This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json) Hash identifier: DLAggtfBUullZtn0/SuIv/m2k9of9qKU94V5n8FlGis= Subject key identifier: 46:02:03:97:31:3F:7F:81:15:2D:81:C8:78:A6:BF:02:43:C8:9C:D7 Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 019AF49BC5D39F3DBDD1DDD527B62252E92A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft Manifest number: 0E27 Signing time: Sat 06 Dec 2025 17:00:40 +0000 Manifest this update: Sat 06 Dec 2025 17:00:40 +0000 Manifest next update: Sun 07 Dec 2025 17:00:40 +0000 Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: JMhRkZo4t8VtFa3d99r7LZvPB1IpGbbFjvWVYLfuDNY=) 2: 3y9oPhhQ76ajFYxPaGTfj0mGenY.roa (hash: aJMldfOcg7PSjdceOikOWHYMelePcp968D1IHsbQCQs=) 3: Eru4dcnP3AWADVXKAGfzuxLYfJc.roa (hash: qrokzcnnG9HxWIaV9kzA+31DT5BxA/ZSbotCh3hraYc=) 4: Kbhh_-jKSqwyjY9YyEcKOFQSYSE.roa (hash: a+ayqrZ5gSfoloT8KLq9Di5/TpqXgWgvxKNvHS7J0us=) 5: Tz-eGTasLTxJaRB_AyMo0GbjCYY.roa (hash: y/BDSOiRtRFchkB8Upvuvb+MNs6zs82qA1XU7WJzVqs=) 6: n1PdHVenW5fayjdB9KftVERroVM.roa (hash: vk271JDoo1aPMh1SkN6xn//CcT9hk4SqnKTKa0JtzvQ=) 7: njV-GA0Ii5_5OkqbA6b8eDCoFt4.roa (hash: 3zM9PD2sx2obkpcLLLOA9+i/X09CCKUBp/Xzom7yXUE=) 8: zH0GORTR7Uyj1Cp9s_FZC30xG7E.roa (hash: hQY0rZB8ZrQ/2LTg6dzNd2hK2I9T6rcNdp9cuBHVHhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:c5:d3:9f:3d:bd:d1:dd:d5:27:b6:22:52:e9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Dec 6 17:00:40 2025 GMT Not After : Dec 7 17:00:40 2025 GMT Subject: CN=46020397313f7f81152d81c878a6bf0243c89cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:b0:4d:08:be:d2:4a:b1:d8:4e:4b:dc:a5: 1c:62:3a:37:c2:e9:22:d4:61:d8:1d:40:eb:96:94: fa:61:b2:d7:5e:08:16:be:5a:ee:7d:13:f7:58:cc: 24:cf:32:b2:52:49:2e:18:ce:18:f7:75:5c:8b:f2: e4:9d:37:9d:f0:3e:40:02:87:57:8e:74:8d:c7:6d: 5c:b2:41:a7:0b:ee:bb:3e:2c:f4:96:3e:9c:8d:89: d3:58:bc:d5:2a:b7:ec:06:15:0d:4c:39:ac:74:2c: bb:e7:89:8b:48:8d:1e:ff:2c:37:25:0f:85:13:a1: 1e:f3:99:de:db:b0:7d:16:08:bb:c6:3f:6b:56:c6: 99:82:2f:8e:eb:48:cc:a4:25:3e:1f:0b:23:23:70: b1:03:78:b0:3d:19:6c:25:47:81:b3:e2:8c:5e:0c: 5c:a3:1b:d3:44:09:4d:a0:21:4a:c9:14:05:fe:a4: f2:c4:da:2e:b6:e1:9e:1f:06:42:6e:6a:be:f1:98: 14:ba:b3:31:00:67:e4:a1:a9:9d:6a:43:eb:44:61: 2e:7e:f0:43:10:5c:56:62:48:88:91:c9:e8:29:e5: c9:f4:83:f6:a6:c6:aa:30:8b:79:4e:58:43:78:50: fb:0d:c1:95:ae:73:00:49:4e:8c:32:75:97:40:61: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:02:03:97:31:3F:7F:81:15:2D:81:C8:78:A6:BF:02:43:C8:9C:D7 X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:32:74:e4:74:0e:06:08:69:75:29:3b:05:a6:84:91:ee:17: 4d:e9:0f:0b:a5:71:d9:d6:39:25:5c:5e:f5:6d:26:ef:e5:a2: c7:cb:ea:8d:e4:8b:b5:c2:08:7e:d5:17:50:9b:e1:26:ee:9c: 0a:53:07:69:31:08:d7:e5:b3:61:25:b8:e0:55:b4:c6:b7:bb: 8e:8d:8e:3f:39:74:3b:56:1f:df:51:92:bb:ab:d5:ee:ea:3a: f9:ba:0b:a4:d0:67:a5:72:29:83:1f:45:b2:80:90:7f:e4:7e: 65:b3:27:34:14:f2:ab:7b:15:06:0e:75:f4:8a:ee:94:d7:68: 25:bb:11:02:c3:79:ae:2d:83:3d:05:3a:6f:ba:e1:6a:5f:23: 08:aa:9d:c9:cd:79:72:cb:df:83:69:05:a5:ff:2a:c4:41:e4: b4:79:db:bd:f2:d3:c4:c8:77:26:1d:08:c1:77:91:8c:19:81: a1:bd:cc:59:45:e1:8d:73:99:a9:a0:09:3d:0d:32:5b:9b:a6: d0:35:7b:dc:7c:55:b2:be:c4:61:cb:9b:9a:d5:53:b6:fd:bd: 77:03:b7:d2:a9:19:cb:02:9b:bc:79:e0:fc:2a:48:e0:7a:c0: e3:2f:44:93:ac:47:dd:73:a2:88:30:e9:51:5e:c0:65:90:21: 19:c3:d6:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m8XTnz290d3VJ7YiUukqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjUxMjA2MTcwMDQwWhcNMjUxMjA3MTcwMDQwWjAzMTEwLwYDVQQD Eyg0NjAyMDM5NzMxM2Y3ZjgxMTUyZDgxYzg3OGE2YmYwMjQzYzg5Y2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi6wTQi+0kqx2E5L3KUcYjo3wuki 1GHYHUDrlpT6YbLXXggWvlrufRP3WMwkzzKyUkkuGM4Y93Vci/LknTed8D5AAodX jnSNx21cskGnC+67Piz0lj6cjYnTWLzVKrfsBhUNTDmsdCy754mLSI0e/yw3JQ+F E6Ee85ne27B9Fgi7xj9rVsaZgi+O60jMpCU+HwsjI3CxA3iwPRlsJUeBs+KMXgxc oxvTRAlNoCFKyRQF/qTyxNoutuGeHwZCbmq+8ZgUurMxAGfkoamdakPrRGEufvBD EFxWYkiIkcnoKeXJ9IP2psaqMIt5TlhDeFD7DcGVrnMASU6MMnWXQGFn5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYCA5cxP3+BFS2ByHimvwJDyJzXMB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljJ05HQO BghpdSk7BaaEke4XTekPC6Vx2dY5JVxe9W0m7+Wix8vqjeSLtcIIftUXUJvhJu6c ClMHaTEI1+WzYSW44FW0xre7jo2OPzl0O1Yf31GSu6vV7uo6+boLpNBnpXIpgx9F soCQf+R+ZbMnNBTyq3sVBg519IrulNdoJbsRAsN5ri2DPQU6b7rhal8jCKqdyc15 csvfg2kFpf8qxEHktHnbvfLTxMh3Jh0IwXeRjBmBob3MWUXhjXOZqaAJPQ0yW5um 0DV73HxVsr7EYcubmtVTtv29dwO30qkZywKbvHng/CpI4HrA4y9Ek6xH3XOiiDDp UV7AZZAhGcPWsA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:16:07 2025 by rpki-client