This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json) Hash identifier: dTlex3qrSeTGo9c9TyEJntGLgzvQCbJTjSkrlBQCMZI= Subject key identifier: 80:57:39:92:E5:6C:D0:47:9B:6C:0C:ED:A6:BE:0D:96:5F:6F:97:EA Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81 Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81 Certificate serial: 019AF23FE80E7EEAA3FB6117E571CA2AF155 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:05 +0000 Manifest this update: Sat 06 Dec 2025 06:01:05 +0000 Manifest next update: Sun 07 Dec 2025 06:01:05 +0000 Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: KhrKE4wzdqUUJ4+BxSGMFHXKt4+1kcp3SsIIhUrufBo=) 2: Q6UDfcr6-wjzrSR02hz91bMMgCQ.roa (hash: Ri+ho1nwscaoaR+lGA/lmNvU5bMAzGg4wnbtbjS6IAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e8:0e:7e:ea:a3:fb:61:17:e5:71:ca:2a:f1:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81 Validity Not Before: Dec 6 06:01:05 2025 GMT Not After : Dec 7 06:01:05 2025 GMT Subject: CN=80573992e56cd0479b6c0ceda6be0d965f6f97ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c6:c8:ee:f8:b1:8f:68:02:d9:5b:55:c7:11: 9d:07:38:b9:0d:fb:32:40:ee:90:dc:78:b3:6d:e4: a2:4d:cf:de:23:67:cd:c0:88:ab:e6:b7:2a:77:b8: 1c:10:1f:3b:2f:43:9c:fe:27:86:ee:0e:4a:54:56: da:8f:21:e0:46:09:7c:55:35:2c:af:03:25:e8:46: 5e:40:71:eb:2b:01:d3:ef:ec:cc:d8:43:5c:fd:f8: ce:3c:5b:91:16:6f:b6:24:ae:b0:e8:ef:09:15:68: c0:ac:dc:19:69:3f:e1:f7:7c:e6:99:4a:f3:c6:ee: d8:16:a7:11:8c:2f:7c:f3:da:d4:a7:cd:b5:d4:1c: 69:f2:b9:f9:ea:18:f0:c2:4a:3c:9b:6c:5b:89:e8: 93:de:fa:64:e6:85:2b:2d:21:77:26:a8:a9:a6:09: 0f:ee:5d:b1:aa:d0:09:ec:95:84:48:a3:24:fc:89: 12:a3:ff:59:d1:4c:f3:90:13:e9:35:09:3a:39:ae: f4:bf:c0:6d:96:13:27:2f:fd:c5:03:b0:35:2f:2e: 46:cb:f3:85:19:6c:a9:5a:d1:7f:53:dc:32:11:60: ed:5c:bc:35:d2:ec:ab:c7:e3:b6:23:d6:59:dc:3d: 42:df:13:0e:78:ce:80:e7:4a:ba:f9:5e:63:cb:c0: 7d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:57:39:92:E5:6C:D0:47:9B:6C:0C:ED:A6:BE:0D:96:5F:6F:97:EA X509v3 Authority Key Identifier: keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:7b:2e:03:65:91:2e:73:94:db:f5:66:62:1e:33:6f:65:d8: 26:3a:e2:0e:21:c8:48:4d:e0:16:8b:91:7b:7f:95:da:ab:92: a5:9b:df:9c:a6:97:1e:0f:6a:1e:2c:e0:0a:6a:35:17:d7:b1: 0a:0e:cc:39:64:94:11:c4:7a:dd:d3:3e:b8:38:e8:8e:9d:e8: bd:00:0d:15:70:b6:6d:39:72:30:b7:14:6e:f1:99:0c:fd:ad: 56:f2:19:ac:4b:7d:d1:19:1f:61:95:7b:b7:49:e7:45:cf:f6: d4:8a:7b:24:f3:45:03:e4:62:b4:f8:ef:cd:46:1c:21:8b:aa: be:fa:91:3d:e7:db:7a:94:6f:1d:e5:37:0d:f0:4b:2a:6b:d8: 65:5a:da:28:57:71:21:50:03:72:2e:08:7c:a9:55:87:52:f0: 80:28:b9:3b:5d:80:7b:4c:96:3e:7d:6f:a2:99:a0:7a:ab:d8: 58:07:2c:63:cb:40:db:7c:10:68:f7:45:30:db:e9:84:4e:db: 68:98:53:d7:9d:fe:be:f4:aa:b8:1d:9c:b3:d8:9d:14:20:19: 4c:02:50:16:6f:28:06:45:b6:eb:f2:95:3c:10:cb:37:2d:12: ca:9e:f4:ab:8e:fb:76:f2:84:46:78:70:ad:ec:5b:d5:97:ef: 93:5b:db:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+gOfuqj+2EX5XHKKvFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOGU2MGJiMTExMDg3ZDA4MDNmYzNmY2M0YWYzMjdhYTg1 YzBiODEwHhcNMjUxMjA2MDYwMTA1WhcNMjUxMjA3MDYwMTA1WjAzMTEwLwYDVQQD Eyg4MDU3Mzk5MmU1NmNkMDQ3OWI2YzBjZWRhNmJlMGQ5NjVmNmY5N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMbI7vixj2gC2VtVxxGdBzi5Dfsy QO6Q3HizbeSiTc/eI2fNwIir5rcqd7gcEB87L0Oc/ieG7g5KVFbajyHgRgl8VTUs rwMl6EZeQHHrKwHT7+zM2ENc/fjOPFuRFm+2JK6w6O8JFWjArNwZaT/h93zmmUrz xu7YFqcRjC9889rUp8211Bxp8rn56hjwwko8m2xbieiT3vpk5oUrLSF3JqippgkP 7l2xqtAJ7JWESKMk/IkSo/9Z0UzzkBPpNQk6Oa70v8BtlhMnL/3FA7A1Ly5Gy/OF GWypWtF/U9wyEWDtXLw10uyrx+O2I9ZZ3D1C3xMOeM6A50q6+V5jy8B9hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBXOZLlbNBHm2wM7aa+DZZfb5fqMB8GA1UdIwQY MBaAFN6OYLsREIfQgD/D/MSvMnqoXAuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYt YTZmNTM0YzMwN2YxLzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYtYTZmNTM0YzMwN2Yx LzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHsuA2WR LnOU2/VmYh4zb2XYJjriDiHISE3gFouRe3+V2quSpZvfnKaXHg9qHizgCmo1F9ex Cg7MOWSUEcR63dM+uDjojp3ovQANFXC2bTlyMLcUbvGZDP2tVvIZrEt90RkfYZV7 t0nnRc/21Ip7JPNFA+RitPjvzUYcIYuqvvqRPefbepRvHeU3DfBLKmvYZVraKFdx IVADci4IfKlVh1LwgCi5O12Ae0yWPn1vopmgeqvYWAcsY8tA23wQaPdFMNvphE7b aJhT153+vvSquB2cs9idFCAZTAJQFm8oBkW26/KVPBDLNy0Syp70q477dvKERnhw rexb1Zfvk1vb3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:44 2025 by rpki-client