This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json) Hash identifier: PGsBYLoxSiauBw1SkplOj7CP+YBesmkZgIMIIdlvCOk= Subject key identifier: 4E:FB:A7:C5:EC:4D:F3:4B:7A:2F:45:40:AF:2E:38:D0:1C:1E:0D:ED Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52 Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652 Certificate serial: 019AF352CB76E3DE389FF0C81EAD481E0DBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft Manifest number: 040A Signing time: Sat 06 Dec 2025 11:01:20 +0000 Manifest this update: Sat 06 Dec 2025 11:01:20 +0000 Manifest next update: Sun 07 Dec 2025 11:01:20 +0000 Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: eNeI4hFFqDyuwgZBugZSeAckFAy1tYsO0BWoGbcsqEM=) 2: _uzKcHUnRqCblBfJ7LQOWwPDs9E.roa (hash: QtEg8CgvNKFjK8sDnq+KQm/gvMScP6wDUlBc5heZNlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:cb:76:e3:de:38:9f:f0:c8:1e:ad:48:1e:0d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652 Validity Not Before: Dec 6 11:01:20 2025 GMT Not After : Dec 7 11:01:20 2025 GMT Subject: CN=4efba7c5ec4df34b7a2f4540af2e38d01c1e0ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:2e:89:9f:2f:8a:80:91:52:83:0e:4e:d4: ec:51:d4:1e:63:86:1f:d4:8b:2c:05:d1:e2:50:ec: b9:0b:f9:ad:5d:2f:e1:35:45:6e:0c:cb:16:90:94: db:1d:2f:ef:b1:c1:bf:b4:02:fb:77:c7:bf:75:18: 84:79:84:b8:bc:4e:03:2f:41:a6:36:7b:17:63:a1: c2:99:5f:81:5a:01:89:42:da:04:e8:58:cd:0f:24: b7:17:1f:ec:82:cf:13:79:70:93:55:21:62:97:2e: 2c:a3:2c:ea:3f:b9:95:6f:4a:b3:eb:e7:77:42:90: 8e:0b:f3:0d:c7:b8:b4:2b:0d:14:b8:66:d1:80:a7: 24:b1:ae:2c:6b:02:b0:09:02:76:37:36:f6:a6:b0: f3:4a:92:55:60:ae:a2:ed:19:b0:26:d6:cd:cf:91: 3e:9c:28:33:2f:d6:53:65:3d:c0:4f:70:51:09:51: 37:81:95:f1:30:ff:c7:7d:ea:64:c7:2d:9e:5c:a4: 6c:d4:28:5e:dd:6f:6e:ea:ae:80:b2:09:d1:24:fd: 05:c3:87:52:c3:8c:2a:d4:e1:b9:11:de:24:a8:5d: 87:d7:25:8a:b3:b0:0d:7e:c4:4e:fb:77:c7:fb:7b: fc:71:94:ba:13:80:58:62:24:2b:a3:f2:9a:d4:b7: 1d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FB:A7:C5:EC:4D:F3:4B:7A:2F:45:40:AF:2E:38:D0:1C:1E:0D:ED X509v3 Authority Key Identifier: keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2d:b3:11:21:21:9a:d6:d3:0a:41:20:28:65:ea:29:b4:a4: 4c:53:b5:92:7d:77:06:6f:6d:26:63:b5:86:0e:b8:b2:d7:b8: da:fa:73:b8:d5:f1:cd:6b:cc:ee:5e:db:a6:0a:ec:74:c7:9f: 0c:5b:61:84:2a:35:ea:5a:49:a2:b3:84:44:0c:16:65:17:5e: f9:d5:d1:7c:8f:27:3e:f2:47:32:e3:a4:0b:c5:4b:73:2a:de: df:95:28:6c:c3:b7:30:6f:4b:86:df:9d:16:f8:0d:dc:61:ab: 05:e7:d2:cb:5f:33:33:69:a1:60:b5:d6:85:69:f9:d6:71:a2: 2a:fe:db:96:ac:14:0a:7b:ea:29:9d:be:d2:92:aa:f2:4a:2a: 19:21:47:0b:10:7e:03:66:03:e3:b3:af:16:f8:a8:b2:72:a1: d0:f8:db:f8:7a:7f:47:45:47:43:f3:8b:20:b1:ad:1f:a7:e1: 0f:ac:38:7d:63:7c:85:df:1f:c2:9d:fd:ce:35:59:48:c1:1d: 8a:c6:a5:96:27:e4:b6:9a:0b:9b:aa:5f:01:4b:80:db:c9:0c: bc:87:67:77:da:bf:ab:89:91:f1:34:50:24:fa:21:5f:36:e0: 23:90:23:6e:a5:33:ca:d5:c2:22:b3:2a:17:d7:c2:35:a4:7c: fe:6d:42:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUst24944n/DIHq1IHg28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMjNmMThjNTc2ZDZmYTYwOTEzMzUzM2MwZDBlMzhkNzcz MmM2NTIwHhcNMjUxMjA2MTEwMTIwWhcNMjUxMjA3MTEwMTIwWjAzMTEwLwYDVQQD Eyg0ZWZiYTdjNWVjNGRmMzRiN2EyZjQ1NDBhZjJlMzhkMDFjMWUwZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfkuiZ8vioCRUoMOTtTsUdQeY4Yf 1IssBdHiUOy5C/mtXS/hNUVuDMsWkJTbHS/vscG/tAL7d8e/dRiEeYS4vE4DL0Gm NnsXY6HCmV+BWgGJQtoE6FjNDyS3Fx/sgs8TeXCTVSFily4soyzqP7mVb0qz6+d3 QpCOC/MNx7i0Kw0UuGbRgKcksa4sawKwCQJ2Nzb2prDzSpJVYK6i7RmwJtbNz5E+ nCgzL9ZTZT3AT3BRCVE3gZXxMP/Hfepkxy2eXKRs1Che3W9u6q6AsgnRJP0Fw4dS w4wq1OG5Ed4kqF2H1yWKs7ANfsRO+3fH+3v8cZS6E4BYYiQro/Ka1Lcd0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE77p8XsTfNLei9FQK8uONAcHg3tMB8GA1UdIwQY MBaAFN4j8YxXbW+mCRM1M8DQ4413MsZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2lQeGpGZHRiNllKRXpVendORGpqWGN5eGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85OGM1ZDktZTJiZS00OTNiLTg2NTct NWU4NjAwNmUyMGFlLzEvM2lQeGpGZHRiNllKRXpVendORGpqWGN5eGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85OGM1ZDktZTJiZS00OTNiLTg2NTctNWU4NjAwNmUyMGFl LzEvM2lQeGpGZHRiNllKRXpVendORGpqWGN5eGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkC2zESEh mtbTCkEgKGXqKbSkTFO1kn13Bm9tJmO1hg64ste42vpzuNXxzWvM7l7bpgrsdMef DFthhCo16lpJorOERAwWZRde+dXRfI8nPvJHMuOkC8VLcyre35UobMO3MG9Lht+d FvgN3GGrBefSy18zM2mhYLXWhWn51nGiKv7blqwUCnvqKZ2+0pKq8koqGSFHCxB+ A2YD47OvFviosnKh0Pjb+Hp/R0VHQ/OLILGtH6fhD6w4fWN8hd8fwp39zjVZSMEd isallifktpoLm6pfAUuA28kMvIdnd9q/q4mR8TRQJPohXzbgI5AjbqUzytXCIrMq F9fCNaR8/m1Cqw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:55 2025 by rpki-client