This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft File: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft (raw, json) Hash identifier: 95BeLZNPpI805IcuZj7EyYeT1JJnQ8QuD5ADlHPazkE= Subject key identifier: 44:48:04:6D:41:E4:F4:D8:2A:83:35:F5:B8:A8:C2:30:DF:DA:38:5C Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35 Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135 Certificate serial: 019AF5787D6C8A0A7316A2F11D5A18F09FED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft Manifest number: 158A Signing time: Sat 06 Dec 2025 21:01:45 +0000 Manifest this update: Sat 06 Dec 2025 21:01:45 +0000 Manifest next update: Sun 07 Dec 2025 21:01:45 +0000 Files and hashes: 1: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl (hash: XzNXi0BHbxr0V2LjmQg1CcvCTruODQBBMjI0r1iOeCc=) 2: 7iR9W4MA5fEoG9NRWf9E-32Ma5Q.roa (hash: osSdmDl/G/dF/W3n4ltU1jPl+UamVuVRPceUmIJCb+c=) 3: _WS_KUWo5VlHoso4BGtRKVhHyHo.roa (hash: EHMdLaq+K6Q6inb3xq+fso0i3zQ47TR+r4l4lfO+5pU=) 4: sRARFo8h99_3G186d4SLHxMo4NM.roa (hash: Ta0KosuiHLazmKN+JXD0BdhBvoFm09Df65X9K+SWVyw=) 5: uLirnnwX72a0N3OriOBn_DEyQSk.roa (hash: 6+Yqbp1RGXrWNzgrWITGoM7VyJxkBiJJi44XDI1jM7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:7d:6c:8a:0a:73:16:a2:f1:1d:5a:18:f0:9f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135 Validity Not Before: Dec 6 21:01:45 2025 GMT Not After : Dec 7 21:01:45 2025 GMT Subject: CN=4448046d41e4f4d82a8335f5b8a8c230dfda385c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1e:f4:92:db:dd:53:40:06:b5:cc:b6:78:b0: 37:88:1d:1d:85:98:9d:da:7d:e2:70:1a:65:55:ca: 22:ad:64:05:b3:67:f3:09:58:45:c4:89:d3:0b:82: ef:e8:a7:07:1e:a4:69:d1:51:80:2d:04:a0:a1:98: 82:81:31:3b:b7:a3:c3:02:4a:0a:04:54:33:a8:e3: ed:77:3c:0d:8e:39:8a:1e:a7:19:7f:11:a9:68:50: 9a:23:4e:4b:de:d4:8c:a9:e7:fc:41:18:a9:72:f1: 74:5c:04:58:67:44:aa:4b:d2:65:cf:d0:e8:bf:15: 1e:db:1e:7a:0b:aa:1a:b1:92:ce:cd:96:be:0b:c8: 12:ce:62:ad:7c:6c:6c:aa:ac:70:4d:21:b8:a6:ee: 22:dd:7d:0c:b5:23:2b:55:6e:94:ae:78:28:8b:96: c6:20:cb:97:47:d9:de:e7:76:44:84:16:cf:c1:fe: 33:64:09:11:d2:f0:89:e4:69:2d:31:8f:3c:22:5f: 7e:ce:08:d0:e6:df:c1:a0:4e:30:3b:a2:93:c6:57: 76:23:eb:79:f9:4d:a1:ce:01:ff:51:bf:af:30:81: 11:21:fe:c8:e6:6f:b8:2a:0e:28:52:4f:b7:4f:1c: 5d:ea:d0:53:2d:e8:19:e0:0d:6f:9f:1f:f9:f1:59: 69:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:48:04:6D:41:E4:F4:D8:2A:83:35:F5:B8:A8:C2:30:DF:DA:38:5C X509v3 Authority Key Identifier: keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ff:67:fa:36:d8:c2:e3:26:f1:14:86:2c:65:ec:99:fa:38: 08:51:82:8f:91:d8:18:7f:c7:af:53:06:2b:88:e9:0b:e5:f3: c0:e6:68:c2:61:4e:90:15:2b:82:11:da:bf:aa:19:f1:62:43: c4:33:c1:31:3f:f3:49:bb:6b:ec:0c:c1:1c:1f:cb:18:ec:2f: 40:44:46:25:06:e6:95:9e:37:1e:21:d6:8f:b9:75:08:8d:10: 4b:c5:f8:c7:77:d5:49:28:84:76:c3:4e:bd:8e:d4:7c:c5:8e: 92:09:02:24:fe:e3:6d:59:32:dd:dd:4e:a4:a5:10:fd:48:c6: 42:34:be:c7:02:bc:59:d0:8d:bd:a7:04:63:f2:7e:70:12:81: 2e:8f:10:68:79:93:95:39:9f:0c:da:5f:1d:b8:58:7f:8d:e0: 23:bb:56:c2:23:10:0c:68:e0:cb:16:5f:f8:65:41:e1:af:12: ba:b8:6c:47:92:f4:99:f7:23:a3:f6:5d:a8:44:0e:6c:4c:3a: e6:77:d2:f6:2a:75:eb:97:f7:00:79:a0:64:56:ae:16:fd:9e: 7b:52:80:61:c4:53:70:fd:fe:ad:db:ba:e5:b9:ab:91:d4:6a: 02:e8:0d:15:8b:1c:06:70:98:e0:61:94:03:91:a2:69:55:a5: 55:7b:5c:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eH1sigpzFqLxHVoY8J/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDM1M2UyZjVkMzE4YzM0ODc3MmE4ZmYxMDVhYTcwNzE5 ZTQxMzUwHhcNMjUxMjA2MjEwMTQ1WhcNMjUxMjA3MjEwMTQ1WjAzMTEwLwYDVQQD Eyg0NDQ4MDQ2ZDQxZTRmNGQ4MmE4MzM1ZjViOGE4YzIzMGRmZGEzODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR70ktvdU0AGtcy2eLA3iB0dhZid 2n3icBplVcoirWQFs2fzCVhFxInTC4Lv6KcHHqRp0VGALQSgoZiCgTE7t6PDAkoK BFQzqOPtdzwNjjmKHqcZfxGpaFCaI05L3tSMqef8QRipcvF0XARYZ0SqS9Jlz9Do vxUe2x56C6oasZLOzZa+C8gSzmKtfGxsqqxwTSG4pu4i3X0MtSMrVW6Urngoi5bG IMuXR9ne53ZEhBbPwf4zZAkR0vCJ5GktMY88Il9+zgjQ5t/BoE4wO6KTxld2I+t5 +U2hzgH/Ub+vMIERIf7I5m+4Kg4oUk+3Txxd6tBTLegZ4A1vnx/58VlpxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERIBG1B5PTYKoM19biowjDf2jhcMB8GA1UdIwQY MBaAFN7TU+L10xjDSHcqj/EFqnBxnkE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jYmFjY2UtZWZiZi00ZjMyLThkODgt NGU4NWRhYmQ2NDc0LzEvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jYmFjY2UtZWZiZi00ZjMyLThkODgtNGU4NWRhYmQ2NDc0 LzEvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/9n+jbY wuMm8RSGLGXsmfo4CFGCj5HYGH/Hr1MGK4jpC+XzwOZowmFOkBUrghHav6oZ8WJD xDPBMT/zSbtr7AzBHB/LGOwvQERGJQbmlZ43HiHWj7l1CI0QS8X4x3fVSSiEdsNO vY7UfMWOkgkCJP7jbVky3d1OpKUQ/UjGQjS+xwK8WdCNvacEY/J+cBKBLo8QaHmT lTmfDNpfHbhYf43gI7tWwiMQDGjgyxZf+GVB4a8SurhsR5L0mfcjo/ZdqEQObEw6 5nfS9ip165f3AHmgZFauFv2ee1KAYcRTcP3+rdu65bmrkdRqAugNFYscBnCY4GGU A5GiaVWlVXtcQA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:43:52 2025 by rpki-client