This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft File: 3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json) Hash identifier: Pc8jRtGTaNWYyDbXqvtoahQpDKUjfrUKNiSZ7yifWUo= Subject key identifier: 2A:AA:50:39:C2:C4:50:F2:0E:EA:53:49:54:5E:F4:85:E4:02:67:E6 Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28 Certificate issuer: /CN=dc849c7369e7e52c7051d21dba7298308be9c428 Certificate serial: 019AF2767FA0E8BCE278B5AD79A444B24FB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: DoliOZWI/ejxQrwakVk95azwcRsXbPFry8wvvtjLTN4=) 2: A1Kij3UmuqlYPUgtFwkRpc3mYFI.roa (hash: 7eehR/MKaZhrxZxZgGixZL1BWxFDBQrZZYdPEfeskDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7f:a0:e8:bc:e2:78:b5:ad:79:a4:44:b2:4f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428 Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=2aaa5039c2c450f20eea5349545ef485e40267e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a1:0d:8c:65:55:4f:06:37:2e:37:ae:9f:ab: 3b:6a:21:8f:6b:ae:fe:4b:38:59:49:f3:f3:6e:79: ab:14:3b:09:6d:4c:e7:0d:05:a3:e2:c0:78:54:c5: 17:26:dd:55:d8:00:ba:f2:d1:28:49:8b:46:0d:7b: bb:39:b6:27:e1:13:4a:88:4e:f2:ce:f4:b7:8f:a3: 60:e8:60:01:a5:71:0d:6a:ee:92:d7:f7:50:6d:4b: 79:6a:c8:83:df:29:0a:c2:ce:77:2f:91:91:a1:ee: 3c:b3:99:9c:51:74:5d:d9:7c:97:f5:78:d1:a8:94: 71:c5:72:33:20:7a:88:a6:75:00:f5:d6:f4:89:f5: 0b:34:e3:fc:5e:ab:3e:d6:86:20:26:7d:c2:d4:a0: f2:ea:1b:67:9a:d6:5e:d0:07:1b:e9:80:5a:8a:ff: 7b:1b:0a:f1:c1:00:53:5d:ed:5c:6e:a1:f2:02:e3: da:80:00:8d:5a:09:3d:25:0d:de:95:68:0d:22:c1: 74:24:85:06:3f:6d:10:79:8b:83:01:99:d4:28:a6: 48:70:98:ec:93:81:16:26:60:c4:09:86:f5:7d:86: 62:3d:93:54:ba:cf:61:51:93:5b:a1:e9:9d:ac:82: 46:86:c0:ae:85:1f:f3:c4:3b:ac:0f:2a:df:ad:ca: 3d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AA:50:39:C2:C4:50:F2:0E:EA:53:49:54:5E:F4:85:E4:02:67:E6 X509v3 Authority Key Identifier: keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:3d:6e:ea:1a:17:27:e0:a4:86:61:09:23:61:26:b6:41:2d: a2:20:56:2c:c3:b7:aa:7d:ba:01:af:03:f6:28:6c:eb:bf:81: e0:cd:5a:04:f9:b1:ba:f1:ed:e4:49:35:94:f3:21:20:0d:67: cd:e5:d4:42:f1:4d:68:f7:fb:a2:e1:b7:cd:91:d9:34:f7:33: b1:e8:a2:a7:77:51:58:3c:e7:6c:cd:22:ca:f6:96:b7:20:9a: e4:06:96:28:90:c7:5a:7c:29:ef:b7:00:a8:cd:68:0c:75:25: c4:5a:cb:03:41:e6:98:dd:9e:43:a0:85:49:f2:af:00:b4:d6: 63:23:a2:81:b2:fa:9b:f7:90:2e:5b:0a:18:ee:bd:54:d2:2f: c3:2e:cb:a3:85:b0:44:46:55:f6:22:09:af:17:6e:8a:4a:36: 3c:44:05:74:bd:90:e0:cf:82:37:aa:d8:96:d1:d1:59:01:38: bc:67:b8:e5:fb:f1:f2:ea:a1:ea:10:19:0f:fe:06:1f:8c:99: ce:0e:5d:7e:c4:4e:2c:b8:64:fd:96:45:73:d1:ca:35:c3:98: 63:c3:ad:22:a4:02:a3:ec:e7:99:a6:dc:8e:c9:c6:2d:77:cc: 00:88:7a:55:df:47:2f:25:03:57:46:7b:cc:50:0e:a5:d3:66: b1:b1:9e:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydn+g6LzieLWteaREsk+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODQ5YzczNjllN2U1MmM3MDUxZDIxZGJhNzI5ODMwOGJl OWM0MjgwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD EygyYWFhNTAzOWMyYzQ1MGYyMGVlYTUzNDk1NDVlZjQ4NWU0MDI2N2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKENjGVVTwY3Ljeun6s7aiGPa67+ SzhZSfPzbnmrFDsJbUznDQWj4sB4VMUXJt1V2AC68tEoSYtGDXu7ObYn4RNKiE7y zvS3j6Ng6GABpXENau6S1/dQbUt5asiD3ykKws53L5GRoe48s5mcUXRd2XyX9XjR qJRxxXIzIHqIpnUA9db0ifULNOP8Xqs+1oYgJn3C1KDy6htnmtZe0Acb6YBaiv97 GwrxwQBTXe1cbqHyAuPagACNWgk9JQ3elWgNIsF0JIUGP20QeYuDAZnUKKZIcJjs k4EWJmDECYb1fYZiPZNUus9hUZNboemdrIJGhsCuhR/zxDusDyrfrco9KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqqUDnCxFDyDupTSVRe9IXkAmfmMB8GA1UdIwQY MBaAFNyEnHNp5+UscFHSHbpymDCL6cQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYmU4Y2YtMDdlYy00N2NiLThmNjMt ZDNhMDZkMWY1YjRiLzEvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xYmU4Y2YtMDdlYy00N2NiLThmNjMtZDNhMDZkMWY1YjRi LzEvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfD1u6hoX J+CkhmEJI2EmtkEtoiBWLMO3qn26Aa8D9ihs67+B4M1aBPmxuvHt5Ek1lPMhIA1n zeXUQvFNaPf7ouG3zZHZNPczseiip3dRWDznbM0iyvaWtyCa5AaWKJDHWnwp77cA qM1oDHUlxFrLA0HmmN2eQ6CFSfKvALTWYyOigbL6m/eQLlsKGO69VNIvwy7Lo4Ww REZV9iIJrxduiko2PEQFdL2Q4M+CN6rYltHRWQE4vGe45fvx8uqh6hAZD/4GH4yZ zg5dfsROLLhk/ZZFc9HKNcOYY8OtIqQCo+znmabcjsnGLXfMAIh6Vd9HLyUDV0Z7 zFAOpdNmsbGehg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:54 2025 by rpki-client