This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft File: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft (raw, json) Hash identifier: EpMClVxibzFqqP2oqRAKKl1N6JNRYjY9fbPjaqHOcyM= Subject key identifier: 09:08:46:8D:E3:90:A1:D5:14:E4:9C:F0:D3:A6:5A:15:02:07:20:48 Authority key identifier: DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4 Certificate issuer: /CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4 Certificate serial: 019AF31BB80C7BA0D5D4C10D6FACDAB3CDDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 10:01:11 +0000 Manifest this update: Sat 06 Dec 2025 10:01:11 +0000 Manifest next update: Sun 07 Dec 2025 10:01:11 +0000 Files and hashes: 1: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl (hash: t/LdPpjbESEDmzlsoBMALEhoX29EPyyYZMxGYSrnr4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b8:0c:7b:a0:d5:d4:c1:0d:6f:ac:da:b3:cd:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4 Validity Not Before: Dec 6 10:01:11 2025 GMT Not After : Dec 7 10:01:11 2025 GMT Subject: CN=0908468de390a1d514e49cf0d3a65a1502072048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:99:db:cd:35:51:26:4e:0f:7f:50:85:95:55: 7c:84:41:39:ca:00:74:dc:48:6e:2a:d9:f0:60:86: 23:fb:c4:85:4e:09:54:e3:85:98:e4:a3:73:34:f9: 1f:9b:ed:8f:9b:f2:c8:0b:9b:f2:e6:cc:f2:5b:95: 4e:9a:e9:19:26:29:00:37:8d:e2:e3:c0:6d:62:70: 85:80:7f:5b:3c:f4:05:02:39:7e:fa:13:76:5a:0f: a7:53:7f:aa:2d:fe:e0:79:66:3b:80:1f:03:a6:69: 08:9a:4b:a3:3b:ba:80:16:dd:05:91:68:4f:28:4d: d8:ab:07:48:0a:4d:92:4e:9f:6e:46:c3:98:68:38: 2f:c3:04:50:89:ca:01:55:43:10:f3:f7:69:93:62: a2:15:af:81:a5:9d:32:73:6a:c0:4f:15:e1:21:23: 54:73:de:9d:29:38:c9:c1:07:82:d3:90:fd:d8:ec: ec:06:c4:20:e9:8b:cb:93:ef:da:05:08:80:e4:79: aa:53:78:14:74:6c:7e:71:14:ec:76:e9:64:80:c2: 4c:21:a3:ba:db:a9:f1:21:8f:31:58:8b:0a:57:b1: 6d:65:5a:07:28:1c:2a:06:d1:ce:92:91:f9:95:7a: 01:00:4a:b0:97:98:f4:d6:15:a1:8a:92:f6:38:30: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:08:46:8D:E3:90:A1:D5:14:E4:9C:F0:D3:A6:5A:15:02:07:20:48 X509v3 Authority Key Identifier: keyid:DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:98:be:ae:08:9a:d5:ac:35:5f:00:93:a1:97:6a:f5:ef:eb: 55:82:38:cc:cc:95:82:92:df:13:be:87:65:ed:6e:d7:fd:c2: 8d:47:27:f3:1d:e8:f7:c1:01:20:7b:c3:66:31:a6:75:cb:59: 03:2e:48:83:e9:50:62:41:c1:d7:1e:a2:1f:55:16:2e:c3:89: 5e:5d:c9:a0:64:4b:09:ba:55:8d:f1:20:b3:c9:cf:ea:9a:4f: 0c:79:5b:f5:31:fe:16:b9:26:38:ad:c8:c0:ec:f2:18:88:b6: dd:ed:67:58:24:1c:bb:ca:84:0c:27:26:0b:7a:7b:f9:60:e7: 2a:0c:91:83:1b:71:04:5c:c8:11:5a:36:7a:ae:9b:36:13:18: 21:7b:93:70:74:7e:b7:02:4b:ea:f3:16:92:18:50:6c:b1:ec: b6:8e:d0:27:14:48:90:0e:02:87:03:17:70:46:35:4f:2d:7a: 9d:f8:91:cc:aa:e4:f8:2a:72:69:29:95:05:d2:93:a9:8b:7c: de:42:18:c8:dd:35:92:ff:9c:c7:39:ec:82:15:ad:e4:55:2e: 8a:1d:87:df:ca:af:d0:59:50:1e:6a:91:d0:df:da:f0:b5:bc: 6a:d4:d8:03:84:b8:9e:69:32:d9:29:a3:4e:3b:d6:37:0a:c3: b9:66:b9:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7gMe6DV1MENb6zas83bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZWEzZTFhY2E2YTVjOWRjM2Y4OGMzODI3NmYwOTFlYmFi Y2UwYTQwHhcNMjUxMjA2MTAwMTExWhcNMjUxMjA3MTAwMTExWjAzMTEwLwYDVQQD EygwOTA4NDY4ZGUzOTBhMWQ1MTRlNDljZjBkM2E2NWExNTAyMDcyMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJnbzTVRJk4Pf1CFlVV8hEE5ygB0 3EhuKtnwYIYj+8SFTglU44WY5KNzNPkfm+2Pm/LIC5vy5szyW5VOmukZJikAN43i 48BtYnCFgH9bPPQFAjl++hN2Wg+nU3+qLf7geWY7gB8DpmkImkujO7qAFt0FkWhP KE3YqwdICk2STp9uRsOYaDgvwwRQicoBVUMQ8/dpk2KiFa+BpZ0yc2rATxXhISNU c96dKTjJwQeC05D92OzsBsQg6YvLk+/aBQiA5HmqU3gUdGx+cRTsdulkgMJMIaO6 26nxIY8xWIsKV7FtZVoHKBwqBtHOkpH5lXoBAEqwl5j01hWhipL2ODD7HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkIRo3jkKHVFOSc8NOmWhUCByBIMB8GA1UdIwQY MBaAFN7qPhrKalydw/iMOCdvCR66vOCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VvLUdzcHFYSjNELUl3NEoyOEpIcnE4NEtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZjVlNzQtYmQ1ZS00Njc5LTg1MmIt N2JlZjBiNGNjMjVlLzEvM3VvLUdzcHFYSjNELUl3NEoyOEpIcnE4NEtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8yZjVlNzQtYmQ1ZS00Njc5LTg1MmItN2JlZjBiNGNjMjVl LzEvM3VvLUdzcHFYSjNELUl3NEoyOEpIcnE4NEtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5i+rgia 1aw1XwCToZdq9e/rVYI4zMyVgpLfE76HZe1u1/3CjUcn8x3o98EBIHvDZjGmdctZ Ay5Ig+lQYkHB1x6iH1UWLsOJXl3JoGRLCbpVjfEgs8nP6ppPDHlb9TH+FrkmOK3I wOzyGIi23e1nWCQcu8qEDCcmC3p7+WDnKgyRgxtxBFzIEVo2eq6bNhMYIXuTcHR+ twJL6vMWkhhQbLHsto7QJxRIkA4ChwMXcEY1Ty16nfiRzKrk+CpyaSmVBdKTqYt8 3kIYyN01kv+cxznsghWt5FUuih2H38qv0FlQHmqR0N/a8LW8atTYA4S4nmky2Smj TjvWNwrDuWa5yA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:05:31 2025 by rpki-client