This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json) Hash identifier: Y/IVLnQZ4KZEiFkcwgQnXNa+G8P5aHLB2xU/EOVxob4= Subject key identifier: 0E:ED:94:6C:9C:A9:0E:38:E3:DD:FF:05:C3:BD:90:D4:DD:26:4C:04 Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a Certificate serial: 019AF23F60E7418BAB6CC460068FE7A29F62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft Manifest number: 10A2 Signing time: Sat 06 Dec 2025 06:00:31 +0000 Manifest this update: Sat 06 Dec 2025 06:00:31 +0000 Manifest next update: Sun 07 Dec 2025 06:00:31 +0000 Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: brWguWlYOOF8zMIaIuOghNiz0muKhq0eEA9W240VRMQ=) 2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:60:e7:41:8b:ab:6c:c4:60:06:8f:e7:a2:9f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a Validity Not Before: Dec 6 06:00:31 2025 GMT Not After : Dec 7 06:00:31 2025 GMT Subject: CN=0eed946c9ca90e38e3ddff05c3bd90d4dd264c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9f:f0:98:57:c9:f8:d2:5b:28:9c:29:33:64: 77:da:ec:3c:85:44:c7:5c:96:81:c9:70:42:af:42: 8a:bc:b6:a5:a8:76:24:1e:e3:26:b9:1b:22:81:f8: 11:43:d7:12:4f:c9:c0:ce:a5:37:f7:ee:0f:95:4e: 6d:12:60:d7:4c:3f:84:1f:c5:61:39:32:b5:38:b7: aa:49:c9:9b:1e:5e:fd:62:e7:64:30:6a:3a:1d:c8: 4e:81:a6:4b:37:9a:2a:63:28:cb:a9:cc:15:e3:1d: ba:30:51:ad:16:9d:0b:d0:3e:c4:92:84:95:f8:bb: 2b:40:e2:e1:35:e5:db:fc:7a:7b:90:a3:18:7d:93: 31:63:35:ab:a8:0b:e9:7b:6c:1d:25:7b:aa:d9:5e: 36:67:ed:f0:d6:ee:76:2f:0d:ce:94:b8:a2:3b:52: f6:ea:8b:9f:0d:98:fd:20:c4:32:9b:2a:81:92:e2: b0:e4:29:b3:0d:14:06:f6:d4:62:7b:1d:9c:b2:7e: ee:7d:bd:ec:eb:0a:38:69:c8:38:56:41:89:7d:2c: 6c:03:51:4f:88:78:d7:c5:ff:4b:1f:4e:7a:02:09: 1d:0c:d2:d8:2a:ec:a2:16:ca:8a:c2:8e:d5:37:99: eb:4b:dc:ae:51:a7:ac:d2:b9:d9:e1:e7:94:e9:9f: 93:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:ED:94:6C:9C:A9:0E:38:E3:DD:FF:05:C3:BD:90:D4:DD:26:4C:04 X509v3 Authority Key Identifier: keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e7:d8:88:5c:44:ac:9c:c1:6e:61:10:13:2a:33:a0:4c:08: 03:7d:bd:a4:79:1d:38:4b:f9:06:dd:42:6f:4d:7c:c1:87:27: b0:1c:ee:1d:14:e6:5c:61:68:ef:a1:b1:50:3c:ba:a5:ba:00: 67:48:11:43:23:7f:ed:48:00:b0:7f:10:9f:89:f9:ac:04:a2: 39:32:30:33:de:1d:c9:9c:f1:a6:c0:2e:ab:6a:69:d4:2a:ba: 8f:ea:7d:20:c5:d0:d1:c2:b2:55:fe:7c:2c:73:12:66:8a:1a: 45:88:08:ce:47:db:94:1d:7b:d0:c9:67:3a:fc:14:04:b3:04: b3:ce:22:0f:b8:52:45:99:e6:19:84:9d:4a:c9:66:a5:9e:dd: 22:35:a1:49:88:d6:dd:df:93:39:ec:43:e2:51:90:d7:d1:97: 3f:b2:81:0a:fc:09:e2:e0:30:c4:c4:be:c4:cd:6b:8a:52:bb: ca:5e:2b:a5:fc:6a:fd:3a:ca:cb:5e:54:36:8b:2d:67:dd:03: 40:4f:ce:33:31:08:7f:66:f3:cf:94:59:d1:36:87:f8:3e:ec: 3e:7b:e1:1c:60:25:8c:93:ec:40:3e:96:2f:7c:04:e0:57:9b: cc:e7:81:f8:5d:4a:c3:e3:99:40:7f:e3:36:60:74:8c:5b:1a: 09:68:62:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2DnQYurbMRgBo/nop9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYjE0NTc1NjA4MGFmZjFiYjAwZjVmOTBmZDlmMmYyN2Nj NTczMmEwHhcNMjUxMjA2MDYwMDMxWhcNMjUxMjA3MDYwMDMxWjAzMTEwLwYDVQQD EygwZWVkOTQ2YzljYTkwZTM4ZTNkZGZmMDVjM2JkOTBkNGRkMjY0YzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ/wmFfJ+NJbKJwpM2R32uw8hUTH XJaByXBCr0KKvLalqHYkHuMmuRsigfgRQ9cST8nAzqU39+4PlU5tEmDXTD+EH8Vh OTK1OLeqScmbHl79YudkMGo6HchOgaZLN5oqYyjLqcwV4x26MFGtFp0L0D7EkoSV +LsrQOLhNeXb/Hp7kKMYfZMxYzWrqAvpe2wdJXuq2V42Z+3w1u52Lw3OlLiiO1L2 6oufDZj9IMQymyqBkuKw5CmzDRQG9tRiex2csn7ufb3s6wo4acg4VkGJfSxsA1FP iHjXxf9LH056AgkdDNLYKuyiFsqKwo7VN5nrS9yuUaes0rnZ4eeU6Z+TPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7tlGycqQ44493/BcO9kNTdJkwEMB8GA1UdIwQY MBaAFN6xRXVggK/xuwD1+Q/Z8vJ8xXMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1Njgt M2ZmOTY0NTUwM2U5LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1NjgtM2ZmOTY0NTUwM2U5 LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIefYiFxE rJzBbmEQEyozoEwIA329pHkdOEv5Bt1Cb018wYcnsBzuHRTmXGFo76GxUDy6pboA Z0gRQyN/7UgAsH8Qn4n5rASiOTIwM94dyZzxpsAuq2pp1Cq6j+p9IMXQ0cKyVf58 LHMSZooaRYgIzkfblB170MlnOvwUBLMEs84iD7hSRZnmGYSdSslmpZ7dIjWhSYjW 3d+TOexD4lGQ19GXP7KBCvwJ4uAwxMS+xM1rilK7yl4rpfxq/TrKy15UNostZ90D QE/OMzEIf2bzz5RZ0TaH+D7sPnvhHGAljJPsQD6WL3wE4FebzOeB+F1Kw+OZQH/j NmB0jFsaCWhiTw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:31 2025 by rpki-client