This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json) Hash identifier: y+wsSBIUamlv97JIm1b76m0Etv0JjtNxQP9J7pRBadk= Subject key identifier: 4C:CF:03:BA:38:5F:4E:EB:AF:9F:A5:97:D4:40:77:25:7A:2F:6E:3A Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Certificate serial: 019AF276D9458F94ABA5C3B24322F4414335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 07:01:06 +0000 Manifest this update: Sat 06 Dec 2025 07:01:06 +0000 Manifest next update: Sun 07 Dec 2025 07:01:06 +0000 Files and hashes: 1: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: /qDGP6dNtZM5nWQmRWFX+ZLF1P3M6V8HBanyx6mVeac=) 2: I2pncAJfzNdJmYYh59kVF5OSpUs.roa (hash: lHfLeGadLKnQRU2ejGfcyZ67n8h62UJ2WQIx9Gm+axg=) 3: MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa (hash: XgLOcASonVn7TWXy+ktIGTPZ2UgFdKpsifVTE/uxOB0=) 4: UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa (hash: DVPLZ7QtHdhq6Tawu/C5Hzz46ZghvtTkOTNBcz5aL5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d9:45:8f:94:ab:a5:c3:b2:43:22:f4:41:43:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Validity Not Before: Dec 6 07:01:06 2025 GMT Not After : Dec 7 07:01:06 2025 GMT Subject: CN=4ccf03ba385f4eebaf9fa597d44077257a2f6e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7b:40:3b:6f:df:2d:d1:94:4f:ef:1d:a0:88: 1c:2f:5e:fa:a1:13:fb:c0:b0:78:b5:f4:c5:41:4d: cf:9c:36:df:28:b7:e6:a7:9d:35:58:24:92:8d:ce: 62:86:b7:1d:60:ed:73:ea:42:9a:b4:37:ea:49:54: 0a:c4:5c:d8:46:ed:64:63:3f:40:18:d3:0c:45:79: c0:8d:f1:da:0d:6f:5d:29:6d:4f:33:c1:65:38:62: 2a:06:db:b5:4f:8c:1a:eb:76:59:43:b4:e7:2c:87: 2c:d6:8e:cb:15:0a:e1:a9:2b:e0:a2:97:3d:b4:82: b9:19:4a:a1:f5:a4:9a:64:4b:39:5b:c6:aa:2f:cd: b1:b3:2a:54:f5:db:05:a3:a1:df:57:35:93:01:47: df:d0:b9:d7:7d:71:d3:56:ef:df:88:d8:92:1f:16: ee:20:15:41:a4:b1:a1:23:6f:4f:06:11:3f:07:e3: 62:fa:9c:8b:79:6c:bd:7d:49:1d:f4:b4:0e:36:31: 10:f1:aa:56:3a:2d:9e:d4:3b:f4:aa:26:59:ec:e8: 27:5c:a3:48:f0:f0:7a:73:cd:23:dc:82:5c:03:43: 68:35:57:cf:c8:42:14:fd:a3:b9:06:4e:fe:2f:76: 32:f7:87:e8:b7:17:29:b9:8e:cd:cd:6d:45:b1:f1: 9a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CF:03:BA:38:5F:4E:EB:AF:9F:A5:97:D4:40:77:25:7A:2F:6E:3A X509v3 Authority Key Identifier: keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:71:04:8c:b9:3f:24:db:26:6f:02:7b:ce:66:11:cb:f0:9c: 0f:18:87:c4:c5:aa:bf:f9:4d:0f:80:57:c4:4d:28:2a:5e:97: de:ac:28:7e:00:20:36:32:25:e7:76:8f:fc:df:f2:18:bb:1b: ac:46:79:9d:27:0c:90:2f:57:20:aa:28:6b:68:7c:c1:47:e3: 94:3c:96:93:24:2e:14:a5:cf:82:de:df:c3:a2:2f:b7:96:2d: 9f:8e:de:6d:c9:00:f2:81:21:cf:94:11:0e:e4:22:9e:5f:fb: 67:e8:38:9f:0e:c2:04:c6:87:e3:69:f7:6d:7b:ce:59:25:e6: f9:3b:69:9b:dd:d5:03:e8:3f:75:34:31:e4:2a:66:d5:bf:ba: af:89:1c:87:cb:77:62:18:a3:bf:d8:a1:45:14:3e:8b:0e:58: 56:e7:5a:ca:86:f3:bb:1f:f7:fb:74:83:c3:c1:fd:2d:55:44: 9a:89:e7:61:0f:2c:57:0e:9f:f5:6a:a9:41:36:49:14:94:2f: 9a:4d:18:13:10:27:0b:1f:74:c1:e2:47:f6:18:21:a8:29:a9: e0:57:38:cd:a8:0d:b2:d2:b7:6d:b3:b5:28:4a:45:ce:3e:73: 14:c1:f9:51:d9:6f:e7:ae:51:59:5d:aa:49:69:ea:6a:7b:76: 0e:4b:10:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtlFj5SrpcOyQyL0QUM1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODk5YzI4NjY0ZWU4MTk0YTY0MDQ4ZTQ2YzYwYzZlNWYx OTBjNTMwHhcNMjUxMjA2MDcwMTA2WhcNMjUxMjA3MDcwMTA2WjAzMTEwLwYDVQQD Eyg0Y2NmMDNiYTM4NWY0ZWViYWY5ZmE1OTdkNDQwNzcyNTdhMmY2ZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03tAO2/fLdGUT+8doIgcL176oRP7 wLB4tfTFQU3PnDbfKLfmp501WCSSjc5ihrcdYO1z6kKatDfqSVQKxFzYRu1kYz9A GNMMRXnAjfHaDW9dKW1PM8FlOGIqBtu1T4wa63ZZQ7TnLIcs1o7LFQrhqSvgopc9 tIK5GUqh9aSaZEs5W8aqL82xsypU9dsFo6HfVzWTAUff0LnXfXHTVu/fiNiSHxbu IBVBpLGhI29PBhE/B+Ni+pyLeWy9fUkd9LQONjEQ8apWOi2e1Dv0qiZZ7OgnXKNI 8PB6c80j3IJcA0NoNVfPyEIU/aO5Bk7+L3Yy94fotxcpuY7NzW1FsfGa6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzPA7o4X07rr5+ll9RAdyV6L246MB8GA1UdIwQY MBaAFNyJnChmTugZSmQEjkbGDG5fGQxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUt NTJmZTEwNTEzMTI5LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUtNTJmZTEwNTEzMTI5 LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3EEjLk/ JNsmbwJ7zmYRy/CcDxiHxMWqv/lND4BXxE0oKl6X3qwofgAgNjIl53aP/N/yGLsb rEZ5nScMkC9XIKooa2h8wUfjlDyWkyQuFKXPgt7fw6Ivt5Ytn47ebckA8oEhz5QR DuQinl/7Z+g4nw7CBMaH42n3bXvOWSXm+Ttpm93VA+g/dTQx5Cpm1b+6r4kch8t3 Yhijv9ihRRQ+iw5YVudayobzux/3+3SDw8H9LVVEmonnYQ8sVw6f9WqpQTZJFJQv mk0YExAnCx90weJH9hghqCmp4Fc4zagNstK3bbO1KEpFzj5zFMH5Udlv565RWV2q SWnqant2DksQQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:32 2025 by rpki-client