This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft File: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft (raw, json) Hash identifier: pr2tdyKbmFA8pZEIY6vvxoxN+q/vaQSokRC4i5aZDYE= Subject key identifier: F2:A2:D9:62:DA:A2:69:BB:C9:15:F9:12:E8:5B:0C:34:E7:5D:99:D9 Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49 Certificate issuer: /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49 Certificate serial: 019AF2AD3928C589A5DF0A59CC002F37611F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 08:00:29 +0000 Manifest this update: Sat 06 Dec 2025 08:00:29 +0000 Manifest next update: Sun 07 Dec 2025 08:00:29 +0000 Files and hashes: 1: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl (hash: MG1VdmKxt3t3Pca10HAPc/gZowk5+p8Rj2zuvxBYj6k=) 2: BgyYhjdlX54FNLBOgRi8uw75ivU.roa (hash: zzLTHJ8bOyhzXoEVwavpxvrPBboJmkVXfTzNirwZrsg=) 3: Hpy8N_-5qbg4r5UvdSXzVzdiWx4.roa (hash: 2QUmH1Q4U8nkWLgbGItfFRsuYPfdbrlhi1xdBt64+Zw=) 4: ImxZW674_5fXdmlZfvGnuAIzuOY.roa (hash: 9/kVoJM9dkwpP3u46CBs9jfgtCbtD6Yrvc+TFbbmgkw=) 5: h81MQCGUH4YWhsU7_noNE9t-6Ag.roa (hash: B55fQoBAEqhRk0fmuOYVFDE0A21yTHmBQBoOyLnBQrM=) 6: zOCoutq8Gy1Lt87HTs8qxIiEU1c.roa (hash: ArwgLJQHWcGLaYYEnlnuKPp35zrbwjR5bDSmhIZ/pcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:39:28:c5:89:a5:df:0a:59:cc:00:2f:37:61:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49 Validity Not Before: Dec 6 08:00:29 2025 GMT Not After : Dec 7 08:00:29 2025 GMT Subject: CN=f2a2d962daa269bbc915f912e85b0c34e75d99d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e6:71:74:31:84:74:4b:86:23:a2:92:57:9a: b0:ba:5f:44:70:cd:91:b3:be:dd:41:bc:33:be:1f: bb:1e:d3:73:46:65:c2:ac:4d:f0:3d:0b:40:21:5f: 58:83:d7:3f:71:2b:6f:81:91:b7:64:64:ed:f8:a4: 69:82:9d:15:1b:1a:53:60:e5:0d:f1:e3:ca:98:2c: a2:d1:e4:6e:c3:8b:eb:85:75:eb:a6:91:e2:a2:59: 7b:34:29:f9:61:08:ef:fd:9b:9c:a6:d5:13:89:c4: ce:56:59:c3:e8:2a:54:4f:e2:ef:58:7a:80:95:9c: 73:a1:54:db:24:ef:2e:cf:29:fa:4e:9a:be:92:1d: 3f:74:e9:24:62:64:58:c1:a0:b8:a0:88:95:7f:cc: e5:1d:f4:fd:b8:38:e7:3c:91:d8:88:4f:3d:e2:67: 05:70:cf:d3:c6:b3:51:01:58:84:1c:1b:b9:ed:6b: 98:e5:4a:83:87:d2:99:ee:05:3b:f9:53:af:92:a6: f7:d4:5d:82:a8:04:9e:43:02:ff:09:39:05:1d:cc: 8b:71:e1:79:92:14:7c:57:dc:5b:3f:82:7e:d2:60: af:83:2e:41:a9:cf:f0:f3:11:e4:cb:9a:32:3f:81: 57:58:98:bd:3c:e3:03:c5:fa:8e:2f:3c:f7:49:e3: 0f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:D9:62:DA:A2:69:BB:C9:15:F9:12:E8:5B:0C:34:E7:5D:99:D9 X509v3 Authority Key Identifier: keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:84:64:5a:c5:30:b0:a4:c6:3d:d9:60:38:42:af:d1:58:02: f6:5d:96:49:75:37:da:20:6a:45:b5:f1:ca:98:ff:31:d4:f4: 1e:52:c5:b1:ab:9d:2a:20:0e:b9:47:46:d8:f2:63:35:7c:47: 33:1c:f4:ed:e2:ac:73:4b:d9:a0:ed:db:9e:7d:a7:eb:e5:b5: 52:2b:1f:36:23:62:b2:b3:9f:17:c9:6b:e1:61:3e:db:1f:58: 76:c2:75:06:88:cb:46:63:e7:35:78:74:78:c3:21:2b:82:37: bd:6a:42:29:ae:68:89:b1:6a:13:d3:cf:fa:35:ed:f8:f4:4a: 7a:50:7c:cc:60:7c:0d:ef:88:e5:bb:be:21:3b:22:df:71:9b: 96:6e:28:a8:b6:c7:11:58:65:6b:94:2d:16:45:3d:d0:4d:01: 64:2c:eb:66:c0:6a:38:ee:97:a0:c8:6a:49:f8:97:10:22:8d: f5:2d:92:f7:f5:1d:d1:81:92:66:c7:0f:69:f4:92:de:cc:d3: c7:ab:53:bd:56:43:3b:df:b0:79:95:e4:a6:57:21:6d:59:20: 6c:38:52:e0:1a:bc:53:96:0a:03:f0:71:b1:e8:8e:68:f1:04: 45:88:c8:09:ca:89:b2:17:7d:97:e0:80:3e:8c:25:35:41:03: 00:03:85:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrTkoxYml3wpZzAAvN2EfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlN2M4MmIyMjc2Y2JkZjEzMGNjYWQwNDZiNjVmZWFiMmMy N2VkNDkwHhcNMjUxMjA2MDgwMDI5WhcNMjUxMjA3MDgwMDI5WjAzMTEwLwYDVQQD EyhmMmEyZDk2MmRhYTI2OWJiYzkxNWY5MTJlODViMGMzNGU3NWQ5OWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eZxdDGEdEuGI6KSV5qwul9EcM2R s77dQbwzvh+7HtNzRmXCrE3wPQtAIV9Yg9c/cStvgZG3ZGTt+KRpgp0VGxpTYOUN 8ePKmCyi0eRuw4vrhXXrppHioll7NCn5YQjv/ZucptUTicTOVlnD6CpUT+LvWHqA lZxzoVTbJO8uzyn6Tpq+kh0/dOkkYmRYwaC4oIiVf8zlHfT9uDjnPJHYiE894mcF cM/TxrNRAViEHBu57WuY5UqDh9KZ7gU7+VOvkqb31F2CqASeQwL/CTkFHcyLceF5 khR8V9xbP4J+0mCvgy5Bqc/w8xHky5oyP4FXWJi9POMDxfqOLzz3SeMPdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKi2WLaomm7yRX5EuhbDDTnXZnZMB8GA1UdIwQY MBaAFN58grInbL3xMMytBGtl/qssJ+1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM255Q3NpZHN2ZkV3ekswRWEyWC1xeXduN1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi82ZmE1ZGYtZmI5Zi00YWU1LWJhODkt N2ZhZjdjMWRlN2IwLzEvM255Q3NpZHN2ZkV3ekswRWEyWC1xeXduN1VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi82ZmE1ZGYtZmI5Zi00YWU1LWJhODktN2ZhZjdjMWRlN2Iw LzEvM255Q3NpZHN2ZkV3ekswRWEyWC1xeXduN1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4RkWsUw sKTGPdlgOEKv0VgC9l2WSXU32iBqRbXxypj/MdT0HlLFsaudKiAOuUdG2PJjNXxH Mxz07eKsc0vZoO3bnn2n6+W1UisfNiNisrOfF8lr4WE+2x9YdsJ1BojLRmPnNXh0 eMMhK4I3vWpCKa5oibFqE9PP+jXt+PRKelB8zGB8De+I5bu+ITsi33Gblm4oqLbH EVhla5QtFkU90E0BZCzrZsBqOO6XoMhqSfiXECKN9S2S9/Ud0YGSZscPafSS3szT x6tTvVZDO9+weZXkplchbVkgbDhS4Bq8U5YKA/BxseiOaPEERYjICcqJshd9l+CA PowlNUEDAAOFJw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:35 2025 by rpki-client