This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft File: 3MIAShrwMLqZ_PRR872I78U4Rqk.mft (raw, json) Hash identifier: jzL1jjJTv6aABkAd3AcCmBd1yrlfyejW/YP8aE83s6I= Subject key identifier: 65:A9:C3:5A:C4:3A:7B:92:3E:8A:B1:35:72:07:C6:16:14:26:5D:07 Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9 Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9 Certificate serial: 019AF0F5CF94286D75A7EEF8760A70B90429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 00:00:32 +0000 Manifest this update: Sat 06 Dec 2025 00:00:32 +0000 Manifest next update: Sun 07 Dec 2025 00:00:32 +0000 Files and hashes: 1: 3MIAShrwMLqZ_PRR872I78U4Rqk.crl (hash: Dy3GYTBRU6XSG4FWyJukMiWPKvjnqLc9rz8a0c4hE7Q=) 2: AL-L8asVgI-s4USXW1Jxulz_8Sg.roa (hash: UF0FyApaz9L8VccFK4e4NgnphNtboD57IyF8hP0doDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:cf:94:28:6d:75:a7:ee:f8:76:0a:70:b9:04:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9 Validity Not Before: Dec 6 00:00:32 2025 GMT Not After : Dec 7 00:00:32 2025 GMT Subject: CN=65a9c35ac43a7b923e8ab1357207c61614265d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:ba:2d:7c:93:bb:7f:6a:be:34:de:c5:24: fe:ed:eb:06:9a:d3:36:9f:66:89:94:c1:20:39:02: 38:55:d7:ee:de:2a:ed:0b:d9:9d:0b:e8:12:ea:a2: 31:e8:10:66:2e:10:93:0a:61:1c:51:5c:92:f3:03: 0c:24:a3:d6:a1:b4:72:7c:06:cd:2c:da:f9:8a:63: 63:58:44:21:10:18:f0:19:24:03:e3:cd:ae:eb:fc: f1:f3:cd:49:d8:9d:c0:ef:55:5c:4e:39:55:14:81: 65:45:e7:51:64:ca:a6:ef:d5:62:e4:4c:f9:a9:b8: d0:68:e1:3e:0a:ac:90:27:ef:65:ae:d5:bd:b5:e7: c3:8d:ec:26:65:30:d9:36:7e:7f:1e:05:74:2d:b5: d9:62:0e:86:d3:cd:09:98:83:d2:b9:07:8a:4a:00: 1f:14:c8:e9:86:00:a1:12:d1:26:7c:d0:c5:18:b0: 95:d2:83:f6:a4:1a:41:68:7a:6e:84:74:27:2d:62: 5d:0d:36:96:49:23:83:d5:1e:25:8d:cd:55:ad:a2: 10:c4:51:d5:71:5e:aa:cc:e1:38:e3:93:bb:59:75: 87:28:15:91:bb:27:61:5a:a1:2b:a7:2a:da:c8:26: 2b:06:fb:cf:80:b5:39:9d:f8:4d:d6:c0:c7:94:b1: 16:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A9:C3:5A:C4:3A:7B:92:3E:8A:B1:35:72:07:C6:16:14:26:5D:07 X509v3 Authority Key Identifier: keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:cc:07:7b:c1:0a:37:c1:ac:59:a7:5d:bf:de:36:f1:59:76: 81:15:1d:44:0a:b7:1d:16:ea:79:30:23:a0:99:74:54:2d:f8: 97:9c:2c:56:18:30:aa:42:69:f0:49:0d:db:db:80:37:e1:5b: 1f:b7:56:f2:7c:66:04:fc:7c:76:dc:56:2b:4e:f2:ba:6b:83: 6a:8f:e0:1f:bf:1d:e7:a6:90:97:b4:60:37:7a:13:8f:2f:96: 37:d6:fb:c0:b7:59:7c:bb:c6:85:47:ee:4f:41:1a:01:97:0f: e0:d8:73:61:a3:f6:eb:96:1e:7f:e0:b9:4f:44:31:62:86:b7: 7f:37:2e:eb:46:f8:ce:f7:60:64:35:b2:e9:59:42:b1:1d:a5: 23:ec:0b:fb:2c:62:96:18:42:e7:36:a5:f2:01:ca:f0:93:a2: 7e:a1:87:2c:c6:02:ec:be:f1:4f:bf:f1:0e:41:3f:e3:69:ed: 5f:1f:f4:b3:dc:77:6e:f4:7e:e2:8f:0b:36:69:7d:51:41:ad: 4c:77:2e:a6:b8:71:1c:e0:39:96:c7:f9:6e:6f:b1:46:22:5f: 2a:cc:98:ab:30:00:14:47:5c:54:0b:2f:3a:b0:f0:a1:a6:20: e2:7c:42:c8:15:7d:c7:0e:ed:cb:dd:3a:f2:7c:6e:3c:52:b7: 42:7a:c6:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9c+UKG11p+74dgpwuQQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYzIwMDRhMWFmMDMwYmE5OWZjZjQ1MWYzYmQ4OGVmYzUz ODQ2YTkwHhcNMjUxMjA2MDAwMDMyWhcNMjUxMjA3MDAwMDMyWjAzMTEwLwYDVQQD Eyg2NWE5YzM1YWM0M2E3YjkyM2U4YWIxMzU3MjA3YzYxNjE0MjY1ZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSy6LXyTu39qvjTexST+7esGmtM2 n2aJlMEgOQI4Vdfu3irtC9mdC+gS6qIx6BBmLhCTCmEcUVyS8wMMJKPWobRyfAbN LNr5imNjWEQhEBjwGSQD482u6/zx881J2J3A71VcTjlVFIFlRedRZMqm79Vi5Ez5 qbjQaOE+CqyQJ+9lrtW9tefDjewmZTDZNn5/HgV0LbXZYg6G080JmIPSuQeKSgAf FMjphgChEtEmfNDFGLCV0oP2pBpBaHpuhHQnLWJdDTaWSSOD1R4ljc1VraIQxFHV cV6qzOE445O7WXWHKBWRuydhWqErpyrayCYrBvvPgLU5nfhN1sDHlLEWSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWpw1rEOnuSPoqxNXIHxhYUJl0HMB8GA1UdIwQY MBaAFNzCAEoa8DC6mfz0UfO9iO/FOEapMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MTJiNDAtNTNhZS00OTUzLWFmZjUt NTZhMzMwNTc0OTdiLzEvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83MTJiNDAtNTNhZS00OTUzLWFmZjUtNTZhMzMwNTc0OTdi LzEvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8wHe8EK N8GsWaddv9428Vl2gRUdRAq3HRbqeTAjoJl0VC34l5wsVhgwqkJp8EkN29uAN+Fb H7dW8nxmBPx8dtxWK07yumuDao/gH78d56aQl7RgN3oTjy+WN9b7wLdZfLvGhUfu T0EaAZcP4NhzYaP265Yef+C5T0QxYoa3fzcu60b4zvdgZDWy6VlCsR2lI+wL+yxi lhhC5zal8gHK8JOifqGHLMYC7L7xT7/xDkE/42ntXx/0s9x3bvR+4o8LNml9UUGt THcuprhxHOA5lsf5bm+xRiJfKsyYqzAAFEdcVAsvOrDwoaYg4nxCyBV9xw7ty906 8nxuPFK3QnrGZg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:35 2025 by rpki-client