This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json) Hash identifier: 1stsx3Rx41hJ5046sbZS1UkLPDHg/0aApRxkDqNRge8= Subject key identifier: 51:C0:23:76:43:EB:EB:14:ED:B3:74:99:5F:3C:02:4D:AA:BF:EF:3E Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6 Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6 Certificate serial: 019AF12E5DD256F99022D34C22061BF7133A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft Manifest number: 0D5D Signing time: Sat 06 Dec 2025 01:02:18 +0000 Manifest this update: Sat 06 Dec 2025 01:02:18 +0000 Manifest next update: Sun 07 Dec 2025 01:02:18 +0000 Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: 8jRZbzQhsbTnoivxk5VOCx0CefqQh//jTZol/SO8kbU=) 2: XaWBl1pdgCEAOtWYlDnABozWGpY.roa (hash: NkTYxkGxoFs3l9oUz9ZXBu6um1xVsgaeI44+mBnF24s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:5d:d2:56:f9:90:22:d3:4c:22:06:1b:f7:13:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6 Validity Not Before: Dec 6 01:02:18 2025 GMT Not After : Dec 7 01:02:18 2025 GMT Subject: CN=51c0237643ebeb14edb374995f3c024daabfef3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:83:25:11:b6:0d:d9:ff:3f:d3:52:40:c0:bd: eb:6d:98:98:8d:42:47:a2:a8:09:af:33:72:2c:ca: 82:a5:c2:35:e1:5a:b6:35:bb:2c:86:7f:7b:06:29: 2d:e6:21:4a:db:17:32:e1:b4:0e:df:0f:9f:9d:63: 93:99:28:ef:31:b4:5a:a1:72:37:0c:21:40:c7:f9: d1:48:fc:f8:a2:d4:82:55:81:04:be:94:fb:54:7c: 7c:8d:04:15:77:48:05:6e:95:67:35:78:e1:70:7c: ac:30:ae:40:ff:a4:fe:50:8e:db:ee:d8:20:ea:06: d6:23:de:d1:b6:21:16:83:51:95:d9:6b:6d:01:52: b7:0c:a3:71:e7:be:a1:53:31:80:b8:2d:a7:ff:28: d8:61:ea:1f:1f:75:c8:ed:3d:8e:99:6d:c8:55:6a: f8:c2:06:fe:54:4d:a5:b7:14:31:55:58:ad:89:ef: ee:fa:64:16:00:b2:a6:89:66:4d:d4:9f:d0:b2:ed: d5:5b:13:7c:b9:51:45:7c:b0:e4:04:25:9d:f3:5c: d7:24:1f:7f:02:83:4a:95:82:ab:c3:89:24:5d:38: 95:c8:4e:19:0a:c9:ae:72:cf:2f:42:74:58:32:09: c2:a9:b8:33:08:47:e2:24:fc:e2:40:4b:e7:a5:4b: bd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C0:23:76:43:EB:EB:14:ED:B3:74:99:5F:3C:02:4D:AA:BF:EF:3E X509v3 Authority Key Identifier: keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:43:43:4b:ba:02:7c:57:64:d1:fd:4d:b0:9d:52:33:98:d4: ac:9e:7b:b5:e0:1d:87:6b:4f:0e:57:6a:d9:d9:97:0c:ac:a7: 34:37:69:e1:0c:e0:4d:1c:c5:89:42:3d:2b:16:04:3f:be:78: 93:93:16:8f:b1:21:c8:1d:d6:fb:b0:0a:87:ef:c0:be:92:3a: 80:d6:7f:df:18:17:b7:e3:68:e0:d2:e9:d1:2f:30:f3:82:ca: 09:e3:b0:77:54:f4:e4:92:e4:08:ba:db:8b:22:a0:4f:a8:76: 98:fe:85:da:25:96:38:18:a6:62:1d:b1:0e:c8:99:e8:cf:22: 2a:42:c5:1a:58:98:28:cc:16:55:de:79:e8:54:0c:f3:79:f6: 58:00:a6:00:75:b1:2e:f5:04:4f:8e:20:66:dd:b3:28:40:da: e7:7d:2b:8f:d9:9c:ba:60:f1:00:a6:8d:c0:04:55:eb:14:48: eb:68:88:f2:9e:03:12:eb:5f:ee:a7:3a:55:17:f9:0b:bf:2f: 3e:25:e9:04:4a:3c:8f:b7:e8:06:1a:9a:d5:c3:28:94:82:aa: 9c:07:5f:b3:18:1b:3b:46:62:73:73:00:b4:20:06:e2:3e:42: d9:22:46:bf:9d:99:94:65:7f:2a:96:53:74:51:e1:8c:53:e8: 96:46:9c:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLl3SVvmQItNMIgYb9xM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYTVhMjIyYWNiOTlhYjIzOTg0MzllZGVkNzc3MGE2NWVl NjZkZTYwHhcNMjUxMjA2MDEwMjE4WhcNMjUxMjA3MDEwMjE4WjAzMTEwLwYDVQQD Eyg1MWMwMjM3NjQzZWJlYjE0ZWRiMzc0OTk1ZjNjMDI0ZGFhYmZlZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34MlEbYN2f8/01JAwL3rbZiYjUJH oqgJrzNyLMqCpcI14Vq2Nbsshn97Bikt5iFK2xcy4bQO3w+fnWOTmSjvMbRaoXI3 DCFAx/nRSPz4otSCVYEEvpT7VHx8jQQVd0gFbpVnNXjhcHysMK5A/6T+UI7b7tgg 6gbWI97RtiEWg1GV2WttAVK3DKNx576hUzGAuC2n/yjYYeofH3XI7T2OmW3IVWr4 wgb+VE2ltxQxVVitie/u+mQWALKmiWZN1J/Qsu3VWxN8uVFFfLDkBCWd81zXJB9/ AoNKlYKrw4kkXTiVyE4ZCsmucs8vQnRYMgnCqbgzCEfiJPziQEvnpUu9aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHAI3ZD6+sU7bN0mV88Ak2qv+8+MB8GA1UdIwQY MBaAFN2loiKsuZqyOYQ57e13cKZe5m3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQt NzUzYWIxOTY4N2Q4LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQtNzUzYWIxOTY4N2Q4 LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkNDS7oC fFdk0f1NsJ1SM5jUrJ57teAdh2tPDldq2dmXDKynNDdp4QzgTRzFiUI9KxYEP754 k5MWj7EhyB3W+7AKh+/AvpI6gNZ/3xgXt+No4NLp0S8w84LKCeOwd1T05JLkCLrb iyKgT6h2mP6F2iWWOBimYh2xDsiZ6M8iKkLFGliYKMwWVd556FQM83n2WACmAHWx LvUET44gZt2zKEDa530rj9mcumDxAKaNwARV6xRI62iI8p4DEutf7qc6VRf5C78v PiXpBEo8j7foBhqa1cMolIKqnAdfsxgbO0Zic3MAtCAG4j5C2SJGv52ZlGV/KpZT dFHhjFPolkacpg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:01 2025 by rpki-client