This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft File: 3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json) Hash identifier: LMrtcZvK58145T300+V4szjT/Akx2fPYswHXRxnY30Q= Subject key identifier: 4E:C4:81:06:E4:4F:11:04:83:DD:AB:2A:81:76:C0:37:29:1F:EA:FE Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB Certificate issuer: /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb Certificate serial: 019AF1D22FE93AA781DDFDCE8CFF3C4FF812 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft Manifest number: 0227 Signing time: Sat 06 Dec 2025 04:01:15 +0000 Manifest this update: Sat 06 Dec 2025 04:01:15 +0000 Manifest next update: Sun 07 Dec 2025 04:01:15 +0000 Files and hashes: 1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: Jy2UmivkzXbUMIjqxK549k7Qvatulu5y8dIQylbmLHY=) 2: xlhZPy2tgq9KnJAF-W8wAfARZ5I.roa (hash: gkGnuQfXZLAxpDNGgxfjG9Qut5Hb3M/1cK2A/dmc9SY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2f:e9:3a:a7:81:dd:fd:ce:8c:ff:3c:4f:f8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb Validity Not Before: Dec 6 04:01:15 2025 GMT Not After : Dec 7 04:01:15 2025 GMT Subject: CN=4ec48106e44f110483ddab2a8176c037291feafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6c:2a:b0:e2:47:cc:21:4a:c1:cf:6e:f9:b8: c2:ce:9f:23:c2:67:1e:07:c0:14:50:e0:fa:d8:39: ed:f4:17:cd:99:cc:57:1d:86:1c:38:91:f4:50:0e: 1e:07:26:7b:dc:86:25:d8:55:a3:77:e1:58:59:fc: 2b:6f:f7:e9:dc:d8:04:b0:be:3d:e4:aa:fb:a9:20: eb:44:06:0b:1b:81:b1:52:6d:95:de:5f:44:27:e6: 8a:01:83:c0:1c:76:2d:bd:57:34:3a:ab:45:0a:64: 53:ec:59:ac:49:d4:50:18:54:e8:9f:86:21:3f:ef: d9:c0:34:12:d7:b3:59:bc:c9:11:9d:b9:13:85:22: 81:27:82:4b:1f:cb:34:3a:98:f7:f5:9b:50:6d:f4: b5:5e:c5:d3:b6:db:73:d3:e9:e1:78:3c:0a:94:9a: d1:16:b4:f8:b7:50:6c:6f:8c:67:ff:ed:a8:79:74: 9e:c0:36:29:58:5d:7d:04:1a:87:30:16:4a:ba:dc: c3:15:f3:7b:9d:23:07:18:ea:ed:2e:32:19:3e:8b: 27:97:9a:75:f7:a0:f4:ae:3b:b5:73:00:40:b0:27: 50:24:d9:02:c4:dd:bb:00:82:d3:3c:13:4b:18:2d: 45:e5:91:e4:3d:4b:cd:83:2a:48:d2:a8:fb:b7:ab: 1c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C4:81:06:E4:4F:11:04:83:DD:AB:2A:81:76:C0:37:29:1F:EA:FE X509v3 Authority Key Identifier: keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:95:03:2c:e1:68:ec:9d:ed:18:53:79:72:fd:3e:15:53:2e: af:bf:52:62:5f:4c:d5:d8:4a:5b:ea:36:28:7d:fd:be:74:ba: 57:00:e2:72:b3:7c:6c:05:38:6d:d6:ce:4e:91:ef:96:1b:81: 4a:82:e5:7d:8f:8e:b3:aa:5c:54:93:a8:2f:6a:a2:63:83:40: 59:65:4d:ed:47:07:9a:3d:21:08:ba:67:3d:37:b9:da:67:d7: 2c:10:5b:e8:ad:f3:92:25:a4:cb:91:57:32:a6:e1:46:7a:55: 05:41:2d:ce:15:8b:80:25:73:c6:fa:36:a9:72:53:a0:49:6c: e3:e7:35:7c:01:b1:67:b5:4d:10:58:88:e7:8f:21:ec:c0:90: 60:ab:32:a0:22:38:7f:33:e5:fc:33:e2:ac:1f:85:79:e9:3d: 01:6b:2a:c7:0a:17:44:04:f3:c5:8d:39:8b:1c:33:88:34:f1: d8:28:bd:16:81:f6:ea:16:39:4a:78:2c:7e:7e:78:06:4f:d2: d5:fd:27:49:3e:35:2d:97:57:32:58:ac:df:73:1c:21:11:b4: ef:ab:e3:ed:d0:c4:44:77:6e:bb:f5:56:a9:e4:6a:83:46:89: 7f:42:12:fe:79:34:3f:a5:ea:a6:e1:be:e5:2f:bb:1d:b5:7b: bf:fa:be:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0i/pOqeB3f3OjP88T/gSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMDA2ZWQ4NzFhNWNlMDBkMmJiZjk2OGJjMDk0MGVlNTg2 YTNjZWIwHhcNMjUxMjA2MDQwMTE1WhcNMjUxMjA3MDQwMTE1WjAzMTEwLwYDVQQD Eyg0ZWM0ODEwNmU0NGYxMTA0ODNkZGFiMmE4MTc2YzAzNzI5MWZlYWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2wqsOJHzCFKwc9u+bjCzp8jwmce B8AUUOD62Dnt9BfNmcxXHYYcOJH0UA4eByZ73IYl2FWjd+FYWfwrb/fp3NgEsL49 5Kr7qSDrRAYLG4GxUm2V3l9EJ+aKAYPAHHYtvVc0OqtFCmRT7FmsSdRQGFTon4Yh P+/ZwDQS17NZvMkRnbkThSKBJ4JLH8s0Opj39ZtQbfS1XsXTtttz0+nheDwKlJrR FrT4t1Bsb4xn/+2oeXSewDYpWF19BBqHMBZKutzDFfN7nSMHGOrtLjIZPosnl5p1 96D0rju1cwBAsCdQJNkCxN27AILTPBNLGC1F5ZHkPUvNgypI0qj7t6scBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7EgQbkTxEEg92rKoF2wDcpH+r+MB8GA1UdIwQY MBaAFN8Abthxpc4A0rv5aLwJQO5YajzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYt OTViOWUzNjJmMDc3LzEvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYtOTViOWUzNjJmMDc3 LzEvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZUDLOFo 7J3tGFN5cv0+FVMur79SYl9M1dhKW+o2KH39vnS6VwDicrN8bAU4bdbOTpHvlhuB SoLlfY+Os6pcVJOoL2qiY4NAWWVN7UcHmj0hCLpnPTe52mfXLBBb6K3zkiWky5FX MqbhRnpVBUEtzhWLgCVzxvo2qXJToEls4+c1fAGxZ7VNEFiI548h7MCQYKsyoCI4 fzPl/DPirB+Feek9AWsqxwoXRATzxY05ixwziDTx2Ci9FoH26hY5Sngsfn54Bk/S 1f0nST41LZdXMlis33McIRG076vj7dDERHduu/VWqeRqg0aJf0IS/nk0P6XqpuG+ 5S+7HbV7v/q+cg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:17 2025 by rpki-client