This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft File: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json) Hash identifier: m+Z9722f4N38xce2pH3Mcyyi/zgjlgFumnfJeNpCYJU= Subject key identifier: FD:35:74:33:B8:9A:A8:55:96:0E:E5:30:22:31:7A:13:0A:49:2F:EF Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08 Certificate issuer: /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08 Certificate serial: 019AF276CB8B1B59CD6167340A657E8A2E9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft Manifest number: 0E95 Signing time: Sat 06 Dec 2025 07:01:02 +0000 Manifest this update: Sat 06 Dec 2025 07:01:02 +0000 Manifest next update: Sun 07 Dec 2025 07:01:02 +0000 Files and hashes: 1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: v07r4xxZndzUElOBhvP+Fn03eG+JOpa3lmfjOFiL+sc=) 2: 9o3lcP-4u3MnLvx0kAlBujW4rP8.roa (hash: dshKKlZMjXCloMnE9oVR3HuOAnY6dIKys+Z7e0GPVnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:cb:8b:1b:59:cd:61:67:34:0a:65:7e:8a:2e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08 Validity Not Before: Dec 6 07:01:02 2025 GMT Not After : Dec 7 07:01:02 2025 GMT Subject: CN=fd357433b89aa855960ee53022317a130a492fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d5:cc:5f:f8:9e:76:dc:d3:7a:9c:9f:85:e7: 51:1d:f3:60:5e:7e:27:6f:a8:9b:f1:ca:94:de:9b: a4:24:36:9d:7d:6b:bc:bc:7e:c2:29:5b:31:2e:2d: a1:d5:fc:a2:ce:25:85:4d:0a:f5:e6:19:e9:9d:ec: 41:6d:ff:34:3b:65:f3:a4:06:42:71:6a:d8:9a:3f: 0f:97:d7:c4:dc:60:c2:96:9e:10:40:27:6a:eb:b6: b7:a9:17:c3:b3:2f:56:a5:46:16:a3:b4:c1:ac:6d: 31:32:3c:1c:71:be:8f:0f:6c:97:ed:f1:e6:97:4e: 38:3c:00:e8:84:5d:4e:14:7f:01:12:3e:f3:cc:89: fa:3c:95:8b:cf:98:c3:f8:24:89:21:83:3b:c2:59: f1:3a:89:7f:52:4a:50:c6:b2:ea:b0:35:e9:64:06: 8d:5e:51:78:bc:50:9c:bf:45:dd:d5:be:c6:3b:d5: ad:7e:60:cd:a7:bc:86:20:5d:7e:fc:37:a5:17:a6: 97:67:63:f1:3b:7c:d9:cc:0e:cb:5f:70:98:a9:70: 35:ee:4e:91:99:b7:00:32:e4:06:4d:15:d7:86:8b: ec:f4:ca:ed:86:b3:09:5e:1b:cb:24:91:a5:40:e9: 05:b2:9e:4e:71:dd:06:02:c0:4c:f0:72:cd:cf:1e: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:35:74:33:B8:9A:A8:55:96:0E:E5:30:22:31:7A:13:0A:49:2F:EF X509v3 Authority Key Identifier: keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d4:6c:b3:16:7a:2d:07:19:e6:f5:16:29:a1:9b:b9:8a:1d: a5:b7:d3:2f:91:e9:96:56:79:e7:32:63:74:0c:13:3a:97:e8: 42:ec:01:55:34:d2:82:92:60:fd:ed:0d:59:1e:27:6d:40:48: 8b:71:1d:01:71:40:a4:ce:c3:ce:24:fc:68:23:89:f1:c1:bd: 41:c3:cd:47:3e:a7:77:75:d4:45:d6:03:b4:a5:f2:b0:dd:1f: 6d:23:a3:cd:c6:6c:7a:e3:4b:01:5c:b8:3f:4a:72:55:c8:ed: 1c:88:2d:93:28:00:75:13:64:21:f3:5e:f9:2a:6a:2f:b1:ff: 01:44:d8:59:bd:fc:09:e3:5c:fd:46:9b:3e:f4:30:47:e8:33: d5:f5:63:cb:42:2c:63:ec:8d:80:a1:67:81:8a:2d:27:a7:90: 53:d8:e5:3d:5d:c9:f2:01:9c:cc:46:8f:bc:aa:c5:9b:2c:51: 81:04:3c:ef:af:ea:ef:6c:12:06:45:87:84:27:17:e9:dc:1a: 91:11:19:a5:d7:f3:63:d1:d4:6e:dc:60:77:28:36:01:f5:23: ea:53:4b:e9:94:20:aa:eb:f2:2c:a8:8c:43:b2:53:0c:7b:5f: da:87:92:2e:86:34:b6:84:31:a5:ea:f1:02:dc:74:e9:7c:89: df:69:59:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsuLG1nNYWc0CmV+ii6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNTJmZWU5NTQyZDYzYTY4ZTQ5YjJjOGVkNzgzOGY4YTAz NDZiMDgwHhcNMjUxMjA2MDcwMTAyWhcNMjUxMjA3MDcwMTAyWjAzMTEwLwYDVQQD EyhmZDM1NzQzM2I4OWFhODU1OTYwZWU1MzAyMjMxN2ExMzBhNDkyZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNXMX/iedtzTepyfhedRHfNgXn4n b6ib8cqU3pukJDadfWu8vH7CKVsxLi2h1fyiziWFTQr15hnpnexBbf80O2XzpAZC cWrYmj8Pl9fE3GDClp4QQCdq67a3qRfDsy9WpUYWo7TBrG0xMjwccb6PD2yX7fHm l044PADohF1OFH8BEj7zzIn6PJWLz5jD+CSJIYM7wlnxOol/UkpQxrLqsDXpZAaN XlF4vFCcv0Xd1b7GO9WtfmDNp7yGIF1+/DelF6aXZ2PxO3zZzA7LX3CYqXA17k6R mbcAMuQGTRXXhovs9MrthrMJXhvLJJGlQOkFsp5Ocd0GAsBM8HLNzx4wNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP01dDO4mqhVlg7lMCIxehMKSS/vMB8GA1UdIwQY MBaAFN5S/ulULWOmjkmyyO14OPigNGsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmUzYjMtYWI1NS00YWM5LWJiMjgt YTRmMzMzNjU0Y2M5LzEvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC83NmUzYjMtYWI1NS00YWM5LWJiMjgtYTRmMzMzNjU0Y2M5 LzEvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdRssxZ6 LQcZ5vUWKaGbuYodpbfTL5HpllZ55zJjdAwTOpfoQuwBVTTSgpJg/e0NWR4nbUBI i3EdAXFApM7DziT8aCOJ8cG9QcPNRz6nd3XURdYDtKXysN0fbSOjzcZseuNLAVy4 P0pyVcjtHIgtkygAdRNkIfNe+SpqL7H/AUTYWb38CeNc/UabPvQwR+gz1fVjy0Is Y+yNgKFngYotJ6eQU9jlPV3J8gGczEaPvKrFmyxRgQQ876/q72wSBkWHhCcX6dwa kREZpdfzY9HUbtxgdyg2AfUj6lNL6ZQgquvyLKiMQ7JTDHtf2oeSLoY0toQxperx Atx06XyJ32lZoA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:37:15 2025 by rpki-client