This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft File: 3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json) Hash identifier: mZ9RNhL7nCU9FGUS70lnbP/y8De9HEsRPjocgsh5mFc= Subject key identifier: ED:94:0F:4D:CA:94:3E:31:1F:12:21:3A:61:8A:4F:1D:77:CA:8A:A6 Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed Certificate serial: 019AF50B9B85AA7C53F9991649E8187C138C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft Manifest number: 10B6 Signing time: Sat 06 Dec 2025 19:02:49 +0000 Manifest this update: Sat 06 Dec 2025 19:02:49 +0000 Manifest next update: Sun 07 Dec 2025 19:02:49 +0000 Files and hashes: 1: 1-hdiWMY5l0xAZuqxRKYMnls1-tQ.roa (hash: T86Jb9a9Ub4X+hYRFQtCytnDevJ3Vo4p0E2BCYldVL4=) 2: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: Q+MBFVyaJzvIRlzCZUASUAruWjFYVYKkw4KcPWMudEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:9b:85:aa:7c:53:f9:99:16:49:e8:18:7c:13:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed Validity Not Before: Dec 6 19:02:49 2025 GMT Not After : Dec 7 19:02:49 2025 GMT Subject: CN=ed940f4dca943e311f12213a618a4f1d77ca8aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b6:20:48:65:d1:56:87:6e:b5:26:ea:bd:74: 85:93:e2:dc:b9:dd:99:eb:6e:e5:23:71:e2:e8:29: a0:f5:1a:58:e0:36:80:9d:96:af:dc:4e:2a:fe:de: ca:f5:dd:f8:1f:98:8d:80:b3:65:c2:56:f9:e0:e6: c0:2f:6e:28:fa:9a:f7:32:06:f1:5c:73:e4:35:27: 35:2a:36:5e:a1:1c:13:78:9a:61:53:3a:18:7f:74: ff:4d:98:94:67:2c:30:32:61:d2:c8:72:09:48:0d: bf:58:44:81:fb:bc:f5:7d:28:0c:61:45:d9:af:dc: 6b:1d:28:2a:98:e9:8d:af:d3:0f:cc:f8:e7:ea:1f: 38:b8:0b:8d:da:08:52:32:39:8a:a8:5a:0d:aa:0f: fc:30:9d:75:8e:00:97:0b:9b:2b:3b:75:7b:f8:8d: 48:ed:9d:e8:22:78:61:2d:83:56:75:b1:96:4c:a5: b8:7f:74:fa:89:c3:1e:73:99:d6:8d:db:55:90:98: 55:e7:82:12:26:c3:d9:05:a5:2d:3b:83:56:80:40: fa:4c:f1:e3:dd:9e:d2:ed:71:13:1b:2b:1a:56:94: 26:3e:2b:51:a1:1f:6b:a2:fb:06:cb:34:b7:a5:06: ef:a4:b9:bd:d3:31:ef:41:22:f5:88:2c:66:b4:51: 0e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:94:0F:4D:CA:94:3E:31:1F:12:21:3A:61:8A:4F:1D:77:CA:8A:A6 X509v3 Authority Key Identifier: keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:94:35:61:d2:68:d1:3f:20:5f:4c:fc:ab:14:83:a0:cd:de: 43:ec:ad:4d:0b:59:ae:e7:8f:75:76:b1:0e:00:f8:91:63:8c: 34:38:f1:f3:5e:03:57:95:8b:99:6d:58:72:d4:11:1e:6b:4f: 25:a1:e9:61:a0:b6:c6:4f:4d:66:6c:93:ec:0b:9a:47:c2:e2: c5:96:d0:3a:a2:44:72:53:de:b4:51:5f:e0:a0:f5:0a:be:5b: d0:d2:ee:83:1b:78:9c:85:96:f1:92:ba:9a:af:1f:e8:4b:4a: 0d:74:82:ef:f0:1d:43:e1:25:41:07:dc:5a:b7:7a:e5:fe:f0: 41:a8:d7:5b:66:21:bd:b2:83:51:14:97:f1:8d:d4:0c:d4:ed: f3:01:cc:2a:26:9a:ab:dc:ee:88:45:b9:0b:9b:5f:b3:14:0a: 77:9b:5b:69:41:e4:b9:a7:fe:49:08:ce:e2:eb:8e:26:39:c2: 6c:be:05:1b:12:5b:77:5f:89:19:ee:f5:e5:e5:a4:1f:e0:49: bc:72:63:66:b6:62:b7:cf:2f:88:fa:91:f1:0f:91:d4:d1:2d: ff:f7:35:0a:df:2b:98:67:1f:78:78:35:bc:58:c5:17:71:07: 93:f7:ab:0f:59:c6:40:13:14:2d:09:82:74:1e:44:7b:55:8b: 62:61:94:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5uFqnxT+ZkWSegYfBOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOGE0ZTFkZWU1YmIxZTY1NzliMTE2MWNhOTEyY2E5YzAz YjQ2ZWQwHhcNMjUxMjA2MTkwMjQ5WhcNMjUxMjA3MTkwMjQ5WjAzMTEwLwYDVQQD EyhlZDk0MGY0ZGNhOTQzZTMxMWYxMjIxM2E2MThhNGYxZDc3Y2E4YWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrYgSGXRVodutSbqvXSFk+Lcud2Z 627lI3Hi6Cmg9RpY4DaAnZav3E4q/t7K9d34H5iNgLNlwlb54ObAL24o+pr3Mgbx XHPkNSc1KjZeoRwTeJphUzoYf3T/TZiUZywwMmHSyHIJSA2/WESB+7z1fSgMYUXZ r9xrHSgqmOmNr9MPzPjn6h84uAuN2ghSMjmKqFoNqg/8MJ11jgCXC5srO3V7+I1I 7Z3oInhhLYNWdbGWTKW4f3T6icMec5nWjdtVkJhV54ISJsPZBaUtO4NWgED6TPHj 3Z7S7XETGysaVpQmPitRoR9rovsGyzS3pQbvpLm90zHvQSL1iCxmtFEO2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2UD03KlD4xHxIhOmGKTx13yoqmMB8GA1UdIwQY MBaAFN2KTh3uW7HmV5sRYcqRLKnAO0btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1lwT0hlNWJzZVpYbXhGaHlwRXNxY0E3UnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS81ZDE5MDgtNmM0ZC00NTgxLThmMTAt OTg1YWFjNWJlYjMwLzEvM1lwT0hlNWJzZVpYbXhGaHlwRXNxY0E3UnUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS81ZDE5MDgtNmM0ZC00NTgxLThmMTAtOTg1YWFjNWJlYjMw LzEvM1lwT0hlNWJzZVpYbXhGaHlwRXNxY0E3UnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZQ1YdJo 0T8gX0z8qxSDoM3eQ+ytTQtZruePdXaxDgD4kWOMNDjx814DV5WLmW1YctQRHmtP JaHpYaC2xk9NZmyT7AuaR8LixZbQOqJEclPetFFf4KD1Cr5b0NLugxt4nIWW8ZK6 mq8f6EtKDXSC7/AdQ+ElQQfcWrd65f7wQajXW2YhvbKDURSX8Y3UDNTt8wHMKiaa q9zuiEW5C5tfsxQKd5tbaUHkuaf+SQjO4uuOJjnCbL4FGxJbd1+JGe715eWkH+BJ vHJjZrZit88viPqR8Q+R1NEt//c1Ct8rmGcfeHg1vFjFF3EHk/erD1nGQBMULQmC dB5Ee1WLYmGUfw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:12 2025 by rpki-client