This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json) Hash identifier: e9vM7BKyriKvw00sdHeGdbimpOWn4zINknH4/s/3A0w= Subject key identifier: E0:6B:43:91:86:F6:36:35:E3:37:00:AB:0F:A9:56:0B:E8:A1:D7:84 Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd Certificate serial: 019AF31B32BCE10273C893E766B3A394305F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft Manifest number: 10D3 Signing time: Sat 06 Dec 2025 10:00:37 +0000 Manifest this update: Sat 06 Dec 2025 10:00:37 +0000 Manifest next update: Sun 07 Dec 2025 10:00:37 +0000 Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: 5pjMkB+d+C9XuoM9T5yM7JAMOmyBL8WengqORlj3YPY=) 2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:32:bc:e1:02:73:c8:93:e7:66:b3:a3:94:30:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd Validity Not Before: Dec 6 10:00:37 2025 GMT Not After : Dec 7 10:00:37 2025 GMT Subject: CN=e06b439186f63635e33700ab0fa9560be8a1d784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2a:2a:e0:e0:6c:e7:f4:bf:61:a8:37:a6:c3: 26:7a:e0:8f:7a:3c:a0:14:8a:71:4a:1d:04:eb:2e: c0:0c:89:9d:93:b3:b7:82:99:cf:d7:39:a6:8c:da: b1:42:9a:db:2d:16:3f:c4:e7:d5:9d:ca:0a:37:f4: 84:2d:f2:0a:30:05:7e:f2:07:86:fd:bc:86:17:fb: 83:5e:15:f3:5f:71:61:3d:e9:16:31:c9:97:46:72: e7:9e:5c:d1:e4:af:62:65:20:e4:77:2e:78:e5:92: 74:62:1b:26:03:85:38:1c:3d:56:8a:7f:54:41:67: d2:7d:00:f7:4c:d3:63:e5:3f:c0:64:17:59:46:67: 7e:cf:b0:dd:c6:ee:a8:6f:67:4b:64:b1:31:fe:56: db:ef:02:57:6e:eb:48:21:58:4b:bc:58:3a:25:2f: f8:76:40:9a:15:80:ef:35:3a:08:4b:2f:8e:96:d7: e9:1d:69:cb:36:9e:eb:3d:ca:90:6c:73:33:78:25: ee:24:3f:9c:b1:bc:c8:f2:c2:c6:5c:b0:e5:90:57: 90:ad:47:4f:e2:dc:1f:42:44:7b:41:9f:42:bd:2d: cf:82:70:dc:bb:88:79:d0:9d:5f:d7:68:f3:f3:00: 5a:f3:1c:86:e5:83:15:37:cb:c6:ed:62:0e:d2:94: 57:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6B:43:91:86:F6:36:35:E3:37:00:AB:0F:A9:56:0B:E8:A1:D7:84 X509v3 Authority Key Identifier: keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5c:f6:f7:92:00:e8:50:b3:00:73:2f:2e:a2:a7:7d:83:fe: 65:2b:c8:ef:01:22:40:f2:3d:83:9c:24:0f:d4:d2:67:77:16: 19:c4:ef:33:0f:3c:0c:77:7a:52:0f:7a:03:d4:b3:2a:c0:7d: e1:e1:88:6f:e5:9d:d6:55:92:d2:94:eb:86:34:76:58:06:79: 5b:0d:b2:73:f0:67:ff:a8:9e:37:63:b2:e5:d8:aa:ae:f7:ed: 0d:6c:b0:21:6f:18:ac:ef:9e:2f:3d:e3:ca:65:96:2c:44:fa: 70:0a:ad:7e:ca:ae:2a:26:36:18:b1:77:57:aa:6a:f5:5a:4f: 8f:8c:f1:eb:b3:c3:50:fb:de:c6:55:6b:17:67:ce:d5:00:09: 22:7e:82:76:1d:b5:13:aa:0d:ec:e8:e5:c5:02:2b:d9:be:ba: 2a:98:60:71:2a:b1:01:4b:a3:18:2f:89:f6:5d:b8:9d:7a:3c: 5d:18:21:87:1a:92:73:e0:c3:9d:8f:00:c4:6e:d4:0d:8d:c5: f5:e7:eb:4d:6c:48:74:53:75:f1:d5:33:6e:21:d6:48:05:ff: 14:6b:a0:da:3b:16:44:a7:39:2e:c2:c0:52:d9:1d:78:7a:5b: a5:5f:02:47:f8:74:95:46:8d:81:4e:2b:af:0d:54:54:eb:b4: 2d:60:ca:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzK84QJzyJPnZrOjlDBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNGUzODkyZjQ2YjEwNzg1MmMzZWFlMWIyN2RjY2Y2MGZh Yjk5YmQwHhcNMjUxMjA2MTAwMDM3WhcNMjUxMjA3MTAwMDM3WjAzMTEwLwYDVQQD EyhlMDZiNDM5MTg2ZjYzNjM1ZTMzNzAwYWIwZmE5NTYwYmU4YTFkNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCoq4OBs5/S/Yag3psMmeuCPejyg FIpxSh0E6y7ADImdk7O3gpnP1zmmjNqxQprbLRY/xOfVncoKN/SELfIKMAV+8geG /byGF/uDXhXzX3FhPekWMcmXRnLnnlzR5K9iZSDkdy545ZJ0YhsmA4U4HD1Win9U QWfSfQD3TNNj5T/AZBdZRmd+z7Ddxu6ob2dLZLEx/lbb7wJXbutIIVhLvFg6JS/4 dkCaFYDvNToISy+OltfpHWnLNp7rPcqQbHMzeCXuJD+csbzI8sLGXLDlkFeQrUdP 4twfQkR7QZ9CvS3PgnDcu4h50J1f12jz8wBa8xyG5YMVN8vG7WIO0pRXgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBrQ5GG9jY14zcAqw+pVgvoodeEMB8GA1UdIwQY MBaAFN1OOJL0axB4UsPq4bJ9zPYPq5m9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTkt M2I1YjcxY2JiMzIyLzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTktM2I1YjcxY2JiMzIy LzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlz295IA 6FCzAHMvLqKnfYP+ZSvI7wEiQPI9g5wkD9TSZ3cWGcTvMw88DHd6Ug96A9SzKsB9 4eGIb+Wd1lWS0pTrhjR2WAZ5Ww2yc/Bn/6ieN2Oy5diqrvftDWywIW8YrO+eLz3j ymWWLET6cAqtfsquKiY2GLF3V6pq9VpPj4zx67PDUPvexlVrF2fO1QAJIn6Cdh21 E6oN7OjlxQIr2b66KphgcSqxAUujGC+J9l24nXo8XRghhxqSc+DDnY8AxG7UDY3F 9efrTWxIdFN18dUzbiHWSAX/FGug2jsWRKc5LsLAUtkdeHpbpV8CR/h0lUaNgU4r rw1UVOu0LWDKZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:29:56 2025 by rpki-client