This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json) Hash identifier: B8dp+M80l3NoMsvQ7s/l5ikv4M2ZqjSIemvtEGOW9BY= Subject key identifier: 9B:07:5A:13:8F:21:D7:3D:15:A9:BB:D8:CB:E7:ED:D5:E9:3D:93:00 Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad Certificate serial: 019AF12D0C8E69360BA95B289FD7FB1DA430 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft Manifest number: 1214 Signing time: Sat 06 Dec 2025 01:00:52 +0000 Manifest this update: Sat 06 Dec 2025 01:00:52 +0000 Manifest next update: Sun 07 Dec 2025 01:00:52 +0000 Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: B6S8toFP3h5qeaRp7smPQjtDU0IYGuRdT4dGJ9MHsOg=) 2: 4PgtcW6j7xPoaJPy67vk2tMAXu4.roa (hash: fufIwyPbWqbMyORM68+h1FhSNKXbFzjdgG7WcXkavWU=) 3: cUPSsBWZ4irx4TApxzbroJpf5do.roa (hash: 6GPPFraRfTGyKrm5jIIIVF8Jt+KHlsZR8YFMwLgpuuE=) 4: xqYP462dYCt-0eOV8zXikdtxg14.roa (hash: YzKJbzm4Szaaz/1aNRHY+rmqu5/8YwNywOTzBNgzdeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:0c:8e:69:36:0b:a9:5b:28:9f:d7:fb:1d:a4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad Validity Not Before: Dec 6 01:00:52 2025 GMT Not After : Dec 7 01:00:52 2025 GMT Subject: CN=9b075a138f21d73d15a9bbd8cbe7edd5e93d9300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:73:85:b1:6e:ed:d6:d0:3b:1d:d8:c8:e4:81: 6e:84:15:c8:60:d6:70:41:d6:bd:7a:12:49:5a:cd: 3d:0e:f2:42:7e:48:c9:a8:7d:8f:14:06:b8:20:dd: 9c:6c:8e:75:74:d7:db:85:8f:7b:b0:4e:e1:4f:95: 22:3a:5a:98:6e:22:ab:79:72:70:78:2a:19:d5:1a: a1:a2:da:5c:e3:eb:21:e7:3c:92:61:e9:7b:79:0a: 38:91:16:91:2a:19:31:d6:3f:5a:d8:f8:d5:57:43: 53:0e:e7:cb:ab:a1:c9:96:91:43:e4:98:fa:6c:8c: 86:35:1f:95:b4:85:2e:5d:3d:32:4a:b6:d5:ef:1a: a0:d3:6c:56:93:c1:e4:62:70:e3:8f:8c:44:b4:e1: 10:ea:83:1f:a6:2b:bb:06:c7:4c:21:98:4d:9d:72: ec:ec:6e:71:05:07:98:b8:75:ab:f2:0e:c0:89:cb: 7e:7a:64:55:d4:55:24:db:ed:4c:5f:61:af:04:3f: 55:2a:94:bd:53:48:0b:e9:20:59:6b:da:83:02:52: 65:8c:4a:94:75:01:12:d6:14:2c:34:4d:ca:04:3a: 41:58:d0:31:35:2d:2b:a3:78:11:f2:d5:c8:a4:1f: 65:55:ee:5c:90:60:0b:79:bc:e1:77:4f:33:cd:02: 42:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:07:5A:13:8F:21:D7:3D:15:A9:BB:D8:CB:E7:ED:D5:E9:3D:93:00 X509v3 Authority Key Identifier: keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:37:72:36:d2:a2:2d:84:eb:98:5a:32:bd:77:7e:48:09:4f: 90:70:6d:5a:16:75:79:67:36:03:81:1a:64:f8:bc:17:75:db: 7b:98:be:9f:73:ed:52:9e:48:30:b7:cd:d8:cc:34:e3:57:71: cc:d6:e9:52:2f:0c:f3:a2:42:f2:b9:7e:2e:bb:ad:41:f0:d2: 69:40:f6:a0:37:7b:5d:fd:19:0c:b1:f6:aa:4c:4a:c2:f2:1e: 64:c3:d1:96:9f:fc:84:76:fe:b5:b0:af:81:2d:2e:49:ab:a8: 45:d9:49:13:01:3d:ef:cc:2d:10:3d:ae:20:b8:3e:53:3c:5b: 9d:0d:1f:ad:ac:16:6b:38:46:84:36:1f:d4:1f:60:db:55:b7: b0:fc:3f:86:3c:ba:53:db:d0:12:94:e1:7f:2c:c9:5c:af:db: 44:bc:cc:59:25:eb:b4:e8:07:fd:2f:f3:a2:bc:b6:02:ab:99: 0f:77:52:a2:e7:13:e4:75:29:e6:f4:fc:48:fc:0a:7b:9b:0a: c3:23:37:47:2c:94:5b:d2:c2:7e:9b:2c:03:a2:95:51:65:7a: a2:b6:d2:ff:ca:81:5c:a1:4a:db:9f:57:22:fb:16:3e:74:23: 78:4d:9e:cc:2d:84:0b:60:17:39:52:c4:91:49:b7:b8:86:a0: 1f:82:87:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQyOaTYLqVson9f7HaQwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMDE5OGE3YjNhZmRjZGQ3MDAzNTYyYTA4NzE4NzhlMjM4 NzYwYWQwHhcNMjUxMjA2MDEwMDUyWhcNMjUxMjA3MDEwMDUyWjAzMTEwLwYDVQQD Eyg5YjA3NWExMzhmMjFkNzNkMTVhOWJiZDhjYmU3ZWRkNWU5M2Q5MzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nOFsW7t1tA7HdjI5IFuhBXIYNZw Qda9ehJJWs09DvJCfkjJqH2PFAa4IN2cbI51dNfbhY97sE7hT5UiOlqYbiKreXJw eCoZ1Rqhotpc4+sh5zySYel7eQo4kRaRKhkx1j9a2PjVV0NTDufLq6HJlpFD5Jj6 bIyGNR+VtIUuXT0ySrbV7xqg02xWk8HkYnDjj4xEtOEQ6oMfpiu7BsdMIZhNnXLs 7G5xBQeYuHWr8g7Aict+emRV1FUk2+1MX2GvBD9VKpS9U0gL6SBZa9qDAlJljEqU dQES1hQsNE3KBDpBWNAxNS0ro3gR8tXIpB9lVe5ckGALebzhd08zzQJCiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsHWhOPIdc9Fam72Mvn7dXpPZMAMB8GA1UdIwQY MBaAFN8BmKezr9zdcANWKghxh44jh2CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQt MGZjYzZjMzAxMWZjLzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQtMGZjYzZjMzAxMWZj LzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjdyNtKi LYTrmFoyvXd+SAlPkHBtWhZ1eWc2A4EaZPi8F3Xbe5i+n3PtUp5IMLfN2Mw041dx zNbpUi8M86JC8rl+LrutQfDSaUD2oDd7Xf0ZDLH2qkxKwvIeZMPRlp/8hHb+tbCv gS0uSauoRdlJEwE978wtED2uILg+UzxbnQ0frawWazhGhDYf1B9g21W3sPw/hjy6 U9vQEpThfyzJXK/bRLzMWSXrtOgH/S/zory2AquZD3dSoucT5HUp5vT8SPwKe5sK wyM3RyyUW9LCfpssA6KVUWV6orbS/8qBXKFK259XIvsWPnQjeE2ezC2EC2AXOVLE kUm3uIagH4KHDw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:43 2025 by rpki-client