This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json) Hash identifier: roB3LNMkgLj3mLOI2Cwlo1TBz3nrBxPTONsKGuMODBk= Subject key identifier: 91:DD:CB:F4:2C:6F:A5:6B:A8:E6:03:7E:5E:F0:11:C5:31:70:A9:A1 Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03 Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203 Certificate serial: 019AF6532D6C609FF40DA6078751E1446A4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft Manifest number: 0534 Signing time: Sun 07 Dec 2025 01:00:37 +0000 Manifest this update: Sun 07 Dec 2025 01:00:37 +0000 Manifest next update: Mon 08 Dec 2025 01:00:37 +0000 Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: gEe4I8I1Ld8d/JJSNYiu/JMnYRoeMwb/QTJuW5cJFCw=) 2: Opp8U8aeHzNwIE0mPBiUqooeCJQ.roa (hash: V/D3sQNgSw6lGL7igciFA6sJiWbs7FF9hEBFUMCcvFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:2d:6c:60:9f:f4:0d:a6:07:87:51:e1:44:6a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203 Validity Not Before: Dec 7 01:00:37 2025 GMT Not After : Dec 8 01:00:37 2025 GMT Subject: CN=91ddcbf42c6fa56ba8e6037e5ef011c53170a9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e0:03:70:8d:ec:2a:f0:4d:b1:14:ae:4f:85: 4e:cb:73:3a:b9:19:f5:4e:6a:cc:b7:e4:37:58:89: fd:9a:a4:84:6e:82:14:de:12:ca:81:25:9b:5d:3d: 64:6a:2a:01:59:4d:ae:df:7a:71:6b:66:94:fe:c3: ab:41:2c:94:e1:2c:1d:5a:be:ee:3f:28:27:3c:55: 2d:3a:2c:de:1d:07:96:2c:a9:03:a6:86:42:95:1b: c3:dd:7d:1d:37:17:86:f7:58:61:41:c3:7c:36:21: d1:46:55:18:46:c4:03:ec:41:1e:eb:a0:38:f8:dd: 58:b5:35:70:cb:af:0c:84:cf:75:d7:3f:d4:cf:28: f4:ef:48:da:98:37:25:a9:d5:a9:01:36:3a:cb:b3: 7a:9e:2b:98:58:5e:52:44:6b:2d:d9:29:a1:c7:88: 4d:5a:a8:6f:15:fe:ef:0e:65:ca:c6:56:98:37:b1: 97:8e:d0:fd:40:a2:04:92:26:80:32:65:e9:f3:56: 93:78:35:7b:b6:1a:f6:0d:ee:11:77:81:e8:ea:25: fb:e3:13:2b:fc:ab:dc:67:e8:8c:89:41:57:0c:0e: 11:3a:05:86:16:fb:f7:0e:69:24:39:5a:68:03:7e: 06:d2:41:5a:eb:60:69:37:f9:6b:7c:b9:33:7f:cf: 0d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DD:CB:F4:2C:6F:A5:6B:A8:E6:03:7E:5E:F0:11:C5:31:70:A9:A1 X509v3 Authority Key Identifier: keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:4d:77:9d:32:09:e6:1f:0d:20:46:fc:ca:45:a9:54:95:e8: 31:43:2f:1f:9c:a7:9a:d9:57:b7:9a:4f:a5:49:26:9a:22:a7: b9:d8:3a:33:f6:d1:2f:14:ae:5d:06:e3:e2:12:c1:25:85:ff: f7:3b:a6:62:4c:3c:34:07:48:c7:10:32:6a:b4:5b:17:c5:1b: bd:2f:d9:33:60:4b:e6:5b:b0:2f:d9:4f:39:2d:2b:07:72:c4: bb:53:4b:8b:90:61:18:d8:4b:32:1e:7c:df:e7:ac:31:e8:42: c2:15:0d:76:04:f2:00:54:ff:22:76:b5:5b:65:37:69:ea:4c: cc:84:23:24:d0:95:00:f6:02:ed:a9:5e:5a:ba:c3:26:44:4d: dc:b7:9c:5e:1c:f7:1d:0e:81:91:06:1a:e7:a8:fa:2d:12:ad: 3e:d0:2d:61:8d:44:7a:ae:d8:55:17:86:bb:02:c4:10:5d:8f: b7:06:d5:fb:2c:23:1b:ab:22:40:34:3a:ff:3a:91:eb:60:e5: f7:c8:3d:cd:bb:11:81:63:c7:1d:b7:b4:87:23:48:5a:ed:73: 1b:7a:c6:c1:ce:19:24:27:e0:62:26:bb:4d:d3:da:7b:ab:38: 37:44:5f:86:a4:a0:18:73:b8:59:ae:ce:45:46:21:cd:76:de: ca:95:f9:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2Uy1sYJ/0DaYHh1HhRGpMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZGVkM2VhM2JhNjczYTgwOGNmNWU2YWRjYjUxZWE3ZjMz ZjQyMDMwHhcNMjUxMjA3MDEwMDM3WhcNMjUxMjA4MDEwMDM3WjAzMTEwLwYDVQQD Eyg5MWRkY2JmNDJjNmZhNTZiYThlNjAzN2U1ZWYwMTFjNTMxNzBhOWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eADcI3sKvBNsRSuT4VOy3M6uRn1 TmrMt+Q3WIn9mqSEboIU3hLKgSWbXT1kaioBWU2u33pxa2aU/sOrQSyU4SwdWr7u PygnPFUtOizeHQeWLKkDpoZClRvD3X0dNxeG91hhQcN8NiHRRlUYRsQD7EEe66A4 +N1YtTVwy68MhM911z/Uzyj070jamDclqdWpATY6y7N6niuYWF5SRGst2Smhx4hN WqhvFf7vDmXKxlaYN7GXjtD9QKIEkiaAMmXp81aTeDV7thr2De4Rd4Ho6iX74xMr /KvcZ+iMiUFXDA4ROgWGFvv3DmkkOVpoA34G0kFa62BpN/lrfLkzf88N2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHdy/Qsb6VrqOYDfl7wEcUxcKmhMB8GA1UdIwQY MBaAFNze0+o7pnOoCM9eaty1HqfzP0IDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMt MTU3MzBlMjQ2YmE2LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMtMTU3MzBlMjQ2YmE2 LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw013nTIJ 5h8NIEb8ykWpVJXoMUMvH5ynmtlXt5pPpUkmmiKnudg6M/bRLxSuXQbj4hLBJYX/ 9zumYkw8NAdIxxAyarRbF8UbvS/ZM2BL5luwL9lPOS0rB3LEu1NLi5BhGNhLMh58 3+esMehCwhUNdgTyAFT/Ina1W2U3aepMzIQjJNCVAPYC7aleWrrDJkRN3LecXhz3 HQ6BkQYa56j6LRKtPtAtYY1Eeq7YVReGuwLEEF2PtwbV+ywjG6siQDQ6/zqR62Dl 98g9zbsRgWPHHbe0hyNIWu1zG3rGwc4ZJCfgYia7TdPae6s4N0RfhqSgGHO4Wa7O RUYhzXbeypX5Cg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:01 2025 by rpki-client