This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json) Hash identifier: Ng2nAJriskjTV8hJ9X5wyq3svsZaoyep3Zt05xQQXeM= Subject key identifier: 09:FD:C2:F6:2F:54:24:30:0E:F3:59:F0:A4:8C:E9:6F:D9:0F:16:D1 Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41 Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641 Certificate serial: 019AF23F6D26A5A3EEFF10F09B6C430567E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 06:00:33 +0000 Manifest this update: Sat 06 Dec 2025 06:00:33 +0000 Manifest next update: Sun 07 Dec 2025 06:00:33 +0000 Files and hashes: 1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=) 2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=) 3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: sJeFx68ntvhBBzhMdbH8cM02cELmoaxHCok6DAitlRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6d:26:a5:a3:ee:ff:10:f0:9b:6c:43:05:67:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641 Validity Not Before: Dec 6 06:00:33 2025 GMT Not After : Dec 7 06:00:33 2025 GMT Subject: CN=09fdc2f62f5424300ef359f0a48ce96fd90f16d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:de:53:58:af:c3:22:2e:4e:bf:fa:a3:e1:c3: e3:e9:d7:32:d6:67:7d:4a:02:13:5f:1b:d7:5a:7a: 62:ba:12:9a:6b:84:9f:05:1c:68:31:90:2b:14:b4: 4e:41:73:fb:6f:15:f3:77:ed:f8:98:f4:7d:dc:a7: 24:da:45:12:a3:7e:d4:65:2c:9f:b1:a1:6a:66:3f: b2:16:b4:98:35:60:b4:a8:95:26:24:e4:5a:b6:f0: 61:6d:42:cc:ae:5e:af:5d:8f:10:75:91:22:16:5d: 78:06:7d:e9:e2:d0:dc:17:3d:ba:88:f1:3b:e9:4f: bc:b6:bf:01:64:18:24:0e:7f:ee:51:00:ad:9e:cf: 46:38:71:29:94:10:b5:eb:3e:25:ab:cf:71:0b:24: fc:0f:55:1c:82:78:6e:7e:cc:36:6b:c0:34:4f:9f: 87:e5:d1:e1:3f:d4:47:65:a5:0c:6e:ef:2d:18:6b: b7:e8:f6:58:07:9d:93:c4:72:a6:2f:22:6a:5f:56: 5d:d8:8f:1a:69:f1:25:11:ac:d1:a2:e8:4e:38:fb: ae:98:8d:50:eb:ee:ce:7d:02:bd:3b:91:e6:71:42: b4:1c:82:e1:36:fe:c3:c6:1d:da:c4:a5:03:26:74: 9c:3d:d2:56:f5:ee:e9:ed:98:6a:a0:60:c9:5e:14: 51:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FD:C2:F6:2F:54:24:30:0E:F3:59:F0:A4:8C:E9:6F:D9:0F:16:D1 X509v3 Authority Key Identifier: keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:84:28:3d:cb:1c:4c:92:74:eb:78:99:60:ac:15:6f:75:b4: a8:d8:33:dc:19:75:c3:e5:cf:1c:4d:31:08:fc:0a:02:23:5b: 08:f1:8e:8c:87:33:2e:31:28:af:9f:1f:52:e8:f1:a9:ed:df: d3:95:c9:6e:a1:e7:ab:0b:92:8b:bc:27:88:95:91:1f:13:32: ed:22:2d:cb:11:02:a7:ac:64:5d:61:95:f3:19:61:c5:5f:0f: 3d:7b:54:f6:f3:89:93:b1:d1:f2:8b:9a:10:6f:65:82:67:89: bb:ce:66:56:14:e4:9e:8d:92:be:70:74:a9:70:4f:43:60:00: 2c:4e:76:32:d9:7e:db:b7:dd:3c:44:46:a0:c8:48:59:c2:80: 1a:10:ad:53:83:65:8b:cd:e5:7e:6f:88:c3:37:46:e5:b2:43: e3:05:1a:90:cd:34:d4:b9:96:dc:0a:48:7d:08:c5:a0:ab:91: 8c:fe:e7:85:91:2e:fe:b1:67:55:ea:2e:b9:42:6d:50:9a:4a: a5:22:b2:fa:72:6e:0d:fd:ce:6c:e2:d4:60:ab:46:11:ae:90: 4a:62:ac:5b:dc:01:f5:c4:16:38:14:b5:5c:8d:1a:5d:5e:bd: 3c:6a:bb:dc:6e:63:70:84:1f:cb:ab:af:31:e9:cb:7c:9f:9b: 0a:f1:ff:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP20mpaPu/xDwm2xDBWfnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTBkNDMyOTNjZmViZjg3ZTdlYWIyYjBkNTUzZmQyMWE2 ZTk2NDEwHhcNMjUxMjA2MDYwMDMzWhcNMjUxMjA3MDYwMDMzWjAzMTEwLwYDVQQD EygwOWZkYzJmNjJmNTQyNDMwMGVmMzU5ZjBhNDhjZTk2ZmQ5MGYxNmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt5TWK/DIi5Ov/qj4cPj6dcy1md9 SgITXxvXWnpiuhKaa4SfBRxoMZArFLROQXP7bxXzd+34mPR93Kck2kUSo37UZSyf saFqZj+yFrSYNWC0qJUmJORatvBhbULMrl6vXY8QdZEiFl14Bn3p4tDcFz26iPE7 6U+8tr8BZBgkDn/uUQCtns9GOHEplBC16z4lq89xCyT8D1Ucgnhufsw2a8A0T5+H 5dHhP9RHZaUMbu8tGGu36PZYB52TxHKmLyJqX1Zd2I8aafElEazRouhOOPuumI1Q 6+7OfQK9O5HmcUK0HILhNv7Dxh3axKUDJnScPdJW9e7p7ZhqoGDJXhRR8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAn9wvYvVCQwDvNZ8KSM6W/ZDxbRMB8GA1UdIwQY MBaAFN6Q1DKTz+v4fn6rKw1VP9IabpZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODkt NTNlZGM2MjZiMjg3LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODktNTNlZGM2MjZiMjg3 LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYQoPcsc TJJ063iZYKwVb3W0qNgz3Bl1w+XPHE0xCPwKAiNbCPGOjIczLjEor58fUujxqe3f 05XJbqHnqwuSi7wniJWRHxMy7SItyxECp6xkXWGV8xlhxV8PPXtU9vOJk7HR8oua EG9lgmeJu85mVhTkno2SvnB0qXBPQ2AALE52Mtl+27fdPERGoMhIWcKAGhCtU4Nl i83lfm+IwzdG5bJD4wUakM001LmW3ApIfQjFoKuRjP7nhZEu/rFnVeouuUJtUJpK pSKy+nJuDf3ObOLUYKtGEa6QSmKsW9wB9cQWOBS1XI0aXV69PGq73G5jcIQfy6uv MenLfJ+bCvH/kQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:23 2025 by rpki-client