This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json) Hash identifier: kHBbfyYrmnvszFA005pw9Q7q+Ezj79C5iZAO+gkuWaA= Subject key identifier: 36:4A:B5:6C:DD:96:7F:16:4D:2C:C3:AF:6A:BD:9E:1B:2E:38:3F:D5 Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f Certificate serial: 019AF0F5E21197D95C7D594BF63A5F5D6EFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 00:00:37 +0000 Manifest this update: Sat 06 Dec 2025 00:00:37 +0000 Manifest next update: Sun 07 Dec 2025 00:00:37 +0000 Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: 50rl0bF/xykIkIO8/N7/LL2GTRaVyTjSeyHlMi8GWHU=) 2: 4aMsThSQ8pto7QNh_kFB73sOXo8.roa (hash: HEBFusOcNgQfdZRF0U/he5dAzzkTri4ddTPSMK0+giU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e2:11:97:d9:5c:7d:59:4b:f6:3a:5f:5d:6e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f Validity Not Before: Dec 6 00:00:37 2025 GMT Not After : Dec 7 00:00:37 2025 GMT Subject: CN=364ab56cdd967f164d2cc3af6abd9e1b2e383fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:e7:98:20:95:ad:59:04:0b:ed:cd:7b:21: 92:e1:9f:be:18:81:cc:2e:58:6d:1b:50:6b:54:8c: 86:fe:25:cd:cd:78:38:2b:7b:93:25:b1:af:92:f6: 54:e3:df:34:08:e9:d7:93:b0:5d:03:4a:35:4e:6e: c5:a8:cf:a2:6d:00:c0:b3:0e:c9:4f:84:2c:d9:02: 5e:b9:e7:7d:b5:f7:1f:3f:5d:30:a3:95:8d:26:f7: 88:c9:00:86:14:e1:51:91:2b:9f:48:9f:1c:ae:f0: 11:c7:85:41:f1:94:89:1e:42:22:a9:7a:a0:7e:af: 7a:f4:7d:c6:43:b8:48:18:97:4f:e5:59:ce:63:c2: 69:82:f1:49:45:05:3a:79:4c:ed:ec:f9:70:75:76: 66:b7:a8:8b:3c:f6:4d:12:fa:d2:ef:d2:24:99:e3: fa:1b:e0:81:1c:16:ef:e7:dc:f9:28:75:54:e0:1e: ed:b7:05:c4:30:82:09:4b:b5:db:8f:37:b9:45:18: 02:f8:76:8e:2a:d6:4a:6e:3c:64:93:ef:92:f7:45: b1:9a:db:0a:58:ef:3f:dd:3c:2d:4e:68:77:d7:b6: fb:bf:35:20:ca:c9:35:3c:58:f5:70:ce:eb:41:18: 2d:cd:a4:cb:e2:ad:dd:ba:29:c3:44:72:cf:3e:3d: ab:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4A:B5:6C:DD:96:7F:16:4D:2C:C3:AF:6A:BD:9E:1B:2E:38:3F:D5 X509v3 Authority Key Identifier: keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4a:e7:c0:78:13:05:56:d4:9e:3e:e9:cd:06:83:d3:ff:fb: b0:c5:bb:ae:24:9d:07:73:20:1c:b2:58:0d:79:e6:3e:f9:04: f1:b5:91:4e:93:5f:91:90:b2:0b:df:64:94:36:a8:66:92:d4: 1d:9f:59:41:ef:6a:7c:fc:eb:e6:07:da:e2:fd:07:f5:b1:0b: 7a:f4:0b:d4:d1:cc:ac:f2:c4:21:f2:d7:c8:9d:a6:b9:98:57: 01:a4:c4:2d:63:5b:cc:f9:39:53:1b:e4:20:d0:b9:6d:fc:ee: 91:48:02:33:5c:cd:f6:04:0a:a5:60:96:97:aa:22:ef:17:64: 8c:17:84:65:97:76:bb:04:e7:15:cc:bd:c3:3c:6c:88:b5:ed: 8c:53:b2:4b:9a:53:28:dc:4f:0e:77:a4:0e:12:46:bb:a8:3f: da:d5:d3:c7:4c:43:3e:ae:af:1f:36:70:11:50:2d:c5:ab:f3: 75:87:dc:f6:35:83:c7:bc:da:8b:8f:97:37:4b:d6:2e:f7:1b: 6b:6d:16:4d:90:50:30:58:9f:56:e3:90:a8:c4:27:9c:a4:05: 99:9d:97:83:d6:6f:19:89:09:5e:2e:a6:cd:e6:d5:b1:c7:d1: 73:62:ca:32:96:fa:11:84:2b:55:eb:67:65:ab:01:fb:42:84: 79:a0:a7:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eIRl9lcfVlL9jpfXW7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTAyZjYxMzFjZTVhNzQ2ZWI1OTgxZGQ0YzFkNmI0ZTE3 YjAzM2YwHhcNMjUxMjA2MDAwMDM3WhcNMjUxMjA3MDAwMDM3WjAzMTEwLwYDVQQD EygzNjRhYjU2Y2RkOTY3ZjE2NGQyY2MzYWY2YWJkOWUxYjJlMzgzZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8PnmCCVrVkEC+3NeyGS4Z++GIHM LlhtG1BrVIyG/iXNzXg4K3uTJbGvkvZU4980COnXk7BdA0o1Tm7FqM+ibQDAsw7J T4Qs2QJeued9tfcfP10wo5WNJveIyQCGFOFRkSufSJ8crvARx4VB8ZSJHkIiqXqg fq969H3GQ7hIGJdP5VnOY8JpgvFJRQU6eUzt7PlwdXZmt6iLPPZNEvrS79IkmeP6 G+CBHBbv59z5KHVU4B7ttwXEMIIJS7Xbjze5RRgC+HaOKtZKbjxkk++S90WxmtsK WO8/3TwtTmh317b7vzUgysk1PFj1cM7rQRgtzaTL4q3duinDRHLPPj2r0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZKtWzdln8WTSzDr2q9nhsuOD/VMB8GA1UdIwQY MBaAFNwQL2Exzlp0brWYHdTB1rThewM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jOGQ2NWUtZTVjOC00MTIwLWFlMWQt YjA5N2Q5ZjhlYzIyLzEvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jOGQ2NWUtZTVjOC00MTIwLWFlMWQtYjA5N2Q5ZjhlYzIy LzEvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALErnwHgT BVbUnj7pzQaD0//7sMW7riSdB3MgHLJYDXnmPvkE8bWRTpNfkZCyC99klDaoZpLU HZ9ZQe9qfPzr5gfa4v0H9bELevQL1NHMrPLEIfLXyJ2muZhXAaTELWNbzPk5Uxvk INC5bfzukUgCM1zN9gQKpWCWl6oi7xdkjBeEZZd2uwTnFcy9wzxsiLXtjFOyS5pT KNxPDnekDhJGu6g/2tXTx0xDPq6vHzZwEVAtxavzdYfc9jWDx7zai4+XN0vWLvcb a20WTZBQMFifVuOQqMQnnKQFmZ2Xg9ZvGYkJXi6mzebVscfRc2LKMpb6EYQrVetn ZasB+0KEeaCnSw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:19 2025 by rpki-client