This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json) Hash identifier: IG7R/BEzaH+hXAAE4Sp7bNaiwNyE4769IyuX5AfAlY4= Subject key identifier: FD:BD:27:DF:CA:46:BC:2D:7E:91:DF:83:4E:FF:27:36:E3:CC:37:5C Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79 Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079 Certificate serial: 019AF31B75475D9B6761AAE91F768B911DD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft Manifest number: 0C6F Signing time: Sat 06 Dec 2025 10:00:54 +0000 Manifest this update: Sat 06 Dec 2025 10:00:54 +0000 Manifest next update: Sun 07 Dec 2025 10:00:54 +0000 Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: TklnefW4x7LQbDTy+OcdK9dT6R5wD9c3uhxGQjjje1o=) 2: 4NcSUJ4Kg8dewIwP8RGgWPLVsGw.roa (hash: NfguGRutDpTl33g3TT2hnx9Rfi2f9fnIaQJYs24UAYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:75:47:5d:9b:67:61:aa:e9:1f:76:8b:91:1d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079 Validity Not Before: Dec 6 10:00:54 2025 GMT Not After : Dec 7 10:00:54 2025 GMT Subject: CN=fdbd27dfca46bc2d7e91df834eff2736e3cc375c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:60:9b:e6:11:e0:28:ca:b0:c9:e5:39:1f: 11:fe:e1:aa:42:61:0c:2b:b7:f5:c0:2d:b4:e1:60: f7:45:30:b3:c9:63:5b:3e:99:45:91:91:a0:fd:45: 7d:ee:f8:18:d8:79:61:61:e6:e6:41:c2:7d:9d:b9: be:f8:46:34:f4:be:5e:05:f5:31:e6:c8:25:c9:5c: c2:f1:8e:e7:3d:b3:87:fd:c9:6f:e1:20:94:77:a6: e2:9e:4f:e3:e2:5d:48:c6:95:72:bf:dd:93:12:2e: fb:8a:16:5c:59:c3:48:0d:72:89:e7:f1:ba:bd:ac: 4d:16:b3:eb:ad:e9:17:85:2e:e8:01:80:d8:e5:ae: 09:59:53:30:69:12:7c:f7:33:c9:db:8d:7a:55:9d: d1:90:f0:f4:59:cf:14:a4:ff:a6:16:81:da:45:15: eb:40:63:bc:ec:61:cd:74:01:ec:74:71:5b:81:08: 00:95:35:7a:ed:97:3e:f6:80:a4:82:94:54:d0:f3: 5a:03:e0:96:cf:6b:dc:1a:25:52:a3:9a:2b:59:11: 47:d7:d2:5c:57:7d:f4:08:18:3c:cf:56:60:94:64: ed:6f:b5:ec:67:91:25:4c:f5:9d:43:f1:27:7e:0f: c4:b2:26:1b:b4:35:ae:49:5e:ea:ab:19:32:7c:ab: 65:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BD:27:DF:CA:46:BC:2D:7E:91:DF:83:4E:FF:27:36:E3:CC:37:5C X509v3 Authority Key Identifier: keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:24:89:37:cb:b3:bc:9c:26:79:e3:86:06:eb:9e:c2:d7:60: 0e:cd:34:d0:36:13:db:f6:79:d5:ca:d5:bd:28:56:8e:76:77: bb:cc:ee:59:cc:eb:eb:d9:66:be:22:3e:9d:33:24:f2:42:c4: 6f:8c:e1:79:35:1b:92:79:c2:80:e9:fe:1e:21:62:15:0d:70: df:c1:a2:3f:34:1d:5d:b0:af:e9:93:a2:54:e2:ae:09:df:26: 2e:cd:f4:78:01:a0:50:51:6f:a4:c6:57:18:99:05:30:27:ea: 8e:42:88:ee:44:35:cb:12:71:63:e5:b8:37:d3:f2:76:0b:da: 89:23:dd:a3:b5:94:8c:3d:39:2a:09:ab:66:32:6a:15:d5:19: da:46:5b:67:2c:33:e6:d8:24:28:a4:9f:d0:cd:c7:5a:a6:88: 16:2f:bf:74:da:d8:67:1d:10:18:c4:11:cc:50:a8:29:b9:6d: 55:2d:aa:76:77:d7:08:54:41:04:53:8b:30:15:34:b7:9a:48: 34:5a:40:b5:8d:ee:e0:09:22:5d:87:64:95:1d:07:82:97:36: 57:97:2d:03:d9:d9:64:44:d9:12:95:9e:29:e0:bc:da:3d:56: 3b:45:d5:86:a0:2d:e9:97:bf:03:ea:63:f4:c7:8b:cc:ab:ec: 1a:46:db:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3VHXZtnYarpH3aLkR3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNDc0OGNkNDcxNGE1Y2M4N2NhZmI4NDMwZmI4MTI0OGIw OTQwNzkwHhcNMjUxMjA2MTAwMDU0WhcNMjUxMjA3MTAwMDU0WjAzMTEwLwYDVQQD EyhmZGJkMjdkZmNhNDZiYzJkN2U5MWRmODM0ZWZmMjczNmUzY2MzNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VBgm+YR4CjKsMnlOR8R/uGqQmEM K7f1wC204WD3RTCzyWNbPplFkZGg/UV97vgY2HlhYebmQcJ9nbm++EY09L5eBfUx 5sglyVzC8Y7nPbOH/clv4SCUd6bink/j4l1IxpVyv92TEi77ihZcWcNIDXKJ5/G6 vaxNFrPrrekXhS7oAYDY5a4JWVMwaRJ89zPJ2416VZ3RkPD0Wc8UpP+mFoHaRRXr QGO87GHNdAHsdHFbgQgAlTV67Zc+9oCkgpRU0PNaA+CWz2vcGiVSo5orWRFH19Jc V330CBg8z1ZglGTtb7XsZ5ElTPWdQ/Enfg/EsiYbtDWuSV7qqxkyfKtlRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP29J9/KRrwtfpHfg07/JzbjzDdcMB8GA1UdIwQY MBaAFN1HSM1HFKXMh8r7hDD7gSSLCUB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YzU1YWYtNWU5Yi00MTk3LTg2ZmIt Mzc1NDVkYTA1NmJkLzEvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80YzU1YWYtNWU5Yi00MTk3LTg2ZmItMzc1NDVkYTA1NmJk LzEvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCSJN8uz vJwmeeOGBuuewtdgDs000DYT2/Z51crVvShWjnZ3u8zuWczr69lmviI+nTMk8kLE b4zheTUbknnCgOn+HiFiFQ1w38GiPzQdXbCv6ZOiVOKuCd8mLs30eAGgUFFvpMZX GJkFMCfqjkKI7kQ1yxJxY+W4N9PydgvaiSPdo7WUjD05KgmrZjJqFdUZ2kZbZywz 5tgkKKSf0M3HWqaIFi+/dNrYZx0QGMQRzFCoKbltVS2qdnfXCFRBBFOLMBU0t5pI NFpAtY3u4AkiXYdklR0Hgpc2V5ctA9nZZETZEpWeKeC82j1WO0XVhqAt6Ze/A+pj 9MeLzKvsGkbbAg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:34 2025 by rpki-client