This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json) Hash identifier: 6fd0qvvy+PWmpGhfJhnuvoJ4ip3jKlghWc6W68NMO8E= Subject key identifier: BF:00:AF:DA:60:8F:97:0F:9B:09:B8:77:CF:B0:FD:B2:87:D2:BB:BF Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92 Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592 Certificate serial: 019AF35280A7CC0DBAE5CB5DBDBF11AF319D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft Manifest number: 053E Signing time: Sat 06 Dec 2025 11:01:01 +0000 Manifest this update: Sat 06 Dec 2025 11:01:01 +0000 Manifest next update: Sun 07 Dec 2025 11:01:01 +0000 Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: XAoIOK0TKUaN5HJjbItsMPjYI25b85cWsfkejr96hqY=) 2: 8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa (hash: 2BY/rA9giuFltjXSROUw0wjIihHos+N8ZqL5OdXbUVw=) 3: SiGDnp8oSt95ArckPVGAAWtJUNs.roa (hash: j9ZTEJfSb12eUtJGUY9GVfUETUmyTkhHBnRZ+wXplM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:80:a7:cc:0d:ba:e5:cb:5d:bd:bf:11:af:31:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc327af32a98492757b200ea040db24ec3136592 Validity Not Before: Dec 6 11:01:01 2025 GMT Not After : Dec 7 11:01:01 2025 GMT Subject: CN=bf00afda608f970f9b09b877cfb0fdb287d2bbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:e5:38:4d:58:09:10:dc:c3:1f:aa:3d:b7: dd:8f:40:78:1d:df:d9:d3:61:25:2a:0a:89:f1:5b: 44:df:38:7f:31:8c:5e:7d:37:a5:cb:cf:e9:12:ed: b6:1f:b2:6b:0f:f1:27:f8:05:66:7c:50:31:00:0b: 56:15:e4:10:b5:33:43:5d:af:91:48:67:95:85:d3: c2:82:71:b8:33:f5:9b:f2:79:b9:fe:f3:21:7d:27: ad:49:10:95:f0:88:6b:79:b7:7d:0e:c7:d7:24:ac: aa:b7:27:ce:6a:2c:c3:e8:81:27:0e:4e:65:28:e2: 3f:e0:5b:4e:a1:d1:86:17:12:af:ef:0e:dd:25:eb: 77:7d:e6:b2:e5:cb:9a:e4:7f:c6:a3:e2:43:b4:30: 09:55:ab:7a:df:6b:a9:8e:fb:8b:e7:d5:73:b4:03: 92:3b:10:19:07:4a:db:36:4e:7b:78:eb:af:b5:ad: 82:52:1a:2d:79:3a:41:73:8a:74:3c:7d:9b:1f:e8: 27:3b:e1:c5:8a:d3:91:cc:aa:09:4f:af:25:c1:cd: 20:d6:64:15:05:9b:50:23:8e:01:39:71:5e:c4:48: 95:5b:1d:5a:62:53:35:41:ef:22:cc:bc:4f:a9:b2: c6:00:b1:27:9d:19:96:20:4b:e7:2d:ab:2c:dd:ac: 06:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:00:AF:DA:60:8F:97:0F:9B:09:B8:77:CF:B0:FD:B2:87:D2:BB:BF X509v3 Authority Key Identifier: keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1b:15:87:b9:55:51:b7:82:b0:5d:c8:e2:da:79:b8:64:a2: 3d:ab:e9:11:61:3c:9b:94:e7:06:4e:e9:97:5d:27:31:61:eb: ce:45:28:82:2c:13:6e:b3:7c:8f:76:49:2d:7f:58:52:dd:2c: ed:ca:41:bb:43:96:61:27:c6:61:fc:a4:4c:bf:ec:46:b0:be: bb:aa:98:f2:ea:b4:2a:86:36:96:02:65:fc:61:20:9c:40:27: 84:9a:80:b8:bb:75:05:39:14:2c:89:1b:25:c3:98:88:a3:ed: 9a:aa:c3:7f:46:c8:64:1f:9b:eb:4e:20:d3:e4:5a:32:38:84: 7b:e6:16:8d:a7:70:bf:cb:0a:bb:74:c0:51:7b:44:d4:8b:b1: 4f:ae:5a:31:8d:b5:96:08:80:f0:5d:e9:7c:0d:a3:13:72:b7: 33:91:c6:b6:cf:fd:b6:b9:03:98:d5:9e:89:0a:01:af:8f:11: 6c:8d:b6:02:59:b9:0b:b2:bf:10:96:6d:7d:f2:c9:0b:48:b0: 8a:1f:87:79:38:6e:d0:0b:53:dc:e7:7b:ea:27:c0:bc:49:a8: 64:1e:25:35:8d:17:a1:16:0d:68:fc:51:d6:cc:0d:a8:22:23: fa:10:94:1b:a0:34:d4:52:c0:2c:9b:a8:9d:89:0f:78:48:2f: ff:e4:2d:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoCnzA265ctdvb8RrzGdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMzI3YWYzMmE5ODQ5Mjc1N2IyMDBlYTA0MGRiMjRlYzMx MzY1OTIwHhcNMjUxMjA2MTEwMTAxWhcNMjUxMjA3MTEwMTAxWjAzMTEwLwYDVQQD EyhiZjAwYWZkYTYwOGY5NzBmOWIwOWI4NzdjZmIwZmRiMjg3ZDJiYmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFvlOE1YCRDcwx+qPbfdj0B4Hd/Z 02ElKgqJ8VtE3zh/MYxefTely8/pEu22H7JrD/En+AVmfFAxAAtWFeQQtTNDXa+R SGeVhdPCgnG4M/Wb8nm5/vMhfSetSRCV8Ihrebd9DsfXJKyqtyfOaizD6IEnDk5l KOI/4FtOodGGFxKv7w7dJet3feay5cua5H/Go+JDtDAJVat632upjvuL59VztAOS OxAZB0rbNk57eOuvta2CUhoteTpBc4p0PH2bH+gnO+HFitORzKoJT68lwc0g1mQV BZtQI44BOXFexEiVWx1aYlM1Qe8izLxPqbLGALEnnRmWIEvnLass3awG/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8Ar9pgj5cPmwm4d8+w/bKH0ru/MB8GA1UdIwQY MBaAFNwyevMqmEknV7IA6gQNsk7DE2WSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0RKNjh5cVlTU2RYc2dEcUJBMnlUc01UWlpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hNGY2MTktNGU5My00MWQ2LTg0NmMt MTYyMTllMTQwZmE3LzEvM0RKNjh5cVlTU2RYc2dEcUJBMnlUc01UWlpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9hNGY2MTktNGU5My00MWQ2LTg0NmMtMTYyMTllMTQwZmE3 LzEvM0RKNjh5cVlTU2RYc2dEcUJBMnlUc01UWlpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRsVh7lV UbeCsF3I4tp5uGSiPavpEWE8m5TnBk7pl10nMWHrzkUogiwTbrN8j3ZJLX9YUt0s 7cpBu0OWYSfGYfykTL/sRrC+u6qY8uq0KoY2lgJl/GEgnEAnhJqAuLt1BTkULIkb JcOYiKPtmqrDf0bIZB+b604g0+RaMjiEe+YWjadwv8sKu3TAUXtE1IuxT65aMY21 lgiA8F3pfA2jE3K3M5HGts/9trkDmNWeiQoBr48RbI22Alm5C7K/EJZtffLJC0iw ih+HeThu0AtT3Od76ifAvEmoZB4lNY0XoRYNaPxR1swNqCIj+hCUG6A01FLALJuo nYkPeEgv/+Qt0w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:47:32 2025 by rpki-client