This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json) Hash identifier: XuWmfP0CIE1QglbW1hurBJ967W/e9slcQPXl8QyqvvA= Subject key identifier: 09:26:7A:DB:A4:4A:C6:80:2C:02:E9:0F:C5:C6:14:2D:7D:D3:76:11 Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea Certificate serial: 019AF088877C1C613020BDFAC813DF66965A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft Manifest number: 11FC Signing time: Fri 05 Dec 2025 22:01:10 +0000 Manifest this update: Fri 05 Dec 2025 22:01:10 +0000 Manifest next update: Sat 06 Dec 2025 22:01:10 +0000 Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: p1wyEurbRsKD/DENA4HEEWxM3YfwznddMv4UBagl9h4=) 2: wfCvw7M0UWwwmqgY4ndwt7Ezdvc.roa (hash: nadXDZSO5g66NQALk/0GLGlBJpZj5fLYUofWKpN1pZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:87:7c:1c:61:30:20:bd:fa:c8:13:df:66:96:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea Validity Not Before: Dec 5 22:01:10 2025 GMT Not After : Dec 6 22:01:10 2025 GMT Subject: CN=09267adba44ac6802c02e90fc5c6142d7dd37611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:18:11:fe:32:72:9d:ea:28:46:d9:06:43: c4:75:81:85:df:6b:7e:7d:0c:35:60:64:de:e9:72: 76:ef:cb:ea:49:62:1c:02:f8:2a:81:e2:3d:8d:ab: 65:24:96:75:73:4d:0f:79:78:7a:c8:7e:42:6b:7f: 7f:88:8d:67:0b:8a:7b:2c:b3:d7:ad:fd:22:9f:83: 78:36:c3:8e:50:d4:21:92:c4:3a:78:5d:fc:00:02: 99:e1:7c:cd:55:9c:62:67:e2:e3:88:ab:2b:24:f3: a3:7d:15:a5:ef:a4:0f:f6:ff:d6:3e:13:29:36:04: 88:9d:ba:25:68:fb:9c:59:ae:62:b9:b8:7e:ce:2f: ed:12:58:7a:f1:6d:a8:63:95:e4:77:33:e3:e1:68: 9d:b0:86:27:7b:a5:5a:9e:75:b1:f1:6a:ab:4e:c1: 0e:25:f3:b4:57:82:8a:f9:63:fe:00:b6:c5:76:69: 43:14:3d:52:36:26:fc:fc:db:72:7c:1d:82:b0:c4: 0b:17:35:c2:05:b1:03:0e:dc:c1:db:14:c6:ab:28: f1:74:d5:8d:87:60:7f:91:b2:0f:80:85:8d:62:89: aa:53:34:9a:93:a1:e6:da:58:e8:5b:02:c7:fb:59: 50:f6:5c:6b:8c:95:2f:43:71:ec:f3:fd:5f:4b:b1: 5e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:26:7A:DB:A4:4A:C6:80:2C:02:E9:0F:C5:C6:14:2D:7D:D3:76:11 X509v3 Authority Key Identifier: keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:19:d6:3a:8e:13:60:25:3c:49:ff:0c:1a:a4:9a:7b:8a:43: 66:02:b5:87:84:4c:40:19:5a:27:88:83:88:b4:1b:1a:3b:4b: 28:77:5e:53:d2:65:46:ac:d4:54:b6:ec:04:1e:38:98:87:08: fe:72:1c:3e:8d:9f:f6:e5:db:86:3f:1d:69:d0:97:75:b9:60: 94:55:0e:10:5e:d9:97:25:6a:b9:92:1a:3b:32:ba:7f:b4:8f: 54:79:f7:80:46:9c:fd:1f:69:0c:f6:8b:0a:0b:e2:6c:bb:b5: 52:bc:f2:0f:7f:24:a6:74:45:f7:52:59:93:35:81:db:32:c0: 20:d1:be:f1:a4:c8:54:70:33:59:22:26:77:a1:72:60:8a:91: 6c:c5:6c:fb:ee:b9:65:e9:c6:71:a3:2d:ed:65:25:b3:02:be: c8:a7:92:b7:14:75:87:e0:07:6f:a8:f0:cc:9e:3d:c6:17:49: f6:c5:53:0d:9b:17:5b:e5:32:28:9d:f5:44:ce:61:28:4d:f2: 9a:a1:ba:01:63:42:ce:2f:a5:a0:79:43:ab:ac:c4:56:b5:0b: 48:02:50:1d:46:16:f8:78:d5:da:b7:a9:8f:d4:75:73:6b:59: 31:f7:70:ae:bd:c7:91:8b:53:ea:2f:33:f1:59:f5:05:a8:fd: f9:1f:82:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiId8HGEwIL36yBPfZpZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYTA4MjQ4OWE0MTQwYzBhNzhlMDNkNTBiNmJmZDU0MDJi MDQ0ZWEwHhcNMjUxMjA1MjIwMTEwWhcNMjUxMjA2MjIwMTEwWjAzMTEwLwYDVQQD EygwOTI2N2FkYmE0NGFjNjgwMmMwMmU5MGZjNWM2MTQyZDdkZDM3NjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdsYEf4ycp3qKEbZBkPEdYGF32t+ fQw1YGTe6XJ278vqSWIcAvgqgeI9jatlJJZ1c00PeXh6yH5Ca39/iI1nC4p7LLPX rf0in4N4NsOOUNQhksQ6eF38AAKZ4XzNVZxiZ+LjiKsrJPOjfRWl76QP9v/WPhMp NgSInbolaPucWa5iubh+zi/tElh68W2oY5XkdzPj4WidsIYne6VannWx8WqrTsEO JfO0V4KK+WP+ALbFdmlDFD1SNib8/NtyfB2CsMQLFzXCBbEDDtzB2xTGqyjxdNWN h2B/kbIPgIWNYomqUzSak6Hm2ljoWwLH+1lQ9lxrjJUvQ3Hs8/1fS7FeDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkmetukSsaALALpD8XGFC1903YRMB8GA1UdIwQY MBaAFNyggkiaQUDAp44D1Qtr/VQCsETqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kYjliYzgtNGIwNi00YmFmLThiYTgt ZGZjMDU2NTQ1YmU0LzEvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kYjliYzgtNGIwNi00YmFmLThiYTgtZGZjMDU2NTQ1YmU0 LzEvM0tDQ1NKcEJRTUNuamdQVkMydjlWQUt3Uk9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqxnWOo4T YCU8Sf8MGqSae4pDZgK1h4RMQBlaJ4iDiLQbGjtLKHdeU9JlRqzUVLbsBB44mIcI /nIcPo2f9uXbhj8dadCXdblglFUOEF7ZlyVquZIaOzK6f7SPVHn3gEac/R9pDPaL CgvibLu1UrzyD38kpnRF91JZkzWB2zLAING+8aTIVHAzWSImd6FyYIqRbMVs++65 ZenGcaMt7WUlswK+yKeStxR1h+AHb6jwzJ49xhdJ9sVTDZsXW+UyKJ31RM5hKE3y mqG6AWNCzi+loHlDq6zEVrULSAJQHUYW+HjV2repj9R1c2tZMfdwrr3HkYtT6i8z 8Vn1Baj9+R+CNw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:00 2025 by rpki-client