This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json) Hash identifier: OCS7u/69m7rPF4mtax6/2MnuqnGjfxyUucH71B0roRg= Subject key identifier: 6B:A4:32:38:F5:D5:7B:9E:2A:70:E9:ED:FD:9E:EF:B8:37:91:31:D3 Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3 Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3 Certificate serial: 019AF3C083BE2D4E5E0E3E7CF269B344EB9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft Manifest number: 135A Signing time: Sat 06 Dec 2025 13:01:11 +0000 Manifest this update: Sat 06 Dec 2025 13:01:11 +0000 Manifest next update: Sun 07 Dec 2025 13:01:11 +0000 Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: R4ne7aufF76vEzEs94YOHavBLGtL8KXavS9damgBlu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:83:be:2d:4e:5e:0e:3e:7c:f2:69:b3:44:eb:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3 Validity Not Before: Dec 6 13:01:11 2025 GMT Not After : Dec 7 13:01:11 2025 GMT Subject: CN=6ba43238f5d57b9e2a70e9edfd9eefb8379131d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:17:e2:b0:1c:60:d3:17:73:f4:76:7d:e1:64: 9f:b1:19:50:c9:ae:55:cd:71:f7:2b:d2:6d:4e:6a: d3:a4:4b:0b:d5:27:06:e3:73:7e:12:3b:cb:97:0b: 5e:a9:86:5c:4e:6f:8c:49:d6:65:74:d9:5f:5e:98: 44:8a:3f:56:17:ba:54:8d:e7:66:3f:f3:96:04:b3: 91:15:28:d9:06:18:44:1a:b6:2f:70:2a:f0:aa:e8: 79:b2:72:79:c0:a0:8a:1f:0d:de:37:a6:b3:7d:b7: c3:4a:41:fd:7b:48:13:86:28:b2:f3:f3:99:ef:38: 45:92:c1:22:28:3c:4d:9c:4f:86:74:23:aa:b3:af: ec:01:ab:72:ca:4b:03:27:05:c6:2c:21:d3:0e:98: e2:20:ad:fe:de:3d:ef:c3:75:c8:17:6f:3c:dd:62: 92:d8:5a:84:75:2a:3f:41:d9:5c:71:0e:09:a6:71: ab:92:52:20:7d:14:75:b8:ec:bd:7f:f2:fc:d0:2b: 75:ce:98:09:c6:ae:67:ef:23:49:8c:73:f5:b6:0e: bf:16:e2:2b:12:37:54:48:9c:c0:2b:f9:1c:7c:b9: 7f:16:fe:c5:e5:d6:01:b5:6f:bd:98:7b:5c:4b:70: 03:a7:4c:00:6b:c3:0f:d7:99:2f:11:26:1f:a5:a5: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A4:32:38:F5:D5:7B:9E:2A:70:E9:ED:FD:9E:EF:B8:37:91:31:D3 X509v3 Authority Key Identifier: keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b9:89:ba:5d:44:a6:1b:ef:9f:6f:28:5f:c6:be:76:a0:d4: d6:29:db:b6:dd:67:ec:01:8c:4b:4e:e2:09:f9:a1:e7:26:56: 1d:06:27:af:70:b7:bb:93:5d:2b:48:5f:9a:11:71:ab:f1:00: 3b:7a:56:05:b1:c6:6f:ca:cf:06:d2:f3:fe:9c:3c:b1:f9:31: 14:8a:21:29:e0:b4:38:52:83:74:d0:b3:de:65:6c:30:fb:70: b5:0e:0f:7e:f7:f3:71:89:07:d9:67:0f:75:89:ca:58:5d:b8: ce:fb:b8:bf:e8:00:af:dc:4f:67:27:ed:d2:b6:79:7e:52:0a: 80:b3:49:93:f2:6e:47:64:e9:e7:31:6e:c4:f6:8b:11:a8:6a: 2d:05:e9:fc:02:fb:d9:bb:57:26:0f:59:c9:1b:05:30:1b:d0: 5c:b0:17:3d:e8:b8:10:fc:69:60:49:3e:1a:cc:36:f1:d1:37: 30:e6:6b:72:8a:fc:5a:5b:9d:a4:f9:2f:91:09:04:34:ea:6d: db:f2:01:0a:ad:09:ac:39:1d:ba:fa:d2:c5:73:2e:25:91:47: 86:ef:70:f9:e3:01:cb:a4:59:92:66:ff:3b:cc:ff:05:03:2a: 4f:2a:27:41:2e:e2:ee:77:3e:d5:b0:8a:a1:d9:84:5b:a7:f4: e0:7f:f9:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwIO+LU5eDj588mmzROucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYzAxNjc0MDY0NDFlYTE2YzQ3NDA2ZDA1MjJiNWM2NjMw YWJjYjMwHhcNMjUxMjA2MTMwMTExWhcNMjUxMjA3MTMwMTExWjAzMTEwLwYDVQQD Eyg2YmE0MzIzOGY1ZDU3YjllMmE3MGU5ZWRmZDllZWZiODM3OTEzMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxfisBxg0xdz9HZ94WSfsRlQya5V zXH3K9JtTmrTpEsL1ScG43N+EjvLlwteqYZcTm+MSdZldNlfXphEij9WF7pUjedm P/OWBLORFSjZBhhEGrYvcCrwquh5snJ5wKCKHw3eN6azfbfDSkH9e0gThiiy8/OZ 7zhFksEiKDxNnE+GdCOqs6/sAatyyksDJwXGLCHTDpjiIK3+3j3vw3XIF2883WKS 2FqEdSo/QdlccQ4JpnGrklIgfRR1uOy9f/L80Ct1zpgJxq5n7yNJjHP1tg6/FuIr EjdUSJzAK/kcfLl/Fv7F5dYBtW+9mHtcS3ADp0wAa8MP15kvESYfpaVBPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGukMjj11XueKnDp7f2e77g3kTHTMB8GA1UdIwQY MBaAFN3AFnQGRB6hbEdAbQUitcZjCryzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNjA3YjctMTg3Yi00NTQ1LWI2MTQt M2Q5YWVkYWMyYjMzLzEvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jNjA3YjctMTg3Yi00NTQ1LWI2MTQtM2Q5YWVkYWMyYjMz LzEvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbmJul1E phvvn28oX8a+dqDU1inbtt1n7AGMS07iCfmh5yZWHQYnr3C3u5NdK0hfmhFxq/EA O3pWBbHGb8rPBtLz/pw8sfkxFIohKeC0OFKDdNCz3mVsMPtwtQ4PfvfzcYkH2WcP dYnKWF24zvu4v+gAr9xPZyft0rZ5flIKgLNJk/JuR2Tp5zFuxPaLEahqLQXp/AL7 2btXJg9ZyRsFMBvQXLAXPei4EPxpYEk+Gsw28dE3MOZrcor8WludpPkvkQkENOpt 2/IBCq0JrDkduvrSxXMuJZFHhu9w+eMBy6RZkmb/O8z/BQMqTyonQS7i7nc+1bCK odmEW6f04H/5NQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:43:07 2025 by rpki-client