This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json) Hash identifier: A81vVWvDjbtzQQnZRWLqd2KEE6c+Vi4V/GdwLL/Of/8= Subject key identifier: 1A:2D:15:82:80:3F:14:A9:33:A9:8B:E5:47:6B:D6:50:42:09:06:50 Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95 Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695 Certificate serial: 019AF2AD843AF6FA0838863F642E5AD8BF99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:00:49 +0000 Manifest this update: Sat 06 Dec 2025 08:00:49 +0000 Manifest next update: Sun 07 Dec 2025 08:00:49 +0000 Files and hashes: 1: 6D6NbO4mpX3571YePb7wBqCbgBc.roa (hash: 360JpGFWi4fwKRE3FPgMGW/rJz0k3wsKNSQFnzGnVZI=) 2: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: 6rLFVDxd1G+NnG/Boqe4uqMzXMJyQoRwWI7FnwKDxPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:84:3a:f6:fa:08:38:86:3f:64:2e:5a:d8:bf:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695 Validity Not Before: Dec 6 08:00:49 2025 GMT Not After : Dec 7 08:00:49 2025 GMT Subject: CN=1a2d1582803f14a933a98be5476bd65042090650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:25:0a:05:54:91:49:d1:60:72:0a:46:7a:a0: 02:80:36:dd:79:17:0e:51:dd:b9:8c:3c:57:1e:ac: c6:f7:8e:54:fe:bd:ba:19:84:89:35:39:30:c2:a8: 5b:b8:29:c4:cf:5a:09:89:5e:c8:c5:ca:57:53:b6: 3a:aa:6c:1d:9c:98:03:3f:37:75:31:f8:ec:f5:a6: 2b:34:da:88:3b:22:51:47:6f:7d:64:d5:89:af:4e: 22:e5:e0:a1:ff:c2:69:00:3c:15:77:15:91:2f:89: d6:e5:05:c6:d2:a2:99:50:6a:e5:0f:81:06:2b:39: a4:ea:ae:51:2b:2f:f6:e3:fa:fd:d6:22:2c:7c:d8: 94:9a:01:92:b9:b0:24:6a:7c:20:2d:f0:a7:4c:f4: 74:3c:d0:03:e8:31:11:2f:2b:25:a5:f8:73:8b:2f: ca:54:be:33:99:21:c0:4d:c6:84:aa:22:79:ae:48: a4:f1:40:3b:48:c4:5b:24:fa:a1:77:8e:3a:f1:67: 4e:93:a2:6e:d9:37:30:6b:eb:75:8a:53:06:8e:4b: 6f:54:55:e0:a0:35:88:68:81:a9:ad:47:19:42:68: 51:01:ff:b5:91:1f:9f:6b:a9:ef:7a:1c:37:73:3b: 84:64:bf:59:2a:36:3f:36:22:aa:94:4f:fb:a5:5a: 8c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2D:15:82:80:3F:14:A9:33:A9:8B:E5:47:6B:D6:50:42:09:06:50 X509v3 Authority Key Identifier: keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ec:df:2b:cb:1f:64:f1:16:6c:0a:d1:78:56:14:4c:d9:41: 09:3d:aa:90:e1:0b:f7:2f:e9:8c:97:26:31:4f:67:5c:59:4c: a7:7a:36:d2:61:9d:3f:9c:d2:0f:47:f0:9e:ab:3f:eb:b9:d3: 24:5e:6a:2b:1d:f7:b8:66:9a:3c:59:ac:f7:1a:31:ea:37:83: 97:dd:f1:50:eb:93:37:32:c4:7c:8a:48:0b:c1:2c:24:b3:fd: a7:e1:c6:8b:87:65:99:01:bc:f0:04:22:85:7f:84:03:43:7f: f6:9a:a0:02:22:1f:08:74:6f:41:8c:64:81:e1:2e:87:82:bb: 25:01:51:ae:ae:31:27:c7:a8:43:b2:1f:00:e2:95:d8:9f:e1: 60:1a:b5:4b:6e:78:22:9b:1c:97:09:c6:6b:54:bb:e7:9f:2f: b4:fb:86:fe:0b:1a:0a:85:83:a6:0d:c4:60:63:66:97:e5:57: 9e:94:ab:8c:d5:49:70:a9:01:a9:e2:71:31:5c:e0:d3:2d:45: eb:eb:87:6e:cc:68:1f:d6:ff:44:ed:70:19:5f:e3:56:ab:f2: 2e:50:a9:7f:5e:c4:32:9b:19:65:9d:aa:1e:d2:8e:46:b6:03: 3a:db:71:51:35:fb:a1:46:b9:b4:ee:4e:d4:15:3b:98:75:d7: 56:ef:67:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYQ69voIOIY/ZC5a2L+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNzI3NmM0ZDhjZmFmYzA0YzI2Zjg1ZmIzNGZkOWVjZTQ3 Njk2OTUwHhcNMjUxMjA2MDgwMDQ5WhcNMjUxMjA3MDgwMDQ5WjAzMTEwLwYDVQQD EygxYTJkMTU4MjgwM2YxNGE5MzNhOThiZTU0NzZiZDY1MDQyMDkwNjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCUKBVSRSdFgcgpGeqACgDbdeRcO Ud25jDxXHqzG945U/r26GYSJNTkwwqhbuCnEz1oJiV7IxcpXU7Y6qmwdnJgDPzd1 Mfjs9aYrNNqIOyJRR299ZNWJr04i5eCh/8JpADwVdxWRL4nW5QXG0qKZUGrlD4EG Kzmk6q5RKy/24/r91iIsfNiUmgGSubAkanwgLfCnTPR0PNAD6DERLyslpfhziy/K VL4zmSHATcaEqiJ5rkik8UA7SMRbJPqhd4468WdOk6Ju2Tcwa+t1ilMGjktvVFXg oDWIaIGprUcZQmhRAf+1kR+fa6nvehw3czuEZL9ZKjY/NiKqlE/7pVqMkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBotFYKAPxSpM6mL5Udr1lBCCQZQMB8GA1UdIwQY MBaAFP9ydsTYz6/ATCb4X7NP2ezkdpaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzNKMnhOalByOEJNSnZoZnMwX1o3T1IybHBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85ZGY4MTEtMDdkYy00ZmRmLTkxMTgt NzdmZDRkMWU1YjI2LzEvXzNKMnhOalByOEJNSnZoZnMwX1o3T1IybHBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC85ZGY4MTEtMDdkYy00ZmRmLTkxMTgtNzdmZDRkMWU1YjI2 LzEvXzNKMnhOalByOEJNSnZoZnMwX1o3T1IybHBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+zfK8sf ZPEWbArReFYUTNlBCT2qkOEL9y/pjJcmMU9nXFlMp3o20mGdP5zSD0fwnqs/67nT JF5qKx33uGaaPFms9xox6jeDl93xUOuTNzLEfIpIC8EsJLP9p+HGi4dlmQG88AQi hX+EA0N/9pqgAiIfCHRvQYxkgeEuh4K7JQFRrq4xJ8eoQ7IfAOKV2J/hYBq1S254 IpsclwnGa1S7558vtPuG/gsaCoWDpg3EYGNml+VXnpSrjNVJcKkBqeJxMVzg0y1F 6+uHbsxoH9b/RO1wGV/jVqvyLlCpf17EMpsZZZ2qHtKORrYDOttxUTX7oUa5tO5O 1BU7mHXXVu9n9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 16:08:50 2025 by rpki-client