This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json) Hash identifier: dqSBHLT2qb6zjFHKwoH4DxU9xHLH2w6+3GNeYYSHtrY= Subject key identifier: D1:43:10:D6:44:1C:2D:A8:D0:F3:51:EB:93:B0:2F:7A:E6:1C:73:41 Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f Certificate serial: 019AF388F599BE0D823C990FF4B1DC6E9E1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft Manifest number: 1470 Signing time: Sat 06 Dec 2025 12:00:30 +0000 Manifest this update: Sat 06 Dec 2025 12:00:30 +0000 Manifest next update: Sun 07 Dec 2025 12:00:30 +0000 Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: udsoxEonFNONQ9ldACIVu1qzMupp/TYUwC2razT7O9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:88:f5:99:be:0d:82:3c:99:0f:f4:b1:dc:6e:9e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f Validity Not Before: Dec 6 12:00:30 2025 GMT Not After : Dec 7 12:00:30 2025 GMT Subject: CN=d14310d6441c2da8d0f351eb93b02f7ae61c7341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:35:da:f7:a9:ab:5b:83:b0:9c:0a:ca:f4:9f: 57:f7:d8:bd:91:ed:85:ba:e6:8f:11:04:1d:fa:30: 78:ae:f1:12:5c:53:f5:18:94:89:ea:af:d6:4e:de: 07:54:44:63:b1:b9:7e:20:f0:5d:e5:9d:37:cc:66: 09:2f:eb:23:05:bb:4c:04:47:be:80:82:b6:8b:f3: 97:95:55:d3:a3:48:19:bb:68:f8:9c:cb:a6:63:1f: d8:96:4b:fc:59:72:97:c1:29:79:8c:4d:3f:b8:d1: 30:f8:82:d8:7d:c8:ef:6f:89:e1:64:44:da:28:e2: 3b:65:38:56:e0:39:51:b4:69:1d:0c:fb:6a:41:0d: 01:7d:ca:43:2a:a8:46:aa:1f:98:b4:bd:e3:e8:97: 8b:22:4c:69:a7:06:7a:90:9a:4f:56:15:35:0b:a9: 70:33:c1:4c:dd:30:bd:c8:2e:dc:e4:f5:06:1c:1b: ca:7b:07:f0:78:13:3b:cb:2b:fe:7f:d8:9d:65:8b: 56:a2:d0:3c:df:06:3c:5e:0f:7c:3a:95:ab:40:d2: a6:e8:00:50:5e:6f:dc:9f:d0:4a:ef:8b:1b:0b:44: ab:cc:07:b9:3b:a1:9a:e7:27:f6:ca:9b:93:72:87: f7:2b:fc:05:22:95:79:93:0b:b1:7b:f4:ab:27:46: 7d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:43:10:D6:44:1C:2D:A8:D0:F3:51:EB:93:B0:2F:7A:E6:1C:73:41 X509v3 Authority Key Identifier: keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2d:89:4c:54:99:b4:74:9c:0f:17:b4:fa:08:40:8f:70:a8: d7:8e:84:45:dc:32:7d:2a:a7:d6:ee:3e:da:f4:de:06:6e:b4: b5:93:b3:e5:7c:5a:90:a2:82:40:e5:d5:2b:f9:8c:4b:ce:41: 16:d9:56:c2:f2:b1:bb:1d:25:c7:8d:f1:c0:d1:4f:ff:8d:c2: 04:ed:ef:85:25:3b:cb:c5:6c:b7:ff:a3:4a:f9:fa:93:f9:c0: 6c:df:c5:42:a6:cd:29:38:b5:b6:4f:7b:b4:86:8d:5e:b1:6b: a8:15:1a:88:d4:16:2e:1a:77:12:c6:4f:90:b4:ed:bf:59:1b: f3:0e:8f:da:0b:25:d8:c9:18:b5:d8:0e:6e:dd:3e:d4:95:49: f3:77:17:4a:66:4c:25:56:14:08:ae:f9:cc:dd:9e:22:31:67: 0e:6b:d5:b2:ef:56:9f:fc:9f:f7:d8:04:98:c4:52:7c:99:aa: f9:6e:71:09:cc:20:8b:d6:01:01:51:b9:86:1c:71:50:5e:4f: e9:b3:44:45:d2:f2:86:92:0f:2f:a5:d5:6d:67:98:62:ae:d0: e4:6e:8b:41:12:a4:00:ac:b8:20:8f:e2:12:a7:51:f3:9e:b3: 59:41:46:98:ed:0d:56:18:15:44:22:c0:6f:67:9f:15:0b:1f: 15:b6:71:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziPWZvg2CPJkP9LHcbp4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMmYwODc1NmY1NGVjZDcyODBkMWVhY2NmODc4YWViM2Yy OGFjNGYwHhcNMjUxMjA2MTIwMDMwWhcNMjUxMjA3MTIwMDMwWjAzMTEwLwYDVQQD EyhkMTQzMTBkNjQ0MWMyZGE4ZDBmMzUxZWI5M2IwMmY3YWU2MWM3MzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zXa96mrW4OwnArK9J9X99i9ke2F uuaPEQQd+jB4rvESXFP1GJSJ6q/WTt4HVERjsbl+IPBd5Z03zGYJL+sjBbtMBEe+ gIK2i/OXlVXTo0gZu2j4nMumYx/Ylkv8WXKXwSl5jE0/uNEw+ILYfcjvb4nhZETa KOI7ZThW4DlRtGkdDPtqQQ0BfcpDKqhGqh+YtL3j6JeLIkxppwZ6kJpPVhU1C6lw M8FM3TC9yC7c5PUGHBvKewfweBM7yyv+f9idZYtWotA83wY8Xg98OpWrQNKm6ABQ Xm/cn9BK74sbC0SrzAe5O6Ga5yf2ypuTcof3K/wFIpV5kwuxe/SrJ0Z9qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFDENZEHC2o0PNR65OwL3rmHHNBMB8GA1UdIwQY MBaAFNwvCHVvVOzXKA0erM+Hius/KKxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zODk0NzctNTg3MC00ZTJkLWFjODct Y2M2YmM5NDUzOGZhLzEvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zODk0NzctNTg3MC00ZTJkLWFjODctY2M2YmM5NDUzOGZh LzEvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfC2JTFSZ tHScDxe0+ghAj3Co146ERdwyfSqn1u4+2vTeBm60tZOz5XxakKKCQOXVK/mMS85B FtlWwvKxux0lx43xwNFP/43CBO3vhSU7y8Vst/+jSvn6k/nAbN/FQqbNKTi1tk97 tIaNXrFrqBUaiNQWLhp3EsZPkLTtv1kb8w6P2gsl2MkYtdgObt0+1JVJ83cXSmZM JVYUCK75zN2eIjFnDmvVsu9Wn/yf99gEmMRSfJmq+W5xCcwgi9YBAVG5hhxxUF5P 6bNERdLyhpIPL6XVbWeYYq7Q5G6LQRKkAKy4II/iEqdR856zWUFGmO0NVhgVRCLA b2efFQsfFbZxcw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:26 2025 by rpki-client