This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json) Hash identifier: IrWVDfCpyoynJOFcKl/1W91dMcnIrM165/yyHcNvNbs= Subject key identifier: E2:79:66:BE:4E:4B:2A:3A:E4:C2:F7:21:16:DF:B0:07:6D:73:4D:A7 Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88 Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888 Certificate serial: 019AF31D652C2D8710B48A8FAD3824D5E6A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft Manifest number: 0ABE Signing time: Sat 06 Dec 2025 10:03:01 +0000 Manifest this update: Sat 06 Dec 2025 10:03:01 +0000 Manifest next update: Sun 07 Dec 2025 10:03:01 +0000 Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: 9CiujJ3KjtZ/67lznCUSbsjVqV2Fex80qFNz/wYXBaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:65:2c:2d:87:10:b4:8a:8f:ad:38:24:d5:e6:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888 Validity Not Before: Dec 6 10:03:01 2025 GMT Not After : Dec 7 10:03:01 2025 GMT Subject: CN=e27966be4e4b2a3ae4c2f72116dfb0076d734da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:81:75:17:10:34:e7:c2:3d:8f:16:8f:4f: 92:1e:ed:d8:23:f2:43:f8:1c:35:0b:5e:83:04:df: bd:c1:95:f9:5c:f4:e2:ca:12:1e:ce:57:02:06:e0: e5:b0:5f:1a:14:d3:35:26:32:a6:08:f7:ce:84:93: f7:12:0a:91:95:ff:79:64:0c:29:c1:2b:1e:65:f8: a7:5a:a0:2f:a4:f2:c1:f2:6c:9d:91:ca:d0:af:08: c2:38:20:58:79:73:0a:da:ea:29:f0:0a:2f:3f:b3: 10:60:ce:a5:2b:aa:f9:9b:be:ec:b8:99:b3:7d:77: d2:4e:86:2a:27:c0:12:8f:85:a7:a1:fd:c5:4d:fe: f6:ac:ca:66:9d:ae:a6:47:93:4b:6a:ea:5e:a1:c5: 48:d0:32:2f:2a:50:38:72:d7:3a:cb:0a:23:80:1a: 7a:22:1c:b1:d9:a7:9c:7c:1f:7f:cc:5f:25:29:36: 69:68:39:60:e5:27:7c:dd:99:1d:ca:47:e3:2d:1f: 47:69:8f:cd:e7:f3:6b:fe:16:80:16:d9:8f:7b:6e: 5b:fd:76:30:8e:d3:bf:72:b8:46:19:a0:db:5b:ea: 4d:8c:30:34:c8:79:c9:a3:f4:ed:d8:d2:17:4e:2d: f5:ab:5e:ba:6c:dc:75:41:36:64:8d:02:bc:10:d3: 57:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:79:66:BE:4E:4B:2A:3A:E4:C2:F7:21:16:DF:B0:07:6D:73:4D:A7 X509v3 Authority Key Identifier: keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:50:57:4e:d9:25:ce:59:30:56:de:0c:14:88:6c:1a:4a:60: c2:9a:8e:30:44:97:81:0d:4b:a0:fb:4d:0b:4f:01:83:23:bc: 24:80:e7:8b:9b:b3:8e:14:9f:ae:96:8c:ef:fb:6b:a2:3c:0e: 38:12:66:2d:9e:a5:bc:97:e3:f1:24:70:99:7d:13:78:7c:7b: e8:9f:b6:38:44:3c:dc:91:6b:f4:76:cd:4f:5d:5e:e8:4f:fe: 4c:ee:98:95:14:2c:70:19:9d:0b:5c:d3:96:99:90:c6:2e:80: 56:0c:0c:5f:10:9d:e1:b5:48:88:7d:c8:74:05:fd:de:c1:e0: 08:5c:ce:8a:2e:96:42:2f:22:bb:5a:54:bd:0c:f7:05:73:53: 97:70:09:54:31:46:48:8a:67:50:cc:34:c0:c1:37:6c:39:77: 48:20:5f:ef:a9:66:c0:fe:39:3a:f7:94:5e:1b:33:e8:58:f9: 84:54:17:3e:cf:f1:c3:f1:f8:3f:4c:37:a4:80:ae:10:c1:e3: 86:0f:de:d2:e6:11:9a:44:6d:cd:81:18:98:45:69:97:16:e2: bf:4d:a5:1e:b2:56:22:0a:97:c9:bd:6e:85:74:b1:18:7b:91: 9e:6c:d3:5b:d2:fa:98:0d:0b:c3:0c:63:e3:51:39:66:c5:de: f9:ea:38:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHWUsLYcQtIqPrTgk1eanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMTgwZTA1NDNkNDcxZGNmMGQ4Mzg2MGQ2YmU2Mzk1YzJi ODg4ODgwHhcNMjUxMjA2MTAwMzAxWhcNMjUxMjA3MTAwMzAxWjAzMTEwLwYDVQQD EyhlMjc5NjZiZTRlNGIyYTNhZTRjMmY3MjExNmRmYjAwNzZkNzM0ZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGeBdRcQNOfCPY8Wj0+SHu3YI/JD +Bw1C16DBN+9wZX5XPTiyhIezlcCBuDlsF8aFNM1JjKmCPfOhJP3EgqRlf95ZAwp wSseZfinWqAvpPLB8mydkcrQrwjCOCBYeXMK2uop8AovP7MQYM6lK6r5m77suJmz fXfSToYqJ8ASj4Wnof3FTf72rMpmna6mR5NLaupeocVI0DIvKlA4ctc6ywojgBp6 Ihyx2aecfB9/zF8lKTZpaDlg5Sd83ZkdykfjLR9HaY/N5/Nr/haAFtmPe25b/XYw jtO/crhGGaDbW+pNjDA0yHnJo/Tt2NIXTi31q166bNx1QTZkjQK8ENNX6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJ5Zr5OSyo65ML3IRbfsAdtc02nMB8GA1UdIwQY MBaAFN8YDgVD1HHc8Ng4YNa+Y5XCuIiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3hnT0JVUFVjZHp3MkRoZzFyNWpsY0s0aUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zMGY0MTAtODJiYi00MTFhLWIyYmMt YzRiMTQ0NmMwZDhiLzEvM3hnT0JVUFVjZHp3MkRoZzFyNWpsY0s0aUlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8zMGY0MTAtODJiYi00MTFhLWIyYmMtYzRiMTQ0NmMwZDhi LzEvM3hnT0JVUFVjZHp3MkRoZzFyNWpsY0s0aUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVBXTtkl zlkwVt4MFIhsGkpgwpqOMESXgQ1LoPtNC08BgyO8JIDni5uzjhSfrpaM7/trojwO OBJmLZ6lvJfj8SRwmX0TeHx76J+2OEQ83JFr9HbNT11e6E/+TO6YlRQscBmdC1zT lpmQxi6AVgwMXxCd4bVIiH3IdAX93sHgCFzOii6WQi8iu1pUvQz3BXNTl3AJVDFG SIpnUMw0wME3bDl3SCBf76lmwP45OveUXhsz6Fj5hFQXPs/xw/H4P0w3pICuEMHj hg/e0uYRmkRtzYEYmEVplxbiv02lHrJWIgqXyb1uhXSxGHuRnmzTW9L6mA0Lwwxj 41E5ZsXe+eo41w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:33:43 2025 by rpki-client