This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft File: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft (raw, json) Hash identifier: QBZvnYldPAeGe/YmNqIT/oXIX0YVILuI97RZGZIMnHY= Subject key identifier: 79:03:5E:BF:91:D1:5B:85:40:78:18:D1:F8:D1:05:62:2E:A5:95:BC Authority key identifier: DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66 Certificate issuer: /CN=dd19b5047acc57dfdd2f87045764956f4b603066 Certificate serial: 019AF509D02ABB11E328ADF05207D1D9AFF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft Manifest number: 0E7E Signing time: Sat 06 Dec 2025 19:00:52 +0000 Manifest this update: Sat 06 Dec 2025 19:00:52 +0000 Manifest next update: Sun 07 Dec 2025 19:00:52 +0000 Files and hashes: 1: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl (hash: FFCnA+WB1DUmvSfO51I/ldZ9PlrXtmQVTcxkGcqq8Mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:d0:2a:bb:11:e3:28:ad:f0:52:07:d1:d9:af:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd19b5047acc57dfdd2f87045764956f4b603066 Validity Not Before: Dec 6 19:00:52 2025 GMT Not After : Dec 7 19:00:52 2025 GMT Subject: CN=79035ebf91d15b85407818d1f8d105622ea595bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:02:5d:e9:d1:aa:3f:da:4f:9a:02:97:b6: 54:b0:50:19:b1:1d:a8:3d:aa:d2:c9:b0:19:89:26: c4:90:07:6d:fe:92:6f:20:52:56:45:84:45:e1:08: a2:16:2b:c5:91:0d:32:e7:3e:38:55:f9:99:cb:78: 62:43:06:31:22:7b:cd:31:45:84:f1:a3:57:1e:48: d8:e4:5a:10:4f:c0:9c:81:a3:a6:21:26:2b:28:49: f6:f2:2e:8e:95:9e:bf:dc:98:54:c4:cd:2b:87:ab: 93:5e:90:2c:66:18:10:4f:20:85:66:6c:3b:65:a2: 25:b8:22:11:1b:da:67:59:77:4c:34:b7:26:a6:d8: 5b:77:1c:47:de:59:8f:20:bb:5a:e0:49:c3:b7:42: 46:8a:70:4b:6d:2d:4e:96:17:ea:d7:e4:92:c1:7a: f0:cc:61:01:52:53:7b:78:ae:c8:2d:48:0d:2a:05: 24:3f:68:89:f9:4a:ee:77:a6:1f:86:25:8b:a5:f7: 57:37:8d:10:0a:31:d9:cd:5b:31:8f:4c:20:c1:7c: 45:31:c3:22:6a:5c:ba:e1:cd:28:cb:97:49:64:4e: 56:a7:85:d3:f1:8f:e4:60:a4:8b:12:b7:a4:ff:9f: 32:7a:bc:c0:47:1f:ac:22:f1:c8:cd:94:42:c1:e5: 3b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:03:5E:BF:91:D1:5B:85:40:78:18:D1:F8:D1:05:62:2E:A5:95:BC X509v3 Authority Key Identifier: keyid:DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:bd:0a:c3:ed:c7:42:02:a8:3b:b8:ad:96:de:df:c3:08:d4: b6:44:a8:8f:68:ba:8a:9f:19:75:37:07:66:4e:ae:b3:4c:b2: 19:b4:32:47:51:31:5a:41:0b:1c:2b:8c:60:3f:c1:a3:5d:7e: b1:48:42:16:39:f4:c6:d9:82:23:cd:be:34:f9:7e:63:5c:da: b6:e3:07:fa:43:b7:57:40:ea:b3:83:45:b2:67:24:75:85:34: cc:0f:db:64:52:58:24:1c:f4:98:e0:e2:7b:1e:b4:b2:39:8f: 10:ae:19:71:0f:6b:2b:14:a6:a9:e1:fd:d7:d0:2a:55:92:2b: 65:8b:dc:57:f6:a1:16:4f:bd:a0:e6:a3:4e:eb:04:16:d1:4d: 5d:6e:93:c9:96:59:8a:76:f7:93:2a:ff:b0:7f:9d:38:01:2b: d1:ef:de:4f:78:6e:34:54:20:82:c3:0a:5f:e5:32:49:8c:7b: 6e:8e:31:5d:39:6b:4b:70:03:66:1b:5d:d1:a6:0b:f6:f1:3e: d8:cd:94:4d:97:ce:31:10:5c:05:5b:61:ee:5f:71:27:6d:4e: b0:5c:cb:52:d6:95:8c:34:a0:08:81:81:ea:b4:74:98:b3:f7: 83:4c:c9:2a:bd:2d:a9:c3:eb:ea:96:31:f6:5e:6d:91:24:55: 15:fb:be:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CdAquxHjKK3wUgfR2a/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMTliNTA0N2FjYzU3ZGZkZDJmODcwNDU3NjQ5NTZmNGI2 MDMwNjYwHhcNMjUxMjA2MTkwMDUyWhcNMjUxMjA3MTkwMDUyWjAzMTEwLwYDVQQD Eyg3OTAzNWViZjkxZDE1Yjg1NDA3ODE4ZDFmOGQxMDU2MjJlYTU5NWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt4CXenRqj/aT5oCl7ZUsFAZsR2o ParSybAZiSbEkAdt/pJvIFJWRYRF4QiiFivFkQ0y5z44VfmZy3hiQwYxInvNMUWE 8aNXHkjY5FoQT8CcgaOmISYrKEn28i6OlZ6/3JhUxM0rh6uTXpAsZhgQTyCFZmw7 ZaIluCIRG9pnWXdMNLcmpthbdxxH3lmPILta4EnDt0JGinBLbS1Olhfq1+SSwXrw zGEBUlN7eK7ILUgNKgUkP2iJ+Urud6YfhiWLpfdXN40QCjHZzVsxj0wgwXxFMcMi aly64c0oy5dJZE5Wp4XT8Y/kYKSLErek/58yerzARx+sIvHIzZRCweU7KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkDXr+R0VuFQHgY0fjRBWIupZW8MB8GA1UdIwQY MBaAFN0ZtQR6zFff3S+HBFdklW9LYDBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1JtMUJIck1WOV9kTDRjRVYyU1ZiMHRnTUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lZjQwYjgtODMxMy00NjE4LTlkMzUt ZWRkZWY4N2UyNDFiLzEvM1JtMUJIck1WOV9kTDRjRVYyU1ZiMHRnTUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9lZjQwYjgtODMxMy00NjE4LTlkMzUtZWRkZWY4N2UyNDFi LzEvM1JtMUJIck1WOV9kTDRjRVYyU1ZiMHRnTUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvr0Kw+3H QgKoO7itlt7fwwjUtkSoj2i6ip8ZdTcHZk6us0yyGbQyR1ExWkELHCuMYD/Bo11+ sUhCFjn0xtmCI82+NPl+Y1zatuMH+kO3V0Dqs4NFsmckdYU0zA/bZFJYJBz0mODi ex60sjmPEK4ZcQ9rKxSmqeH919AqVZIrZYvcV/ahFk+9oOajTusEFtFNXW6TyZZZ inb3kyr/sH+dOAEr0e/eT3huNFQggsMKX+UySYx7bo4xXTlrS3ADZhtd0aYL9vE+ 2M2UTZfOMRBcBVth7l9xJ21OsFzLUtaVjDSgCIGB6rR0mLP3g0zJKr0tqcPr6pYx 9l5tkSRVFfu+Ew== -----END CERTIFICATE-----Generated at Sun Dec 7 04:31:20 2025 by rpki-client