This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json) Hash identifier: VCyfDmBWqqOIyXCrZnKmPAWJGRg8O1HL/fKpD1E7dNA= Subject key identifier: D8:B4:58:38:D2:B8:96:6F:2B:29:3E:53:66:05:50:55:53:A5:DE:FB Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8 Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8 Certificate serial: 019AF1D1AD491CC1ECBC04D1D6804BEE5645 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: jEffyjY3BrMqFYhfAihuXQxJYx3FV2gEnI7atw23E+o=) 2: IXT2ShwYMDTPNqnR-lmJPCt_hM0.roa (hash: YktH9Y4fzOrvY5vhhRnBY1iI8LZ09iZ8zTmc5w1S0Jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ad:49:1c:c1:ec:bc:04:d1:d6:80:4b:ee:56:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=d8b45838d2b8966f2b293e536605505553a5defb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:70:5d:08:fb:e7:fd:7a:64:e4:b0:46:26: 0b:8a:b1:f9:67:88:40:09:12:88:62:3f:e2:c1:03: ca:db:30:d4:88:84:b9:2b:30:43:d1:9d:95:b6:d8: 68:8e:42:74:43:ed:eb:c1:70:3c:84:00:ba:85:46: a4:5c:8b:ff:70:af:2e:d6:a7:eb:2a:53:dc:6a:14: a1:7b:ee:74:a0:08:d6:30:07:e2:aa:3e:bb:1d:ba: 8e:44:f0:64:78:76:9a:52:98:8e:2f:44:b5:ba:f2: 61:69:dc:92:be:1e:78:8c:82:46:a7:63:a2:c8:09: 98:5b:0f:07:98:aa:d5:7b:06:95:eb:e9:42:60:bb: 53:16:6f:99:e9:e4:36:34:79:84:f8:3f:ff:1c:19: 4c:7f:60:49:0a:ea:ec:5c:8d:0e:10:31:2b:13:98: 4c:74:b7:ea:b6:83:4b:e9:e2:e9:0d:5c:d1:ae:a1: 87:97:2c:e8:f8:14:28:5b:02:6f:d4:64:cd:10:3b: a2:8d:ce:8e:a4:d7:24:dc:73:9f:00:f0:92:f9:88: 25:b8:0d:25:7c:24:6c:a6:4d:49:3f:5c:97:83:cd: 41:14:2e:cb:3a:9c:43:fa:48:8e:46:39:5a:26:30: 1d:b5:e9:f8:39:74:0f:50:02:0f:ac:54:99:72:4d: dd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B4:58:38:D2:B8:96:6F:2B:29:3E:53:66:05:50:55:53:A5:DE:FB X509v3 Authority Key Identifier: keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:53:a3:a1:38:08:a1:ef:a8:a0:dc:f6:a9:f9:94:eb:bf:45: 95:43:96:69:8f:19:fb:50:4b:5b:08:6e:b4:c6:73:76:f0:b0: 3e:98:c4:cb:76:cf:f0:24:b9:1d:7e:15:36:7a:a9:82:eb:a7: 37:69:c6:ae:0e:34:6d:a5:10:ed:42:5a:30:d3:05:c6:ee:59: 44:0e:45:18:6d:54:13:02:06:1f:19:ba:92:38:b8:1a:8a:6c: ac:a0:ee:e6:4d:f0:c2:57:f2:90:63:cf:c3:5f:5b:7e:59:e4: 6a:a0:bf:a9:14:64:29:14:e9:be:00:be:08:28:7a:af:50:c9: e4:d2:3b:28:47:3d:61:7f:f5:e5:cb:d0:70:14:18:88:dc:69: 89:02:ea:86:fb:6d:a0:2b:a1:39:17:79:9d:a2:c9:bb:6a:6b: 81:68:c8:35:47:95:36:ae:0a:2f:47:8e:e9:42:72:46:0e:d9: 99:93:5e:93:37:c7:64:69:10:68:3d:9b:2d:5b:fc:94:12:36: 36:ad:00:a4:5c:1d:57:2c:be:44:03:1f:02:ce:4b:8f:8b:89: 0c:38:fb:e1:aa:f8:8d:96:1c:2f:65:0c:62:6a:f3:f7:59:e7: ad:9d:28:68:fe:fb:af:a1:82:1e:6e:ed:2c:00:50:a3:c3:2c: ce:d9:64:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0a1JHMHsvATR1oBL7lZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTEzOTIxOGM1MmU4ZmU3ZjdjMzE0YjY2MzllN2Y4N2U1 Njc5YzgwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD EyhkOGI0NTgzOGQyYjg5NjZmMmIyOTNlNTM2NjA1NTA1NTUzYTVkZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3lwXQj75/16ZOSwRiYLirH5Z4hA CRKIYj/iwQPK2zDUiIS5KzBD0Z2VtthojkJ0Q+3rwXA8hAC6hUakXIv/cK8u1qfr KlPcahShe+50oAjWMAfiqj67HbqORPBkeHaaUpiOL0S1uvJhadySvh54jIJGp2Oi yAmYWw8HmKrVewaV6+lCYLtTFm+Z6eQ2NHmE+D//HBlMf2BJCursXI0OEDErE5hM dLfqtoNL6eLpDVzRrqGHlyzo+BQoWwJv1GTNEDuijc6OpNck3HOfAPCS+YgluA0l fCRspk1JP1yXg81BFC7LOpxD+kiORjlaJjAdten4OXQPUAIPrFSZck3dkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNi0WDjSuJZvKyk+U2YFUFVTpd77MB8GA1UdIwQY MBaAFN4ROSGMUuj+f3wxS2Y55/h+VnnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUt MzhhMzg1ZjM1ZTNiLzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUtMzhhMzg1ZjM1ZTNi LzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFOjoTgI oe+ooNz2qfmU679FlUOWaY8Z+1BLWwhutMZzdvCwPpjEy3bP8CS5HX4VNnqpguun N2nGrg40baUQ7UJaMNMFxu5ZRA5FGG1UEwIGHxm6kji4GopsrKDu5k3wwlfykGPP w19bflnkaqC/qRRkKRTpvgC+CCh6r1DJ5NI7KEc9YX/15cvQcBQYiNxpiQLqhvtt oCuhORd5naLJu2prgWjINUeVNq4KL0eO6UJyRg7ZmZNekzfHZGkQaD2bLVv8lBI2 Nq0ApFwdVyy+RAMfAs5Lj4uJDDj74ar4jZYcL2UMYmrz91nnrZ0oaP77r6GCHm7t LABQo8MsztlkGw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:56 2025 by rpki-client