This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json) Hash identifier: Bgx9DU5cMeZXeaMbdfJsFPlpvs/ZIE+/yIpH/plynog= Subject key identifier: 3D:A4:34:B2:79:E8:D4:F7:C8:46:79:DE:4A:E4:95:BE:DB:DD:50:E9 Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a Certificate serial: 019AF1D1C6F01277FBA91CA058A1355FEA5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: RcDEmA4UO9KB/jx3/Qrw6V84pvVKKCqcX60J9N86tS4=) 2: QYQzorGK1cakLmK4R7aZ_z5BtRk.roa (hash: K/JfnEYnWlRvZUne2cydti381OQHnxSabuUVM9ge064=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c6:f0:12:77:fb:a9:1c:a0:58:a1:35:5f:ea:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=3da434b279e8d4f7c84679de4ae495bedbdd50e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d5:52:89:7f:8c:f5:a8:4c:3c:f0:a0:94:7d: 7d:72:9c:f5:aa:99:5f:30:bf:ff:f3:e4:87:76:6a: 5b:98:0a:d2:ff:8a:94:3d:9a:26:06:77:db:0a:7d: 74:18:40:36:7e:37:cf:0d:84:e1:f4:14:8c:ff:a0: 44:39:a0:c7:ac:25:5a:f0:f2:6a:c6:dd:a1:2d:e1: fc:7f:b6:5b:b4:1b:00:52:18:cd:53:9a:54:7e:80: 46:42:70:28:f9:b3:5c:27:3f:19:66:97:94:e7:79: 51:ea:c2:fa:a4:6b:14:85:36:4b:d5:c7:fd:66:b6: cc:55:24:36:0d:eb:32:e7:c2:f9:f9:7e:ee:f6:96: d3:2b:60:0c:e4:6f:9d:07:85:80:8c:90:4c:87:26: d6:ac:b4:ec:39:6f:62:1f:99:cc:21:30:ff:01:94: 5a:53:a2:5e:11:51:34:08:99:7e:1f:fc:e6:f7:f9: dd:03:9b:a9:4a:3c:80:51:0d:d5:59:25:c7:62:86: b3:7d:39:8a:fc:1e:1a:48:e2:71:d8:b3:3e:47:6d: df:fb:c8:0e:df:1b:69:02:fb:ed:96:e0:3c:d3:b3: 73:ae:d2:87:04:b1:64:a0:b2:a2:70:01:0c:32:14: 69:87:44:d0:6a:1a:50:ff:d1:cf:31:30:74:f4:62: f4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A4:34:B2:79:E8:D4:F7:C8:46:79:DE:4A:E4:95:BE:DB:DD:50:E9 X509v3 Authority Key Identifier: keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:7b:cc:72:5a:5f:70:b1:85:da:d6:36:c9:81:83:f1:c7:26: a7:bb:90:5c:8e:9d:90:5b:a2:5a:2b:56:7e:12:b6:bb:22:23: e5:f5:8d:26:cd:a7:25:48:49:f2:60:2a:c2:b7:88:f7:1b:38: 50:91:00:e3:fd:6f:1a:ba:f9:1c:5d:05:60:41:38:e2:36:6e: 6a:02:39:5e:8a:4d:33:a9:c2:ab:9e:c5:c3:b8:dc:52:98:6d: 44:ff:a3:a6:6e:54:80:76:d1:64:20:ba:dd:3f:34:65:04:c7: 40:23:08:53:20:f0:49:b9:c7:1e:80:5f:1e:bc:b2:20:7f:ca: 51:b5:cb:f1:79:c2:8e:7d:1a:4f:c9:04:36:ab:1d:b5:bb:1e: e5:86:47:1b:eb:ad:c9:4b:33:0c:be:12:4f:da:72:c8:2e:a8: 03:0a:85:88:4b:19:c5:ea:e8:d3:60:17:20:b2:cf:04:ae:c0: 4f:8b:dc:c1:bc:53:e0:1f:a7:c2:c8:90:4d:2d:f5:b3:0b:53: 65:55:22:ef:e7:18:35:a5:59:f5:04:3c:27:b6:94:28:bf:12: 45:fb:c4:6b:e1:88:64:06:27:58:8a:38:d5:fe:b6:6b:2b:c7: 1b:5b:ba:8e:ec:87:19:4d:df:9e:78:cf:b3:64:f8:59:a7:51: 71:96:7b:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cbwEnf7qRygWKE1X+pfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNTVlYzE3NWY2ZWU3YTFmYzFmODlhZGY3NTRiYjJhMDg2 MjU3OGEwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD EygzZGE0MzRiMjc5ZThkNGY3Yzg0Njc5ZGU0YWU0OTViZWRiZGQ1MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtVSiX+M9ahMPPCglH19cpz1qplf ML//8+SHdmpbmArS/4qUPZomBnfbCn10GEA2fjfPDYTh9BSM/6BEOaDHrCVa8PJq xt2hLeH8f7ZbtBsAUhjNU5pUfoBGQnAo+bNcJz8ZZpeU53lR6sL6pGsUhTZL1cf9 ZrbMVSQ2Desy58L5+X7u9pbTK2AM5G+dB4WAjJBMhybWrLTsOW9iH5nMITD/AZRa U6JeEVE0CJl+H/zm9/ndA5upSjyAUQ3VWSXHYoazfTmK/B4aSOJx2LM+R23f+8gO 3xtpAvvtluA807NzrtKHBLFkoLKicAEMMhRph0TQahpQ/9HPMTB09GL0UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2kNLJ56NT3yEZ53krklb7b3VDpMB8GA1UdIwQY MBaAFN1V7Bdfbueh/B+JrfdUuyoIYleKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80MGQ0MDctMWVhYy00MzgxLThmYTYt NDZjMmNjMjgwMmYxLzEvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy80MGQ0MDctMWVhYy00MzgxLThmYTYtNDZjMmNjMjgwMmYx LzEvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHvMclpf cLGF2tY2yYGD8ccmp7uQXI6dkFuiWitWfhK2uyIj5fWNJs2nJUhJ8mAqwreI9xs4 UJEA4/1vGrr5HF0FYEE44jZuagI5XopNM6nCq57Fw7jcUphtRP+jpm5UgHbRZCC6 3T80ZQTHQCMIUyDwSbnHHoBfHryyIH/KUbXL8XnCjn0aT8kENqsdtbse5YZHG+ut yUszDL4ST9pyyC6oAwqFiEsZxero02AXILLPBK7AT4vcwbxT4B+nwsiQTS31swtT ZVUi7+cYNaVZ9QQ8J7aUKL8SRfvEa+GIZAYnWIo41f62ayvHG1u6juyHGU3fnnjP s2T4WadRcZZ71w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:34 2025 by rpki-client