This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft File: 3DU3KrVODfO_UU1fCMpS5De9kaQ.mft (raw, json) Hash identifier: /q2ggqaA63+B+sCg8QtAsWEDxHojfKexPA9nFKqPaTY= Subject key identifier: 26:A8:8C:B7:F0:6B:A0:1E:16:A8:58:FA:B5:BD:D1:53:52:09:46:08 Authority key identifier: DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4 Certificate issuer: /CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4 Certificate serial: 019AF2AD9E6FB1190CA5D26C0BE254F7BD82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft Manifest number: 06B3 Signing time: Sat 06 Dec 2025 08:00:55 +0000 Manifest this update: Sat 06 Dec 2025 08:00:55 +0000 Manifest next update: Sun 07 Dec 2025 08:00:55 +0000 Files and hashes: 1: 3DU3KrVODfO_UU1fCMpS5De9kaQ.crl (hash: yvSobtJmPgsSdyVPDoulM12d+BVgkxrV2zPJuG9igPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:9e:6f:b1:19:0c:a5:d2:6c:0b:e2:54:f7:bd:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc35372ab54e0df3bf514d5f08ca52e437bd91a4 Validity Not Before: Dec 6 08:00:55 2025 GMT Not After : Dec 7 08:00:55 2025 GMT Subject: CN=26a88cb7f06ba01e16a858fab5bdd15352094608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:3d:09:11:3d:04:8b:08:00:ca:74:8c:3d: ee:1d:bf:dd:e3:a5:17:f6:ef:57:d2:71:f2:12:70: 1e:5d:54:b5:5c:6f:a9:55:e1:91:f4:b7:68:a3:33: 57:ee:c7:9a:cc:20:2c:03:e6:90:25:a9:4b:c9:fa: db:40:de:24:36:0f:5a:ed:fd:05:b1:ca:05:ec:d9: 1e:ca:6e:fd:f2:6b:37:a1:74:b3:d9:fc:7f:5e:2b: 6b:8d:9a:cc:d8:9b:7c:79:8d:75:af:92:b9:b9:12: ee:6f:6d:c4:ab:c7:94:8f:1e:f2:ab:27:8f:44:0c: 87:92:9f:4d:04:f3:9b:05:9b:ee:a3:86:f9:19:6d: 6e:7e:18:7f:1c:1f:36:e5:7e:8c:12:71:f1:d8:b8: f9:c4:6c:ac:87:84:53:38:77:da:63:74:3c:5f:0a: e8:87:a8:f9:32:7f:23:08:25:25:05:3b:13:c3:e3: 75:57:6d:fb:0f:f9:f6:9b:4a:1b:7f:e0:be:88:9e: c2:cf:2e:f2:22:c6:75:8b:f4:7c:89:b0:30:fc:b8: 07:e8:cb:cc:c2:af:99:2b:04:be:62:58:22:83:4e: 2e:ec:d8:29:a0:9c:0c:3a:ce:96:ed:1a:65:2d:7d: 94:1b:75:32:16:cc:15:bf:a4:aa:72:0b:a7:cc:6b: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A8:8C:B7:F0:6B:A0:1E:16:A8:58:FA:B5:BD:D1:53:52:09:46:08 X509v3 Authority Key Identifier: keyid:DC:35:37:2A:B5:4E:0D:F3:BF:51:4D:5F:08:CA:52:E4:37:BD:91:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DU3KrVODfO_UU1fCMpS5De9kaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1a34f-93a3-41b0-b096-1977ac24d211/1/3DU3KrVODfO_UU1fCMpS5De9kaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:97:fc:6c:87:1b:c4:dc:81:1b:a4:9f:48:f2:45:c7:b3:80: d1:97:89:09:59:c6:88:4c:19:48:3c:1c:67:1c:75:0b:d5:0f: 1d:2b:68:80:07:85:55:56:e9:59:12:f9:51:78:25:b0:1c:65: 59:d2:e2:c8:51:97:ef:3a:31:a9:8e:8d:0e:2b:3f:d2:1a:22: a2:71:e1:8c:ba:e1:35:ef:1d:b2:40:06:31:43:b1:0d:35:ec: 7b:f0:ff:5b:e9:16:b8:85:c1:6b:d5:d1:56:0b:2f:b9:68:8f: c1:97:44:4a:d9:7e:e2:fa:fd:15:4c:02:bb:55:fe:e3:43:23: 78:bf:2e:46:f3:c7:56:ed:57:d6:73:68:b2:b1:e6:54:53:32: a1:94:be:e5:aa:77:de:6c:d3:54:14:f3:02:17:81:16:ee:98: 7d:a8:81:e8:e9:aa:62:22:48:0f:b8:73:3d:63:9b:f8:05:61: 8e:cb:c1:ca:ec:38:1e:ed:f7:f3:03:62:d3:9b:e7:cb:f5:db: 85:13:69:80:61:15:ec:01:62:62:82:bc:23:97:99:8f:6a:93: c3:0a:a8:9c:35:9a:c8:0b:cc:a3:9d:a1:14:0b:32:34:ae:c7: 2c:e7:6f:e8:7a:1a:0e:09:c1:5e:ac:51:33:23:2b:dd:6b:ed: 07:3b:49:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZ5vsRkMpdJsC+JU972CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMzUzNzJhYjU0ZTBkZjNiZjUxNGQ1ZjA4Y2E1MmU0Mzdi ZDkxYTQwHhcNMjUxMjA2MDgwMDU1WhcNMjUxMjA3MDgwMDU1WjAzMTEwLwYDVQQD EygyNmE4OGNiN2YwNmJhMDFlMTZhODU4ZmFiNWJkZDE1MzUyMDk0NjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCg9CRE9BIsIAMp0jD3uHb/d46UX 9u9X0nHyEnAeXVS1XG+pVeGR9LdoozNX7seazCAsA+aQJalLyfrbQN4kNg9a7f0F scoF7Nkeym798ms3oXSz2fx/XitrjZrM2Jt8eY11r5K5uRLub23Eq8eUjx7yqyeP RAyHkp9NBPObBZvuo4b5GW1ufhh/HB825X6MEnHx2Lj5xGysh4RTOHfaY3Q8Xwro h6j5Mn8jCCUlBTsTw+N1V237D/n2m0obf+C+iJ7Czy7yIsZ1i/R8ibAw/LgH6MvM wq+ZKwS+Ylgig04u7NgpoJwMOs6W7RplLX2UG3UyFswVv6SqcgunzGv51QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaojLfwa6AeFqhY+rW90VNSCUYIMB8GA1UdIwQY MBaAFNw1Nyq1Tg3zv1FNXwjKUuQ3vZGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0RVM0tyVk9EZk9fVVUxZkNNcFM1RGU5a2FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMWEzNGYtOTNhMy00MWIwLWIwOTYt MTk3N2FjMjRkMjExLzEvM0RVM0tyVk9EZk9fVVUxZkNNcFM1RGU5a2FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iMWEzNGYtOTNhMy00MWIwLWIwOTYtMTk3N2FjMjRkMjEx LzEvM0RVM0tyVk9EZk9fVVUxZkNNcFM1RGU5a2FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5f8bIcb xNyBG6SfSPJFx7OA0ZeJCVnGiEwZSDwcZxx1C9UPHStogAeFVVbpWRL5UXglsBxl WdLiyFGX7zoxqY6NDis/0hoionHhjLrhNe8dskAGMUOxDTXse/D/W+kWuIXBa9XR VgsvuWiPwZdEStl+4vr9FUwCu1X+40MjeL8uRvPHVu1X1nNosrHmVFMyoZS+5ap3 3mzTVBTzAheBFu6YfaiB6OmqYiJID7hzPWOb+AVhjsvByuw4Hu338wNi05vny/Xb hRNpgGEV7AFiYoK8I5eZj2qTwwqonDWayAvMo52hFAsyNK7HLOdv6HoaDgnBXqxR MyMr3WvtBztJjA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:26 2025 by rpki-client