This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json) Hash identifier: /eXK3TEnDhaFk0D39O5MSvH2G68/NPY1mrcveM0qSIA= Subject key identifier: 02:9C:AF:06:DD:8C:FE:BE:81:94:CB:3D:63:A8:20:20:45:E4:DF:2E Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0 Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0 Certificate serial: 019AF19B8ADFBEE811CA4916FA008308DE8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:33 +0000 Manifest this update: Sat 06 Dec 2025 03:01:33 +0000 Manifest next update: Sun 07 Dec 2025 03:01:33 +0000 Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: lHkf8Q3FKn578IchdIl/uV+K8HdKp9Zq1zd5pSsfqDc=) 2: eB3vCKwTA_4LHzl8qmjJhPE1E0I.roa (hash: 4iTyC4OoX2gbX1y0Qqu+BwBX8s/wE3y91+xS9nzRcWU=) 3: iXueNLg2YHA4AtVuNk2-_05ruYc.roa (hash: HtBZN3M7Ui+z2EtcVA5dF8igPoxnEs2Z1A040xU05DY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:8a:df:be:e8:11:ca:49:16:fa:00:83:08:de:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0 Validity Not Before: Dec 6 03:01:33 2025 GMT Not After : Dec 7 03:01:33 2025 GMT Subject: CN=029caf06dd8cfebe8194cb3d63a8202045e4df2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:ea:60:9b:03:1c:48:d6:31:57:c4:b0:2b: 4b:45:20:56:01:48:c4:e3:b0:d2:a3:d7:bc:e1:d6: 1d:50:2a:bc:12:96:b7:72:8d:99:29:1b:46:47:20: c1:43:1a:ea:42:5b:5a:be:9d:0f:3d:9c:3b:b5:8a: ca:e0:62:bb:1c:ac:47:49:0d:d3:eb:79:79:e1:e7: b2:7e:83:1e:65:4d:0f:d4:aa:ef:77:55:d1:b0:d7: 33:5d:52:85:ce:f3:d7:d0:f1:65:d2:46:de:6c:f1: 47:9d:5f:71:0a:92:72:85:ec:c7:94:7a:2d:21:2a: 82:5a:66:4e:a8:bf:37:90:5e:69:8f:b9:1f:d6:e9: fb:d9:b1:69:a7:95:76:fa:92:ac:49:8f:7a:10:8b: d8:8d:1d:0d:b4:e3:e4:6e:f4:50:fa:4d:4d:e0:ee: 53:8b:ae:d8:5b:19:b4:ac:ea:d7:87:e3:8e:ed:74: 75:d7:19:f9:bb:2c:fe:08:b8:4c:ea:f9:50:91:8b: e9:b9:19:73:26:0d:a7:3e:2e:d8:77:bc:a0:bf:e4: b1:4e:75:3d:88:1c:5f:0d:f1:00:82:f1:31:5b:b6: d4:40:46:8f:ae:83:8e:74:66:25:08:f7:d1:ad:1a: 91:8e:6d:c5:7c:64:e8:63:31:fe:a6:1d:f9:f7:ec: 45:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9C:AF:06:DD:8C:FE:BE:81:94:CB:3D:63:A8:20:20:45:E4:DF:2E X509v3 Authority Key Identifier: keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3d:69:19:60:4b:40:c8:b0:4c:88:9e:f9:6c:a9:77:89:f3: f1:fc:8e:2e:06:75:57:6c:13:c7:42:c6:00:60:58:1c:4c:6d: 56:af:82:93:4c:07:2b:8a:97:07:ca:97:f7:0c:43:0a:36:37: fc:ee:bb:57:4c:bd:f6:4e:93:47:50:41:fb:0b:44:b6:78:29: ad:bc:f5:45:4d:4b:c8:42:cb:32:e9:b7:9a:0d:81:9b:ac:35: c5:94:fb:cd:9c:17:42:2d:8f:27:20:2d:70:6f:15:37:8d:1f: 01:7e:39:48:c0:80:06:d9:96:cc:90:f5:02:72:00:df:70:85: 79:8e:65:cc:c9:13:9e:dd:02:6d:09:39:04:ca:f9:74:5f:aa: 07:1a:5b:67:ac:96:be:a3:ae:46:3d:f7:ac:88:8a:d1:e3:95: 3a:d1:fc:97:7b:ac:78:ea:60:73:05:dd:d9:2b:ae:b5:07:65: bf:ae:b1:01:ca:b4:97:05:4b:36:17:d6:a0:be:f2:cb:10:2f: 3d:53:fb:64:97:ee:7e:a1:1e:60:a9:54:2d:b7:a8:d6:11:70: e0:80:f9:c7:1e:bd:59:c5:3a:bb:b4:fe:e2:29:63:38:b8:91: da:7b:ff:fa:38:53:30:92:86:fa:bb:cf:d2:e6:96:76:aa:0f: 79:d2:75:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4rfvugRykkW+gCDCN6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDMwYWY4Yzc1MzhiOWM1YWY4NTJmMWM0MmExNzVhYWY0 NmY3ZTAwHhcNMjUxMjA2MDMwMTMzWhcNMjUxMjA3MDMwMTMzWjAzMTEwLwYDVQQD EygwMjljYWYwNmRkOGNmZWJlODE5NGNiM2Q2M2E4MjAyMDQ1ZTRkZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F3qYJsDHEjWMVfEsCtLRSBWAUjE 47DSo9e84dYdUCq8Epa3co2ZKRtGRyDBQxrqQltavp0PPZw7tYrK4GK7HKxHSQ3T 63l54eeyfoMeZU0P1Krvd1XRsNczXVKFzvPX0PFl0kbebPFHnV9xCpJyhezHlHot ISqCWmZOqL83kF5pj7kf1un72bFpp5V2+pKsSY96EIvYjR0NtOPkbvRQ+k1N4O5T i67YWxm0rOrXh+OO7XR11xn5uyz+CLhM6vlQkYvpuRlzJg2nPi7Yd7ygv+SxTnU9 iBxfDfEAgvExW7bUQEaProOOdGYlCPfRrRqRjm3FfGToYzH+ph359+xF4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKcrwbdjP6+gZTLPWOoICBF5N8uMB8GA1UdIwQY MBaAFNwDCvjHU4ucWvhS8cQqF1qvRvfgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEt YmRkYzE4YzdhM2YzLzEvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEtYmRkYzE4YzdhM2Yz LzEvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmD1pGWBL QMiwTIie+Wypd4nz8fyOLgZ1V2wTx0LGAGBYHExtVq+Ck0wHK4qXB8qX9wxDCjY3 /O67V0y99k6TR1BB+wtEtngprbz1RU1LyELLMum3mg2Bm6w1xZT7zZwXQi2PJyAt cG8VN40fAX45SMCABtmWzJD1AnIA33CFeY5lzMkTnt0CbQk5BMr5dF+qBxpbZ6yW vqOuRj33rIiK0eOVOtH8l3useOpgcwXd2SuutQdlv66xAcq0lwVLNhfWoL7yyxAv PVP7ZJfufqEeYKlULbeo1hFw4ID5xx69WcU6u7T+4iljOLiR2nv/+jhTMJKG+rvP 0uaWdqoPedJ1YQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:18 2025 by rpki-client