This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json) Hash identifier: wkTxKfjsztIzNSGFFuQyPpl7NgPSNggNYBN0GKBMJGA= Subject key identifier: 90:C8:05:1D:51:B9:58:16:F7:31:8B:2C:23:52:57:0A:26:25:D7:E7 Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab Certificate serial: 019AF20932FBC21E0301F49EAB193D4E7D19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft Manifest number: 1406 Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 05:01:20 +0000 Manifest next update: Sun 07 Dec 2025 05:01:20 +0000 Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: 60LhqzHcyCN4wzx27+ZOr8Fa7uxx8vAIPRfnwGuy76A=) 2: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (hash: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:32:fb:c2:1e:03:01:f4:9e:ab:19:3d:4e:7d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab Validity Not Before: Dec 6 05:01:20 2025 GMT Not After : Dec 7 05:01:20 2025 GMT Subject: CN=90c8051d51b95816f7318b2c2352570a2625d7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:a0:eb:4a:14:71:be:fa:20:8e:fa:22:98: 8c:2e:2c:ff:a7:82:58:6b:93:64:e8:9c:a6:3b:7d: 8a:d3:81:d9:d4:83:61:da:8a:5d:2f:2d:22:26:29: cb:fc:fd:de:77:d0:14:96:6b:12:1a:38:e0:42:2d: 89:2e:4a:27:74:f7:14:e8:d3:c0:94:84:e3:6b:d4: 3c:da:b9:18:93:1d:dd:82:dd:22:c1:ce:68:6a:13: 03:d6:b0:fa:45:90:43:23:56:ac:45:8c:93:5a:f2: 33:16:e4:39:0e:84:61:99:c9:cd:6c:ec:ed:36:8d: c5:70:39:8f:ac:43:03:dc:10:14:76:36:3d:06:a7: 99:0c:37:a6:86:9d:f2:9e:32:9f:11:f8:ad:d5:1f: c6:d7:82:ab:20:f3:f1:89:5d:4a:69:cd:bd:ef:c1: cc:e4:30:63:2a:50:15:fc:d0:62:3c:7d:08:cb:24: 54:34:ac:73:22:41:a1:5a:47:8d:7c:ad:f7:42:e2: f6:9c:b6:3a:8f:e3:a9:e9:db:17:93:7d:e1:23:e9: ce:98:a1:2d:46:21:cd:32:d2:e7:0a:f3:15:f9:a3: 32:e9:b9:8f:bc:82:7f:1c:25:be:20:f0:9a:de:06: 60:02:ab:79:c8:6c:3b:49:63:a4:7d:bf:7d:f0:4a: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C8:05:1D:51:B9:58:16:F7:31:8B:2C:23:52:57:0A:26:25:D7:E7 X509v3 Authority Key Identifier: keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:06:aa:47:c6:6d:be:db:13:21:39:a7:39:32:4e:51:20:5d: 86:a5:d5:52:32:d3:5d:82:98:48:88:b6:d0:3e:f9:8e:25:16: d0:60:dc:61:eb:10:dd:60:8c:b8:fa:d5:1f:e5:d2:60:39:b1: db:6c:52:05:2c:2b:21:77:e5:61:bd:ae:d6:d8:28:3a:77:fb: 63:28:76:53:5d:7f:2d:28:eb:56:f5:56:5c:5a:db:70:f9:fd: d9:a8:41:b6:55:94:d6:67:ea:42:d5:44:44:81:ba:49:0e:50: aa:d7:3a:5d:d8:b8:a6:c7:bd:8e:22:4f:05:0a:f2:a1:88:49: 85:21:21:5a:a2:4d:51:b7:41:f4:b3:ed:a5:91:70:cf:ca:ee: 88:20:fc:72:10:9f:49:2c:a5:ef:d6:19:3e:35:54:8f:85:7d: 15:e9:cf:a2:1a:15:e6:30:5a:54:2b:fb:b5:e9:37:0e:d8:21: b8:ca:c2:58:7c:52:3a:e9:e5:6b:4f:51:0c:98:b4:46:c0:bd: 4c:d9:7f:19:42:2a:cf:eb:4c:35:ae:8a:73:63:53:49:c2:ad: 13:ef:14:ab:5d:21:f1:9f:84:20:be:9c:86:75:60:d2:dd:7f: d4:f4:86:fc:df:a8:dc:f9:71:ff:69:4c:ad:1b:ca:9d:dd:54: 23:57:90:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTL7wh4DAfSeqxk9Tn0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNTFjM2M1ZGRjNGZiNjEzODFjM2JlYTI0YzFiYTRmNzQ5 OThlYWIwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD Eyg5MGM4MDUxZDUxYjk1ODE2ZjczMThiMmMyMzUyNTcwYTI2MjVkN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS6g60oUcb76II76IpiMLiz/p4JY a5Nk6JymO32K04HZ1INh2opdLy0iJinL/P3ed9AUlmsSGjjgQi2JLkondPcU6NPA lITja9Q82rkYkx3dgt0iwc5oahMD1rD6RZBDI1asRYyTWvIzFuQ5DoRhmcnNbOzt No3FcDmPrEMD3BAUdjY9BqeZDDemhp3ynjKfEfit1R/G14KrIPPxiV1Kac2978HM 5DBjKlAV/NBiPH0IyyRUNKxzIkGhWkeNfK33QuL2nLY6j+Op6dsXk33hI+nOmKEt RiHNMtLnCvMV+aMy6bmPvIJ/HCW+IPCa3gZgAqt5yGw7SWOkfb998EoR2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDIBR1RuVgW9zGLLCNSVwomJdfnMB8GA1UdIwQY MBaAFN5Rw8XdxPthOBw76iTBuk90mY6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEt YTUzMjVkNDQxNzAyLzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEtYTUzMjVkNDQxNzAy LzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQaqR8Zt vtsTITmnOTJOUSBdhqXVUjLTXYKYSIi20D75jiUW0GDcYesQ3WCMuPrVH+XSYDmx 22xSBSwrIXflYb2u1tgoOnf7Yyh2U11/LSjrVvVWXFrbcPn92ahBtlWU1mfqQtVE RIG6SQ5Qqtc6Xdi4pse9jiJPBQryoYhJhSEhWqJNUbdB9LPtpZFwz8ruiCD8chCf SSyl79YZPjVUj4V9FenPohoV5jBaVCv7tek3DtghuMrCWHxSOunla09RDJi0RsC9 TNl/GUIqz+tMNa6Kc2NTScKtE+8Uq10h8Z+EIL6chnVg0t1/1PSG/N+o3Plx/2lM rRvKnd1UI1eQLw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:27 2025 by rpki-client