This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json) Hash identifier: Xh1R6qO+yZOq7tw5ySjDwfdtOko0eENTMRCDldP2z0Q= Subject key identifier: C9:34:E9:0F:45:53:E6:03:EE:48:05:AE:03:CD:5A:7E:56:F6:25:82 Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2 Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2 Certificate serial: 019AF6F7DAF5321C8C53B74A0950F24B4CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft Manifest number: 07DC Signing time: Sun 07 Dec 2025 04:00:29 +0000 Manifest this update: Sun 07 Dec 2025 04:00:29 +0000 Manifest next update: Mon 08 Dec 2025 04:00:29 +0000 Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: 9xYY2pn+RfxSAjuh9+MTt/VhgiFPGrV9ztwgQYS2f+s=) 2: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (hash: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f7:da:f5:32:1c:8c:53:b7:4a:09:50:f2:4b:4c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2 Validity Not Before: Dec 7 04:00:29 2025 GMT Not After : Dec 8 04:00:29 2025 GMT Subject: CN=c934e90f4553e603ee4805ae03cd5a7e56f62582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:21:3f:7d:d1:d3:c8:02:ac:b5:2f:d1:fc: 8f:2e:65:c6:cc:a6:b9:25:4f:e7:e1:c7:b5:b5:d4: cb:6a:45:6b:f0:ec:11:57:a2:b1:a4:13:90:37:bc: ff:d0:70:84:13:b3:0e:f6:fb:bc:fd:f7:1f:f1:0e: 00:c6:f6:59:c2:df:bd:f6:42:b5:26:8d:e6:73:3e: 2a:44:5c:a5:b3:1a:97:d7:e7:d8:b7:78:51:27:ce: 33:20:5a:ab:72:1b:db:ee:02:d9:8a:f8:4a:0d:3b: 1f:09:5f:56:8b:3b:54:83:9f:74:1d:75:b8:c6:1a: df:af:ed:fa:5a:dd:f8:3c:98:f1:ec:1f:eb:ac:83: 03:8a:e0:4b:dc:d1:0d:28:35:cf:42:b3:ec:02:9e: 8d:3c:dc:5b:48:db:70:b1:60:ba:ff:8f:04:65:b5: 97:ce:f2:96:03:4f:cb:d2:70:d9:83:af:06:15:0c: 68:2c:eb:a0:d8:24:50:04:6d:b4:3e:de:9a:b0:26: a2:f3:36:31:a5:7b:86:3a:88:e2:6e:5b:5f:0d:b5: 0f:a8:2a:18:bb:60:40:ff:55:67:c9:3e:ef:55:9f: 55:17:ca:18:36:63:5e:48:96:a2:fa:e7:3f:40:b5: 4f:a9:6c:ba:b6:78:2a:6a:69:ee:09:fd:46:90:01: 19:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:34:E9:0F:45:53:E6:03:EE:48:05:AE:03:CD:5A:7E:56:F6:25:82 X509v3 Authority Key Identifier: keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ac:3b:05:22:84:b7:57:30:2b:ed:52:c7:11:37:73:15:38: ed:50:76:20:71:b2:c5:76:05:a7:64:f5:86:a9:dc:cc:05:e8: 06:9b:5f:36:84:9f:ac:21:3f:bb:ee:af:80:1c:ff:48:00:a6: c7:47:2f:59:11:04:23:09:9b:57:b1:0c:ae:09:c5:44:56:3d: 7b:0d:24:dd:9a:a5:0a:52:a2:5d:fc:7b:1f:8b:01:68:25:e0: 6e:f3:c0:3f:02:d5:34:74:7b:93:f5:d9:a4:e0:60:f0:7a:d9: b8:1f:d5:ab:2e:2e:40:3a:e6:39:e1:86:1c:c2:36:0f:be:fd: 60:13:7d:80:62:7a:6d:36:a8:ad:55:7b:ab:0c:00:b7:f6:a2: 61:a2:5f:e7:89:ad:f2:4f:fe:f7:f0:1c:43:da:95:ed:3a:8e: 2a:e5:4d:80:64:55:35:31:58:b0:75:a1:c2:bc:50:b9:55:94: 16:b9:fd:ae:c2:73:f4:9a:ee:8b:21:a1:b9:80:cd:a9:18:02: ba:29:3e:52:5c:b1:af:73:3c:af:49:9a:91:c6:2e:31:64:0b: b6:1a:8a:b6:d8:fd:15:91:6f:3f:c0:34:5a:2c:3d:bd:43:9f: d6:c5:cc:3e:f4:8a:20:85:7d:92:1e:f2:4d:47:33:bc:1c:79: 9e:30:a8:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr299r1MhyMU7dKCVDyS0zyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDNlYTJjZDA3OTk3ZWNkZmUxNzE4ODg3MjcwODY1MmUx NzJkZjIwHhcNMjUxMjA3MDQwMDI5WhcNMjUxMjA4MDQwMDI5WjAzMTEwLwYDVQQD EyhjOTM0ZTkwZjQ1NTNlNjAzZWU0ODA1YWUwM2NkNWE3ZTU2ZjYyNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSshP33R08gCrLUv0fyPLmXGzKa5 JU/n4ce1tdTLakVr8OwRV6KxpBOQN7z/0HCEE7MO9vu8/fcf8Q4AxvZZwt+99kK1 Jo3mcz4qRFylsxqX1+fYt3hRJ84zIFqrchvb7gLZivhKDTsfCV9WiztUg590HXW4 xhrfr+36Wt34PJjx7B/rrIMDiuBL3NENKDXPQrPsAp6NPNxbSNtwsWC6/48EZbWX zvKWA0/L0nDZg68GFQxoLOug2CRQBG20Pt6asCai8zYxpXuGOojibltfDbUPqCoY u2BA/1VnyT7vVZ9VF8oYNmNeSJai+uc/QLVPqWy6tngqamnuCf1GkAEZYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMk06Q9FU+YD7kgFrgPNWn5W9iWCMB8GA1UdIwQY MBaAFNxD6izQeZfs3+FxiIcnCGUuFy3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2Yt NDQ2NDRkZDVlZDQ0LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2YtNDQ2NDRkZDVlZDQ0 LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqw7BSKE t1cwK+1SxxE3cxU47VB2IHGyxXYFp2T1hqnczAXoBptfNoSfrCE/u+6vgBz/SACm x0cvWREEIwmbV7EMrgnFRFY9ew0k3ZqlClKiXfx7H4sBaCXgbvPAPwLVNHR7k/XZ pOBg8HrZuB/Vqy4uQDrmOeGGHMI2D779YBN9gGJ6bTaorVV7qwwAt/aiYaJf54mt 8k/+9/AcQ9qV7TqOKuVNgGRVNTFYsHWhwrxQuVWUFrn9rsJz9JruiyGhuYDNqRgC uik+Ulyxr3M8r0makcYuMWQLthqKttj9FZFvP8A0Wiw9vUOf1sXMPvSKIIV9kh7y TUczvBx5njCo3Q== -----END CERTIFICATE-----Generated at Sun Dec 7 09:00:14 2025 by rpki-client