00:3d:e7:0f:41:0e: d5:b6:16:78:af:23:99:8e:04:0c:53:ec:18:d2:ec:65:ae:4b: f9:25:a9:37:7e:59:4f:0a:2a:a0:1e:43:cf:8c:64:ac:82:86: 3d:19:86:17:4a:9a:91:f0:50:6b:ea:3f:65:9d:a2:49:66:09: 02:61:b5:b7:f8:30:68:fb:39:cb:2b:94:a3:50:6f:80:d1:70: 3c:ec:98:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJUOwqEd7JrhmSfPd7kLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3 NGNjYjcwHhcNMjUxMjA2MTAwMjA3WhcNMjUxMjA3MTAwMjA3WjAzMTEwLwYDVQQD EyhlMDM5OTQ0ZDdjOTFlZjBmZjE0ZmFkNTg3ZTY3MGQ4MjI3ZmI1ZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lBZXL1sFAVXM843Dett39ZB6ZM1 rFAa7Ny83hmms7vFzQa7Kd8u3xhj8HWCf7YCUybotHobA8+47oktVVFIS08EvaFF ua814RJ4PfKGoWowDhG1Mo/Kug1Qr1cCo7q/D1L6A9IxnZHghKNOw/np9KGFg3de Teh/SXZkrJSkQv2hTdYpPi4/c7nQjQd8LYtMSbvQG1fp7hOQK9APkQtj4yngEvjX alKG2W+bNar9a3uQhuQLUWHtAD7mOi33lCAC9jpZM6RzG2SJmRgO8QVvI1798927 kbxyxnLEBlrivzjIqo5bcwFMuk7ZftoHI7bnUU7Im801F9x9wPVXxJRh/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOA5lE18ke8P8U+tWH5nDYIn+15XMB8GA1UdIwQY MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt NmJhYTNiNTQ4ZDIzLzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzORax4u 6MZoQIayrfH7HSAXzOD5gyKzpKnJFVc7Bm1Tn/lU1Ucjzq4aFsuplGZI6jciHYay VKPdkpiK8AEtm6Gdg/YRfa7UI4DC4OSqb4EJn+2rBiVrpMhk2f6jQrLdChzHtJ7A e0PNT85U2cIBhFeL+pa/oGb8kbkw78DPWj4/Y/jxHwAlyn/UADqFEdnyad2jvQ0g 8H7EELXrh2pATebIKtd6ainIvSLdFU10AD3nD0EO1bYWeK8jmY4EDFPsGNLsZa5L +SWpN35ZTwoqoB5Dz4xkrIKGPRmGF0qakfBQa+o/ZZ2iSWYJAmG1t/gwaPs5yyuU o1BvgNFwPOyY4A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:02:29 2025 by rpki-client