This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json) Hash identifier: 740ujY5eQ5HypWFr0vAL6twMsRczkKKlmKlZgEOVfxQ= Subject key identifier: 5F:67:C6:E7:A1:29:27:C2:2D:05:3E:95:70:AD:EE:17:43:91:1E:5E Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90 Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590 Certificate serial: 019AF3528112F491384019EC154C9CEAEC6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft Manifest number: 101E Signing time: Sat 06 Dec 2025 11:01:01 +0000 Manifest this update: Sat 06 Dec 2025 11:01:01 +0000 Manifest next update: Sun 07 Dec 2025 11:01:01 +0000 Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: P5NcKrifs2CRwwOSf/xYjHur3uTZIFNwfN4Zs+QupOs=) 2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=) 3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:81:12:f4:91:38:40:19:ec:15:4c:9c:ea:ec:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590 Validity Not Before: Dec 6 11:01:01 2025 GMT Not After : Dec 7 11:01:01 2025 GMT Subject: CN=5f67c6e7a12927c22d053e9570adee1743911e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:08:41:5b:7a:09:2b:be:57:f8:af:76:9a:ad: 12:8d:ae:be:ab:76:20:cd:83:e1:52:3f:2f:c1:ef: ab:f3:ad:42:41:91:a2:7d:41:66:96:fe:11:24:67: 2a:2f:ed:56:6d:9f:fa:36:e0:8d:9a:f5:3b:b6:9b: 21:b8:9f:b0:75:cc:4b:06:fc:0c:4f:aa:aa:fc:1e: 79:f7:5c:9b:82:b6:00:29:44:5f:64:d1:1f:6e:01: 2c:c7:99:6d:5f:38:47:e6:f3:a7:00:09:3b:c8:19: 82:84:f4:02:9c:4b:f0:8d:47:97:03:32:1a:88:dc: b6:4f:1a:97:00:60:f5:ce:2b:93:3d:b7:45:02:ce: 31:23:3f:03:6a:78:2f:26:e2:80:d1:c4:10:7f:18: 0a:22:56:64:7d:19:68:b9:78:d2:b9:12:51:c8:7f: bf:45:2a:85:93:ea:44:14:19:45:3f:f6:91:2d:e7: 6d:47:b4:ff:25:41:5b:c6:47:2d:a2:86:4b:3a:0d: d5:0d:e4:08:39:16:5b:28:62:ce:42:f7:f9:3b:96: 21:76:dd:b1:55:4e:7b:12:00:ba:eb:d5:81:64:c9: fd:91:97:9a:6f:b1:4f:e6:fc:c7:5a:64:88:8e:10: 3d:b7:ed:63:43:b2:2b:cc:20:bc:e4:2a:de:0e:f1: 57:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:67:C6:E7:A1:29:27:C2:2D:05:3E:95:70:AD:EE:17:43:91:1E:5E X509v3 Authority Key Identifier: keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:41:89:6b:a7:d9:23:f5:7f:c3:6c:81:71:70:3a:89:d3:0a: 59:ff:83:56:b2:97:3e:f8:f2:6d:d0:80:cc:3f:8c:bb:7a:75: ff:f2:a0:31:ec:b6:54:86:cb:b1:6f:6a:96:82:7d:13:a4:58: 68:be:fd:11:44:8a:84:4d:83:70:02:38:b1:84:2a:79:4e:da: 6b:0f:1c:dc:33:22:ca:97:b2:6d:30:fe:a9:3d:24:3c:2b:b9: 98:67:30:d3:ab:e9:c5:60:93:d1:06:3e:b6:ab:49:1f:fe:a1: 43:a7:94:76:97:cb:62:8e:42:46:63:48:44:1b:a8:f7:48:e6: f6:1e:eb:ab:9d:02:24:48:19:f0:e8:e9:ef:83:3d:11:9e:9f: 30:9a:bc:b9:68:7b:27:53:c9:51:70:50:b5:ca:be:8e:fb:24: bb:de:b1:18:70:6f:4d:40:9b:a1:f7:83:1f:d3:bf:ae:3a:48: 2a:08:f2:2b:0b:1b:bf:35:c7:da:65:83:99:61:c9:29:24:1f: 1f:44:07:1b:74:8b:d3:6b:6c:cf:a3:61:7c:80:24:d9:47:3f: aa:e7:b4:7d:e1:96:48:37:a3:7a:bf:72:65:67:29:2d:63:4e: a3:d9:6a:c1:7f:77:db:20:31:e3:d4:a7:70:5a:84:3f:d9:a9: 67:12:f3:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoES9JE4QBnsFUyc6uxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlM2Q4MTIxMWY0OTJlZGYwMjlhMjJjYzY2YzIwYTNiOTQ1 ODM1OTAwHhcNMjUxMjA2MTEwMTAxWhcNMjUxMjA3MTEwMTAxWjAzMTEwLwYDVQQD Eyg1ZjY3YzZlN2ExMjkyN2MyMmQwNTNlOTU3MGFkZWUxNzQzOTExZTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QhBW3oJK75X+K92mq0Sja6+q3Yg zYPhUj8vwe+r861CQZGifUFmlv4RJGcqL+1WbZ/6NuCNmvU7tpshuJ+wdcxLBvwM T6qq/B5591ybgrYAKURfZNEfbgEsx5ltXzhH5vOnAAk7yBmChPQCnEvwjUeXAzIa iNy2TxqXAGD1ziuTPbdFAs4xIz8DangvJuKA0cQQfxgKIlZkfRlouXjSuRJRyH+/ RSqFk+pEFBlFP/aRLedtR7T/JUFbxkctooZLOg3VDeQIORZbKGLOQvf5O5Yhdt2x VU57EgC669WBZMn9kZeab7FP5vzHWmSIjhA9t+1jQ7IrzCC85CreDvFXSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9nxuehKSfCLQU+lXCt7hdDkR5eMB8GA1UdIwQY MBaAFN49gSEfSS7fApoizGbCCjuUWDWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYt MzE0MjhiMDUwZmQ3LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYtMzE0MjhiMDUwZmQ3 LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0GJa6fZ I/V/w2yBcXA6idMKWf+DVrKXPvjybdCAzD+Mu3p1//KgMey2VIbLsW9qloJ9E6RY aL79EUSKhE2DcAI4sYQqeU7aaw8c3DMiypeybTD+qT0kPCu5mGcw06vpxWCT0QY+ tqtJH/6hQ6eUdpfLYo5CRmNIRBuo90jm9h7rq50CJEgZ8Ojp74M9EZ6fMJq8uWh7 J1PJUXBQtcq+jvsku96xGHBvTUCbofeDH9O/rjpIKgjyKwsbvzXH2mWDmWHJKSQf H0QHG3SL02tsz6NhfIAk2Uc/que0feGWSDejer9yZWcpLWNOo9lqwX932yAx49Sn cFqEP9mpZxLzkg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:19 2025 by rpki-client