This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.mft (raw, json) Hash identifier: 8U4nxiGajxAu0MkmqvvMu3iae6YlTOlRD/cwprVpFQk= Subject key identifier: F5:EA:4C:A1:16:D0:BF:BE:4D:21:FA:C3:27:11:4C:B3:5E:5C:D5:BB Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49 Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49 Certificate serial: 019AF5780CE9BC928CC4D1E1E7BBD33F9855 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 21:01:16 +0000 Manifest this update: Sat 06 Dec 2025 21:01:16 +0000 Manifest next update: Sun 07 Dec 2025 21:01:16 +0000 Files and hashes: 1: 3A-eoEY21-cUGLkwkczQ5XAVvkk.crl (hash: 6dn9c9fK1c0xxUw+bmjjZXkrDXWfhJL1+DZ89Zm1524=) 2: L9o7KQxJPRJhzeZqHSfbm_7F0-s.roa (hash: nN3JagCFrpyGEb5Wr7V9qHCmIBDIlF1ypYg9dy1tB3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:0c:e9:bc:92:8c:c4:d1:e1:e7:bb:d3:3f:98:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49 Validity Not Before: Dec 6 21:01:16 2025 GMT Not After : Dec 7 21:01:16 2025 GMT Subject: CN=f5ea4ca116d0bfbe4d21fac327114cb35e5cd5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:7e:3d:87:cc:28:42:a0:3d:a6:69:2c:28: 8f:ba:f3:59:99:ca:ea:39:6f:e1:ce:96:53:df:76: 23:73:27:33:79:66:fc:72:47:76:d7:f8:aa:1d:42: 8b:76:6b:3f:2c:14:b5:a1:e2:7e:86:fd:5e:b5:65: b3:df:4e:5f:5c:3b:43:c7:2c:39:62:35:c1:30:ad: 39:64:bd:2c:51:0e:7f:22:df:ea:86:5d:d3:c4:2c: db:25:93:54:00:6c:c9:11:60:7c:15:92:dc:8d:d4: b6:09:89:23:98:3b:48:48:b7:02:3f:56:76:55:49: 9c:a8:43:e2:c6:0f:59:42:60:b3:21:81:b5:5f:db: a1:ce:b9:90:46:30:96:16:ea:e6:8a:23:41:ce:6a: a4:b2:2c:4f:52:36:c8:53:70:5b:7f:cf:bb:83:07: 7b:48:00:27:ec:44:20:50:00:bf:0f:35:7e:f5:25: d8:d8:28:cb:c7:35:70:f4:49:4e:2e:ed:91:9e:80: 41:fe:79:ec:16:a1:c5:69:a6:35:60:2b:79:03:1e: ca:85:46:fd:f8:be:1e:5c:0f:b9:7f:13:41:30:a7: 7b:1b:9d:45:73:6c:de:3d:bf:f7:29:b6:bf:3d:3b: 0f:ef:e9:5f:9f:57:81:c6:e6:b0:4d:b0:aa:5e:df: 04:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EA:4C:A1:16:D0:BF:BE:4D:21:FA:C3:27:11:4C:B3:5E:5C:D5:BB X509v3 Authority Key Identifier: keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f6:33:c3:b5:a0:14:a5:fb:75:cd:ff:5c:27:99:19:9a:d9: ee:3d:64:dc:7f:84:5b:ae:5f:7b:78:00:d8:fb:b9:6f:ea:90: d9:e7:09:95:1c:5e:83:6b:88:46:c1:ee:24:03:29:e8:94:ec: 5f:8b:0a:6d:67:65:14:2a:b0:b2:c2:63:4a:2c:f6:30:ba:87: 75:4b:ec:ad:f3:48:71:ca:aa:07:19:cd:3f:8f:ee:0a:4b:11: 34:13:8e:07:0d:ba:1c:b4:f8:f7:81:ca:53:7f:8c:6d:4f:32: 1a:6d:ec:11:f7:6f:86:c5:f4:d6:d7:bf:fc:3e:1c:5b:5e:eb: c8:4b:f6:ca:f2:af:fb:55:60:2c:74:ef:80:77:b3:9e:62:cf: a8:5b:cf:4a:24:ef:b5:6d:1f:23:e5:5b:d0:d9:ac:2c:72:88: 38:e5:8a:84:3e:9e:3f:af:c7:53:03:0d:a0:e9:91:36:7f:7c: f2:4d:75:0d:39:83:4c:06:a3:70:6f:40:78:39:eb:6c:4c:78: 59:c4:7b:a1:c9:d8:54:a3:b2:45:46:4b:34:4c:ca:08:c7:1d: a3:33:39:11:75:5f:8d:5e:fe:19:bf:8d:f1:9b:c0:d5:37:dc: 0d:9f:ce:6e:43:0e:e1:27:5c:fe:b2:1e:f1:b4:af:36:ae:ba: 67:17:9d:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eAzpvJKMxNHh57vTP5hVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGY5ZWEwNDYzNmQ3ZTcxNDE4YjkzMDkxY2NkMGU1NzAx NWJlNDkwHhcNMjUxMjA2MjEwMTE2WhcNMjUxMjA3MjEwMTE2WjAzMTEwLwYDVQQD EyhmNWVhNGNhMTE2ZDBiZmJlNGQyMWZhYzMyNzExNGNiMzVlNWNkNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA035+PYfMKEKgPaZpLCiPuvNZmcrq OW/hzpZT33YjcyczeWb8ckd21/iqHUKLdms/LBS1oeJ+hv1etWWz305fXDtDxyw5 YjXBMK05ZL0sUQ5/It/qhl3TxCzbJZNUAGzJEWB8FZLcjdS2CYkjmDtISLcCP1Z2 VUmcqEPixg9ZQmCzIYG1X9uhzrmQRjCWFurmiiNBzmqksixPUjbIU3Bbf8+7gwd7 SAAn7EQgUAC/DzV+9SXY2CjLxzVw9ElOLu2RnoBB/nnsFqHFaaY1YCt5Ax7KhUb9 +L4eXA+5fxNBMKd7G51Fc2zePb/3Kba/PTsP7+lfn1eBxuawTbCqXt8EcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXqTKEW0L++TSH6wycRTLNeXNW7MB8GA1UdIwQY MBaAFNwPnqBGNtfnFBi5MJHM0OVwFb5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wMWJmOTYtODFiNi00ZTRjLWFiODAt ZTBiYzQxMDc4NDI2LzEvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8wMWJmOTYtODFiNi00ZTRjLWFiODAtZTBiYzQxMDc4NDI2 LzEvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/Yzw7Wg FKX7dc3/XCeZGZrZ7j1k3H+EW65fe3gA2Pu5b+qQ2ecJlRxeg2uIRsHuJAMp6JTs X4sKbWdlFCqwssJjSiz2MLqHdUvsrfNIccqqBxnNP4/uCksRNBOOBw26HLT494HK U3+MbU8yGm3sEfdvhsX01te//D4cW17ryEv2yvKv+1VgLHTvgHeznmLPqFvPSiTv tW0fI+Vb0NmsLHKIOOWKhD6eP6/HUwMNoOmRNn988k11DTmDTAajcG9AeDnrbEx4 WcR7ocnYVKOyRUZLNEzKCMcdozM5EXVfjV7+Gb+N8ZvA1TfcDZ/ObkMO4Sdc/rIe 8bSvNq66ZxedFw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:54:29 2025 by rpki-client