This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft File: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft (raw, json) Hash identifier: 8CGoCOeYyE1uiQyQUPaVDwCJXKCw8CBL3f83Kg5vnjE= Subject key identifier: AD:FA:BC:B4:EF:45:90:37:7F:D3:E0:96:F8:19:BE:A3:93:9A:21:77 Authority key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89 Certificate issuer: /CN=dead4c89f7aed8681d0202d22479d86e1462f889 Certificate serial: 019AF577E4BBCA6DE44A3FB03C6924A4C1CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 21:01:06 +0000 Manifest this update: Sat 06 Dec 2025 21:01:06 +0000 Manifest next update: Sun 07 Dec 2025 21:01:06 +0000 Files and hashes: 1: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl (hash: 346jbfqGwg9TJr0kHlTOLlOpTVAltexj6hAgbjXMMHM=) 2: hs44kTsCSKJHF4M4m6a7yybk2BU.roa (hash: sJmLUUiHtQ2muOzZ9TuqLt9boiXoy5M0LFt8+5jZEwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:e4:bb:ca:6d:e4:4a:3f:b0:3c:69:24:a4:c1:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dead4c89f7aed8681d0202d22479d86e1462f889 Validity Not Before: Dec 6 21:01:06 2025 GMT Not After : Dec 7 21:01:06 2025 GMT Subject: CN=adfabcb4ef4590377fd3e096f819bea3939a2177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:67:62:c0:4b:82:0d:a1:a2:94:12:98:da:f2: a9:63:46:f9:83:ab:e9:fc:47:fe:7a:1d:79:42:3c: 94:cb:b6:07:31:1a:71:3a:e6:3c:45:fb:89:1f:6a: 3f:1a:a4:e7:d8:a7:19:f3:a7:88:f5:6f:61:68:bc: 22:9e:cb:4e:86:14:65:7f:fa:8e:b9:cd:08:bc:24: 19:9c:71:85:97:f2:a0:f8:c9:60:52:7d:a6:27:36: a3:57:8b:7d:0e:20:34:83:fe:81:12:01:63:85:71: 55:49:53:45:c9:e0:c3:34:d2:a7:17:71:b9:cd:10: 10:3a:65:de:b9:ba:aa:20:91:a4:0a:78:3f:b3:d7: 5b:8f:90:02:16:4b:76:a6:a5:11:57:be:31:51:e7: 90:58:22:db:4c:02:59:b3:2b:92:09:03:18:e7:f7: 18:ff:b1:f3:a6:ad:7b:8e:60:62:90:bc:fd:7c:fa: dd:b6:c3:a9:2a:32:db:fc:2e:93:a3:a1:3e:71:ae: e8:5c:17:59:06:a9:d9:61:88:34:14:5d:fd:d5:e9: 5a:d1:2f:08:d8:b8:43:04:ef:94:29:03:e8:08:50: 25:de:4f:56:c6:e4:6c:e2:6f:45:49:c1:8f:b9:6e: f1:75:73:25:3a:0c:35:09:4d:31:de:22:af:9e:7f: d4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FA:BC:B4:EF:45:90:37:7F:D3:E0:96:F8:19:BE:A3:93:9A:21:77 X509v3 Authority Key Identifier: keyid:DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:96:ec:06:06:c6:78:ca:c3:5a:86:87:2f:f1:aa:32:33:2c: ea:4f:dd:c0:80:06:f8:f5:5d:f5:b6:3a:1f:27:cc:1a:db:e8: 09:a8:c1:a0:00:91:19:76:b5:90:14:b3:2a:8d:e9:d6:d8:ed: d9:1e:f6:51:19:b8:12:c2:d5:95:1a:45:89:97:67:ca:64:6a: 8e:49:34:cd:5b:32:a8:c0:08:b4:e6:b6:7a:9c:fa:50:ef:03: 35:7b:fb:46:26:fa:f0:2c:ba:d5:eb:dc:4a:31:eb:06:8f:d2: b8:a1:2c:56:4a:75:f1:13:c1:99:ee:47:ec:f2:35:19:e6:09: c9:5f:e9:fb:76:c2:18:20:6e:94:b6:e2:a7:98:92:97:d4:51: 80:03:25:65:47:e3:6c:c5:9c:c6:38:99:24:c9:0f:fe:61:8c: 44:2d:26:2e:df:88:f3:f0:cb:e8:10:f7:5f:1c:aa:bc:5c:f8: 18:de:21:02:29:4c:db:f4:51:a8:59:f2:d0:cd:ed:49:f1:3b: cc:00:da:ee:50:56:e0:a3:5e:96:b1:40:f7:58:09:6a:97:87: b8:5e:3a:d5:be:fa:07:33:b2:dc:aa:fb:2d:b5:d4:a5:b5:33: 2f:a2:cc:60:8c:ef:4d:ce:4a:63:e0:79:3a:e1:fb:77:69:8d: 24:fb:1c:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d+S7ym3kSj+wPGkkpMHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYWQ0Yzg5ZjdhZWQ4NjgxZDAyMDJkMjI0NzlkODZlMTQ2 MmY4ODkwHhcNMjUxMjA2MjEwMTA2WhcNMjUxMjA3MjEwMTA2WjAzMTEwLwYDVQQD EyhhZGZhYmNiNGVmNDU5MDM3N2ZkM2UwOTZmODE5YmVhMzkzOWEyMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WdiwEuCDaGilBKY2vKpY0b5g6vp /Ef+eh15QjyUy7YHMRpxOuY8RfuJH2o/GqTn2KcZ86eI9W9haLwinstOhhRlf/qO uc0IvCQZnHGFl/Kg+MlgUn2mJzajV4t9DiA0g/6BEgFjhXFVSVNFyeDDNNKnF3G5 zRAQOmXeubqqIJGkCng/s9dbj5ACFkt2pqURV74xUeeQWCLbTAJZsyuSCQMY5/cY /7Hzpq17jmBikLz9fPrdtsOpKjLb/C6To6E+ca7oXBdZBqnZYYg0FF391ela0S8I 2LhDBO+UKQPoCFAl3k9WxuRs4m9FScGPuW7xdXMlOgw1CU0x3iKvnn/ULQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK36vLTvRZA3f9PglvgZvqOTmiF3MB8GA1UdIwQY MBaAFN6tTIn3rthoHQIC0iR52G4UYviJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jZWE2NWYtZWNhMS00ZjgwLTg3NGUt NWJjZmNlNWNhMmM3LzEvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jZWE2NWYtZWNhMS00ZjgwLTg3NGUtNWJjZmNlNWNhMmM3 LzEvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5bsBgbG eMrDWoaHL/GqMjMs6k/dwIAG+PVd9bY6HyfMGtvoCajBoACRGXa1kBSzKo3p1tjt 2R72URm4EsLVlRpFiZdnymRqjkk0zVsyqMAItOa2epz6UO8DNXv7Rib68Cy61evc SjHrBo/SuKEsVkp18RPBme5H7PI1GeYJyV/p+3bCGCBulLbip5iSl9RRgAMlZUfj bMWcxjiZJMkP/mGMRC0mLt+I8/DL6BD3XxyqvFz4GN4hAilM2/RRqFny0M3tSfE7 zADa7lBW4KNelrFA91gJapeHuF461b76BzOy3Kr7LbXUpbUzL6LMYIzvTc5KY+B5 OuH7d2mNJPscqQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:34:41 2025 by rpki-client