This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json) Hash identifier: f8mPFcSi+YF4W0hp1tjAyCeHJ2tEQ4KtmPMTbzqWExA= Subject key identifier: E4:9F:9A:C1:41:03:52:16:FD:B6:24:43:9A:D7:FF:CB:16:9D:98:8A Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f Certificate serial: 019AF31CAE72FABA097EBCC18C46D0824399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 10:02:14 +0000 Manifest this update: Sat 06 Dec 2025 10:02:14 +0000 Manifest next update: Sun 07 Dec 2025 10:02:14 +0000 Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: b5q0SG4EM+C7+1XRT+TXy7282m6qzP8rJaKsvGGh6LU=) 2: NopP_ZIwxAVnz5Xq3F8YDJ6XlSQ.roa (hash: klfGz6i2JiivKFDVhsCpWAOF20m0ZYcMb/uXv3sHlTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ae:72:fa:ba:09:7e:bc:c1:8c:46:d0:82:43:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f Validity Not Before: Dec 6 10:02:14 2025 GMT Not After : Dec 7 10:02:14 2025 GMT Subject: CN=e49f9ac141035216fdb624439ad7ffcb169d988a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:43:1b:85:33:d2:ec:de:28:1e:cd:e7:63: 2c:b4:0f:80:d8:31:13:cf:63:a1:bd:09:56:02:12: bc:31:a5:18:a5:5f:23:08:33:eb:0a:44:a1:68:76: c4:c3:57:e0:c1:4d:f0:e9:bc:58:b0:7d:34:26:63: c3:c6:aa:c2:a4:3d:72:31:10:c7:f1:04:9b:07:15: 42:e0:38:78:65:8c:d4:66:c0:07:60:b6:55:38:75: 1c:93:61:b8:a5:95:a4:88:ad:62:db:be:e2:a0:15: dc:2b:78:dd:f0:0e:79:96:61:75:8a:7e:6b:fb:20: 6e:85:b7:3b:08:01:64:98:26:c1:4a:07:1a:56:10: 7b:04:63:17:ff:24:1d:ce:9a:2c:62:21:a4:09:39: b0:15:35:17:07:e4:54:14:ab:11:0b:89:fa:70:48: 1e:59:a7:1b:e2:44:01:e7:df:97:e0:20:5c:bb:68: 3e:ce:48:84:ae:40:86:c4:6a:8b:b5:db:b5:80:2a: 78:f7:5e:1a:b0:76:7c:5f:9a:32:90:f6:a1:f5:5e: 54:ba:de:7f:d3:3d:a9:b8:b6:02:89:c3:f5:87:97: d5:e6:a7:98:54:5a:c9:6b:4a:e6:d1:79:c3:41:2c: 20:13:70:fb:a7:f0:a3:69:a4:27:23:28:7e:b8:b9: 39:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9F:9A:C1:41:03:52:16:FD:B6:24:43:9A:D7:FF:CB:16:9D:98:8A X509v3 Authority Key Identifier: keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c7:15:c3:d6:53:59:79:22:77:f4:5c:6b:39:9f:11:42:c5: 1a:75:9f:c4:ac:65:cd:15:91:b2:0c:6f:6d:f1:a2:46:20:c3: 2f:52:e7:c1:2b:2c:ff:c6:22:14:37:b4:73:92:9a:f5:65:eb: e6:bf:b0:8e:72:85:c5:f8:71:2d:b1:7c:b4:fa:de:d0:31:2a: 24:9e:82:c0:4e:99:7f:2d:e9:d7:ed:d3:23:a9:98:0e:cf:0e: f6:41:a0:25:7b:c9:72:79:a1:42:36:6c:c3:ed:ce:6f:22:e5: 58:55:80:ed:9e:5b:05:97:6e:43:67:30:65:93:e1:9d:87:75: 2c:82:3d:52:fa:3e:ec:9c:3f:f0:25:36:a7:8c:3e:a3:96:b1: c1:be:2b:b2:bd:00:88:e1:ae:87:34:a1:21:b4:60:85:81:dc: 24:66:40:87:f3:23:aa:f6:2c:21:47:35:47:7f:9d:de:35:86: 2c:91:63:9f:f9:df:d8:59:31:92:51:bc:44:91:1f:87:4f:30: a9:86:13:42:39:d6:97:53:cd:81:10:f3:71:50:d0:64:45:51: ea:e8:75:86:9d:e4:34:16:b2:8b:7e:02:be:ba:fb:ce:7f:20: 96:de:4c:14:4b:8f:3f:85:9a:3a:ae:35:98:14:51:45:2d:9c: 82:61:bd:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHK5y+roJfrzBjEbQgkOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2I4MjAwNWZkYmU5NjEwMjBmNzQwYWI0M2M1NTRlNWEz ODQ1MWYwHhcNMjUxMjA2MTAwMjE0WhcNMjUxMjA3MTAwMjE0WjAzMTEwLwYDVQQD EyhlNDlmOWFjMTQxMDM1MjE2ZmRiNjI0NDM5YWQ3ZmZjYjE2OWQ5ODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup5DG4Uz0uzeKB7N52MstA+A2DET z2OhvQlWAhK8MaUYpV8jCDPrCkShaHbEw1fgwU3w6bxYsH00JmPDxqrCpD1yMRDH 8QSbBxVC4Dh4ZYzUZsAHYLZVOHUck2G4pZWkiK1i277ioBXcK3jd8A55lmF1in5r +yBuhbc7CAFkmCbBSgcaVhB7BGMX/yQdzposYiGkCTmwFTUXB+RUFKsRC4n6cEge Wacb4kQB59+X4CBcu2g+zkiErkCGxGqLtdu1gCp4914asHZ8X5oykPah9V5Uut5/ 0z2puLYCicP1h5fV5qeYVFrJa0rm0XnDQSwgE3D7p/CjaaQnIyh+uLk5uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSfmsFBA1IW/bYkQ5rX/8sWnZiKMB8GA1UdIwQY MBaAFN87ggBf2+lhAg90CrQ8VU5aOEUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAt MzdjMTQwOTJlYjI3LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAtMzdjMTQwOTJlYjI3 LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8cVw9ZT WXkid/RcazmfEULFGnWfxKxlzRWRsgxvbfGiRiDDL1LnwSss/8YiFDe0c5Ka9WXr 5r+wjnKFxfhxLbF8tPre0DEqJJ6CwE6Zfy3p1+3TI6mYDs8O9kGgJXvJcnmhQjZs w+3ObyLlWFWA7Z5bBZduQ2cwZZPhnYd1LII9Uvo+7Jw/8CU2p4w+o5axwb4rsr0A iOGuhzShIbRghYHcJGZAh/MjqvYsIUc1R3+d3jWGLJFjn/nf2FkxklG8RJEfh08w qYYTQjnWl1PNgRDzcVDQZEVR6uh1hp3kNBayi34Cvrr7zn8glt5MFEuPP4WaOq41 mBRRRS2cgmG9Jg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:04:55 2025 by rpki-client