This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft File: 3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json) Hash identifier: SIH4OpWuWhvhWZKcoJMnSE/V7q2V4FhUfnvNt130Dwc= Subject key identifier: 2C:36:4C:75:D6:81:97:7A:7F:29:93:29:FE:A4:68:E1:79:4F:FB:80 Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e Certificate serial: 019AF2ADCE3AF433E723C3AA0C3BE2439257 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: ZYjwnFPHMvBx4iD8r/CFslNUQpYq/WauXMKGHxpzgko=) 2: NjNc1F_noFOuVoizuwyNmIiyikg.roa (hash: IrtAGIN7Mq5Prcg2l/Rn0ppsqJX7JmRhzfI5wRDO3Ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ce:3a:f4:33:e7:23:c3:aa:0c:3b:e2:43:92:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=2c364c75d681977a7f299329fea468e1794ffb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:a7:02:24:6d:42:70:e9:30:74:b7:8f:e1: 25:15:01:dc:17:54:fc:c9:f3:7c:6e:b9:93:7e:0e: c6:a2:64:aa:83:b1:b3:d7:74:ac:08:6b:a4:fa:94: 84:2b:a6:e2:d3:e7:85:97:b1:48:4b:d1:8e:65:d6: a3:7c:55:6e:66:2e:d1:aa:c5:70:06:18:52:29:c4: 5d:84:20:0e:d3:ca:4c:77:85:75:18:45:28:4d:2e: dd:02:4e:4e:b9:31:88:11:4c:17:16:0a:a7:c4:7b: b3:ef:6d:c8:82:c1:38:ef:91:70:f7:02:b5:24:5d: 1d:44:29:3b:e2:c5:67:f9:39:3e:e8:dc:53:03:f7: ce:72:25:ce:86:ef:99:c9:ce:ae:46:e1:3b:54:e4: fd:15:5e:1a:53:29:c0:ec:33:71:1b:40:99:83:e5: 01:84:38:70:f8:d4:55:9b:06:e5:fc:52:27:1d:8d: 64:21:ac:d5:fe:86:d9:f7:bf:da:43:b8:28:94:a3: 94:3f:75:86:3b:58:da:78:72:9f:8b:95:5f:74:f0: d5:9d:00:dc:92:a3:f3:ff:62:43:1a:57:09:a2:fa: e0:a1:aa:81:ba:db:66:e8:48:9d:64:32:f3:74:35: fb:fd:f3:99:44:ca:0e:9f:f2:d6:16:f0:8e:56:c8: 45:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:36:4C:75:D6:81:97:7A:7F:29:93:29:FE:A4:68:E1:79:4F:FB:80 X509v3 Authority Key Identifier: keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:5b:44:51:a1:3d:38:7b:4c:a2:b1:a1:0c:7b:b1:52:3c:9c: 11:9a:90:23:b6:2b:e4:8a:80:a4:4d:42:67:2c:ee:25:72:4b: de:d5:e2:0b:df:01:52:3e:8e:e9:40:e8:70:21:75:ce:7f:0a: a1:d6:4e:ab:42:5e:49:cd:4e:e0:99:f9:5d:57:7e:c6:c5:a9: b0:21:ca:25:dd:bd:ef:2f:1b:f4:eb:26:ea:dd:07:be:66:30: 51:bb:65:d0:db:3d:e1:28:50:82:2e:fa:45:e6:a5:86:f6:4b: 01:d5:b8:12:9f:22:61:7b:d0:33:66:68:0e:a4:b8:15:b5:6a: 44:5a:b0:6e:52:6f:35:07:c1:f2:19:52:ae:32:81:7e:88:c1: b3:23:31:fd:a2:d3:7b:3e:63:a8:a2:04:97:dd:17:c9:21:d8: 48:15:6c:ca:1a:a2:20:32:08:d7:df:e2:7e:44:b9:ca:eb:96: d9:29:d6:7e:21:be:d2:dc:0f:8d:57:b4:f5:64:1b:9a:2c:5f: 3e:07:b3:ee:21:6b:4e:86:4b:30:7e:30:7f:2e:8c:87:29:22: 10:51:49:cd:a0:e1:f7:6f:5b:ef:d1:b1:60:4a:94:bc:d0:1d: b6:91:cd:1b:05:f3:b9:25:99:16:73:04:16:dc:14:f6:d3:30: 1f:d6:5d:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrc469DPnI8OqDDviQ5JXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNDdlZDU4OGJhOTA2OTQ1N2EyYTg5OGZjN2EwY2I5Nzdk MWY4MWUwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD EygyYzM2NGM3NWQ2ODE5NzdhN2YyOTkzMjlmZWE0NjhlMTc5NGZmYjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoSnAiRtQnDpMHS3j+ElFQHcF1T8 yfN8brmTfg7GomSqg7Gz13SsCGuk+pSEK6bi0+eFl7FIS9GOZdajfFVuZi7RqsVw BhhSKcRdhCAO08pMd4V1GEUoTS7dAk5OuTGIEUwXFgqnxHuz723IgsE475Fw9wK1 JF0dRCk74sVn+Tk+6NxTA/fOciXOhu+Zyc6uRuE7VOT9FV4aUynA7DNxG0CZg+UB hDhw+NRVmwbl/FInHY1kIazV/obZ97/aQ7golKOUP3WGO1jaeHKfi5VfdPDVnQDc kqPz/2JDGlcJovrgoaqButtm6EidZDLzdDX7/fOZRMoOn/LWFvCOVshF8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCw2THXWgZd6fymTKf6kaOF5T/uAMB8GA1UdIwQY MBaAFN1H7ViLqQaUV6KomPx6DLl30fgeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1VmdFdJdXBCcFJYb3FpWV9Ib011WGZSLUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NTgxYjctMzViYy00YmM4LTg1YjMt ZjQ1OTZlNzc2N2E4LzEvM1VmdFdJdXBCcFJYb3FpWV9Ib011WGZSLUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny80NTgxYjctMzViYy00YmM4LTg1YjMtZjQ1OTZlNzc2N2E4 LzEvM1VmdFdJdXBCcFJYb3FpWV9Ib011WGZSLUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0VtEUaE9 OHtMorGhDHuxUjycEZqQI7Yr5IqApE1CZyzuJXJL3tXiC98BUj6O6UDocCF1zn8K odZOq0JeSc1O4Jn5XVd+xsWpsCHKJd297y8b9Osm6t0HvmYwUbtl0Ns94ShQgi76 RealhvZLAdW4Ep8iYXvQM2ZoDqS4FbVqRFqwblJvNQfB8hlSrjKBfojBsyMx/aLT ez5jqKIEl90XySHYSBVsyhqiIDII19/ifkS5yuuW2SnWfiG+0twPjVe09WQbmixf Pgez7iFrToZLMH4wfy6MhykiEFFJzaDh929b79GxYEqUvNAdtpHNGwXzuSWZFnME FtwU9tMwH9Zd2w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:27:14 2025 by rpki-client