This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft File: 3y4c6U6IoT84_n-UO3lBa8B6HfA.mft (raw, json) Hash identifier: /ciisYLoOYQNTIv+OKE+gWElBrER+qcqho3jEdmued0= Subject key identifier: FE:E2:A4:DC:C8:AA:F3:34:78:04:B5:3D:C2:35:5D:7E:84:00:9F:61 Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0 Certificate issuer: /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0 Certificate serial: 019AF19B1445821614569D45B09CEEEB8E48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:03 +0000 Manifest this update: Sat 06 Dec 2025 03:01:03 +0000 Manifest next update: Sun 07 Dec 2025 03:01:03 +0000 Files and hashes: 1: 3y4c6U6IoT84_n-UO3lBa8B6HfA.crl (hash: kuFAaGh48/E7zARHzwWZqRNKZcQ+3mUlZjiZGftzC98=) 2: cssion0g3PJ3Xd3t2jaSsbUDiLU.roa (hash: n63LUbsK0+15N0vAETIk0kewzsiQZdMNrmzn6fJSfQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:14:45:82:16:14:56:9d:45:b0:9c:ee:eb:8e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0 Validity Not Before: Dec 6 03:01:03 2025 GMT Not After : Dec 7 03:01:03 2025 GMT Subject: CN=fee2a4dcc8aaf3347804b53dc2355d7e84009f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b3:72:4d:88:7e:c6:ef:a5:87:dc:ba:4a:a0: 66:d5:74:1a:1b:39:56:d5:42:de:69:ef:9c:35:c8: 99:d8:19:7a:47:e8:50:ef:07:a4:3b:25:74:82:76: 98:cb:ab:38:0b:60:59:08:24:a9:3f:b7:4c:30:50: df:ea:96:6a:f0:90:ba:61:a8:54:18:0a:3a:9f:c7: d4:e8:3e:e6:f4:89:32:0a:69:01:87:ae:4e:aa:b8: fe:91:14:8d:94:ec:ae:ce:5a:00:80:2f:3a:17:81: 89:20:bc:38:87:f9:48:42:e0:78:2c:9a:4d:73:fb: d8:ee:90:f9:79:41:d5:ed:43:45:dc:2a:99:bf:ae: 1f:12:df:64:19:41:f8:5e:2a:ce:20:51:1c:41:47: 1a:65:6f:af:70:af:6a:28:03:c5:b3:ec:49:a9:06: 68:50:03:31:cd:7f:c5:3e:05:ee:e3:7d:49:23:ce: c7:8c:ac:84:fa:fc:8f:30:98:2d:39:65:c9:a2:90: 3c:49:2f:a9:aa:93:b2:82:22:3d:16:46:e1:31:59: fa:a7:90:d2:8d:28:b6:1e:8f:44:04:8e:d0:4d:e6: 7a:50:e2:4f:c9:2d:80:86:ab:47:7c:26:37:15:4a: f1:70:8d:89:46:ce:f2:ef:dd:13:3e:3c:e0:d4:da: 03:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E2:A4:DC:C8:AA:F3:34:78:04:B5:3D:C2:35:5D:7E:84:00:9F:61 X509v3 Authority Key Identifier: keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:92:31:f7:06:8a:0e:f3:7e:c3:7b:27:e0:74:19:75:d4:4c: 4c:67:83:84:eb:d0:29:57:05:01:ed:9f:5b:9b:a0:07:76:2c: 83:3d:18:57:b0:63:ec:5a:48:dc:7a:b8:5a:3a:69:4b:4e:a0: b6:7a:5b:25:6c:91:7f:39:62:f0:b2:2f:d0:83:8e:c1:9d:b1: fe:66:51:ce:43:9b:de:20:58:83:9d:56:d3:2a:2a:24:c2:e6: 53:35:dc:fa:b7:ef:b2:50:84:7c:1e:21:84:66:7c:87:0c:41: de:11:ca:6d:14:ff:42:ed:a5:5a:af:62:93:3f:28:d0:fb:31: 0c:29:5d:f0:2a:fc:e9:85:b3:ea:e8:e2:7b:79:51:77:11:4a: dc:50:5b:59:e0:1c:15:4f:90:b9:30:57:9d:80:7f:2e:b8:9a: bc:a3:14:5b:4e:a9:1a:60:8c:00:47:a5:51:2d:99:95:79:15: 52:f5:9b:de:ce:08:15:66:4d:14:4f:9f:e4:c1:c3:4a:40:99: 63:ce:16:0e:b7:fd:5c:0a:44:8e:2f:59:00:87:07:0c:43:51: 2d:d3:48:e2:60:f9:64:87:90:39:a7:c7:98:60:f6:d4:15:13: 78:84:86:62:f3:5f:b8:be:14:6b:d1:52:f3:8d:fb:69:6f:e7: fa:40:02:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxRFghYUVp1FsJzu645IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMmUxY2U5NGU4OGExM2YzOGZlN2Y5NDNiNzk0MTZiYzA3 YTFkZjAwHhcNMjUxMjA2MDMwMTAzWhcNMjUxMjA3MDMwMTAzWjAzMTEwLwYDVQQD EyhmZWUyYTRkY2M4YWFmMzM0NzgwNGI1M2RjMjM1NWQ3ZTg0MDA5ZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrNyTYh+xu+lh9y6SqBm1XQaGzlW 1ULeae+cNciZ2Bl6R+hQ7wekOyV0gnaYy6s4C2BZCCSpP7dMMFDf6pZq8JC6YahU GAo6n8fU6D7m9IkyCmkBh65Oqrj+kRSNlOyuzloAgC86F4GJILw4h/lIQuB4LJpN c/vY7pD5eUHV7UNF3CqZv64fEt9kGUH4XirOIFEcQUcaZW+vcK9qKAPFs+xJqQZo UAMxzX/FPgXu431JI87HjKyE+vyPMJgtOWXJopA8SS+pqpOygiI9FkbhMVn6p5DS jSi2Ho9EBI7QTeZ6UOJPyS2AhqtHfCY3FUrxcI2JRs7y790TPjzg1NoDvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7ipNzIqvM0eAS1PcI1XX6EAJ9hMB8GA1UdIwQY MBaAFN8uHOlOiKE/OP5/lDt5QWvAeh3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3k0YzZVNklvVDg0X24tVU8zbEJhOEI2SGZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83OGQ4ZjQtM2UwZi00YmJlLTkyMTQt NTM3NGM3ZTBmZmExLzEvM3k0YzZVNklvVDg0X24tVU8zbEJhOEI2SGZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83OGQ4ZjQtM2UwZi00YmJlLTkyMTQtNTM3NGM3ZTBmZmEx LzEvM3k0YzZVNklvVDg0X24tVU8zbEJhOEI2SGZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpIx9waK DvN+w3sn4HQZddRMTGeDhOvQKVcFAe2fW5ugB3Ysgz0YV7Bj7FpI3Hq4WjppS06g tnpbJWyRfzli8LIv0IOOwZ2x/mZRzkOb3iBYg51W0yoqJMLmUzXc+rfvslCEfB4h hGZ8hwxB3hHKbRT/Qu2lWq9ikz8o0PsxDCld8Cr86YWz6ujie3lRdxFK3FBbWeAc FU+QuTBXnYB/LriavKMUW06pGmCMAEelUS2ZlXkVUvWb3s4IFWZNFE+f5MHDSkCZ Y84WDrf9XApEji9ZAIcHDENRLdNI4mD5ZIeQOafHmGD21BUTeISGYvNfuL4Ua9FS 8437aW/n+kACEA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:49 2025 by rpki-client