This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json) Hash identifier: OO1AmLdpEnheGs58wjFXY9mXYTcdUrCsGkhYdV6mGtM= Subject key identifier: 05:A5:95:FA:ED:E7:B6:D4:BB:59:27:A8:F3:CC:15:FC:E8:71:4C:7C Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95 Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395 Certificate serial: 019AF19B5BB630B4E24CFFB940C22C391BF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:21 +0000 Manifest this update: Sat 06 Dec 2025 03:01:21 +0000 Manifest next update: Sun 07 Dec 2025 03:01:21 +0000 Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: pV8YYZ6NnY0puD18ye5TlmFpck/HVPfhVYwt7CjGJO8=) 2: 6GNxdzK9UE9bHySiQzQ4c2EkGfY.roa (hash: xWTUJszNKd3dbNHz1f2JomMkK2hd4V6IPZrJaK6VjKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:5b:b6:30:b4:e2:4c:ff:b9:40:c2:2c:39:1b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395 Validity Not Before: Dec 6 03:01:21 2025 GMT Not After : Dec 7 03:01:21 2025 GMT Subject: CN=05a595faede7b6d4bb5927a8f3cc15fce8714c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f0:45:61:da:8b:f5:92:84:c7:df:da:60:49: 21:21:be:7d:2d:e1:4b:bd:f9:90:fc:7a:71:95:5f: 27:c9:29:30:0b:b1:e4:e5:a1:9a:2d:d2:ee:0b:8a: fd:1d:8b:d8:38:d4:08:f0:f2:41:16:87:1e:ae:59: 4d:26:9b:36:b8:7f:f2:43:3e:45:63:5a:b5:18:20: 00:95:18:97:ae:fe:83:30:de:f3:d2:dd:67:18:59: 19:83:9c:f2:60:e3:3b:ff:ba:b0:47:d1:99:39:19: 4a:e5:54:9c:9f:80:af:40:02:ad:71:41:7b:fd:d3: 65:67:67:08:91:6f:d4:4e:fa:c3:1a:b0:ff:3b:d5: 22:99:8a:be:86:70:4f:d8:c0:d4:8e:6f:f0:65:c1: 72:68:df:d6:83:7b:48:81:9d:a6:ae:58:50:9e:e2: 2e:52:43:f9:07:97:d7:9f:53:61:ca:b0:88:b4:c7: 81:2c:27:d4:a0:ad:34:00:3c:90:24:62:20:96:1e: dd:0f:8a:a4:4f:fd:66:1a:76:68:f8:1d:7e:54:da: f6:32:37:c1:52:c1:30:32:a0:c9:2c:01:d6:b8:46: c3:38:81:73:37:ca:0b:a3:33:c3:ac:89:cf:49:eb: 77:82:3a:9b:2a:14:84:be:c8:93:68:f2:63:e0:f1: b0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A5:95:FA:ED:E7:B6:D4:BB:59:27:A8:F3:CC:15:FC:E8:71:4C:7C X509v3 Authority Key Identifier: keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d6:21:60:2c:63:6b:97:5f:e3:6b:42:16:d1:55:6d:1e:28: 33:81:80:5b:9b:f4:dd:b1:ee:c7:e2:a9:a2:be:73:a6:99:b1: db:ac:c6:6b:02:c5:44:f9:fb:0f:29:51:33:ce:6d:30:c8:45: 10:95:0e:a8:53:88:20:8a:91:e5:64:48:3e:70:73:3f:0e:6c: e2:92:52:8f:d0:e4:57:a4:84:6c:8f:26:04:88:d6:55:c6:e0: 46:93:ec:64:4a:62:b8:bb:a2:3a:16:21:27:1d:2d:d6:bd:38: fc:b4:bb:85:7e:ea:0d:7f:68:66:cc:18:c6:96:47:18:18:f6: ee:60:c4:50:a6:4a:21:d8:ea:d7:ee:b9:e3:41:74:4b:60:b7: a4:93:8e:7b:19:4f:8f:86:94:56:23:76:9e:63:bf:8f:af:25: 36:58:0e:e0:6a:c8:34:09:93:fc:d9:a1:30:ae:c0:3f:bc:58: 74:30:50:51:85:55:c8:f3:95:af:dc:84:9b:05:43:46:5a:b1: 09:82:b8:8a:62:ba:4b:05:a7:0f:28:30:98:e1:d9:14:3d:ef: a7:87:8e:e5:d2:a6:b8:98:b4:53:a3:52:14:11:2a:8e:67:34: e6:23:ce:8e:e8:a2:d7:14:09:24:bf:7c:0b:8a:a0:8f:a9:51: 4b:44:78:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1u2MLTiTP+5QMIsORv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGNjZDIzOTFmYTMyYzBhZGUyOTdjNWZjODgzMDkwYjM5 OTEzOTUwHhcNMjUxMjA2MDMwMTIxWhcNMjUxMjA3MDMwMTIxWjAzMTEwLwYDVQQD EygwNWE1OTVmYWVkZTdiNmQ0YmI1OTI3YThmM2NjMTVmY2U4NzE0YzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfBFYdqL9ZKEx9/aYEkhIb59LeFL vfmQ/HpxlV8nySkwC7Hk5aGaLdLuC4r9HYvYONQI8PJBFocerllNJps2uH/yQz5F Y1q1GCAAlRiXrv6DMN7z0t1nGFkZg5zyYOM7/7qwR9GZORlK5VScn4CvQAKtcUF7 /dNlZ2cIkW/UTvrDGrD/O9UimYq+hnBP2MDUjm/wZcFyaN/Wg3tIgZ2mrlhQnuIu UkP5B5fXn1NhyrCItMeBLCfUoK00ADyQJGIglh7dD4qkT/1mGnZo+B1+VNr2MjfB UsEwMqDJLAHWuEbDOIFzN8oLozPDrInPSet3gjqbKhSEvsiTaPJj4PGwNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWllfrt57bUu1knqPPMFfzocUx8MB8GA1UdIwQY MBaAFN4MzSOR+jLAreKXxfyIMJCzmROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQt NjdjMWE2M2M1MTUwLzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQtNjdjMWE2M2M1MTUw LzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9YhYCxj a5df42tCFtFVbR4oM4GAW5v03bHux+Kpor5zppmx26zGawLFRPn7DylRM85tMMhF EJUOqFOIIIqR5WRIPnBzPw5s4pJSj9DkV6SEbI8mBIjWVcbgRpPsZEpiuLuiOhYh Jx0t1r04/LS7hX7qDX9oZswYxpZHGBj27mDEUKZKIdjq1+6540F0S2C3pJOOexlP j4aUViN2nmO/j68lNlgO4GrINAmT/NmhMK7AP7xYdDBQUYVVyPOVr9yEmwVDRlqx CYK4imK6SwWnDygwmOHZFD3vp4eO5dKmuJi0U6NSFBEqjmc05iPOjuii1xQJJL98 C4qgj6lRS0R4RA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:51 2025 by rpki-client