This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json) Hash identifier: mHYAiR/gUSHSDVDS5rSXiTeTrriyDLOok2AwRwsovmM= Subject key identifier: 63:14:6F:FD:03:FA:A4:B8:82:EB:5C:39:0F:DF:21:06:E5:A4:20:49 Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d Certificate serial: 019AF276BD0A5218E728BEA026FEDCF33F45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft Manifest number: 05ED Signing time: Sat 06 Dec 2025 07:00:59 +0000 Manifest this update: Sat 06 Dec 2025 07:00:59 +0000 Manifest next update: Sun 07 Dec 2025 07:00:59 +0000 Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: rg0utlWy/qAuUDj0bHFHDdIc71KdVcpGhOhHnUSFrLQ=) 2: EZxzjJ6XhYd6ltYTmizd41s0hPw.roa (hash: JYFppnIvAuxE4lEcobv5nYUUPDwGguXkpkPpHyixP6g=) 3: NGkgR_rl3fLugEg3BgzB-iR4GzY.roa (hash: /ZmEtv61Y7p4XUZGiWjRkOyM1ttDKeEvzWRAeWuz5J4=) 4: pDcEYeot4lgy_bkjWpL92IIpXPQ.roa (hash: vcGeqv8PVg2OoSc/Cr515xlb+m+AzD6T+7zvq9R7mH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:bd:0a:52:18:e7:28:be:a0:26:fe:dc:f3:3f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d Validity Not Before: Dec 6 07:00:59 2025 GMT Not After : Dec 7 07:00:59 2025 GMT Subject: CN=63146ffd03faa4b882eb5c390fdf2106e5a42049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:b9:d3:50:bc:a8:1c:e7:20:11:6a:8f:08: 6b:61:f6:9f:01:f3:c9:c5:cb:f1:7b:6f:7a:d4:4f: 6c:25:33:e0:02:93:a5:5b:a8:74:c5:8c:a7:fb:48: e6:54:73:aa:df:7e:c3:8a:59:05:7d:06:70:e0:7d: 2a:b2:31:33:96:86:3e:cf:9c:71:81:f5:62:f0:da: cf:21:3d:a1:28:ff:ca:c6:f1:1e:8c:e3:c6:a8:79: ae:21:3c:a4:1e:40:24:56:b2:f6:fb:cf:1f:b4:48: aa:49:f9:84:39:6f:a7:1e:cb:5d:b1:62:1e:e7:0e: b6:00:c1:50:41:9e:14:86:02:b7:05:11:a2:cc:5f: 75:fa:47:64:2a:9b:fe:73:18:cf:9d:a1:da:01:f9: 75:ce:01:fb:68:4b:b9:12:04:aa:13:fd:04:0d:a9: 56:5c:6a:62:12:cd:4e:c0:34:08:52:c7:46:3f:49: 13:8e:ae:10:c1:e4:77:41:22:b5:27:e8:1c:5c:9b: 5e:9b:4c:93:60:7f:52:93:a9:24:76:b6:7d:32:89: 00:f2:ba:5f:c5:1c:f1:06:24:58:c9:20:6e:fc:68: 35:e5:9c:ca:50:d0:a6:f4:87:f9:1e:8a:5b:2b:ef: b1:5a:85:8a:57:89:68:4a:0d:d0:30:72:c1:8a:98: 25:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:14:6F:FD:03:FA:A4:B8:82:EB:5C:39:0F:DF:21:06:E5:A4:20:49 X509v3 Authority Key Identifier: keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:45:a0:08:95:94:04:22:dd:d2:5b:02:48:2f:d8:4a:9c:93: 7b:7d:fd:c4:24:64:71:37:a4:70:cb:7c:8d:a6:6c:f7:9c:08: 94:55:75:5a:0e:7e:c6:7c:7b:c9:f0:2c:0d:8a:f0:d5:58:ce: 54:94:3e:1c:74:45:b8:99:c1:85:91:49:91:64:a4:59:b8:46: 25:50:c9:aa:6a:23:68:80:38:0e:65:71:b5:fc:fc:0a:df:28: 5c:78:c9:dc:5e:5e:21:ee:97:fb:29:cd:7c:2b:f6:52:18:86: 83:ed:bd:4e:04:fa:03:3d:1f:cf:37:93:27:b1:c6:e1:d8:25: 72:49:8d:5d:12:73:62:37:70:3d:59:e4:d7:6e:cb:3f:26:39: a3:b8:f2:3a:06:f9:ab:9c:8e:86:7e:a9:02:22:44:00:76:c7: c6:20:9d:49:42:d7:83:34:09:0f:77:1f:74:f3:27:c3:47:3d: 10:2b:79:2f:32:09:06:f1:72:56:9d:43:72:52:e9:08:b0:51: 8e:ba:35:3b:15:b1:b2:4b:69:a0:82:15:9e:52:b1:e1:49:f4: 13:ee:a2:cb:a7:82:0b:c3:59:ff:5d:25:55:22:72:50:a8:9f: e6:a5:6a:a8:61:ad:58:39:cc:e4:d0:5c:06:5b:9f:7a:56:66: c6:24:a9:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydr0KUhjnKL6gJv7c8z9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGJkZTE0Njc4OTVjNmYzYTQ3MTk3ZWFjNThjYTEzYWU0 YmI3OGQwHhcNMjUxMjA2MDcwMDU5WhcNMjUxMjA3MDcwMDU5WjAzMTEwLwYDVQQD Eyg2MzE0NmZmZDAzZmFhNGI4ODJlYjVjMzkwZmRmMjEwNmU1YTQyMDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouy501C8qBznIBFqjwhrYfafAfPJ xcvxe2961E9sJTPgApOlW6h0xYyn+0jmVHOq337DilkFfQZw4H0qsjEzloY+z5xx gfVi8NrPIT2hKP/KxvEejOPGqHmuITykHkAkVrL2+88ftEiqSfmEOW+nHstdsWIe 5w62AMFQQZ4UhgK3BRGizF91+kdkKpv+cxjPnaHaAfl1zgH7aEu5EgSqE/0EDalW XGpiEs1OwDQIUsdGP0kTjq4QweR3QSK1J+gcXJtem0yTYH9Sk6kkdrZ9MokA8rpf xRzxBiRYySBu/Gg15ZzKUNCm9If5HopbK++xWoWKV4loSg3QMHLBipgl7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMUb/0D+qS4gutcOQ/fIQblpCBJMB8GA1UdIwQY MBaAFNwL3hRniVxvOkcZfqxYyhOuS7eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEt MzFjN2ZiNDcxNWY2LzEvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEtMzFjN2ZiNDcxNWY2 LzEvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0WgCJWU BCLd0lsCSC/YSpyTe339xCRkcTekcMt8jaZs95wIlFV1Wg5+xnx7yfAsDYrw1VjO VJQ+HHRFuJnBhZFJkWSkWbhGJVDJqmojaIA4DmVxtfz8Ct8oXHjJ3F5eIe6X+ynN fCv2UhiGg+29TgT6Az0fzzeTJ7HG4dglckmNXRJzYjdwPVnk127LPyY5o7jyOgb5 q5yOhn6pAiJEAHbHxiCdSULXgzQJD3cfdPMnw0c9ECt5LzIJBvFyVp1DclLpCLBR jro1OxWxsktpoIIVnlKx4Un0E+6iy6eCC8NZ/10lVSJyUKif5qVqqGGtWDnM5NBc BlufelZmxiSplg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:25 2025 by rpki-client