This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft File: 3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json) Hash identifier: tkIUJeg4phGY0VCodb7dEJQW5OvJ2vaSW7VY/t3RrRU= Subject key identifier: 58:52:87:D7:74:D8:C7:BD:FC:1C:AA:F0:6E:9D:10:F4:FB:74:34:09 Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE Certificate issuer: /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae Certificate serial: 019AF42E30C2F06C71F41A00CADF0E801E9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft Manifest number: 0BE3 Signing time: Sat 06 Dec 2025 15:00:59 +0000 Manifest this update: Sat 06 Dec 2025 15:00:59 +0000 Manifest next update: Sun 07 Dec 2025 15:00:59 +0000 Files and hashes: 1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: EidMjw4/V8h43p978kRbTRckSrtqJnRfoAMmiC/KySA=) 2: t2IAGMSzk4-7dntYHVtGoSAvw3E.roa (hash: MFygbsGgjd41JH2HTdeF0MRaBb6hffk9LejkFMw08aY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:30:c2:f0:6c:71:f4:1a:00:ca:df:0e:80:1e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae Validity Not Before: Dec 6 15:00:59 2025 GMT Not After : Dec 7 15:00:59 2025 GMT Subject: CN=585287d774d8c7bdfc1caaf06e9d10f4fb743409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:33:b8:cb:ae:19:93:5b:9e:ef:60:b2:90:15: 7f:de:0e:c4:72:10:16:3a:63:3a:c9:12:c7:20:13: 22:78:1b:10:04:d3:39:9a:17:a4:cf:92:66:09:e5: ca:a4:ad:93:d2:00:56:64:2a:cb:34:78:f2:d2:f3: 12:94:4c:c5:bc:35:11:5b:5a:48:69:37:6a:4d:e4: 9c:ff:74:ed:ea:d9:b2:5c:7a:74:9a:c9:41:4f:0b: 4d:8e:19:76:ea:58:dc:c7:1f:06:fe:8c:da:c6:5f: 22:50:ca:46:d8:65:c5:b0:25:60:98:75:e3:64:f8: c3:95:8c:bb:ca:ff:b8:b2:45:d2:60:4b:3c:6a:87: 88:3b:4b:04:a2:4b:29:d3:58:77:0d:69:c6:02:04: 53:52:a2:74:25:e9:8d:aa:c2:df:8f:ac:d8:4b:21: a1:5c:98:a7:d7:5a:6e:15:05:8d:f1:b7:8c:96:20: 3a:d1:1d:35:9b:49:5b:80:e5:0a:8f:b1:be:77:6e: 70:16:43:7e:bf:c5:1a:90:06:ef:c9:13:06:cd:0e: cc:b3:36:40:42:a1:77:df:54:10:5f:32:07:b3:47: 25:b7:37:2b:48:72:e9:6c:5d:d1:9f:99:ad:f2:fe: 0b:d4:26:d6:85:e1:2e:6e:f6:58:f2:0b:4f:92:28: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:52:87:D7:74:D8:C7:BD:FC:1C:AA:F0:6E:9D:10:F4:FB:74:34:09 X509v3 Authority Key Identifier: keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:99:d7:a6:03:df:b6:c3:59:ea:98:4c:24:71:3c:43:31:bd: 1e:aa:88:d2:77:f0:6f:91:33:0c:40:e2:ec:55:44:c6:01:9a: c5:89:6b:84:36:50:31:6c:9f:64:b7:7d:75:aa:fb:7b:78:57: c4:03:f5:21:a0:92:07:8e:83:0b:ff:6a:2b:c1:4e:b7:6b:0c: 99:f8:da:c9:34:f8:c8:f8:c1:b3:1a:72:9a:76:68:39:f8:f0: 2e:a3:69:3b:cf:2a:81:27:fa:5f:f3:75:1b:33:f9:52:12:a9: cc:7f:f0:af:18:36:16:ec:45:7e:c3:cf:a4:2d:d5:33:c7:13: b2:76:a9:67:3d:bb:3d:17:bb:56:8c:8c:20:36:b0:6a:90:36: 87:9b:6d:a0:07:60:c3:99:d4:31:ef:fc:b5:ef:c9:d9:93:d2: ba:6e:14:ea:f6:a7:5d:30:05:30:26:c1:8a:55:09:42:f8:eb: 10:6d:b0:50:4a:e8:df:36:a4:42:2b:0e:06:e4:ee:4f:05:30: c8:48:74:bd:ac:38:80:9b:83:a6:a6:da:0f:ba:db:47:fa:08: 3b:d7:9c:dd:37:59:f2:19:ff:bb:0a:dc:1c:2b:09:35:e1:c2: 96:b8:c4:6c:58:72:08:41:20:fa:2a:25:e6:e3:55:d3:16:23: d8:0d:2a:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LjDC8Gxx9BoAyt8OgB6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWQyY2ZiZGI5ZDU4ZDU3NDBmZjM3NWEzMTViMzgyNTQ0 YTk0YWUwHhcNMjUxMjA2MTUwMDU5WhcNMjUxMjA3MTUwMDU5WjAzMTEwLwYDVQQD Eyg1ODUyODdkNzc0ZDhjN2JkZmMxY2FhZjA2ZTlkMTBmNGZiNzQzNDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jO4y64Zk1ue72CykBV/3g7EchAW OmM6yRLHIBMieBsQBNM5mhekz5JmCeXKpK2T0gBWZCrLNHjy0vMSlEzFvDURW1pI aTdqTeSc/3Tt6tmyXHp0mslBTwtNjhl26ljcxx8G/ozaxl8iUMpG2GXFsCVgmHXj ZPjDlYy7yv+4skXSYEs8aoeIO0sEoksp01h3DWnGAgRTUqJ0JemNqsLfj6zYSyGh XJin11puFQWN8beMliA60R01m0lbgOUKj7G+d25wFkN+v8UakAbvyRMGzQ7MszZA QqF331QQXzIHs0cltzcrSHLpbF3Rn5mt8v4L1CbWheEubvZY8gtPkij4kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhSh9d02Me9/Byq8G6dEPT7dDQJMB8GA1UdIwQY MBaAFNxdLPvbnVjVdA/zdaMVs4JUSpSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMt MTg0MjM0OGY1YzZjLzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMtMTg0MjM0OGY1YzZj LzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZnXpgPf tsNZ6phMJHE8QzG9HqqI0nfwb5EzDEDi7FVExgGaxYlrhDZQMWyfZLd9dar7e3hX xAP1IaCSB46DC/9qK8FOt2sMmfjayTT4yPjBsxpymnZoOfjwLqNpO88qgSf6X/N1 GzP5UhKpzH/wrxg2FuxFfsPPpC3VM8cTsnapZz27PRe7VoyMIDawapA2h5ttoAdg w5nUMe/8te/J2ZPSum4U6vanXTAFMCbBilUJQvjrEG2wUEro3zakQisOBuTuTwUw yEh0vaw4gJuDpqbaD7rbR/oIO9ec3TdZ8hn/uwrcHCsJNeHClrjEbFhyCEEg+iol 5uNV0xYj2A0qnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:06 2025 by rpki-client