This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft File: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft (raw, json) Hash identifier: A4bfz+mFxE0Ofqs3xq1AU1FmGSksXG2Ev7AaspEMBA0= Subject key identifier: 5B:7F:35:29:02:AE:59:6C:2E:E5:AF:9B:A5:0E:2D:FC:29:19:1A:3A Authority key identifier: DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14 Certificate issuer: /CN=dd3873303d2d6e238a5bd85ed5867b643158fc14 Certificate serial: 019AF23FB810F95ED6D83DE37CF3A2E5FA70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft Manifest number: 011D Signing time: Sat 06 Dec 2025 06:00:53 +0000 Manifest this update: Sat 06 Dec 2025 06:00:53 +0000 Manifest next update: Sun 07 Dec 2025 06:00:53 +0000 Files and hashes: 1: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl (hash: Jew7PMPv4RlYomkYhnidzOlCf2tAAHcLRpO4+uajD4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b8:10:f9:5e:d6:d8:3d:e3:7c:f3:a2:e5:fa:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3873303d2d6e238a5bd85ed5867b643158fc14 Validity Not Before: Dec 6 06:00:53 2025 GMT Not After : Dec 7 06:00:53 2025 GMT Subject: CN=5b7f352902ae596c2ee5af9ba50e2dfc29191a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ef:4f:2b:5c:25:6f:dc:c3:d0:e7:68:96:37: 9e:ab:11:e7:34:fb:bd:40:e5:99:d9:c6:0f:8a:58: 68:73:89:69:73:b3:32:72:fd:43:29:fc:15:03:e0: a4:3f:76:1d:04:7a:5b:65:45:a0:94:35:19:de:00: 0a:8f:ce:6e:16:43:ab:07:46:8f:79:64:f3:43:75: b8:aa:36:f7:15:e5:6b:ef:f8:34:7f:6c:ca:54:e5: 2c:28:a7:eb:d3:a6:34:24:01:ad:54:61:ed:a2:57: c5:57:33:7c:c8:66:7a:aa:4f:63:74:0f:0c:60:8d: 37:85:16:aa:b2:10:03:3f:3a:41:e7:6f:e7:4d:07: f8:9e:30:c3:e8:a5:48:48:d0:74:75:97:75:d7:fa: 2f:6b:28:ec:00:7e:12:3b:64:0d:34:d8:dc:ed:38: 18:a8:fa:99:7c:dc:6d:c3:fa:2b:d1:95:61:82:d6: f4:72:6a:c8:50:82:88:83:ec:36:df:80:ef:2f:e9: 8a:09:4f:0b:20:9a:e1:11:9b:43:14:82:4b:2a:76: 68:4e:2d:56:61:ef:87:3e:fd:fa:0e:fa:39:8b:f7: 99:7e:af:69:14:2a:b3:4d:88:90:db:2d:8d:12:6e: f8:98:84:a1:c6:11:c7:0c:9c:77:5f:af:29:34:9b: b9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7F:35:29:02:AE:59:6C:2E:E5:AF:9B:A5:0E:2D:FC:29:19:1A:3A X509v3 Authority Key Identifier: keyid:DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:36:d4:ea:dd:be:48:e2:ba:07:d5:af:e4:ef:d0:b1:5e:b6: 09:d7:64:31:09:04:bb:7c:24:a3:08:e9:ba:d0:13:eb:02:21: 2e:6c:fb:44:67:f0:9b:48:00:78:88:10:16:14:1a:a1:10:b7: ed:59:b2:3e:f4:b7:c6:55:1b:eb:5c:8f:ca:48:69:67:42:c0: d0:5d:e0:eb:7a:75:7d:fd:cf:6f:3b:b9:21:f4:a9:62:99:90: 3f:13:01:d3:74:5e:18:1d:c0:2a:cd:36:8c:f9:3e:dd:a4:a8: fb:3d:63:76:40:e5:20:49:cd:ec:00:fa:7e:af:d4:c9:22:ba: a6:50:35:19:00:d0:8b:5a:55:90:70:91:f0:60:d6:ed:4d:80: 92:17:ad:97:3e:15:71:87:44:dd:a9:50:11:4a:e3:66:cf:e5: d7:5c:af:5a:02:a1:61:1a:aa:16:09:5c:da:4e:46:96:f3:38: 11:0e:6f:83:cc:03:81:b0:2d:64:1b:2e:97:41:ff:ce:71:9d: 70:ce:36:c9:63:f5:96:6d:88:c5:a6:23:94:c7:73:37:4b:98: 7d:3d:c7:37:46:dc:95:c2:b9:01:fc:cc:06:15:0b:87:59:6b: 8a:8a:9d:60:e1:4d:82:1e:dd:28:34:ec:ca:00:6f:85:0a:23: fb:d6:37:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7gQ+V7W2D3jfPOi5fpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMzg3MzMwM2QyZDZlMjM4YTViZDg1ZWQ1ODY3YjY0MzE1 OGZjMTQwHhcNMjUxMjA2MDYwMDUzWhcNMjUxMjA3MDYwMDUzWjAzMTEwLwYDVQQD Eyg1YjdmMzUyOTAyYWU1OTZjMmVlNWFmOWJhNTBlMmRmYzI5MTkxYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+9PK1wlb9zD0OdoljeeqxHnNPu9 QOWZ2cYPilhoc4lpc7Mycv1DKfwVA+CkP3YdBHpbZUWglDUZ3gAKj85uFkOrB0aP eWTzQ3W4qjb3FeVr7/g0f2zKVOUsKKfr06Y0JAGtVGHtolfFVzN8yGZ6qk9jdA8M YI03hRaqshADPzpB52/nTQf4njDD6KVISNB0dZd11/ovayjsAH4SO2QNNNjc7TgY qPqZfNxtw/or0ZVhgtb0cmrIUIKIg+w234DvL+mKCU8LIJrhEZtDFIJLKnZoTi1W Ye+HPv36Dvo5i/eZfq9pFCqzTYiQ2y2NEm74mIShxhHHDJx3X68pNJu5TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFt/NSkCrllsLuWvm6UOLfwpGRo6MB8GA1UdIwQY MBaAFN04czA9LW4jilvYXtWGe2QxWPwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Roek1EMHRiaU9LVzloZTFZWjdaREZZX0JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81ZTI4ZGEtMzJlMS00MGI5LWJiMzAt ZDNkYjI3N2VjZGZhLzEvM1Roek1EMHRiaU9LVzloZTFZWjdaREZZX0JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC81ZTI4ZGEtMzJlMS00MGI5LWJiMzAtZDNkYjI3N2VjZGZh LzEvM1Roek1EMHRiaU9LVzloZTFZWjdaREZZX0JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzbU6t2+ SOK6B9Wv5O/QsV62CddkMQkEu3wkowjputAT6wIhLmz7RGfwm0gAeIgQFhQaoRC3 7VmyPvS3xlUb61yPykhpZ0LA0F3g63p1ff3Pbzu5IfSpYpmQPxMB03ReGB3AKs02 jPk+3aSo+z1jdkDlIEnN7AD6fq/UySK6plA1GQDQi1pVkHCR8GDW7U2Akhetlz4V cYdE3alQEUrjZs/l11yvWgKhYRqqFglc2k5GlvM4EQ5vg8wDgbAtZBsul0H/znGd cM42yWP1lm2IxaYjlMdzN0uYfT3HN0bclcK5AfzMBhULh1lrioqdYOFNgh7dKDTs ygBvhQoj+9Y3YQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:27:58 2025 by rpki-client