This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft File: 3Mx29__HFoYLOtY56_kdxN1hMAA.mft (raw, json) Hash identifier: 7j0b/RscZm+n0pb6ragUawyphw5JY9mKByCAb+x1Cwk= Subject key identifier: C2:06:45:74:11:B6:B1:6A:0A:8E:54:BC:F3:72:1B:CB:6E:E2:F5:4B Authority key identifier: DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00 Certificate issuer: /CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000 Certificate serial: 019AF31C391BD5A00142854935EB43770D81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft Manifest number: 0B25 Signing time: Sat 06 Dec 2025 10:01:44 +0000 Manifest this update: Sat 06 Dec 2025 10:01:44 +0000 Manifest next update: Sun 07 Dec 2025 10:01:44 +0000 Files and hashes: 1: 3Mx29__HFoYLOtY56_kdxN1hMAA.crl (hash: +IlyFXWh/HS0ToX+1snnU1b8xxjxo8k85z9msHg/I9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:39:1b:d5:a0:01:42:85:49:35:eb:43:77:0d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000 Validity Not Before: Dec 6 10:01:44 2025 GMT Not After : Dec 7 10:01:44 2025 GMT Subject: CN=c206457411b6b16a0a8e54bcf3721bcb6ee2f54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a1:8e:07:e9:a9:0c:4a:17:16:fb:d9:7d:31: 74:ea:3a:2b:ed:94:cc:85:ef:92:d2:9e:ae:cb:29: b8:67:9b:89:20:0c:c3:1d:3b:d8:bd:a4:5c:9c:d0: 01:2a:fe:63:61:c8:62:3e:15:34:e1:a8:9f:41:52: bd:c4:08:53:88:80:5c:36:4b:7c:48:3f:2f:43:88: 7b:3e:09:8d:6d:8f:fc:19:1d:6c:4b:ef:d8:1a:e5: 0b:9e:93:7a:43:1b:43:51:44:40:63:12:35:98:b8: e4:a1:0f:a5:ac:b8:04:5e:ac:f7:7c:23:63:ef:13: 02:f7:4f:29:f7:e4:a9:0f:74:ca:5b:89:b6:3a:cb: 60:6b:ad:07:27:d5:55:0d:47:d4:7c:76:52:dd:4e: 84:63:91:53:68:9d:34:37:ca:95:d2:4b:78:96:db: ca:72:4c:5b:43:35:0a:86:6a:91:db:95:06:76:5a: 61:50:a2:5a:88:92:84:7f:fc:2c:79:04:b2:a4:6a: e4:bc:55:a2:2b:24:ee:4c:80:3a:1d:9a:4a:8a:c4: 14:d4:31:4f:c9:d8:1d:18:cb:75:11:8a:89:34:8f: a9:f0:95:57:e5:e5:ef:75:56:70:f1:b2:39:c2:6e: 10:07:6d:83:27:9e:d5:25:89:a4:e7:fa:a2:37:50: 2c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:06:45:74:11:B6:B1:6A:0A:8E:54:BC:F3:72:1B:CB:6E:E2:F5:4B X509v3 Authority Key Identifier: keyid:DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fd:84:3d:34:d0:82:a1:f2:9f:b2:37:0c:44:1b:5f:ba:b9: cc:ec:78:59:11:1f:93:db:b0:89:8f:78:7d:03:51:b9:aa:78: 32:95:86:10:55:eb:03:58:7e:4c:bd:7f:c1:1d:b9:50:f7:0e: 16:80:1d:f0:f0:09:20:40:61:16:7c:19:51:eb:34:d8:7e:07: 23:68:0f:8c:cd:36:e1:41:41:3b:e3:a2:2c:6b:1b:32:f5:c7: e1:61:81:94:49:b4:0c:47:9d:03:3a:93:d2:44:44:b7:05:c5: 78:39:d7:6f:cb:96:b9:8c:24:c7:d7:57:f4:d6:7f:91:ed:28: e3:c1:29:7f:66:e8:b3:7e:ac:9a:93:c6:e0:9e:16:2a:bd:0f: 3c:df:49:27:1d:8a:2d:98:8a:2a:f7:89:3a:b9:81:8c:95:94: b9:03:34:68:6f:5f:24:cc:bc:1c:4e:a1:4a:bf:94:53:3d:8b: 39:68:40:80:19:36:c1:25:b4:d6:53:64:ca:c3:a3:34:8e:06: 2b:8c:9c:62:c5:8a:16:cb:85:bd:32:4a:d2:5e:8e:9c:3a:76: 2b:63:42:78:7d:20:42:49:50:a7:1e:cc:b0:cd:66:c4:93:10: a7:24:4e:ab:79:94:42:eb:0e:7f:c4:7a:3e:af:d8:15:82:62: 3a:30:0e:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDkb1aABQoVJNetDdw2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjY2M3NmY3ZmZjNzE2ODYwYjNhZDYzOWViZjkxZGM0ZGQ2 MTMwMDAwHhcNMjUxMjA2MTAwMTQ0WhcNMjUxMjA3MTAwMTQ0WjAzMTEwLwYDVQQD EyhjMjA2NDU3NDExYjZiMTZhMGE4ZTU0YmNmMzcyMWJjYjZlZTJmNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqGOB+mpDEoXFvvZfTF06jor7ZTM he+S0p6uyym4Z5uJIAzDHTvYvaRcnNABKv5jYchiPhU04aifQVK9xAhTiIBcNkt8 SD8vQ4h7PgmNbY/8GR1sS+/YGuULnpN6QxtDUURAYxI1mLjkoQ+lrLgEXqz3fCNj 7xMC908p9+SpD3TKW4m2Ostga60HJ9VVDUfUfHZS3U6EY5FTaJ00N8qV0kt4ltvK ckxbQzUKhmqR25UGdlphUKJaiJKEf/wseQSypGrkvFWiKyTuTIA6HZpKisQU1DFP ydgdGMt1EYqJNI+p8JVX5eXvdVZw8bI5wm4QB22DJ57VJYmk5/qiN1AsKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIGRXQRtrFqCo5UvPNyG8tu4vVLMB8GA1UdIwQY MBaAFNzMdvf/xxaGCzrWOev5HcTdYTAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM014MjlfX0hGb1lMT3RZNTZfa2R4TjFoTUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xOGE2N2UtN2NiZC00YzQ1LTg4OWMt YWU3Yjg5MTc0NzEwLzEvM014MjlfX0hGb1lMT3RZNTZfa2R4TjFoTUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xOGE2N2UtN2NiZC00YzQ1LTg4OWMtYWU3Yjg5MTc0NzEw LzEvM014MjlfX0hGb1lMT3RZNTZfa2R4TjFoTUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/2EPTTQ gqHyn7I3DEQbX7q5zOx4WREfk9uwiY94fQNRuap4MpWGEFXrA1h+TL1/wR25UPcO FoAd8PAJIEBhFnwZUes02H4HI2gPjM024UFBO+OiLGsbMvXH4WGBlEm0DEedAzqT 0kREtwXFeDnXb8uWuYwkx9dX9NZ/ke0o48Epf2bos36smpPG4J4WKr0PPN9JJx2K LZiKKveJOrmBjJWUuQM0aG9fJMy8HE6hSr+UUz2LOWhAgBk2wSW01lNkysOjNI4G K4ycYsWKFsuFvTJK0l6OnDp2K2NCeH0gQklQpx7MsM1mxJMQpyROq3mUQusOf8R6 Pq/YFYJiOjAO0g== -----END CERTIFICATE-----Generated at Sat Dec 6 19:32:17 2025 by rpki-client