This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft File: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json) Hash identifier: 2Z0i9SadHk4OB9PQfgu51OCqiu5QedCbToHsOQvs1sc= Subject key identifier: 3F:F0:96:DF:E7:D9:11:6A:3D:ED:A2:1E:82:96:A0:1E:F4:A0:AD:69 Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17 Certificate issuer: /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17 Certificate serial: 019AF3C06BBEBB18C649583E6830DE85CECA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft Manifest number: 07B9 Signing time: Sat 06 Dec 2025 13:01:05 +0000 Manifest this update: Sat 06 Dec 2025 13:01:05 +0000 Manifest next update: Sun 07 Dec 2025 13:01:05 +0000 Files and hashes: 1: 1tilC1_jin8srVsrV1j052DulGk.roa (hash: vyS0S5gewCJtoxpuN4POioePDrUuw5luS1kTn7wZwZE=) 2: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: /0/lP4hMnhtpWrBuYifGTVYeWKS7kHgzzp8yBfhG+Tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:6b:be:bb:18:c6:49:58:3e:68:30:de:85:ce:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17 Validity Not Before: Dec 6 13:01:05 2025 GMT Not After : Dec 7 13:01:05 2025 GMT Subject: CN=3ff096dfe7d9116a3deda21e8296a01ef4a0ad69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:71:c1:f8:19:97:7e:f3:27:33:d1:9d:58:cb: 44:5a:88:57:ed:14:d5:d1:6e:0e:b8:57:bf:72:21: e5:9d:a5:1e:6a:55:8b:5b:5c:04:15:df:3f:3b:b2: 24:4a:ac:a1:d8:c7:59:88:b9:73:94:66:b1:74:2b: 3b:2b:e5:82:2b:59:53:47:5b:bb:41:a0:43:ce:e9: 37:73:93:66:a0:19:da:34:2a:6e:31:00:ca:06:1f: 82:e9:df:f9:b4:c4:ec:61:fb:74:a0:b7:c3:01:65: 1d:38:74:21:e0:b5:27:0b:88:c8:10:21:29:62:90: c7:ca:46:4b:7f:bd:9b:d6:5e:49:40:a6:9b:da:47: 4c:96:65:a6:1e:d0:d3:dd:d5:03:00:e7:b1:7b:55: 22:d1:c0:af:87:e5:ed:68:7c:3e:cd:bf:3e:30:8c: da:23:ce:6d:0c:4b:d3:ff:52:cc:54:b2:1b:87:83: 56:72:b6:d3:73:a0:90:0f:17:7f:e6:9c:4c:3e:9d: b3:2c:ec:46:f0:29:5d:9c:0a:76:1b:3e:d0:39:bb: ac:21:57:2d:b8:00:bc:fe:f7:b4:fd:07:6a:c9:50: c2:35:96:d9:f3:dd:5e:5a:8d:90:32:f7:b3:43:f8: 4e:66:d2:99:50:d1:18:1d:64:2e:d4:ad:eb:14:3c: f7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F0:96:DF:E7:D9:11:6A:3D:ED:A2:1E:82:96:A0:1E:F4:A0:AD:69 X509v3 Authority Key Identifier: keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:69:07:a5:20:b8:c5:82:1e:71:03:d6:e0:89:9b:df:f8:db: 14:b9:51:71:0a:69:20:2e:16:ee:5d:a8:c6:0b:e5:ca:dc:7b: d4:3f:b8:5d:70:6c:9e:19:2f:2c:3c:c4:6b:78:b7:d9:54:8b: 7c:c3:e1:2f:8e:f0:67:5e:91:ea:1b:ee:ee:f0:21:30:82:12: c1:c1:66:f3:ee:7e:4c:27:06:b5:01:01:ae:3e:2d:3c:36:21: 8c:23:a2:19:6f:aa:f3:1e:c4:bd:7c:f4:73:2c:f9:27:19:f3: 3a:80:64:21:9b:74:a9:72:76:4d:1a:24:aa:b0:01:87:8e:e6: 24:d1:6a:48:62:28:cf:5d:82:0b:ec:5d:0e:fb:66:c9:eb:f5: a5:f6:83:3f:65:b8:ed:33:28:f9:5c:05:7b:d0:ff:02:2e:6e: f3:2f:78:e3:52:fd:ea:9c:d2:19:b1:44:18:7a:8f:dd:18:48: 72:6a:ef:74:f0:c9:e0:20:cb:72:77:6a:c5:81:26:73:f7:16: 99:3f:d2:f4:1b:72:c1:54:8a:5a:6c:36:ab:bc:7b:66:a3:c4: af:db:09:a1:17:6d:34:2f:3d:33:23:f6:e2:ec:3b:30:89:c6: cd:60:c6:a6:5b:66:bb:aa:cd:66:cb:0c:63:7c:5e:38:35:9f: 65:ab:05:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwGu+uxjGSVg+aDDehc7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGRkNmU3YTFmZWI2ZmI0N2M5YTJmODk5MTg4MjcwOTRk YmZjMTcwHhcNMjUxMjA2MTMwMTA1WhcNMjUxMjA3MTMwMTA1WjAzMTEwLwYDVQQD EygzZmYwOTZkZmU3ZDkxMTZhM2RlZGEyMWU4Mjk2YTAxZWY0YTBhZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HHB+BmXfvMnM9GdWMtEWohX7RTV 0W4OuFe/ciHlnaUealWLW1wEFd8/O7IkSqyh2MdZiLlzlGaxdCs7K+WCK1lTR1u7 QaBDzuk3c5NmoBnaNCpuMQDKBh+C6d/5tMTsYft0oLfDAWUdOHQh4LUnC4jIECEp YpDHykZLf72b1l5JQKab2kdMlmWmHtDT3dUDAOexe1Ui0cCvh+XtaHw+zb8+MIza I85tDEvT/1LMVLIbh4NWcrbTc6CQDxd/5pxMPp2zLOxG8CldnAp2Gz7QObusIVct uAC8/ve0/QdqyVDCNZbZ891eWo2QMvezQ/hOZtKZUNEYHWQu1K3rFDz3hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/wlt/n2RFqPe2iHoKWoB70oK1pMB8GA1UdIwQY MBaAFN7d1ueh/rb7R8mi+JkYgnCU2/wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3QzVzU2SC10dnRIeWFMNG1SaUNjSlRiX0JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wYWQ5OWEtMWEwZi00MmUwLWFlN2Qt ZjA3MTgzNzczYjI2LzEvM3QzVzU2SC10dnRIeWFMNG1SaUNjSlRiX0JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wYWQ5OWEtMWEwZi00MmUwLWFlN2QtZjA3MTgzNzczYjI2 LzEvM3QzVzU2SC10dnRIeWFMNG1SaUNjSlRiX0JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2kHpSC4 xYIecQPW4Imb3/jbFLlRcQppIC4W7l2oxgvlytx71D+4XXBsnhkvLDzEa3i32VSL fMPhL47wZ16R6hvu7vAhMIISwcFm8+5+TCcGtQEBrj4tPDYhjCOiGW+q8x7EvXz0 cyz5JxnzOoBkIZt0qXJ2TRokqrABh47mJNFqSGIoz12CC+xdDvtmyev1pfaDP2W4 7TMo+VwFe9D/Ai5u8y9441L96pzSGbFEGHqP3RhIcmrvdPDJ4CDLcndqxYEmc/cW mT/S9BtywVSKWmw2q7x7ZqPEr9sJoRdtNC89MyP24uw7MInGzWDGpltmu6rNZssM Y3xeODWfZasFxA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:10 2025 by rpki-client