This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json) Hash identifier: iZCBplsbaXjgY7KIVZh81J5DhSkboKQh7a4NMmMB5zs= Subject key identifier: 67:41:BC:D1:80:60:27:13:D1:A5:71:B5:FC:0A:BE:73:1E:58:81:F7 Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39 Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239 Certificate serial: 019AF240242F00B6B5C8387EED66EDCCDB40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft Manifest number: 04BA Signing time: Sat 06 Dec 2025 06:01:21 +0000 Manifest this update: Sat 06 Dec 2025 06:01:21 +0000 Manifest next update: Sun 07 Dec 2025 06:01:21 +0000 Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: cY35LgoqRwK3r/FbuZMrCVAy1vgnuU1+hWYHsfBPeJo=) 2: b4tFKCMFhyngaw1LlIGrAjikYiE.roa (hash: zlYQxGhdtm2zm501rwjVL8YUyfYWJBRUvSyMolHaDtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:24:2f:00:b6:b5:c8:38:7e:ed:66:ed:cc:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239 Validity Not Before: Dec 6 06:01:21 2025 GMT Not After : Dec 7 06:01:21 2025 GMT Subject: CN=6741bcd180602713d1a571b5fc0abe731e5881f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:41:27:d3:e0:17:9e:ae:fe:03:15:88:83: 27:8a:c6:ce:6f:fa:f7:89:2a:56:d9:5a:bf:50:61: 44:8e:bb:0f:6d:3e:fd:e1:a6:8d:5d:8e:c1:81:f0: d9:dd:60:da:8e:8e:66:58:9d:6a:75:29:a6:a1:f1: 6a:08:76:28:bb:6f:da:84:e2:22:8f:4e:8c:4c:ac: b9:56:1f:9f:4e:b5:2b:b7:e4:c6:d3:c1:42:ee:85: 2e:e7:fe:10:de:b8:ca:fd:cf:54:fb:40:28:f9:5d: 55:71:f5:2c:c0:4b:90:04:7f:44:10:72:f7:d8:03: 2e:0b:58:af:c0:34:62:1f:ae:da:ca:87:a3:92:b6: eb:67:56:4d:d7:f7:8d:99:08:0a:c9:05:46:56:8d: 1d:1c:c1:03:42:40:1a:92:37:55:d2:13:5d:e4:2c: a9:b7:96:4d:bc:3a:a5:69:3d:47:2f:ff:7f:70:a9: b6:d1:c5:39:86:60:93:41:90:50:0f:bf:54:76:ef: 21:ea:b4:8d:92:e9:87:45:2c:f3:03:7e:fa:82:d2: 57:fa:f3:ad:99:1c:40:09:39:39:6b:b7:d3:d4:b2: 93:13:fd:5f:c9:b9:17:40:5e:e3:85:f0:75:a6:38: b8:bd:5d:fe:c4:27:ea:4c:7f:6d:98:8d:ce:2d:ad: 48:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:41:BC:D1:80:60:27:13:D1:A5:71:B5:FC:0A:BE:73:1E:58:81:F7 X509v3 Authority Key Identifier: keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ec:b1:bd:75:79:28:be:55:f5:14:8d:d9:ef:5f:53:15:2d: 19:ff:2c:87:78:c3:73:6d:f2:59:36:6d:73:1d:90:e4:63:07: 8a:58:68:13:7c:89:5e:36:ec:7a:a3:b7:a3:cb:a2:a5:b1:31: e5:f7:86:c6:e7:24:b4:61:4f:f2:0c:a4:e0:c7:69:c3:e1:59: b7:51:b9:4f:db:0f:a3:21:71:c0:d5:d3:f3:8b:13:7a:d9:3b: 86:f6:e1:a2:d8:d5:10:ba:79:63:43:91:8e:32:2a:3d:63:1f: f2:f7:4f:27:8a:24:4c:d7:fb:1b:43:54:a1:8e:6a:9d:04:06: 99:a5:7b:26:49:70:3d:75:d9:a5:28:e3:39:d9:3f:a3:eb:d3: 45:96:f5:4c:29:02:ca:12:8c:01:08:69:33:4c:83:ab:b3:de: a7:46:b9:80:83:d9:d1:05:d4:59:4a:09:02:58:fe:35:a6:79: 7f:dd:9f:95:40:30:87:4b:75:8b:fe:19:99:e5:04:8d:ba:be: e2:b2:1e:e1:93:80:4b:56:10:39:ff:b1:31:be:fa:2e:79:2d: d5:73:ce:62:1b:85:b7:ac:34:5e:ba:5f:11:13:fd:c8:8a:22: 83:04:5c:76:79:01:9a:50:e9:5a:09:25:f5:65:2d:dc:30:5c: 68:15:cb:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCQvALa1yDh+7WbtzNtAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMWIyYjBlMWNlNzgzZWI3YTJlMzkzZmZkZDEyOGM2YTlj MDIyMzkwHhcNMjUxMjA2MDYwMTIxWhcNMjUxMjA3MDYwMTIxWjAzMTEwLwYDVQQD Eyg2NzQxYmNkMTgwNjAyNzEzZDFhNTcxYjVmYzBhYmU3MzFlNTg4MWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCZBJ9PgF56u/gMViIMnisbOb/r3 iSpW2Vq/UGFEjrsPbT794aaNXY7BgfDZ3WDajo5mWJ1qdSmmofFqCHYou2/ahOIi j06MTKy5Vh+fTrUrt+TG08FC7oUu5/4Q3rjK/c9U+0Ao+V1VcfUswEuQBH9EEHL3 2AMuC1ivwDRiH67ayoejkrbrZ1ZN1/eNmQgKyQVGVo0dHMEDQkAakjdV0hNd5Cyp t5ZNvDqlaT1HL/9/cKm20cU5hmCTQZBQD79Udu8h6rSNkumHRSzzA376gtJX+vOt mRxACTk5a7fT1LKTE/1fybkXQF7jhfB1pji4vV3+xCfqTH9tmI3OLa1IGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdBvNGAYCcT0aVxtfwKvnMeWIH3MB8GA1UdIwQY MBaAFNwbKw4c54Prei45P/3RKMapwCI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUt YWRmZTdlNzNkZmVlLzEvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUtYWRmZTdlNzNkZmVl LzEvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOyxvXV5 KL5V9RSN2e9fUxUtGf8sh3jDc23yWTZtcx2Q5GMHilhoE3yJXjbseqO3o8uipbEx 5feGxucktGFP8gyk4Mdpw+FZt1G5T9sPoyFxwNXT84sTetk7hvbhotjVELp5Y0OR jjIqPWMf8vdPJ4okTNf7G0NUoY5qnQQGmaV7JklwPXXZpSjjOdk/o+vTRZb1TCkC yhKMAQhpM0yDq7Pep0a5gIPZ0QXUWUoJAlj+NaZ5f92flUAwh0t1i/4ZmeUEjbq+ 4rIe4ZOAS1YQOf+xMb76Lnkt1XPOYhuFt6w0XrpfERP9yIoigwRcdnkBmlDpWgkl 9WUt3DBcaBXLKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:05 2025 by rpki-client