This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json) Hash identifier: B1Fzf2t28paFt/qdCRuBeNC9bQhgqfP/eB344l2b9SM= Subject key identifier: 1A:77:75:1F:45:AA:91:11:B0:A9:F7:ED:90:C1:30:0C:63:F7:E3:B4 Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02 Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302 Certificate serial: 019AF1641D962C111B4634BEAF7F069A6A4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft Manifest number: 03E9 Signing time: Sat 06 Dec 2025 02:01:01 +0000 Manifest this update: Sat 06 Dec 2025 02:01:01 +0000 Manifest next update: Sun 07 Dec 2025 02:01:01 +0000 Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: YKZyCXRCQDaEqkfItzGSUpTdYeWjuQwi97RUrFPlzOs=) 2: wSO8Qf5_v1p-oNDifbsTI9tUaPY.roa (hash: t8VFb4R1YuauyoB16s9G5smfDaNXuP879i5idHgDRZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1d:96:2c:11:1b:46:34:be:af:7f:06:9a:6a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302 Validity Not Before: Dec 6 02:01:01 2025 GMT Not After : Dec 7 02:01:01 2025 GMT Subject: CN=1a77751f45aa9111b0a9f7ed90c1300c63f7e3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:22:51:27:b5:e2:8f:a4:37:9c:06:82:21: a3:51:ce:39:98:59:55:c5:4b:cd:db:2c:54:a6:59: b8:9b:4d:91:1e:c4:29:7c:43:cf:77:7a:cc:0b:94: 4a:1a:54:7f:6f:9c:83:ce:62:c1:55:e5:0c:d4:a1: f3:58:b7:7c:84:f7:fb:73:77:26:5d:a0:10:95:7e: 57:64:7c:07:d9:41:1b:57:79:48:d2:5b:1a:65:eb: 25:50:58:26:78:d7:ed:83:80:80:16:2e:fc:ed:c5: 30:d5:f1:ef:c3:af:b2:e8:92:42:f8:04:70:c8:7b: 87:d7:9d:72:59:ec:8f:cc:6d:ec:5f:7d:66:cf:29: d2:fa:31:42:74:73:f8:fb:49:91:b3:87:d9:2d:3f: 00:dc:60:66:86:ec:29:54:41:9d:6c:7d:f6:f9:3d: b1:1b:d8:02:8c:30:62:52:48:55:8b:b5:25:36:d5: b9:db:6f:dc:99:45:4b:18:85:b4:e4:5e:df:9a:7f: 7c:ca:48:7f:b7:07:12:94:51:f3:e0:d3:0c:75:ce: 54:e2:d0:43:bc:b4:6a:fb:18:e9:ed:2e:2f:81:4a: b1:aa:35:95:6d:c6:e6:03:e9:46:21:67:34:e1:0b: b2:fb:35:40:cf:23:55:8f:8f:e8:71:b2:58:5a:67: 04:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:77:75:1F:45:AA:91:11:B0:A9:F7:ED:90:C1:30:0C:63:F7:E3:B4 X509v3 Authority Key Identifier: keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:51:0a:22:e4:6f:3b:72:7f:3b:5f:7a:7e:9b:b2:68:ef:7c: 30:ea:55:5c:6f:04:85:f4:86:f7:35:29:f9:a0:65:9c:ce:61: fa:bd:3c:2c:ee:70:c6:f0:c3:c2:e1:ab:ef:a1:9f:9a:99:3c: c7:f9:bf:38:e4:bd:1e:d1:3b:24:13:8d:5f:c1:63:d7:8c:c2: 44:e7:68:06:c8:a5:bf:88:35:a0:f6:1a:77:c6:3f:43:c8:40: 6d:d0:05:f9:52:ba:36:21:38:2d:32:25:17:f9:9a:20:72:41: bd:a7:6d:ed:35:13:ec:84:57:fe:ee:d7:61:2e:33:44:bc:29: 36:10:9e:68:2a:2d:21:88:c5:b3:65:2b:cb:07:98:75:96:95: 17:bb:da:73:5b:ab:9b:62:e3:c6:89:77:6f:cc:b0:b4:6b:a2: 04:a4:ab:5b:3c:ec:57:c4:15:99:d9:1a:ef:5f:9c:87:2a:a9: 5b:c2:d3:fd:db:67:4b:94:d3:e1:93:68:60:09:9f:2b:76:c9: d5:40:df:21:92:0b:e4:7a:aa:05:39:2a:97:55:a7:70:fe:23: 5d:c6:03:c0:57:a1:e7:04:f1:a8:4e:fa:5b:9d:a9:d2:6a:41: 79:72:c4:27:24:0d:89:6e:67:74:be:21:c9:10:19:41:d0:f8: f1:3d:26:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZB2WLBEbRjS+r38GmmpLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOGUzODE4N2FlNzBjYmM3YmVkNjk1NzU5ZjBlMDMyOTlm YmIzMDIwHhcNMjUxMjA2MDIwMTAxWhcNMjUxMjA3MDIwMTAxWjAzMTEwLwYDVQQD EygxYTc3NzUxZjQ1YWE5MTExYjBhOWY3ZWQ5MGMxMzAwYzYzZjdlM2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYQiUSe14o+kN5wGgiGjUc45mFlV xUvN2yxUplm4m02RHsQpfEPPd3rMC5RKGlR/b5yDzmLBVeUM1KHzWLd8hPf7c3cm XaAQlX5XZHwH2UEbV3lI0lsaZeslUFgmeNftg4CAFi787cUw1fHvw6+y6JJC+ARw yHuH151yWeyPzG3sX31mzynS+jFCdHP4+0mRs4fZLT8A3GBmhuwpVEGdbH32+T2x G9gCjDBiUkhVi7UlNtW522/cmUVLGIW05F7fmn98ykh/twcSlFHz4NMMdc5U4tBD vLRq+xjp7S4vgUqxqjWVbcbmA+lGIWc04Quy+zVAzyNVj4/ocbJYWmcE8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBp3dR9FqpERsKn37ZDBMAxj9+O0MB8GA1UdIwQY MBaAFN6OOBh65wy8e+1pV1nw4DKZ+7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMt NWIxZjQ4YjNlMjE0LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMtNWIxZjQ4YjNlMjE0 LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlEKIuRv O3J/O196fpuyaO98MOpVXG8EhfSG9zUp+aBlnM5h+r08LO5wxvDDwuGr76Gfmpk8 x/m/OOS9HtE7JBONX8Fj14zCROdoBsilv4g1oPYad8Y/Q8hAbdAF+VK6NiE4LTIl F/maIHJBvadt7TUT7IRX/u7XYS4zRLwpNhCeaCotIYjFs2UryweYdZaVF7vac1ur m2Ljxol3b8ywtGuiBKSrWzzsV8QVmdka71+chyqpW8LT/dtnS5TT4ZNoYAmfK3bJ 1UDfIZIL5HqqBTkql1WncP4jXcYDwFeh5wTxqE76W52p0mpBeXLEJyQNiW5ndL4h yRAZQdD48T0mRA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:54 2025 by rpki-client