This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft File: 3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json) Hash identifier: rCRiyP8A+ZTbN4dZRVO9xl6OzfpypPdJquE+YdIOZwk= Subject key identifier: 2E:34:17:72:2D:AC:97:45:A2:30:5F:69:C2:44:E8:3D:36:88:58:93 Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03 Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703 Certificate serial: 019AF3C0A0801D914A52869F68F730589B10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 13:01:18 +0000 Manifest this update: Sat 06 Dec 2025 13:01:18 +0000 Manifest next update: Sun 07 Dec 2025 13:01:18 +0000 Files and hashes: 1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: sS0kLTm0eKeU/6CNEMf/hU6ZEqVSuGXuKG9rfMhn9hg=) 2: 4wUZf81dDkIeAPvjdALKJO_OOPc.roa (hash: HqwNO12raLEf5yNUI8l+TH+b+XfQFpo8GF0GMhT1w60=) 3: Do4PLeA5o1GoY13K0QrZV2b74eA.roa (hash: B+FCeD+X05tR69YheF7VQWedc1p5umVaXn20qWaAN1Q=) 4: hbNbIVCjEN8lItMWW7GZDYik4tU.roa (hash: /QjTSPpaK1t0LSYMylHsSi3d6TtpowMr+RmtBrzOYQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:a0:80:1d:91:4a:52:86:9f:68:f7:30:58:9b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703 Validity Not Before: Dec 6 13:01:18 2025 GMT Not After : Dec 7 13:01:18 2025 GMT Subject: CN=2e3417722dac9745a2305f69c244e83d36885893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:a4:32:2d:dc:a1:9d:ce:15:70:9f:3a:64: be:09:83:f8:e2:95:ac:4c:57:da:a7:36:3b:95:22: 56:61:c6:89:c2:d2:08:f5:4f:89:1a:74:08:24:b3: 09:eb:78:4d:aa:d4:34:98:11:cf:d7:c0:ba:e8:30: 27:f7:ed:9c:f4:51:76:16:ad:1b:20:5e:f2:1d:10: 4e:8b:04:2d:cb:e1:78:76:ac:71:b0:28:99:93:53: 7e:22:ca:b5:3d:be:5d:a5:26:e6:85:aa:e2:d1:e3: fc:74:e5:22:3e:cb:f5:9b:4a:ea:20:f0:4e:bb:85: bd:14:b7:00:90:c2:97:ec:9f:db:e3:b5:3c:d9:2e: ca:6b:47:de:44:2d:16:58:84:ed:5b:d8:06:64:e2: bc:e5:fa:56:39:4e:0a:f3:0e:ce:48:60:d1:b2:01: b2:c2:10:8d:5d:39:88:14:39:1f:59:1f:a7:a7:5e: 29:a7:ad:30:be:6e:e6:f0:ff:c4:5a:43:56:03:1c: d5:5c:6d:2d:38:e0:1b:96:60:94:3e:93:0e:bf:fa: c0:ca:a6:9a:e9:6f:36:bc:2b:8b:09:fb:4e:9b:6e: 1c:34:63:73:fb:c5:d2:ea:96:e0:0d:bb:9a:1a:38: 10:17:2e:1b:c2:42:a1:fe:49:4e:1b:df:ac:a2:45: 32:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:34:17:72:2D:AC:97:45:A2:30:5F:69:C2:44:E8:3D:36:88:58:93 X509v3 Authority Key Identifier: keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:71:48:7b:90:d3:37:0e:c2:8d:42:f3:2a:57:33:ee:b7:cf: d7:61:6a:37:e7:55:03:b2:4f:b7:03:d4:40:2b:5c:bf:c4:15: 06:cc:fa:39:cb:7a:e2:20:c4:05:07:2d:c0:e8:37:a0:fa:5e: 96:b4:64:64:41:a5:07:85:fc:89:c9:4a:ae:29:ca:79:91:78: e1:db:a2:04:8c:ea:da:2a:7a:ba:8d:29:5d:36:be:d4:5d:c4: c1:b2:9c:c0:bf:47:05:62:f2:bf:7b:fb:7b:ce:fd:7f:bc:06: ba:43:32:6a:66:c4:3a:84:64:02:08:84:39:2e:e2:96:2b:65: 7a:ee:b5:e0:42:93:a9:eb:6a:42:cf:eb:48:9e:72:c6:57:5b: 82:69:61:2f:d7:48:b7:76:e9:06:58:f3:9a:ee:71:df:0b:f9: 65:e7:b8:8b:14:8b:8a:7d:b4:0e:e7:71:f2:11:0f:3e:36:63: 7c:c5:4a:5a:bc:04:47:27:41:b8:50:6b:42:6f:81:99:b3:d2: 1e:74:d3:b5:bb:5c:7a:2f:e9:24:1a:59:a0:60:22:d3:87:43: f0:e1:69:58:59:52:56:4e:29:11:d5:b2:38:10:62:db:3d:6d: e0:20:2c:ab:7d:a4:0a:7d:02:41:2b:d2:55:98:67:e5:b6:29: b3:10:93:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwKCAHZFKUoafaPcwWJsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYmZiMDA0OGE4ZGE1NTZmZDlkM2RmMTA3NzQwMmY4NDNm NWQ3MDMwHhcNMjUxMjA2MTMwMTE4WhcNMjUxMjA3MTMwMTE4WjAzMTEwLwYDVQQD EygyZTM0MTc3MjJkYWM5NzQ1YTIzMDVmNjljMjQ0ZTgzZDM2ODg1ODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ6kMi3coZ3OFXCfOmS+CYP44pWs TFfapzY7lSJWYcaJwtII9U+JGnQIJLMJ63hNqtQ0mBHP18C66DAn9+2c9FF2Fq0b IF7yHRBOiwQty+F4dqxxsCiZk1N+Isq1Pb5dpSbmhari0eP8dOUiPsv1m0rqIPBO u4W9FLcAkMKX7J/b47U82S7Ka0feRC0WWITtW9gGZOK85fpWOU4K8w7OSGDRsgGy whCNXTmIFDkfWR+np14pp60wvm7m8P/EWkNWAxzVXG0tOOAblmCUPpMOv/rAyqaa 6W82vCuLCftOm24cNGNz+8XS6pbgDbuaGjgQFy4bwkKh/klOG9+sokUycQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC40F3ItrJdFojBfacJE6D02iFiTMB8GA1UdIwQY MBaAFNy/sASKjaVW/Z098Qd0AvhD9dcDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kY2I3MGQtNzk0Ny00NTY5LWJjODQt ZTA2MGI0ZmNiY2NiLzEvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9kY2I3MGQtNzk0Ny00NTY5LWJjODQtZTA2MGI0ZmNiY2Ni LzEvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXFIe5DT Nw7CjULzKlcz7rfP12FqN+dVA7JPtwPUQCtcv8QVBsz6Oct64iDEBQctwOg3oPpe lrRkZEGlB4X8iclKrinKeZF44duiBIzq2ip6uo0pXTa+1F3EwbKcwL9HBWLyv3v7 e879f7wGukMyambEOoRkAgiEOS7ilitleu614EKTqetqQs/rSJ5yxldbgmlhL9dI t3bpBljzmu5x3wv5Zee4ixSLin20Dudx8hEPPjZjfMVKWrwERydBuFBrQm+BmbPS HnTTtbtcei/pJBpZoGAi04dD8OFpWFlSVk4pEdWyOBBi2z1t4CAsq32kCn0CQSvS VZhn5bYpsxCTsA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:38:19 2025 by rpki-client