This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft File: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json) Hash identifier: 5ERKFUOgjuHKLAef1Ab/4Vc+zLKzWrbdQoES7NX05y4= Subject key identifier: 1D:C9:54:F3:9B:DE:5B:78:B7:B3:FA:18:E8:94:C0:D3:A5:50:EB:9B Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A Certificate issuer: /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a Certificate serial: 019AF12E35BD6CD297CC9C36D48B5A9D3B18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft Manifest number: 141C Signing time: Sat 06 Dec 2025 01:02:08 +0000 Manifest this update: Sat 06 Dec 2025 01:02:08 +0000 Manifest next update: Sun 07 Dec 2025 01:02:08 +0000 Files and hashes: 1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: nq2E1gyhgC80JGUOb48RPT2UG9OZjlPYNvp6lRShWZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:35:bd:6c:d2:97:cc:9c:36:d4:8b:5a:9d:3b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a Validity Not Before: Dec 6 01:02:08 2025 GMT Not After : Dec 7 01:02:08 2025 GMT Subject: CN=1dc954f39bde5b78b7b3fa18e894c0d3a550eb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a2:1f:80:ba:86:4d:37:cc:66:3f:66:e1:22: b1:bc:e8:73:e4:69:15:1a:6c:e3:86:bc:f5:c2:d8: bf:1b:c0:db:b5:31:f9:6d:62:e3:3a:08:af:a6:50: 83:c5:8f:7c:f4:34:47:d0:ea:f0:5a:bb:85:ca:96: c4:5c:f1:47:bc:63:d8:34:3e:a1:1b:74:e8:d9:bc: 78:95:68:80:6e:45:6e:93:d1:c5:f9:c4:ed:ef:ee: 5b:8c:26:98:8a:3c:56:7f:31:9c:0d:d6:eb:43:4a: 76:76:7e:6f:42:23:4e:fd:0b:3e:1b:3c:47:f2:e5: 05:83:15:ca:e6:ff:08:7a:0a:dc:d4:92:86:de:e4: 0f:dd:c0:f4:b9:70:c5:42:03:1e:16:37:08:7d:84: c7:99:09:d9:9e:00:47:c5:f9:6d:85:c0:33:5f:0d: 37:11:aa:b0:de:7f:dd:2d:6c:30:f2:a9:02:0a:a2: fd:f2:93:87:88:46:07:ca:30:5a:b4:95:6d:6a:1f: a0:c7:69:0c:70:24:50:3a:5c:bf:87:7e:53:6d:43: 3b:7e:cd:1c:ca:85:93:f8:ef:44:3f:17:48:9a:2e: 1f:93:46:44:e3:fc:c1:e7:47:09:d1:1d:bb:cc:68: e2:4c:3f:9c:86:67:8d:b2:47:6d:d2:12:3e:b0:7d: 83:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C9:54:F3:9B:DE:5B:78:B7:B3:FA:18:E8:94:C0:D3:A5:50:EB:9B X509v3 Authority Key Identifier: keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:6e:fa:25:c2:06:03:34:3d:78:85:37:48:ca:75:6d:87:a6: ea:fd:8d:7a:3f:5d:21:8b:4a:30:a4:b4:06:44:62:04:69:a5: 54:b6:8b:9f:8e:3d:ba:5b:78:96:83:86:04:24:9a:b5:53:48: 9f:e4:5c:ac:b6:54:41:13:f4:57:dc:eb:a0:cb:13:df:70:d5: 08:1a:8f:fc:9b:9b:d6:7a:30:58:7c:52:88:b5:37:ad:1b:2c: 9c:0f:e9:dd:a3:f5:6c:2e:84:f5:0e:20:74:5d:6f:54:0c:71: da:c5:b8:09:f1:50:28:b4:93:4c:6c:d0:c2:6a:e2:52:7b:8d: 6f:79:fa:42:25:4e:84:8d:ca:9b:96:b7:69:a8:86:68:e6:0f: 72:2b:67:40:b4:f6:18:49:34:ba:dc:32:6e:ca:04:66:08:80: 10:63:e9:db:6b:1d:55:ac:ed:35:a8:77:f1:0e:bb:f4:11:bc: 29:ba:ec:9e:d6:ea:8c:60:69:55:05:04:36:cf:35:00:58:40: 54:4d:28:52:46:a9:dc:15:1c:08:b5:12:09:d9:ea:96:5a:87: 3a:5e:c0:9b:95:be:f5:79:2d:29:3a:40:30:ae:fc:03:ff:db: 01:4c:2a:8b:1b:c5:f4:56:3d:05:46:98:55:92:d9:7a:46:9e: bf:5f:e1:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjW9bNKXzJw21ItanTsYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMTE2MTY4Zjc4OWJkZDQwOGU2ZWI5OTYyMmUzZWJjOWE3 MzEwMGEwHhcNMjUxMjA2MDEwMjA4WhcNMjUxMjA3MDEwMjA4WjAzMTEwLwYDVQQD EygxZGM5NTRmMzliZGU1Yjc4YjdiM2ZhMThlODk0YzBkM2E1NTBlYjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6IfgLqGTTfMZj9m4SKxvOhz5GkV Gmzjhrz1wti/G8DbtTH5bWLjOgivplCDxY989DRH0OrwWruFypbEXPFHvGPYND6h G3To2bx4lWiAbkVuk9HF+cTt7+5bjCaYijxWfzGcDdbrQ0p2dn5vQiNO/Qs+GzxH 8uUFgxXK5v8Iegrc1JKG3uQP3cD0uXDFQgMeFjcIfYTHmQnZngBHxflthcAzXw03 Eaqw3n/dLWww8qkCCqL98pOHiEYHyjBatJVtah+gx2kMcCRQOly/h35TbUM7fs0c yoWT+O9EPxdImi4fk0ZE4/zB50cJ0R27zGjiTD+chmeNskdt0hI+sH2DpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3JVPOb3lt4t7P6GOiUwNOlUOubMB8GA1UdIwQY MBaAFN0RYWj3ib3UCObrmWIuPryacxAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1JGaGFQZUp2ZFFJNXV1WllpNC12SnB6RUFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iYjhmNjItNmJiOS00MDc2LTg5MGEt N2Q0YjAzM2YxMzA3LzEvM1JGaGFQZUp2ZFFJNXV1WllpNC12SnB6RUFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9iYjhmNjItNmJiOS00MDc2LTg5MGEtN2Q0YjAzM2YxMzA3 LzEvM1JGaGFQZUp2ZFFJNXV1WllpNC12SnB6RUFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaW76JcIG AzQ9eIU3SMp1bYem6v2Nej9dIYtKMKS0BkRiBGmlVLaLn449ult4loOGBCSatVNI n+RcrLZUQRP0V9zroMsT33DVCBqP/Jub1nowWHxSiLU3rRssnA/p3aP1bC6E9Q4g dF1vVAxx2sW4CfFQKLSTTGzQwmriUnuNb3n6QiVOhI3Km5a3aaiGaOYPcitnQLT2 GEk0utwybsoEZgiAEGPp22sdVaztNah38Q679BG8KbrsntbqjGBpVQUENs81AFhA VE0oUkap3BUcCLUSCdnqllqHOl7Am5W+9XktKTpAMK78A//bAUwqixvF9FY9BUaY VZLZekaev1/h5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:36 2025 by rpki-client