This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json) Hash identifier: EMiD20r333biYkMSScfG64hSEoXP2ZYWEIMLT9zKTLA= Subject key identifier: 26:A0:80:BA:B4:45:FC:6E:5C:99:A3:B2:72:C7:44:E6:42:67:B4:97 Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c Certificate serial: 019AF5AE4F909488E22330845337C2236DED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft Manifest number: 1275 Signing time: Sat 06 Dec 2025 22:00:32 +0000 Manifest this update: Sat 06 Dec 2025 22:00:32 +0000 Manifest next update: Sun 07 Dec 2025 22:00:32 +0000 Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: Ka8l9H9dLLDeMo2BufBGovIru4FwwB92huzy8aq0kSA=) 2: ruyaJPOfuuheWzXgHxMIwRIiRmI.roa (hash: dOziRNC4DuCftQxbewVCKgY2HoDJCSSxS8NFyfVWRc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:4f:90:94:88:e2:23:30:84:53:37:c2:23:6d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c Validity Not Before: Dec 6 22:00:32 2025 GMT Not After : Dec 7 22:00:32 2025 GMT Subject: CN=26a080bab445fc6e5c99a3b272c744e64267b497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:44:78:1b:3e:1f:d3:90:55:f7:d1:70:02:ee: ce:de:e0:78:18:9f:51:67:39:ea:bf:6e:47:b8:21: ca:12:6f:3e:a6:0e:b6:76:1d:fa:ca:e1:c7:42:77: 75:61:64:9e:9b:f5:23:1b:ed:92:67:1e:f0:4f:4a: 12:f7:4f:41:d1:67:c9:d6:38:0f:e4:be:b3:41:a6: bd:7f:cd:51:ab:19:ce:cc:82:25:ce:2a:af:b4:9d: 77:95:4c:2c:64:a9:d8:6c:27:ee:10:56:f0:07:4b: 72:36:06:04:3c:14:e4:24:43:90:18:cb:d1:2e:62: 63:87:8f:c1:4c:61:29:d7:c0:7c:22:50:18:9e:bd: 70:70:c4:57:77:e3:83:1f:7d:8c:e3:09:58:37:64: 0a:1b:61:65:49:a8:45:66:21:a1:5b:8f:e9:64:83: fc:e9:9b:c1:c2:85:cb:88:a0:c3:46:cd:0c:93:88: 53:e0:e6:cc:19:cb:9e:3b:bb:6f:21:53:99:d6:4e: 9c:59:e9:bc:e2:a5:53:54:7e:0c:36:72:1d:06:e3: 3f:09:1f:86:70:d2:73:b2:22:21:c4:59:58:e8:9d: 8e:4e:2e:d6:11:ca:42:7a:78:4f:ec:9d:d6:63:68: 47:06:c3:78:ab:34:e0:ec:97:2a:03:f5:4c:02:c4: 51:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A0:80:BA:B4:45:FC:6E:5C:99:A3:B2:72:C7:44:E6:42:67:B4:97 X509v3 Authority Key Identifier: keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:28:82:ba:ee:cf:a4:b8:63:8d:7e:92:e0:e7:e5:58:d4:4b: 04:3f:ca:fb:4b:a6:f8:38:39:4e:a9:93:69:99:9b:03:ad:2d: 16:68:56:5d:91:b1:46:f9:ae:6a:ba:3e:4c:48:7b:b4:d1:39: 49:dc:b2:c3:fe:42:b2:7e:ea:b9:c0:4a:a4:df:43:86:7f:0b: 43:6d:3b:8c:3d:0a:26:13:12:63:32:36:44:2d:99:9c:5f:c7: 38:6c:ec:9f:bc:03:6a:f8:98:59:3b:0c:18:92:6f:91:d2:56: 09:00:98:35:e4:60:9c:9a:48:49:11:af:cb:bc:32:4b:dd:8b: 5e:e6:fc:88:1b:b1:92:97:08:e3:58:a7:fa:b7:85:57:d1:8b: 7b:fe:f9:70:14:d4:df:f1:a8:65:74:06:4f:d0:f9:13:73:57: 3c:80:af:e0:12:2a:2e:ff:1a:07:28:db:56:47:b9:a1:dd:94: 88:d8:b0:87:82:72:6b:56:f5:75:1e:41:83:64:ea:22:bf:6c: 00:b5:cb:33:54:81:2d:51:73:dc:05:be:29:87:b3:4d:27:40: a4:4c:c8:ab:96:19:31:63:59:a4:5a:1f:7f:dd:2d:0b:31:24: 42:25:2c:b9:be:ba:db:21:60:e7:62:cd:2d:75:cc:50:e6:fb: 01:c8:e7:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rk+QlIjiIzCEUzfCI23tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGUxYjkwZDUxMmNjMzQwMmY3NjE0MTQwNjI5Nzk1ZTRk NGFjNGMwHhcNMjUxMjA2MjIwMDMyWhcNMjUxMjA3MjIwMDMyWjAzMTEwLwYDVQQD EygyNmEwODBiYWI0NDVmYzZlNWM5OWEzYjI3MmM3NDRlNjQyNjdiNDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0R4Gz4f05BV99FwAu7O3uB4GJ9R Zznqv25HuCHKEm8+pg62dh36yuHHQnd1YWSem/UjG+2SZx7wT0oS909B0WfJ1jgP 5L6zQaa9f81RqxnOzIIlziqvtJ13lUwsZKnYbCfuEFbwB0tyNgYEPBTkJEOQGMvR LmJjh4/BTGEp18B8IlAYnr1wcMRXd+ODH32M4wlYN2QKG2FlSahFZiGhW4/pZIP8 6ZvBwoXLiKDDRs0Mk4hT4ObMGcueO7tvIVOZ1k6cWem84qVTVH4MNnIdBuM/CR+G cNJzsiIhxFlY6J2OTi7WEcpCenhP7J3WY2hHBsN4qzTg7JcqA/VMAsRRmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaggLq0RfxuXJmjsnLHROZCZ7SXMB8GA1UdIwQY MBaAFNwOG5DVEsw0AvdhQUBil5Xk1KxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYt MTZmNTJjZWE0ZWIxLzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYtMTZmNTJjZWE0ZWIx LzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCiCuu7P pLhjjX6S4OflWNRLBD/K+0um+Dg5TqmTaZmbA60tFmhWXZGxRvmuaro+TEh7tNE5 Sdyyw/5Csn7qucBKpN9Dhn8LQ207jD0KJhMSYzI2RC2ZnF/HOGzsn7wDaviYWTsM GJJvkdJWCQCYNeRgnJpISRGvy7wyS92LXub8iBuxkpcI41in+reFV9GLe/75cBTU 3/GoZXQGT9D5E3NXPICv4BIqLv8aByjbVke5od2UiNiwh4Jya1b1dR5Bg2TqIr9s ALXLM1SBLVFz3AW+KYezTSdApEzIq5YZMWNZpFoff90tCzEkQiUsub662yFg52LN LXXMUOb7AcjnQw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:14:13 2025 by rpki-client