This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft File: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft (raw, json) Hash identifier: 8lkdaR0Enip4FZNRwenlXqbr8ZG/1duzuHsdMMUsWWk= Subject key identifier: C2:C4:2C:6B:5F:D7:BC:99:AC:36:47:04:C4:FB:B3:12:BF:0A:E1:0E Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A Certificate issuer: /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a Certificate serial: 019AF163E4B2DEC195FEB163730D25E53262 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft Manifest number: 4E Signing time: Sat 06 Dec 2025 02:00:46 +0000 Manifest this update: Sat 06 Dec 2025 02:00:46 +0000 Manifest next update: Sun 07 Dec 2025 02:00:46 +0000 Files and hashes: 1: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl (hash: eXRlp+l53HNRyBCoWTLbHX3TDrhrAsotD+A70X3Io3A=) 2: gLtRgaxc3dQh-hyBwzctMY8Z2Kg.roa (hash: kQ5eH+OBT0t4XuJxKyLguz534gAGBpghvIPZ6PMDpiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e4:b2:de:c1:95:fe:b1:63:73:0d:25:e5:32:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a Validity Not Before: Dec 6 02:00:46 2025 GMT Not After : Dec 7 02:00:46 2025 GMT Subject: CN=c2c42c6b5fd7bc99ac364704c4fbb312bf0ae10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:23:26:12:39:0e:a7:d1:ee:1f:35:04:ce:82: 53:f6:42:20:31:9c:18:65:6b:8e:fe:a6:f8:56:32: de:a8:10:48:cd:cb:83:4d:3c:96:09:12:e4:a3:90: 1f:84:47:c3:c2:00:ee:6f:b6:64:d7:af:d7:be:62: 93:b0:bf:5c:98:13:a3:52:63:ca:73:b8:e7:0c:ad: ff:60:b1:e2:c0:3e:8c:ee:55:0d:ce:9a:84:e7:94: 83:22:95:33:79:d2:ff:11:9f:2f:72:3d:51:63:b0: 12:57:5a:5e:9d:d6:e9:d7:05:44:8f:ac:39:b7:68: 50:8f:ab:ec:ee:d2:d3:04:e9:04:35:d3:cf:f3:1a: 16:b2:f5:15:e3:1c:ab:f1:71:8d:78:80:06:81:55: fa:fd:3e:d5:26:6a:d3:e0:3b:d4:8d:3f:e0:f2:b5: 71:ee:9a:d0:2e:95:0b:91:be:7d:d3:ff:29:68:ea: 88:d0:57:ff:ae:a5:f5:e0:91:95:4f:31:c7:3a:2e: 5b:f0:6f:eb:98:ee:78:f4:41:2e:82:f1:e9:b3:dc: dd:60:61:9d:16:63:f4:8c:12:34:99:ee:56:1a:92: ad:0b:c4:4e:d1:93:71:99:43:c0:6f:44:c0:da:c3: 89:c3:65:76:79:83:89:94:1d:dc:c0:51:37:36:a7: d7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C4:2C:6B:5F:D7:BC:99:AC:36:47:04:C4:FB:B3:12:BF:0A:E1:0E X509v3 Authority Key Identifier: keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:6e:64:a5:a0:24:fa:8c:79:98:e9:3b:05:f1:c4:97:d1:46: 1f:3b:dd:25:5b:0f:01:5a:d0:2f:0b:07:ac:4b:c1:15:fc:e5: 4e:16:f4:ab:e3:b8:bb:38:ed:b9:43:cf:37:15:29:37:d4:8c: ae:51:71:15:81:07:c1:bc:98:d5:49:4c:da:9a:07:d8:0b:7c: 24:c0:3d:cd:44:d8:26:6f:54:fe:15:25:72:34:cf:b6:2a:27: 01:85:a5:27:83:f8:84:17:c4:0f:bf:d5:95:50:14:8b:5f:91: 34:a3:71:74:32:e1:af:2f:f3:38:19:60:8e:e5:fa:9f:bf:59: 2f:91:1d:ec:11:d0:89:31:b2:5c:69:90:23:27:73:27:2f:77: 4a:50:75:11:23:11:8d:13:5f:5a:e9:7f:a7:f4:be:e2:ba:3f: f2:05:28:44:a6:1e:0a:ff:c3:a6:f8:52:94:af:7d:f4:7e:d3: 76:c8:8d:6c:e6:6e:5c:0b:3c:88:62:e4:0c:c7:4d:f2:00:cc: 7b:c8:08:59:47:42:3a:2d:bb:c7:94:b8:c7:a7:55:92:9d:9c: fb:47:77:31:3c:85:c0:12:79:d0:05:09:eb:29:68:19:86:42: a6:7e:d8:ff:cd:71:b7:fb:ee:70:98:87:19:a1:9e:6b:71:90: 5b:a9:19:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+Sy3sGV/rFjcw0l5TJiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMmJjNTQwM2FiMzUzZDVmYzI1ZTVhYWRjZTA5MzJiMjlm NDE3NmEwHhcNMjUxMjA2MDIwMDQ2WhcNMjUxMjA3MDIwMDQ2WjAzMTEwLwYDVQQD EyhjMmM0MmM2YjVmZDdiYzk5YWMzNjQ3MDRjNGZiYjMxMmJmMGFlMTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyMmEjkOp9HuHzUEzoJT9kIgMZwY ZWuO/qb4VjLeqBBIzcuDTTyWCRLko5AfhEfDwgDub7Zk16/XvmKTsL9cmBOjUmPK c7jnDK3/YLHiwD6M7lUNzpqE55SDIpUzedL/EZ8vcj1RY7ASV1pendbp1wVEj6w5 t2hQj6vs7tLTBOkENdPP8xoWsvUV4xyr8XGNeIAGgVX6/T7VJmrT4DvUjT/g8rVx 7prQLpULkb590/8paOqI0Ff/rqX14JGVTzHHOi5b8G/rmO549EEugvHps9zdYGGd FmP0jBI0me5WGpKtC8RO0ZNxmUPAb0TA2sOJw2V2eYOJlB3cwFE3NqfXfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLELGtf17yZrDZHBMT7sxK/CuEOMB8GA1UdIwQY MBaAFN0rxUA6s1PV/CXlqtzgkysp9BdqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1N2RlFEcXpVOVg4SmVXcTNPQ1RLeW4wRjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMjU2NTAtNDcyNy00Zjg4LThmMjEt Yzk5N2FlNmM1YmQ0LzEvM1N2RlFEcXpVOVg4SmVXcTNPQ1RLeW4wRjJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9jMjU2NTAtNDcyNy00Zjg4LThmMjEtYzk5N2FlNmM1YmQ0 LzEvM1N2RlFEcXpVOVg4SmVXcTNPQ1RLeW4wRjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgW5kpaAk +ox5mOk7BfHEl9FGHzvdJVsPAVrQLwsHrEvBFfzlThb0q+O4uzjtuUPPNxUpN9SM rlFxFYEHwbyY1UlM2poH2At8JMA9zUTYJm9U/hUlcjTPtionAYWlJ4P4hBfED7/V lVAUi1+RNKNxdDLhry/zOBlgjuX6n79ZL5Ed7BHQiTGyXGmQIydzJy93SlB1ESMR jRNfWul/p/S+4ro/8gUoRKYeCv/DpvhSlK999H7TdsiNbOZuXAs8iGLkDMdN8gDM e8gIWUdCOi27x5S4x6dVkp2c+0d3MTyFwBJ50AUJ6yloGYZCpn7Y/81xt/vucJiH GaGea3GQW6kZIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:38 2025 by rpki-client