This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft File: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft (raw, json) Hash identifier: BesPxK+WTAcs7ZibdBXDpTjBOEmh02zN8waG6+OHPuo= Subject key identifier: 6A:76:C4:56:0F:47:EA:66:0F:21:1E:DA:2D:2F:0C:84:6A:5D:A5:E1 Authority key identifier: DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E Certificate issuer: /CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e Certificate serial: 019AF19AE0F343BE748CD8AC330F185735C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 03:00:50 +0000 Manifest this update: Sat 06 Dec 2025 03:00:50 +0000 Manifest next update: Sun 07 Dec 2025 03:00:50 +0000 Files and hashes: 1: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl (hash: XQBL3TzjfUBtwibwgTvdTLYEUXG2h7jh89ktApHh6Do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e0:f3:43:be:74:8c:d8:ac:33:0f:18:57:35:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e Validity Not Before: Dec 6 03:00:50 2025 GMT Not After : Dec 7 03:00:50 2025 GMT Subject: CN=6a76c4560f47ea660f211eda2d2f0c846a5da5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:12:8f:d5:57:f8:26:b7:8d:f2:6b:f1:7c: 62:eb:7b:8c:2b:b4:e8:74:d6:e8:82:af:10:df:f3: e5:03:68:65:68:2c:96:f6:24:49:5c:98:1f:67:69: f3:cb:5b:37:ff:89:92:d6:ce:96:70:80:54:fa:de: 27:60:e0:d2:4c:6a:60:3b:59:bc:58:99:1f:70:38: a2:51:b7:37:dd:6d:27:fe:2d:98:82:40:9a:0e:51: 28:23:d2:cd:ba:d1:0e:9b:fb:7e:de:bb:77:9c:bf: 40:c4:bb:cf:e1:1b:b3:c7:8a:73:54:97:a1:ee:c1: 1c:d0:f6:3a:f1:69:08:b2:b9:fe:ec:fc:4c:88:64: ba:04:7b:d7:10:5e:8c:ec:f9:57:ab:b3:d8:4f:5f: 51:e5:1a:1f:7a:fd:d1:d2:b6:be:22:47:57:09:b3: ef:59:fc:de:7d:1e:ed:6f:27:32:49:6c:ee:63:1e: 3b:56:62:46:45:63:e5:9a:b8:e1:45:a6:bb:a1:73: b9:b3:d2:02:95:33:83:dd:ac:c8:5b:78:a9:5e:5f: 46:5a:71:b4:6c:f7:f3:85:46:76:74:63:02:2d:98: 55:b9:27:9e:86:43:6f:6e:e0:20:1e:a3:c8:0b:7a: 16:52:4f:79:b9:c8:cb:db:22:e9:9e:b9:7e:4e:f2: 1c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:76:C4:56:0F:47:EA:66:0F:21:1E:DA:2D:2F:0C:84:6A:5D:A5:E1 X509v3 Authority Key Identifier: keyid:DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:25:57:26:1c:01:58:fe:f0:e4:95:47:56:80:de:c3:94:8c: 8f:04:c4:9d:95:8f:21:83:99:73:03:3f:b9:60:c7:24:b5:2c: 34:6b:41:31:a1:5e:82:20:bb:17:b1:67:6f:3b:39:34:6a:42: f6:b1:78:bf:33:00:d7:09:9c:17:fe:69:69:de:20:34:cb:de: 2d:22:0a:d3:1a:92:d6:95:06:4b:7a:93:39:c7:f8:48:8b:dc: 79:38:bc:76:62:2f:f3:97:44:9a:a5:21:0c:ff:4c:11:f5:02: 2d:22:03:b0:4e:de:8f:7f:f1:e3:2b:d2:d4:58:88:61:cb:1e: 46:37:aa:dd:8a:86:3a:79:11:41:68:b3:c9:1b:d3:32:9f:5a: 00:d1:6c:25:c5:54:89:4e:8a:01:8f:4f:01:e9:4d:dd:21:31: 88:b7:61:24:63:d9:c6:c5:9e:53:48:f7:42:b9:ac:03:a9:f8: f0:42:53:86:74:bf:2a:40:46:28:0b:9f:eb:f7:35:d6:47:62: 63:13:3f:45:d7:19:f8:4d:8f:ef:56:a2:f6:50:9f:5a:29:2b: 30:35:48:c9:8b:7a:3c:df:2c:cd:49:ec:7b:c7:d1:60:4e:b1: c1:1f:56:f1:f9:00:13:45:66:f5:17:36:6f:87:5d:48:d0:51: ea:35:15:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuDzQ750jNisMw8YVzXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYjdiMDAxOWUxOWYxMTJmNGQyYmNmZDZlYTEyZDkwODFm YzU4N2UwHhcNMjUxMjA2MDMwMDUwWhcNMjUxMjA3MDMwMDUwWjAzMTEwLwYDVQQD Eyg2YTc2YzQ1NjBmNDdlYTY2MGYyMTFlZGEyZDJmMGM4NDZhNWRhNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy8Sj9VX+Ca3jfJr8Xxi63uMK7To dNbogq8Q3/PlA2hlaCyW9iRJXJgfZ2nzy1s3/4mS1s6WcIBU+t4nYODSTGpgO1m8 WJkfcDiiUbc33W0n/i2YgkCaDlEoI9LNutEOm/t+3rt3nL9AxLvP4Ruzx4pzVJeh 7sEc0PY68WkIsrn+7PxMiGS6BHvXEF6M7PlXq7PYT19R5Rofev3R0ra+IkdXCbPv WfzefR7tbycySWzuYx47VmJGRWPlmrjhRaa7oXO5s9IClTOD3azIW3ipXl9GWnG0 bPfzhUZ2dGMCLZhVuSeehkNvbuAgHqPIC3oWUk95ucjL2yLpnrl+TvIcaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGp2xFYPR+pmDyEe2i0vDIRqXaXhMB8GA1UdIwQY MBaAFN23sAGeGfES9NK8/W6hLZCB/Fh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2Jld0FaNFo4UkwwMHJ6OWJxRXRrSUg4V0g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lZmEzZjEtNzY3MS00Y2UzLTlmZTEt YTg2ZGY5ODNhNzRjLzEvM2Jld0FaNFo4UkwwMHJ6OWJxRXRrSUg4V0g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9lZmEzZjEtNzY3MS00Y2UzLTlmZTEtYTg2ZGY5ODNhNzRj LzEvM2Jld0FaNFo4UkwwMHJ6OWJxRXRrSUg4V0g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiVXJhwB WP7w5JVHVoDew5SMjwTEnZWPIYOZcwM/uWDHJLUsNGtBMaFegiC7F7Fnbzs5NGpC 9rF4vzMA1wmcF/5pad4gNMveLSIK0xqS1pUGS3qTOcf4SIvceTi8dmIv85dEmqUh DP9MEfUCLSIDsE7ej3/x4yvS1FiIYcseRjeq3YqGOnkRQWizyRvTMp9aANFsJcVU iU6KAY9PAelN3SExiLdhJGPZxsWeU0j3QrmsA6n48EJThnS/KkBGKAuf6/c11kdi YxM/RdcZ+E2P71ai9lCfWikrMDVIyYt6PN8szUnse8fRYE6xwR9W8fkAE0Vm9Rc2 b4ddSNBR6jUVPA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:07 2025 by rpki-client