This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json) Hash identifier: 7NdALW190DMOMwKR7zMD245m95lzgZU/z1sd3iiNy4g= Subject key identifier: E5:98:5F:9D:26:41:64:67:54:6F:FF:93:71:5E:CC:7C:6E:66:BF:26 Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6 Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6 Certificate serial: 019AF5E5A1329909F2DFC75AB2285E3C2B13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft Manifest number: 0E43 Signing time: Sat 06 Dec 2025 23:00:58 +0000 Manifest this update: Sat 06 Dec 2025 23:00:58 +0000 Manifest next update: Sun 07 Dec 2025 23:00:58 +0000 Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: 6yEvf+jL0uomyhjJ+wp9mJGG5HKd/Nbf2HAN9mY5yxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:a1:32:99:09:f2:df:c7:5a:b2:28:5e:3c:2b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6 Validity Not Before: Dec 6 23:00:58 2025 GMT Not After : Dec 7 23:00:58 2025 GMT Subject: CN=e5985f9d26416467546fff93715ecc7c6e66bf26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1c:8e:d4:34:ae:85:f5:bd:8a:f5:28:a6:4e: ff:09:c8:24:17:04:0e:7c:7e:66:e4:9a:57:4b:1c: 87:83:e2:7b:b0:6d:b6:cb:70:0c:74:5e:14:3c:92: f4:bb:9a:e1:c0:e9:d5:65:ae:0f:eb:09:9b:29:41: 49:97:27:a1:8d:e5:4d:44:98:ba:ac:34:94:16:5a: f6:b5:0f:bc:e3:d2:0c:c9:a8:0e:86:ef:42:b6:c6: ac:a6:9e:64:48:fe:9e:8d:d2:c8:33:d9:4f:a2:2e: 42:8b:0d:2c:ba:8e:69:df:c6:43:f9:db:f6:b7:d7: a4:44:21:eb:c2:48:06:1f:b1:13:77:99:00:f0:55: a0:fe:2a:ee:cd:df:4e:6e:38:20:7b:49:f1:e5:75: 50:b0:31:6d:0a:38:89:72:2f:2a:0f:7b:3a:45:36: 7d:d8:c3:d8:3f:93:e0:d9:c1:be:c6:31:7f:21:93: 09:7c:0a:cb:e0:2e:75:7a:80:c2:d9:7d:c2:45:db: 64:94:af:2a:c8:29:72:c0:de:57:5b:04:2e:a4:03: 07:f3:63:09:22:0e:a7:b9:b1:37:83:db:a3:e7:21: 57:69:b7:75:0e:4d:96:51:42:56:66:95:79:83:d7: 68:5b:20:52:5b:90:cb:3d:94:86:8b:2e:f5:cf:31: 0d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:98:5F:9D:26:41:64:67:54:6F:FF:93:71:5E:CC:7C:6E:66:BF:26 X509v3 Authority Key Identifier: keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:79:83:23:da:aa:89:94:05:27:bc:51:e8:26:97:1c:6b:a3: 68:45:44:05:c1:7f:a0:d4:75:fc:87:1f:19:bd:6a:c5:97:e2: 9f:ae:56:32:e9:32:de:02:a5:f9:1c:4a:82:2e:7b:ee:5c:7d: 37:b9:b9:0f:8b:89:31:38:71:bf:a5:16:a5:bc:65:b3:7e:8c: 21:18:d8:eb:ce:0c:88:2f:1e:f4:6e:f3:08:a0:1c:68:91:98: 9e:33:07:a3:17:f5:44:a8:38:d4:59:12:7e:de:5a:a0:ca:70: 2b:52:88:6e:ba:39:ef:c9:9d:36:1f:70:72:0a:67:8b:20:5c: aa:e5:78:4f:30:31:bf:49:29:6d:a1:1a:3b:3d:48:1a:34:b1: 56:37:cd:85:ab:ed:63:b2:f7:3e:83:66:f1:24:6e:56:f0:f7: 64:85:87:2c:0e:f6:89:70:62:80:5a:56:09:5b:ed:db:0d:a2: c5:a4:02:e8:01:36:f3:72:83:ff:e2:ad:ae:d2:ec:f6:02:fe: 67:5f:b2:1b:50:48:ce:6e:06:0f:98:af:79:66:d8:7c:f7:b8: 00:fb:63:ba:ba:08:21:b8:65:48:70:c7:cc:19:f7:21:66:88: e4:26:56:95:8b:19:96:b2:a6:a5:f0:df:a7:6a:f6:e4:3a:e7: 7e:67:95:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15aEymQny38dasihePCsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYzQzMzk3N2M3MmI0YmU1ZDg4OGY1Njg1M2VkMzFhMWZm MWVmYzYwHhcNMjUxMjA2MjMwMDU4WhcNMjUxMjA3MjMwMDU4WjAzMTEwLwYDVQQD EyhlNTk4NWY5ZDI2NDE2NDY3NTQ2ZmZmOTM3MTVlY2M3YzZlNjZiZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRyO1DSuhfW9ivUopk7/CcgkFwQO fH5m5JpXSxyHg+J7sG22y3AMdF4UPJL0u5rhwOnVZa4P6wmbKUFJlyehjeVNRJi6 rDSUFlr2tQ+849IMyagOhu9Ctsaspp5kSP6ejdLIM9lPoi5Ciw0suo5p38ZD+dv2 t9ekRCHrwkgGH7ETd5kA8FWg/iruzd9Objgge0nx5XVQsDFtCjiJci8qD3s6RTZ9 2MPYP5Pg2cG+xjF/IZMJfArL4C51eoDC2X3CRdtklK8qyClywN5XWwQupAMH82MJ Ig6nubE3g9uj5yFXabd1Dk2WUUJWZpV5g9doWyBSW5DLPZSGiy71zzENVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWYX50mQWRnVG//k3FezHxuZr8mMB8GA1UdIwQY MBaAFN7EM5d8crS+XYiPVoU+0xof8e/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYt MjIzZjUwOGMwNTVhLzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYtMjIzZjUwOGMwNTVh LzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnmDI9qq iZQFJ7xR6CaXHGujaEVEBcF/oNR1/IcfGb1qxZfin65WMuky3gKl+RxKgi577lx9 N7m5D4uJMThxv6UWpbxls36MIRjY684MiC8e9G7zCKAcaJGYnjMHoxf1RKg41FkS ft5aoMpwK1KIbro578mdNh9wcgpniyBcquV4TzAxv0kpbaEaOz1IGjSxVjfNhavt Y7L3PoNm8SRuVvD3ZIWHLA72iXBigFpWCVvt2w2ixaQC6AE283KD/+KtrtLs9gL+ Z1+yG1BIzm4GD5iveWbYfPe4APtjuroIIbhlSHDHzBn3IWaI5CZWlYsZlrKmpfDf p2r25DrnfmeVTQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:25 2025 by rpki-client