This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json) Hash identifier: HCVtJLVnxdXVb45MITdEcryGZIOhYwXW4s4mQ5mG6R0= Subject key identifier: C5:38:19:23:F6:30:DE:78:A0:5B:1C:26:2F:B4:B7:05:5A:6A:8B:F7 Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b Certificate serial: 019AF19B680F239FAA01925493D22AFFB506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft Manifest number: 1453 Signing time: Sat 06 Dec 2025 03:01:24 +0000 Manifest this update: Sat 06 Dec 2025 03:01:24 +0000 Manifest next update: Sun 07 Dec 2025 03:01:24 +0000 Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: xRLWHWM3Z3h3H6mZ7VF6LYFIsO8e4mkRCOqd0dQ79sE=) 2: nyyFnipIH8x-WXxVr5E31pzM3bw.roa (hash: F30BRqsOUfGjHcN42efG2ZXnRs6ncB05ESHRlvFrG98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:68:0f:23:9f:aa:01:92:54:93:d2:2a:ff:b5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b Validity Not Before: Dec 6 03:01:24 2025 GMT Not After : Dec 7 03:01:24 2025 GMT Subject: CN=c5381923f630de78a05b1c262fb4b7055a6a8bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:d7:c5:61:29:02:da:28:00:dd:26:fd:c3: 4f:a2:ec:21:e9:70:7c:55:bb:b8:d8:00:75:34:b4: ad:94:09:d0:df:19:2f:60:ce:9c:4b:91:3a:4b:b5: cc:fe:08:03:41:5b:a1:40:eb:c9:4b:ab:75:e2:d9: 71:9f:fa:1e:71:0a:76:5c:54:0c:67:f8:58:b9:fe: a2:db:6d:f2:6f:c4:0a:b1:00:b7:d7:b6:0a:2d:08: 13:9e:98:4b:b1:a5:0a:90:15:0e:58:2f:b5:84:87: e2:a4:87:d3:f6:81:e7:34:e6:0f:88:26:fb:28:8c: 1a:64:d7:20:0a:c1:27:58:be:29:d0:52:21:2f:7e: 68:1d:c9:72:ed:8e:87:cf:2c:6d:17:e9:98:5c:99: 7e:5b:2b:f8:a1:eb:02:32:66:06:eb:4a:13:35:fa: e6:7f:9b:91:06:a3:f9:24:7f:a8:b0:d3:67:96:40: 27:5b:66:6a:b6:ec:c5:59:62:8e:65:e6:fc:43:8b: 1b:d1:bb:9a:7e:4f:52:49:88:1f:d5:11:9b:0d:ed: c3:67:04:b3:8c:3f:34:d5:42:2c:8a:0d:a2:cc:e9: 0d:c9:70:ef:a8:d1:13:d6:67:5c:e8:35:05:58:92: 6b:ad:ff:a7:e6:2a:45:57:4d:0b:a2:95:98:12:30: c3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:38:19:23:F6:30:DE:78:A0:5B:1C:26:2F:B4:B7:05:5A:6A:8B:F7 X509v3 Authority Key Identifier: keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:3a:88:d2:f1:88:03:eb:51:ac:1e:10:e2:33:44:93:f7:d3: f8:2d:37:6d:d7:78:bc:bc:c5:bf:fd:a2:2d:d9:17:af:8a:1d: 60:a0:80:47:f5:98:c8:81:8f:5e:e9:99:35:20:2a:ee:df:48: 11:5f:40:20:2b:b2:01:31:fb:30:4f:fa:ac:95:3d:1f:70:73: aa:6d:88:05:a3:0f:39:e7:9a:a6:cb:f6:1d:23:4e:13:65:41: 4a:f4:71:e7:4e:17:b0:5e:80:68:47:fe:30:70:bb:58:68:97: b3:c9:07:62:d6:76:69:27:47:70:f9:f6:95:b0:74:73:a9:d4: d5:4f:b5:0c:a8:8a:fa:1e:98:80:6b:6a:98:0c:ab:5f:50:43: 20:12:e7:a0:dc:e7:27:05:5f:5a:57:24:ac:93:01:c5:c5:f9: 61:e8:2c:01:91:be:c2:50:a6:a7:94:ea:89:1f:ec:17:4e:cb: 97:99:be:02:b3:7e:5f:57:a7:83:18:ff:99:0e:39:fb:75:01: 38:89:c8:9b:ce:44:8e:bf:22:47:74:57:46:c2:bf:2b:6b:ad: 54:fe:48:79:96:87:a1:55:2c:38:fe:c2:08:17:85:90:56:e6: 1f:0f:e2:8b:48:b9:0e:99:aa:30:7d:52:08:96:7d:57:c6:3c: 47:51:08:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2gPI5+qAZJUk9Iq/7UGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWZhY2NhMTRkZTA4MTc0ZWY1Yzk2YzkxZjFlNzgyNWY0 MmQwN2IwHhcNMjUxMjA2MDMwMTI0WhcNMjUxMjA3MDMwMTI0WjAzMTEwLwYDVQQD EyhjNTM4MTkyM2Y2MzBkZTc4YTA1YjFjMjYyZmI0YjcwNTVhNmE4YmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD/XxWEpAtooAN0m/cNPouwh6XB8 Vbu42AB1NLStlAnQ3xkvYM6cS5E6S7XM/ggDQVuhQOvJS6t14tlxn/oecQp2XFQM Z/hYuf6i223yb8QKsQC317YKLQgTnphLsaUKkBUOWC+1hIfipIfT9oHnNOYPiCb7 KIwaZNcgCsEnWL4p0FIhL35oHcly7Y6HzyxtF+mYXJl+Wyv4oesCMmYG60oTNfrm f5uRBqP5JH+osNNnlkAnW2ZqtuzFWWKOZeb8Q4sb0buafk9SSYgf1RGbDe3DZwSz jD801UIsig2izOkNyXDvqNET1mdc6DUFWJJrrf+n5ipFV00LopWYEjDD7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMU4GSP2MN54oFscJi+0twVaaov3MB8GA1UdIwQY MBaAFNxfrMoU3ggXTvXJbJHx54JfQtB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Ytc3loVGVDQmRPOWNsc2tmSG5nbDlDMEhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wODkzZjEtZmZiNC00NmIzLWJmMjct YTcwMTY5ODBjODZmLzEvM0Ytc3loVGVDQmRPOWNsc2tmSG5nbDlDMEhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wODkzZjEtZmZiNC00NmIzLWJmMjctYTcwMTY5ODBjODZm LzEvM0Ytc3loVGVDQmRPOWNsc2tmSG5nbDlDMEhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozqI0vGI A+tRrB4Q4jNEk/fT+C03bdd4vLzFv/2iLdkXr4odYKCAR/WYyIGPXumZNSAq7t9I EV9AICuyATH7ME/6rJU9H3Bzqm2IBaMPOeeapsv2HSNOE2VBSvRx504XsF6AaEf+ MHC7WGiXs8kHYtZ2aSdHcPn2lbB0c6nU1U+1DKiK+h6YgGtqmAyrX1BDIBLnoNzn JwVfWlckrJMBxcX5YegsAZG+wlCmp5TqiR/sF07Ll5m+ArN+X1engxj/mQ45+3UB OInIm85Ejr8iR3RXRsK/K2utVP5IeZaHoVUsOP7CCBeFkFbmHw/ii0i5DpmqMH1S CJZ9V8Y8R1EI3A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:25 2025 by rpki-client