This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft File: 3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json) Hash identifier: iQ7O364igRW9theczAkrwzBR5oHtGg0SIlD3fbN5O2M= Subject key identifier: 1B:BB:C7:32:A6:BC:CF:7A:07:2B:A6:F9:A8:33:33:3F:E0:45:A6:DA Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36 Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36 Certificate serial: 019AF12E0797FB3CFF1173301EE5D5FFAB58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft Manifest number: 0AE5 Signing time: Sat 06 Dec 2025 01:01:56 +0000 Manifest this update: Sat 06 Dec 2025 01:01:56 +0000 Manifest next update: Sun 07 Dec 2025 01:01:56 +0000 Files and hashes: 1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: pZdhb5U70yJYCsHkOTqvH6KNO2IEqnmG11mWDcGDjVU=) 2: WGy1cA3da99W4WDLy3MY4ZyczoU.roa (hash: SJ9b+hH7b3cVwCr6CT26WQO6ifaQhtn6CrsiD/nybF0=) 3: jkdGIndQz1w9lSn5gC2Ktns7PmQ.roa (hash: VwGNfeMCv18NN23Twwp0pPWxKthypMsuMJxPjN6yLC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:07:97:fb:3c:ff:11:73:30:1e:e5:d5:ff:ab:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36 Validity Not Before: Dec 6 01:01:56 2025 GMT Not After : Dec 7 01:01:56 2025 GMT Subject: CN=1bbbc732a6bccf7a072ba6f9a833333fe045a6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:16:aa:5f:27:c5:ab:6b:b5:80:9f:d3:48:6a: 6b:bd:e8:3e:7a:cd:1d:ff:20:9b:77:23:89:e5:97: 46:db:be:23:ea:59:9f:d4:24:76:2e:8c:9c:31:84: 14:c2:94:e8:6c:1d:e8:88:d8:2b:22:69:31:c3:27: c7:6e:a7:ea:83:77:de:31:4a:39:32:a3:26:34:28: eb:82:be:f8:dc:4a:6c:76:6e:8b:a0:f0:94:0a:b7: 29:70:8a:21:52:87:ea:49:7d:c0:09:2d:35:e8:58: 1a:1d:e0:a6:57:d6:16:4d:eb:cc:78:e2:88:63:b9: d4:b8:f0:9c:20:24:65:80:06:af:aa:d7:5e:80:49: c4:5d:a0:fc:6f:70:50:79:d7:9a:ff:41:62:79:e4: aa:10:e8:54:a7:9e:83:e5:0e:e7:11:93:6a:ff:ce: 01:bc:85:e7:8c:3a:39:d8:bb:9e:b4:66:95:cd:ff: 69:8d:71:29:a4:9d:81:6c:d4:8e:e7:12:49:23:be: 2b:bd:6b:a7:d8:7a:f1:fd:51:70:ef:d5:dc:cf:12: 17:a9:39:64:ba:f3:55:d6:7d:21:94:36:28:fc:14: 14:f6:f9:cf:d9:70:8f:20:a6:88:c9:d9:3f:2e:03: f6:29:24:eb:6f:3d:31:cd:c3:72:52:93:b0:a7:3f: f5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BB:C7:32:A6:BC:CF:7A:07:2B:A6:F9:A8:33:33:3F:E0:45:A6:DA X509v3 Authority Key Identifier: keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:bc:ac:30:d8:0d:bb:88:00:2d:a8:03:4f:ab:b3:37:93:af: 4a:96:52:23:21:fe:66:71:b7:0b:9a:1e:36:0c:ca:10:6e:3d: 77:a9:43:21:51:55:12:44:12:a3:12:40:9f:2a:10:d7:54:a7: fc:44:62:23:45:9d:3f:18:35:53:c2:99:d5:e2:72:fb:50:0c: 1a:2e:f2:1a:57:43:8c:5d:7f:88:ba:af:0c:f7:65:12:82:0a: d6:a0:b8:8f:68:c6:61:43:1a:5e:5c:8f:cd:7e:d0:24:5b:b2: 1e:4e:c9:b8:a5:c1:a6:f2:aa:72:0b:2a:d7:2b:ef:c7:8d:eb: 96:a4:a3:52:58:d6:e0:b4:ca:95:5c:56:12:b8:80:2d:b1:6e: e3:7b:07:fa:b1:73:e8:40:fb:f4:9e:8f:1b:02:86:14:61:6a: 01:9f:1b:d8:05:56:3b:38:b4:c5:0b:8d:db:92:db:03:8d:4a: ec:56:d4:b4:88:2c:e8:fe:92:f6:b5:85:cc:b6:26:24:a4:1c: da:74:cd:23:5b:71:e9:04:53:b8:7d:bc:be:9d:2c:7d:f7:e7: fa:11:95:50:6b:f8:07:6a:91:d1:c7:7a:5f:be:92:4f:4e:d3: 9e:2d:f4:60:58:6b:99:c8:00:af:c8:f2:3f:c1:af:c2:8c:95: ff:85:7f:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgeX+zz/EXMwHuXV/6tYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGUyNWUxN2E1MTY5NjkyM2E1YzAyOTY2Nzg3NDA5YWFj OWFhMzYwHhcNMjUxMjA2MDEwMTU2WhcNMjUxMjA3MDEwMTU2WjAzMTEwLwYDVQQD EygxYmJiYzczMmE2YmNjZjdhMDcyYmE2ZjlhODMzMzMzZmUwNDVhNmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRaqXyfFq2u1gJ/TSGprveg+es0d /yCbdyOJ5ZdG274j6lmf1CR2LoycMYQUwpTobB3oiNgrImkxwyfHbqfqg3feMUo5 MqMmNCjrgr743Epsdm6LoPCUCrcpcIohUofqSX3ACS016FgaHeCmV9YWTevMeOKI Y7nUuPCcICRlgAavqtdegEnEXaD8b3BQedea/0FieeSqEOhUp56D5Q7nEZNq/84B vIXnjDo52LuetGaVzf9pjXEppJ2BbNSO5xJJI74rvWun2Hrx/VFw79XczxIXqTlk uvNV1n0hlDYo/BQU9vnP2XCPIKaIydk/LgP2KSTrbz0xzcNyUpOwpz/1NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBu7xzKmvM96Byum+agzMz/gRabaMB8GA1UdIwQY MBaAFNwOJeF6UWlpI6XAKWZ4dAmqyao2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2M0NmMtOGM1MS00MzMwLWI2MjMt MTgzNWNjOGExZDlkLzEvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8yY2M0NmMtOGM1MS00MzMwLWI2MjMtMTgzNWNjOGExZDlk LzEvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7ysMNgN u4gALagDT6uzN5OvSpZSIyH+ZnG3C5oeNgzKEG49d6lDIVFVEkQSoxJAnyoQ11Sn /ERiI0WdPxg1U8KZ1eJy+1AMGi7yGldDjF1/iLqvDPdlEoIK1qC4j2jGYUMaXlyP zX7QJFuyHk7JuKXBpvKqcgsq1yvvx43rlqSjUljW4LTKlVxWEriALbFu43sH+rFz 6ED79J6PGwKGFGFqAZ8b2AVWOzi0xQuN25LbA41K7FbUtIgs6P6S9rWFzLYmJKQc 2nTNI1tx6QRTuH28vp0sfffn+hGVUGv4B2qR0cd6X76ST07Tni30YFhrmcgAr8jy P8GvwoyV/4V/0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:36 2025 by rpki-client