This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json) Hash identifier: E/u0A3iWK/5we0NRbW8LcIj6qWswejBnqJ1/V3iSsdM= Subject key identifier: 6B:B7:C8:BA:9A:24:66:8E:B2:F9:5A:A4:CC:21:7C:76:1B:AD:04:EF Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6 Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6 Certificate serial: 019AF23FE3E0C235387A3C82D976A4E098EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: r0r0yxJfIvgcwQl51DkwzqHjs+HUquKGI1g2ombjQZw=) 2: gyBGqWNKS8K0vTNBAA3GKNL77Vo.roa (hash: BXXbMCiaPDwWpKluJbMJNiQFpxOCWm/ZXx0AVN6V8Ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e3:e0:c2:35:38:7a:3c:82:d9:76:a4:e0:98:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6 Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=6bb7c8ba9a24668eb2f95aa4cc217c761bad04ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:80:18:45:ef:c5:40:84:25:66:79:57:18:d9: b6:35:70:a9:f8:be:d5:dd:f0:24:32:3e:7a:dc:c9: 2d:36:2b:1f:b4:78:0e:8e:85:e1:a9:fd:8a:44:2f: 5f:79:b3:d5:34:01:61:17:f8:c0:f5:8c:44:5a:8b: f4:15:cf:95:f0:23:f1:07:da:46:75:04:a2:c1:5f: bc:1d:0f:87:f8:b7:bd:42:92:fe:a0:52:25:e6:40: 6e:c0:4e:d3:fa:cd:b2:6f:5f:95:f7:f0:e1:a3:e8: ff:1a:c0:f3:1a:be:32:21:af:5b:a2:41:09:6c:49: 40:00:83:b7:28:5c:d4:c9:99:fb:48:f1:9b:e9:e8: 48:9c:6c:25:c5:b2:52:17:88:96:e4:75:b1:1b:eb: e1:cb:3e:04:24:1f:f1:99:07:25:5e:7a:e5:81:02: fa:c9:67:99:5b:37:9c:2e:18:10:f1:80:6d:b7:0f: e5:a7:71:30:29:41:48:fd:c5:11:6a:d8:00:d0:bc: d7:8b:32:8c:f9:b0:26:7c:d8:1a:89:65:d7:ec:ff: 19:58:07:c0:32:47:82:87:8f:c4:d5:ff:68:51:62: 02:c4:cd:cf:34:b2:25:3e:46:a1:3c:d0:97:1f:41: 8d:a5:ae:d0:ec:ea:ad:21:25:d2:1c:5a:46:6b:f2: 18:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B7:C8:BA:9A:24:66:8E:B2:F9:5A:A4:CC:21:7C:76:1B:AD:04:EF X509v3 Authority Key Identifier: keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d8:f1:ac:d3:d2:e5:e2:21:29:ae:cf:4f:19:bc:80:5d:77: 88:2b:3b:4f:a3:21:17:cd:6b:ce:de:e1:73:cb:e0:de:62:3a: 19:98:11:64:e6:a2:47:a4:73:e3:fd:98:31:0e:99:ea:e8:74: 22:42:98:53:92:b8:77:53:e1:ca:ae:68:32:4c:e1:30:cb:b7: e4:b1:91:22:cc:5a:45:b8:db:18:e7:47:3c:f1:d3:44:bd:4b: 19:b2:70:16:81:f2:b7:32:77:74:e7:75:5c:d2:86:e4:69:4b: 4b:92:5f:91:91:cf:69:bb:cb:b8:90:41:a4:13:06:2d:e6:02: 21:62:a2:27:64:05:7f:88:b5:e6:bf:a9:5a:f9:4d:3b:d3:6a: 10:df:35:38:5b:5d:60:52:4f:14:ca:c8:09:7b:82:26:c1:77: 2e:55:3c:3e:47:e9:84:20:c1:c1:da:67:94:54:8e:68:97:5a: fb:cf:8a:db:34:2f:b2:a7:15:3c:a5:08:53:2b:d9:b2:4a:df: 85:71:07:21:52:d9:a4:6f:62:55:9d:e5:47:db:33:be:c8:16: 13:ab:5f:7b:df:6e:c3:a4:ba:3e:f1:02:a1:bf:20:13:72:10: c8:f3:a2:5a:b1:93:9b:0f:2f:55:89:0c:0a:d2:a5:73:c3:d6: 34:5a:91:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+PgwjU4ejyC2Xak4JjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZWFkOTE5Yjg1YTEzMDUxZDAyMDhiN2UyOGRkY2NiMzk4 YjE0ZDYwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD Eyg2YmI3YzhiYTlhMjQ2NjhlYjJmOTVhYTRjYzIxN2M3NjFiYWQwNGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYAYRe/FQIQlZnlXGNm2NXCp+L7V 3fAkMj563MktNisftHgOjoXhqf2KRC9febPVNAFhF/jA9YxEWov0Fc+V8CPxB9pG dQSiwV+8HQ+H+Le9QpL+oFIl5kBuwE7T+s2yb1+V9/Dho+j/GsDzGr4yIa9bokEJ bElAAIO3KFzUyZn7SPGb6ehInGwlxbJSF4iW5HWxG+vhyz4EJB/xmQclXnrlgQL6 yWeZWzecLhgQ8YBttw/lp3EwKUFI/cURatgA0LzXizKM+bAmfNgaiWXX7P8ZWAfA MkeCh4/E1f9oUWICxM3PNLIlPkahPNCXH0GNpa7Q7OqtISXSHFpGa/IYNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGu3yLqaJGaOsvlapMwhfHYbrQTvMB8GA1UdIwQY MBaAFN3q2Rm4WhMFHQIIt+KN3Ms5ixTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQt NDhiOGI1YTliNDExLzEvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQtNDhiOGI1YTliNDEx LzEvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItjxrNPS 5eIhKa7PTxm8gF13iCs7T6MhF81rzt7hc8vg3mI6GZgRZOaiR6Rz4/2YMQ6Z6uh0 IkKYU5K4d1Phyq5oMkzhMMu35LGRIsxaRbjbGOdHPPHTRL1LGbJwFoHytzJ3dOd1 XNKG5GlLS5JfkZHPabvLuJBBpBMGLeYCIWKiJ2QFf4i15r+pWvlNO9NqEN81OFtd YFJPFMrICXuCJsF3LlU8PkfphCDBwdpnlFSOaJda+8+K2zQvsqcVPKUIUyvZskrf hXEHIVLZpG9iVZ3lR9szvsgWE6tfe99uw6S6PvECob8gE3IQyPOiWrGTmw8vVYkM CtKlc8PWNFqRPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:26 2025 by rpki-client