This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json) Hash identifier: iCzW+A7fckCcE9DlHeTKdemCGlYohb+U0sL1ZKiXWfc= Subject key identifier: 1E:51:87:C2:70:73:26:28:A2:4B:AB:A8:5F:4A:13:F2:F0:F6:A3:08 Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF Certificate issuer: /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf Certificate serial: 019AF12EE894014733D97022B86CBBAB9C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft Manifest number: 0453 Signing time: Sat 06 Dec 2025 01:02:54 +0000 Manifest this update: Sat 06 Dec 2025 01:02:54 +0000 Manifest next update: Sun 07 Dec 2025 01:02:54 +0000 Files and hashes: 1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: LLMrB3MoF9zFP7mZoAXKqzoceqkNsOZcnSgsRXMkHEo=) 2: SHvoKKIBU3wgrybj6zWAE812zjc.roa (hash: yK7W9vbdAmqtnEpvGmawrHGyq/oUYACQgVTYc+60SM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e8:94:01:47:33:d9:70:22:b8:6c:bb:ab:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf Validity Not Before: Dec 6 01:02:54 2025 GMT Not After : Dec 7 01:02:54 2025 GMT Subject: CN=1e5187c270732628a24baba85f4a13f2f0f6a308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:60:9c:6c:17:43:f1:8f:2f:c6:5f:b6:2c:b3: c3:de:8c:a4:8a:88:ee:a5:a6:88:15:ba:00:64:99: 8f:d1:61:eb:61:d0:18:be:6f:0f:f6:5e:89:33:09: 63:12:24:89:c5:e4:31:e7:9e:70:2a:4e:6e:94:ba: 62:a9:81:e8:1f:e2:ec:b8:99:29:c9:fa:de:ce:2e: 57:47:15:ec:ab:45:08:74:2f:f6:12:fe:8a:a4:2a: a6:0e:62:9e:e1:1d:8c:07:83:4b:21:56:35:e2:2b: ce:d9:16:07:66:f8:d7:90:cb:30:0c:0d:ef:21:87: 18:8f:78:aa:5a:80:09:f2:fd:22:76:12:ef:18:c3: c8:ac:7c:e4:02:b3:1f:1f:04:ba:f0:cb:21:65:27: 60:5d:e7:53:c4:f0:2d:96:ed:12:6a:c1:c4:c8:96: 4b:16:23:7f:7b:b9:da:fa:2d:fc:1f:c7:0b:38:1c: ec:40:80:a9:cf:fe:ec:14:0f:eb:02:38:71:57:dc: 8e:0e:63:4f:da:fe:ac:0a:12:7b:8a:67:55:eb:04: 8c:76:b1:f9:71:80:6e:ff:b7:dc:02:f0:f7:0c:50: 6d:74:e8:31:3e:02:41:db:cd:eb:e3:48:50:77:82: 2e:a4:0a:85:49:b4:d3:b4:be:f1:19:ee:aa:c7:02: 45:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:51:87:C2:70:73:26:28:A2:4B:AB:A8:5F:4A:13:F2:F0:F6:A3:08 X509v3 Authority Key Identifier: keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:5c:5a:b6:56:f0:9b:e2:aa:50:60:fd:15:75:b6:9c:3e:33: 24:8e:3a:29:cc:70:7f:21:17:1c:fd:b0:02:2e:be:09:9e:7e: 4b:79:bd:38:42:27:85:d2:f6:3f:76:fe:12:91:2e:ff:6d:6c: 65:64:b6:56:95:3c:b6:85:f2:c8:52:76:54:bc:01:4f:56:e5: f4:b1:62:8b:64:5b:a8:5b:5d:79:e7:0a:f4:f8:0b:be:a2:21: c2:2f:f1:d6:e5:dc:da:c1:89:45:93:55:de:e6:9c:b5:82:c6: ec:40:1c:72:d8:bf:6e:c9:d3:66:60:bd:92:e7:43:0a:c0:a3: fd:9d:09:51:df:f9:f3:0e:0d:71:76:1f:30:7c:94:19:a5:3e: 9d:53:16:74:cd:80:0c:ee:5a:bd:db:e7:a6:b6:90:4b:99:de: 67:9d:cf:d7:fd:25:db:b0:75:4c:6b:56:5d:b8:07:92:a6:99: ed:94:75:0f:e9:0a:c9:d8:f5:9d:1d:7e:26:e1:98:58:3e:88: f1:b5:d0:85:32:69:a5:1c:8b:27:67:13:d5:fc:19:09:62:02: 87:3d:a7:31:59:91:98:22:b0:d6:63:fa:79:5e:4f:04:ff:47: d4:59:0f:b5:1a:22:66:72:a4:d7:12:7c:e0:ec:8e:cd:ad:bc: 42:78:b7:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuiUAUcz2XAiuGy7q5xAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZmNmZmQxMDBkYzAwN2YxYTk2YTQ0MzBlYTg3MjM4OWM1 N2Q2Y2YwHhcNMjUxMjA2MDEwMjU0WhcNMjUxMjA3MDEwMjU0WjAzMTEwLwYDVQQD EygxZTUxODdjMjcwNzMyNjI4YTI0YmFiYTg1ZjRhMTNmMmYwZjZhMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmCcbBdD8Y8vxl+2LLPD3oykioju paaIFboAZJmP0WHrYdAYvm8P9l6JMwljEiSJxeQx555wKk5ulLpiqYHoH+LsuJkp yfrezi5XRxXsq0UIdC/2Ev6KpCqmDmKe4R2MB4NLIVY14ivO2RYHZvjXkMswDA3v IYcYj3iqWoAJ8v0idhLvGMPIrHzkArMfHwS68MshZSdgXedTxPAtlu0SasHEyJZL FiN/e7na+i38H8cLOBzsQICpz/7sFA/rAjhxV9yODmNP2v6sChJ7imdV6wSMdrH5 cYBu/7fcAvD3DFBtdOgxPgJB283r40hQd4IupAqFSbTTtL7xGe6qxwJFJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5Rh8JwcyYookurqF9KE/Lw9qMIMB8GA1UdIwQY MBaAFN38/9EA3AB/GpakQw6ocjicV9bPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2Z6XzBRRGNBSDhhbHFSRERxaHlPSnhYMXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8yZmMzNzUtZGExNC00ZjdmLThmYWUt MTVhNmU3ZGY0NWM5LzEvM2Z6XzBRRGNBSDhhbHFSRERxaHlPSnhYMXM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8yZmMzNzUtZGExNC00ZjdmLThmYWUtMTVhNmU3ZGY0NWM5 LzEvM2Z6XzBRRGNBSDhhbHFSRERxaHlPSnhYMXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFxatlbw m+KqUGD9FXW2nD4zJI46KcxwfyEXHP2wAi6+CZ5+S3m9OEInhdL2P3b+EpEu/21s ZWS2VpU8toXyyFJ2VLwBT1bl9LFii2RbqFtdeecK9PgLvqIhwi/x1uXc2sGJRZNV 3uactYLG7EAccti/bsnTZmC9kudDCsCj/Z0JUd/58w4NcXYfMHyUGaU+nVMWdM2A DO5avdvnpraQS5neZ53P1/0l27B1TGtWXbgHkqaZ7ZR1D+kKydj1nR1+JuGYWD6I 8bXQhTJppRyLJ2cT1fwZCWIChz2nMVmRmCKw1mP6eV5PBP9H1FkPtRoiZnKk1xJ8 4OyOza28Qni3Uw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:53:26 2025 by rpki-client