This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft File: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft (raw, json) Hash identifier: VTAO0Csw1WRW5mLwifnNEgcGOiThoxVTVlyuuq+zJqs= Subject key identifier: F4:E1:0C:DA:FC:B5:46:86:B7:8F:6B:57:3B:E2:90:77:19:A8:76:5B Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35 Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135 Certificate serial: 019AF389C91E04BE6F478526A9657D6AF930 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft Manifest number: 1589 Signing time: Sat 06 Dec 2025 12:01:24 +0000 Manifest this update: Sat 06 Dec 2025 12:01:24 +0000 Manifest next update: Sun 07 Dec 2025 12:01:24 +0000 Files and hashes: 1: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl (hash: uDAppnPrLpboxfj8mHWHgMcmrtfrzXOPju5/QSoXV9o=) 2: 7iR9W4MA5fEoG9NRWf9E-32Ma5Q.roa (hash: osSdmDl/G/dF/W3n4ltU1jPl+UamVuVRPceUmIJCb+c=) 3: _WS_KUWo5VlHoso4BGtRKVhHyHo.roa (hash: EHMdLaq+K6Q6inb3xq+fso0i3zQ47TR+r4l4lfO+5pU=) 4: sRARFo8h99_3G186d4SLHxMo4NM.roa (hash: Ta0KosuiHLazmKN+JXD0BdhBvoFm09Df65X9K+SWVyw=) 5: uLirnnwX72a0N3OriOBn_DEyQSk.roa (hash: 6+Yqbp1RGXrWNzgrWITGoM7VyJxkBiJJi44XDI1jM7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:c9:1e:04:be:6f:47:85:26:a9:65:7d:6a:f9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135 Validity Not Before: Dec 6 12:01:24 2025 GMT Not After : Dec 7 12:01:24 2025 GMT Subject: CN=f4e10cdafcb54686b78f6b573be2907719a8765b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5c:e5:16:6e:b1:b7:ed:b6:ac:85:de:5e:c4: 90:f7:98:dc:62:b6:b5:70:7f:52:69:8b:d5:fd:3c: b9:81:21:ea:d4:8a:58:12:51:3b:4b:01:ca:c4:c2: f2:7a:40:7b:43:05:2e:49:94:cb:43:d2:bf:ea:85: 2d:c9:9a:7c:ae:94:f6:b6:87:ef:d7:5b:15:26:b1: 5e:97:06:b4:5a:6d:55:68:fe:db:61:f4:69:94:c3: bb:f6:3a:bd:2e:39:69:1c:32:e5:ef:d4:9e:be:f8: 01:98:d0:57:5b:59:7e:af:ef:46:99:1d:f7:d8:81: 3b:48:c6:17:c9:41:ed:d9:2a:85:1d:56:90:39:55: 88:55:e0:56:23:90:6e:76:83:ad:16:18:f6:5d:7a: 17:03:76:b3:7e:07:3b:24:c6:e7:0c:6c:4e:3a:21: b3:8f:48:73:62:d4:4b:ab:6f:e0:b6:46:b3:ba:0b: 2f:bf:fc:e3:0e:93:57:f7:3c:f4:25:86:d5:af:61: d3:a3:aa:e0:fc:36:3e:62:e2:77:e9:c3:15:09:d7: 7f:d3:43:64:16:37:df:bd:94:b0:db:29:bc:6d:5f: 97:14:56:4e:57:1d:0a:41:19:30:99:72:b4:77:40: 1a:42:07:9d:76:1d:af:91:1f:68:32:3a:d8:77:ad: d6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E1:0C:DA:FC:B5:46:86:B7:8F:6B:57:3B:E2:90:77:19:A8:76:5B X509v3 Authority Key Identifier: keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:c8:4f:d4:dd:90:35:4f:49:e5:7f:00:69:93:58:de:03:2b: a6:d4:68:24:4a:c6:ab:5a:8a:91:a8:1d:f1:66:e2:2b:60:4b: 25:0d:df:42:6b:7c:86:2d:b8:e0:2b:27:6b:30:d4:56:29:96: d3:cb:1f:9b:ea:61:4b:f8:63:b0:7f:e3:fe:f8:a2:2e:a7:ad: 4b:a9:f1:91:26:db:34:25:c7:bb:5e:18:b3:44:10:74:08:47: e9:e5:40:b8:96:5c:24:4c:40:ab:2d:f5:df:ae:f1:98:e9:38: 5d:b0:d3:ed:18:9c:8b:9e:8c:24:a2:98:25:d3:bd:92:df:8c: 86:6f:12:8a:ef:db:6a:db:d8:90:e0:cd:6e:88:5c:dd:ed:e5: 11:0c:c0:9e:37:d1:c1:d0:ef:70:d4:01:97:dd:76:21:46:8d: 36:81:f3:8b:b3:3a:99:d6:29:f4:ea:b2:aa:04:14:2a:1b:15: 55:67:c6:0c:26:58:70:93:6b:ca:ad:70:2f:85:59:59:ee:db: ff:66:02:29:43:e7:7a:92:6a:3d:b3:65:dc:c6:1a:0d:68:5d: 30:9f:41:51:75:96:fc:57:98:68:99:35:cc:0e:28:95:a7:de: ed:31:a4:37:3a:f2:90:86:fd:74:f2:98:7a:e2:8a:82:c1:98: dd:68:fd:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzickeBL5vR4UmqWV9avkwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDM1M2UyZjVkMzE4YzM0ODc3MmE4ZmYxMDVhYTcwNzE5 ZTQxMzUwHhcNMjUxMjA2MTIwMTI0WhcNMjUxMjA3MTIwMTI0WjAzMTEwLwYDVQQD EyhmNGUxMGNkYWZjYjU0Njg2Yjc4ZjZiNTczYmUyOTA3NzE5YTg3NjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1zlFm6xt+22rIXeXsSQ95jcYra1 cH9SaYvV/Ty5gSHq1IpYElE7SwHKxMLyekB7QwUuSZTLQ9K/6oUtyZp8rpT2tofv 11sVJrFelwa0Wm1VaP7bYfRplMO79jq9LjlpHDLl79SevvgBmNBXW1l+r+9GmR33 2IE7SMYXyUHt2SqFHVaQOVWIVeBWI5BudoOtFhj2XXoXA3azfgc7JMbnDGxOOiGz j0hzYtRLq2/gtkazugsvv/zjDpNX9zz0JYbVr2HTo6rg/DY+YuJ36cMVCdd/00Nk FjffvZSw2ym8bV+XFFZOVx0KQRkwmXK0d0AaQgeddh2vkR9oMjrYd63W3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPThDNr8tUaGt49rVzvikHcZqHZbMB8GA1UdIwQY MBaAFN7TU+L10xjDSHcqj/EFqnBxnkE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jYmFjY2UtZWZiZi00ZjMyLThkODgt NGU4NWRhYmQ2NDc0LzEvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jYmFjY2UtZWZiZi00ZjMyLThkODgtNGU4NWRhYmQ2NDc0 LzEvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxshP1N2Q NU9J5X8AaZNY3gMrptRoJErGq1qKkagd8WbiK2BLJQ3fQmt8hi244CsnazDUVimW 08sfm+phS/hjsH/j/viiLqetS6nxkSbbNCXHu14Ys0QQdAhH6eVAuJZcJExAqy31 367xmOk4XbDT7Rici56MJKKYJdO9kt+Mhm8Siu/batvYkODNbohc3e3lEQzAnjfR wdDvcNQBl912IUaNNoHzi7M6mdYp9OqyqgQUKhsVVWfGDCZYcJNryq1wL4VZWe7b /2YCKUPnepJqPbNl3MYaDWhdMJ9BUXWW/FeYaJk1zA4olafe7TGkNzrykIb9dPKY euKKgsGY3Wj9Fw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:31:47 2025 by rpki-client