This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json) Hash identifier: 1DNh+Ir4qCXLQBgG7bpHe2YmWSbbyUOuoN5IUnU7xu8= Subject key identifier: F9:C4:A3:B6:1A:33:D8:22:8A:7C:98:D3:AE:EB:43:7C:FF:A1:60:45 Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48 Certificate issuer: /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448 Certificate serial: 019AF2AD42CD568497A1735344B1374490B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 08:00:32 +0000 Manifest this update: Sat 06 Dec 2025 08:00:32 +0000 Manifest next update: Sun 07 Dec 2025 08:00:32 +0000 Files and hashes: 1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: 0iiO5yYTxnn2Q80UMsingjRp4SYwGHfIfhHoRBJab50=) 2: vMasAu2YCDgiGttPAAgT_LUqims.roa (hash: vZV6QUfnrQuKBHkkqaJTtSdtOrcdYKhNNa/gcjcEoTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:42:cd:56:84:97:a1:73:53:44:b1:37:44:90:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448 Validity Not Before: Dec 6 08:00:32 2025 GMT Not After : Dec 7 08:00:32 2025 GMT Subject: CN=f9c4a3b61a33d8228a7c98d3aeeb437cffa16045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:84:ab:4c:8d:62:7c:39:11:44:ff:da:74: 53:58:63:ab:46:8d:7e:76:55:8e:32:3d:0f:41:33: bf:45:d7:23:f5:af:e8:aa:24:5a:45:9f:5d:7a:95: 71:8e:95:42:fd:bc:d2:b7:06:56:f9:22:ac:d8:8a: 82:23:04:47:4c:5c:8b:8c:5b:6c:21:9c:7f:9f:9d: e9:58:bb:2c:f0:8d:22:85:0c:94:b9:85:2a:d4:5a: 7e:a8:75:1d:70:1f:f1:9a:79:8a:0b:69:11:14:91: e2:03:f2:21:8e:1c:54:ac:4c:17:28:b6:69:f3:80: 21:23:95:4c:54:0c:0b:46:ba:51:d2:1d:9e:45:3f: 2e:51:51:71:a2:c3:43:4b:64:f6:64:c4:17:3d:26: b6:2e:0e:d6:8f:01:0c:08:29:0b:50:86:47:b0:59: 8e:f0:66:36:d1:05:20:1c:b8:6b:91:cb:28:a7:48: f8:81:4a:16:52:53:fa:56:a3:4e:b2:cc:f0:d8:bb: 73:84:7f:94:60:3f:f7:44:a5:c7:74:70:a5:66:7e: 4a:f2:95:3f:ac:b1:0d:72:ed:9c:5e:84:c6:87:9c: 0f:b8:5a:f1:09:8c:ef:d6:1c:ee:fd:47:4a:be:93: 57:d5:1b:6d:43:3e:47:2f:42:5f:cc:0a:c4:cf:4f: 9e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C4:A3:B6:1A:33:D8:22:8A:7C:98:D3:AE:EB:43:7C:FF:A1:60:45 X509v3 Authority Key Identifier: keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:5c:eb:05:2f:2b:98:51:03:8e:2b:bf:e1:7b:d6:12:ff:95: 38:20:aa:ce:45:7a:8b:77:bb:db:d9:a3:c1:24:a4:c4:3f:ae: 9f:96:25:60:3c:cf:5c:4c:8b:5f:59:22:c4:bf:56:78:b8:39: 7b:f8:cc:6d:d0:e9:eb:83:8c:34:aa:6b:b0:e1:b9:00:69:75: 37:2f:52:26:01:f1:10:8a:f6:27:64:2c:ff:5e:2b:e6:0b:53: 01:20:7e:db:2f:2d:d3:33:71:85:f2:6c:01:55:1a:15:ab:f6: 0c:32:46:5a:8b:85:54:ee:99:a9:28:5f:f2:35:38:d6:8a:f6: cc:54:c9:4f:69:f8:8a:8f:fa:ac:9c:c4:e9:ca:11:25:2d:79: 18:c0:6d:bf:85:df:c3:7a:c9:a9:0b:7e:a2:e2:13:ff:61:53: 7f:80:10:80:30:27:fd:9a:ea:e4:61:2c:7a:a1:aa:91:06:36: 11:d8:1e:47:68:d8:df:fc:71:0c:7e:3f:a4:26:0d:28:df:8a: 76:af:80:d6:33:5c:87:6e:92:90:57:9e:28:49:d4:23:67:80: 8f:79:cb:b2:8c:7e:6c:d6:c8:97:cb:eb:51:45:0e:58:f5:46: 52:56:59:3a:37:8c:0b:49:83:9f:61:db:9b:ed:2d:ac:d3:ec: 75:ef:d9:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrULNVoSXoXNTRLE3RJC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNzZkMmY0M2VjMTdkZmM4MDVjZGIwNWYwMDBhMTU3OTg5 ZWQ0NDgwHhcNMjUxMjA2MDgwMDMyWhcNMjUxMjA3MDgwMDMyWjAzMTEwLwYDVQQD EyhmOWM0YTNiNjFhMzNkODIyOGE3Yzk4ZDNhZWViNDM3Y2ZmYTE2MDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBuEq0yNYnw5EUT/2nRTWGOrRo1+ dlWOMj0PQTO/Rdcj9a/oqiRaRZ9depVxjpVC/bzStwZW+SKs2IqCIwRHTFyLjFts IZx/n53pWLss8I0ihQyUuYUq1Fp+qHUdcB/xmnmKC2kRFJHiA/IhjhxUrEwXKLZp 84AhI5VMVAwLRrpR0h2eRT8uUVFxosNDS2T2ZMQXPSa2Lg7WjwEMCCkLUIZHsFmO 8GY20QUgHLhrkcsop0j4gUoWUlP6VqNOsszw2LtzhH+UYD/3RKXHdHClZn5K8pU/ rLENcu2cXoTGh5wPuFrxCYzv1hzu/UdKvpNX1RttQz5HL0JfzArEz0+e3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnEo7YaM9giinyY067rQ3z/oWBFMB8GA1UdIwQY MBaAFNx20vQ+wX38gFzbBfAAoVeYntRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNjFlNDAtYWMwOS00NzU2LTk0ZWYt OTNjNjQ1N2NhZjMzLzEvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jNjFlNDAtYWMwOS00NzU2LTk0ZWYtOTNjNjQ1N2NhZjMz LzEvM0hiUzlEN0JmZnlBWE5zRjhBQ2hWNWllMUVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVzrBS8r mFEDjiu/4XvWEv+VOCCqzkV6i3e729mjwSSkxD+un5YlYDzPXEyLX1kixL9WeLg5 e/jMbdDp64OMNKprsOG5AGl1Ny9SJgHxEIr2J2Qs/14r5gtTASB+2y8t0zNxhfJs AVUaFav2DDJGWouFVO6ZqShf8jU41or2zFTJT2n4io/6rJzE6coRJS15GMBtv4Xf w3rJqQt+ouIT/2FTf4AQgDAn/Zrq5GEseqGqkQY2EdgeR2jY3/xxDH4/pCYNKN+K dq+A1jNch26SkFeeKEnUI2eAj3nLsox+bNbIl8vrUUUOWPVGUlZZOjeMC0mDn2Hb m+0trNPsde/Z6A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:41:35 2025 by rpki-client