This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft File: 3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json) Hash identifier: ZnkJ19qulMXYvTKkbXC6W14M5zg8V2hAyo1CczjDV1I= Subject key identifier: A4:D0:DC:95:EC:E7:6D:8A:A5:4C:A7:4B:9D:A2:26:A0:FC:A1:63:89 Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50 Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550 Certificate serial: 019AF0BF5E1DFDABB63016128EC4941EAECB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft Manifest number: 1780 Signing time: Fri 05 Dec 2025 23:01:04 +0000 Manifest this update: Fri 05 Dec 2025 23:01:04 +0000 Manifest next update: Sat 06 Dec 2025 23:01:04 +0000 Files and hashes: 1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: 9uTqo0qs/SvsLrZpmIgO2F+FwSvxwsMwjuoplTvLPxU=) 2: B_dytxxDPRteZVWj_5GTAT9t8BE.roa (hash: T860Q+FQFzVWcjsZOe8dk9hmlbNKGPeSX6qfmd4Fuhk=) 3: eXzNPFB8evVF4M9GKM9iNp1CQKY.roa (hash: 3o1zQB3byjNP0T4iSERgx0SfW87i/ushB0KeeTR7qr4=) 4: ugt-KDKTow7I2OvsokQhSiya3XI.roa (hash: OVTlzU2wxqtsRIKxmANkEt2lrONo18X84ePf8/OFh9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:5e:1d:fd:ab:b6:30:16:12:8e:c4:94:1e:ae:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550 Validity Not Before: Dec 5 23:01:04 2025 GMT Not After : Dec 6 23:01:04 2025 GMT Subject: CN=a4d0dc95ece76d8aa54ca74b9da226a0fca16389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:33:6d:d0:c1:0a:e2:20:ac:c1:dc:88:32:8c: 21:c8:d2:60:7c:e1:8b:ed:8e:ef:f4:4b:16:03:f2: 78:e7:83:d9:aa:6c:72:b0:1e:5e:06:a8:34:f7:b7: 98:12:3f:b0:99:4b:92:51:61:c1:8a:26:bc:97:b8: 59:85:33:04:3e:3f:40:aa:c3:26:89:1f:17:57:06: 19:88:22:e5:c2:7c:65:91:c3:fc:c0:c3:a8:9a:a6: a7:36:92:17:d6:cc:77:2a:32:17:37:94:fb:56:ac: ee:3c:79:da:df:b6:11:b4:c3:b5:31:a5:8b:d0:b0: d2:47:85:74:6e:10:9c:f1:67:eb:f5:9c:1d:43:e6: 20:88:3e:ef:68:85:be:ce:b4:cb:e6:de:a3:28:3d: 99:f0:58:82:8a:2d:d8:71:ff:9a:1d:d2:92:02:e1: 1d:19:f9:9b:12:ce:34:29:1d:d4:1b:2e:73:e3:9c: 26:2b:b5:14:a5:16:94:42:85:f9:e7:57:90:a0:58: db:1f:77:b4:60:a3:cb:71:13:aa:a7:64:51:65:1c: 80:a8:dd:e1:0e:03:59:68:ea:48:16:e2:fd:77:61: e9:11:c7:61:85:4e:e8:2c:ec:3d:b8:44:ea:b0:33: f1:ce:3b:f9:90:6b:65:80:5f:54:c3:6d:01:c4:83: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D0:DC:95:EC:E7:6D:8A:A5:4C:A7:4B:9D:A2:26:A0:FC:A1:63:89 X509v3 Authority Key Identifier: keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c9:31:95:30:1c:57:a6:f7:20:13:89:1a:2c:f3:f6:64:4e: c0:bb:0f:96:40:40:d3:1d:c2:4b:b6:c4:7a:62:c9:e0:f3:4a: f3:57:ed:97:34:7c:81:2c:81:fb:51:5b:16:38:a2:c0:96:ba: 8a:29:da:42:d3:ce:79:38:70:c9:14:d0:73:90:45:c8:ea:15: 94:56:6c:20:cf:38:24:bf:b3:98:4d:4f:81:01:98:3e:3e:03: 56:e2:fb:b6:04:67:66:fe:fe:1e:85:4a:10:40:99:c6:2a:89: 0f:b6:fb:5e:ed:e4:e2:a2:57:42:1b:df:f2:80:36:43:b2:af: 76:ab:24:06:f5:d9:a5:0f:7b:83:18:1f:b1:2a:d5:7b:64:7a: 42:07:cf:01:05:84:ec:df:90:64:ad:31:74:02:57:d2:00:1c: 79:cb:04:6d:98:c9:2d:e3:b2:51:77:3a:28:0b:ed:7f:bb:ee: 1c:84:4b:09:2a:af:dc:3f:88:e5:e6:3a:27:6c:ea:95:b5:25: de:55:a7:9a:15:5d:04:96:16:47:54:eb:6a:86:28:b4:cf:57: 7f:b3:b3:98:d8:f5:33:1d:8a:b3:ea:9a:8c:fe:06:b0:2e:67: d5:64:06:b8:64:86:26:1e:68:cf:98:da:6e:58:f9:d8:96:80: 96:9b:f3:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv14d/au2MBYSjsSUHq7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTdjN2NhMDViY2MzZDZhMmFkMWJhMjM1YmVkOGZlYWI2 OTQ1NTAwHhcNMjUxMjA1MjMwMTA0WhcNMjUxMjA2MjMwMTA0WjAzMTEwLwYDVQQD EyhhNGQwZGM5NWVjZTc2ZDhhYTU0Y2E3NGI5ZGEyMjZhMGZjYTE2Mzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjNt0MEK4iCswdyIMowhyNJgfOGL 7Y7v9EsWA/J454PZqmxysB5eBqg097eYEj+wmUuSUWHBiia8l7hZhTMEPj9AqsMm iR8XVwYZiCLlwnxlkcP8wMOomqanNpIX1sx3KjIXN5T7VqzuPHna37YRtMO1MaWL 0LDSR4V0bhCc8Wfr9ZwdQ+YgiD7vaIW+zrTL5t6jKD2Z8FiCii3Ycf+aHdKSAuEd GfmbEs40KR3UGy5z45wmK7UUpRaUQoX551eQoFjbH3e0YKPLcROqp2RRZRyAqN3h DgNZaOpIFuL9d2HpEcdhhU7oLOw9uETqsDPxzjv5kGtlgF9Uw20BxINHZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTQ3JXs522KpUynS52iJqD8oWOJMB8GA1UdIwQY MBaAFN2Xx8oFvMPWoq0bojW+2P6raUVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEt NGQ0YjE2MTQ0ZDY4LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEtNGQ0YjE2MTQ0ZDY4 LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8kxlTAc V6b3IBOJGizz9mROwLsPlkBA0x3CS7bEemLJ4PNK81ftlzR8gSyB+1FbFjiiwJa6 iinaQtPOeThwyRTQc5BFyOoVlFZsIM84JL+zmE1PgQGYPj4DVuL7tgRnZv7+HoVK EECZxiqJD7b7Xu3k4qJXQhvf8oA2Q7KvdqskBvXZpQ97gxgfsSrVe2R6QgfPAQWE 7N+QZK0xdAJX0gAcecsEbZjJLeOyUXc6KAvtf7vuHIRLCSqv3D+I5eY6J2zqlbUl 3lWnmhVdBJYWR1TraoYotM9Xf7OzmNj1Mx2Ks+qajP4GsC5n1WQGuGSGJh5oz5ja blj52JaAlpvz0w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:31 2025 by rpki-client