This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft File: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft (raw, json) Hash identifier: K7rtaf+eAD8JtbMo4Mzm+dOOXwoS1euQbcGVE596Kr4= Subject key identifier: 02:DC:10:04:01:1F:DE:E4:B5:C3:67:7D:ED:5D:AB:38:72:52:E3:34 Authority key identifier: DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0 Certificate issuer: /CN=de169952f97f494cfe0f6b5427ca56e810c05ce0 Certificate serial: 019AF19AC8D3918489EE67EAE68E29A873BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 03:00:44 +0000 Manifest this update: Sat 06 Dec 2025 03:00:44 +0000 Manifest next update: Sun 07 Dec 2025 03:00:44 +0000 Files and hashes: 1: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl (hash: EHLOlJa2VegWYqsPgUQXKTzkW4PjjokRqKiMHH86p94=) 2: RZ4xmYAJVpVRLfuQVLFQGXgbrQE.roa (hash: aFDGOW4Qu6MNo6mtPQc9Lw/jPxt+lcHM9Vl2lskSnz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c8:d3:91:84:89:ee:67:ea:e6:8e:29:a8:73:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de169952f97f494cfe0f6b5427ca56e810c05ce0 Validity Not Before: Dec 6 03:00:44 2025 GMT Not After : Dec 7 03:00:44 2025 GMT Subject: CN=02dc1004011fdee4b5c3677ded5dab387252e334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d2:ed:14:20:f4:a9:48:10:cc:51:f7:d0:01: 0d:7f:05:8b:f8:e0:e4:41:84:1d:e8:ba:43:ab:7b: 98:b1:7e:b2:dd:3a:1b:7c:91:e2:f1:d3:5a:5d:45: 0e:8f:b0:06:13:40:66:d7:4b:d7:61:ce:d8:26:5f: ab:0b:10:d8:e4:50:ef:2f:af:f7:a0:22:7d:68:ad: 85:b7:81:6b:32:d1:55:90:4b:8c:ce:dd:41:20:90: b2:3d:b7:38:b9:ce:94:fa:ae:52:28:ae:80:40:26: 4f:89:2c:4f:af:1f:6c:07:1a:8d:bd:61:38:64:92: aa:27:cf:44:a8:ed:d1:90:b8:4c:76:a7:13:7b:5a: 90:17:fc:d9:88:1a:50:12:fd:2d:04:64:19:2e:84: b3:2f:a8:6e:1b:55:84:fe:74:27:e4:0e:64:52:50: c2:dc:11:43:b6:43:38:a3:5d:eb:cd:d9:b4:85:b0: c9:b3:9c:01:d4:5d:a1:8e:a1:87:ef:90:ba:74:80: 89:e3:0a:18:75:99:7a:8a:99:56:84:77:90:de:f6: c6:c3:3d:79:08:20:1e:56:7a:ec:19:47:81:e2:cc: 9f:cf:ea:3d:f2:da:21:02:fe:f2:09:ae:c0:14:3c: ee:8e:ba:50:8f:60:e9:32:9b:e6:94:7c:58:e3:4c: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DC:10:04:01:1F:DE:E4:B5:C3:67:7D:ED:5D:AB:38:72:52:E3:34 X509v3 Authority Key Identifier: keyid:DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:3f:32:3b:59:bc:75:47:0e:ec:7f:30:c7:de:f4:0b:ae:2f: dd:f5:80:a1:bc:fe:e0:b7:b1:c0:16:34:0a:09:f4:57:c5:64: c5:ce:ef:e8:ab:34:0e:04:4c:98:2d:61:9a:90:47:3d:6f:de: 49:56:b1:22:44:fc:e3:28:08:24:4f:d3:75:a2:26:01:89:0f: 95:9a:44:2a:7b:a4:a6:69:3c:9c:8b:b3:72:02:a4:a4:60:85: 4b:a0:69:e8:f0:38:fd:0a:73:a4:4a:f2:d8:0d:b4:07:c1:3c: 2d:5b:12:46:77:c8:a5:d8:c8:74:c7:d0:30:b0:8f:e0:43:d6: 9a:7b:36:51:22:4e:67:58:d5:38:16:f9:10:05:38:62:a3:59: d5:f3:77:2a:21:ca:6d:7a:f4:18:2a:05:7e:8f:7b:12:72:55: 87:09:90:ce:65:da:b1:5e:34:be:4d:1f:5e:be:af:8f:56:53: 18:38:e9:9b:3a:1f:92:e7:e5:15:45:da:c6:ca:6d:cc:8b:81: 8e:9d:92:f0:13:80:d6:13:b3:db:4c:f9:75:0a:da:18:c3:b4: f8:ca:89:5d:39:16:6f:35:66:ff:15:4c:99:eb:c0:0a:4c:d6: 3e:23:1d:d9:51:43:1d:24:74:6d:8c:e5:70:40:a2:c7:14:bb: b3:e5:8e:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsjTkYSJ7mfq5o4pqHO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTY5OTUyZjk3ZjQ5NGNmZTBmNmI1NDI3Y2E1NmU4MTBj MDVjZTAwHhcNMjUxMjA2MDMwMDQ0WhcNMjUxMjA3MDMwMDQ0WjAzMTEwLwYDVQQD EygwMmRjMTAwNDAxMWZkZWU0YjVjMzY3N2RlZDVkYWIzODcyNTJlMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NLtFCD0qUgQzFH30AENfwWL+ODk QYQd6LpDq3uYsX6y3TobfJHi8dNaXUUOj7AGE0Bm10vXYc7YJl+rCxDY5FDvL6/3 oCJ9aK2Ft4FrMtFVkEuMzt1BIJCyPbc4uc6U+q5SKK6AQCZPiSxPrx9sBxqNvWE4 ZJKqJ89EqO3RkLhMdqcTe1qQF/zZiBpQEv0tBGQZLoSzL6huG1WE/nQn5A5kUlDC 3BFDtkM4o13rzdm0hbDJs5wB1F2hjqGH75C6dICJ4woYdZl6iplWhHeQ3vbGwz15 CCAeVnrsGUeB4syfz+o98tohAv7yCa7AFDzujrpQj2DpMpvmlHxY40xh/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALcEAQBH97ktcNnfe1dqzhyUuM0MB8GA1UdIwQY MBaAFN4WmVL5f0lM/g9rVCfKVugQwFzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hhWlV2bF9TVXotRDJ0VUo4cFc2QkRBWE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lNzg5NTQtMzFmZC00ZmQwLTlmYzEt MGY0YjI4Yjg4NmY3LzEvM2hhWlV2bF9TVXotRDJ0VUo4cFc2QkRBWE9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9lNzg5NTQtMzFmZC00ZmQwLTlmYzEtMGY0YjI4Yjg4NmY3 LzEvM2hhWlV2bF9TVXotRDJ0VUo4cFc2QkRBWE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAz8yO1m8 dUcO7H8wx970C64v3fWAobz+4LexwBY0Cgn0V8Vkxc7v6Ks0DgRMmC1hmpBHPW/e SVaxIkT84ygIJE/TdaImAYkPlZpEKnukpmk8nIuzcgKkpGCFS6Bp6PA4/QpzpEry 2A20B8E8LVsSRnfIpdjIdMfQMLCP4EPWmns2USJOZ1jVOBb5EAU4YqNZ1fN3KiHK bXr0GCoFfo97EnJVhwmQzmXasV40vk0fXr6vj1ZTGDjpmzofkuflFUXaxsptzIuB jp2S8BOA1hOz20z5dQraGMO0+MqJXTkWbzVm/xVMmevACkzWPiMd2VFDHSR0bYzl cECixxS7s+WOfg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:48 2025 by rpki-client