This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft File: a3tUza1xENOJd_mlkmCzkxLkSH0.mft (raw, json) Hash identifier: rghjpg2K2Rg0lbn0k4s9qEILpJLEfXJnxpcFsBctqGY= Subject key identifier: D5:67:4A:1A:80:B9:8E:32:3A:72:EA:CD:F6:7C:FA:CF:D3:6B:16:EC Authority key identifier: 6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D Certificate issuer: /CN=6b7b54cdad7110d38977f9a59260b39312e4487d Certificate serial: 019AF38964B579F19678B61F04EF1B614B48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft Manifest number: 123D Signing time: Sat 06 Dec 2025 12:00:58 +0000 Manifest this update: Sat 06 Dec 2025 12:00:58 +0000 Manifest next update: Sun 07 Dec 2025 12:00:58 +0000 Files and hashes: 1: a3tUza1xENOJd_mlkmCzkxLkSH0.crl (hash: iXOpcFbRM+KcKQsdwgEML97tljefkK0qRk2jk0RefwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:64:b5:79:f1:96:78:b6:1f:04:ef:1b:61:4b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7b54cdad7110d38977f9a59260b39312e4487d Validity Not Before: Dec 6 12:00:58 2025 GMT Not After : Dec 7 12:00:58 2025 GMT Subject: CN=d5674a1a80b98e323a72eacdf67cfacfd36b16ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:70:de:5a:40:fe:9e:4a:43:ba:c1:f8:2a:08: 66:41:22:d1:8f:2c:c0:4f:da:21:25:33:c0:d8:9f: ab:31:bf:2c:e3:5c:34:b1:f3:0a:a0:4d:16:82:be: af:70:54:4d:b0:e4:93:e8:34:dd:d9:b9:ee:45:b5: 66:f6:c4:a0:b2:5c:d0:b3:52:50:fa:42:70:15:e1: b8:af:0a:ec:fe:a2:32:bf:a2:a5:54:5d:4e:dc:83: ab:6a:9a:4a:6c:e0:a9:e8:96:43:b6:81:7e:d3:41: be:b6:52:9a:2a:76:9d:a8:27:3d:ce:0e:32:c3:bb: 65:30:69:16:4a:42:9e:a0:fc:9c:c9:5d:81:c0:fb: b0:10:e9:89:97:a0:e7:f0:8e:c0:1b:14:ca:dc:17: f3:9f:66:ff:fb:27:01:ac:c6:2d:0e:52:ca:3e:7d: 8e:b6:17:dd:94:fd:2b:c1:8f:cc:15:a8:d2:a8:e4: a9:fb:2c:b6:25:c5:c9:02:ea:d3:28:51:31:fc:ec: e6:84:49:d4:1d:49:75:e4:66:29:48:b4:ff:65:1e: bf:47:bb:b2:8c:3f:fe:f7:39:57:81:cb:22:51:a4: 0b:32:86:7d:ef:b8:98:a6:ef:85:f7:b7:bb:07:2a: 71:d7:33:48:de:02:ac:39:90:ce:68:81:aa:90:c5: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:67:4A:1A:80:B9:8E:32:3A:72:EA:CD:F6:7C:FA:CF:D3:6B:16:EC X509v3 Authority Key Identifier: keyid:6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2b:25:2a:04:aa:ee:2f:cf:a6:1e:b7:97:aa:2e:d8:fb:5a: ec:0d:39:b7:fa:c5:f8:67:47:df:6f:89:60:b3:02:a0:f5:53: 5f:4f:ee:b6:48:40:ae:0d:95:7b:cc:56:47:a8:3a:a6:25:42: 39:f8:e7:3a:ae:0b:55:20:f9:b6:57:4e:eb:1b:20:45:a7:ca: f8:b2:ef:c7:e5:44:ec:80:a3:8d:59:76:d5:aa:0b:6a:a6:7c: c3:69:70:d9:67:23:0f:20:11:2a:be:35:03:ef:13:2d:1a:89: 74:f5:cf:07:13:36:83:1a:21:bf:09:8e:db:cf:d9:09:8d:0c: 68:a2:26:f1:11:1a:9f:c2:72:41:3c:d2:e2:25:e1:a4:b8:66: d2:dc:e7:45:d9:c7:7c:0c:2b:de:d8:46:29:95:f4:0a:90:85: 34:1f:94:27:3a:51:29:82:5a:68:91:04:84:6e:35:2b:09:39: 43:3e:f3:68:9a:1b:8d:05:f9:4e:b3:e9:2d:b8:7f:ab:8e:02: be:a4:3e:a6:b9:ac:df:5a:e1:64:32:fb:e3:87:96:6d:1d:05: 84:8a:92:20:8e:c4:a6:34:24:d5:c2:17:cd:57:d1:4f:1d:ef: d8:d6:84:bb:ad:a8:36:19:30:cd:d3:93:2e:f4:01:b4:6e:48: 3d:36:a9:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWS1efGWeLYfBO8bYUtIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2I1NGNkYWQ3MTEwZDM4OTc3ZjlhNTkyNjBiMzkzMTJl NDQ4N2QwHhcNMjUxMjA2MTIwMDU4WhcNMjUxMjA3MTIwMDU4WjAzMTEwLwYDVQQD EyhkNTY3NGExYTgwYjk4ZTMyM2E3MmVhY2RmNjdjZmFjZmQzNmIxNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73DeWkD+nkpDusH4KghmQSLRjyzA T9ohJTPA2J+rMb8s41w0sfMKoE0Wgr6vcFRNsOST6DTd2bnuRbVm9sSgslzQs1JQ +kJwFeG4rwrs/qIyv6KlVF1O3IOrappKbOCp6JZDtoF+00G+tlKaKnadqCc9zg4y w7tlMGkWSkKeoPycyV2BwPuwEOmJl6Dn8I7AGxTK3Bfzn2b/+ycBrMYtDlLKPn2O thfdlP0rwY/MFajSqOSp+yy2JcXJAurTKFEx/OzmhEnUHUl15GYpSLT/ZR6/R7uy jD/+9zlXgcsiUaQLMoZ977iYpu+F97e7Bypx1zNI3gKsOZDOaIGqkMU1SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVnShqAuY4yOnLqzfZ8+s/TaxbsMB8GA1UdIwQY MBaAFGt7VM2tcRDTiXf5pZJgs5MS5Eh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTN0VXphMXhFTk9KZF9tbGttQ3preExrU0gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82MjgxZGMtOWI1Zi00OWM4LWI0NTUt NDFkNzE3OWVkOTUxLzEvYTN0VXphMXhFTk9KZF9tbGttQ3preExrU0gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My82MjgxZGMtOWI1Zi00OWM4LWI0NTUtNDFkNzE3OWVkOTUx LzEvYTN0VXphMXhFTk9KZF9tbGttQ3preExrU0gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCslKgSq 7i/Pph63l6ou2Pta7A05t/rF+GdH32+JYLMCoPVTX0/utkhArg2Ve8xWR6g6piVC OfjnOq4LVSD5tldO6xsgRafK+LLvx+VE7ICjjVl21aoLaqZ8w2lw2WcjDyARKr41 A+8TLRqJdPXPBxM2gxohvwmO28/ZCY0MaKIm8REan8JyQTzS4iXhpLhm0tznRdnH fAwr3thGKZX0CpCFNB+UJzpRKYJaaJEEhG41Kwk5Qz7zaJobjQX5TrPpLbh/q44C vqQ+prms31rhZDL744eWbR0FhIqSII7EpjQk1cIXzVfRTx3v2NaEu62oNhkwzdOT LvQBtG5IPTapug== -----END CERTIFICATE-----Generated at Sat Dec 6 17:22:26 2025 by rpki-client