This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json) Hash identifier: 7x4C0+j/nWR7OvAL4FH7a+Py/Znn/yAI3oT18plkTzg= Subject key identifier: B1:FE:AC:45:ED:D5:4E:01:57:AA:C6:FF:A0:EB:D0:DF:2C:F3:D2:E4 Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30 Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730 Certificate serial: 019AF2AD84BB0343C85C73F4E86DFB8DDE5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 08:00:49 +0000 Manifest this update: Sat 06 Dec 2025 08:00:49 +0000 Manifest next update: Sun 07 Dec 2025 08:00:49 +0000 Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: 0nJT7CpRQWVSF2uROm1wpFL1GoKCE5yje344SmGreFI=) 2: ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa (hash: km1a7hNobV+/Bq/2l3UQLOxoqTuuQQAxWKpbP+WCwQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:84:bb:03:43:c8:5c:73:f4:e8:6d:fb:8d:de:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730 Validity Not Before: Dec 6 08:00:49 2025 GMT Not After : Dec 7 08:00:49 2025 GMT Subject: CN=b1feac45edd54e0157aac6ffa0ebd0df2cf3d2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:c8:dd:51:ef:8f:89:57:c7:28:ec:12:10: 08:42:44:ba:b0:17:d6:a0:12:ec:f6:27:26:bf:a5: 50:6c:66:cc:68:0b:9e:6a:c2:0d:dd:28:e8:6c:fe: 56:37:33:d1:43:ef:1e:e3:bf:38:5c:59:b0:55:29: 8f:04:86:6c:78:5b:17:72:88:29:5c:63:8f:2c:4e: 01:1c:5a:ca:de:68:28:cb:b2:2c:60:15:af:17:4c: 5e:b3:23:8e:aa:28:ce:c0:9a:d8:53:02:24:61:c3: 72:26:75:89:26:d3:02:29:03:da:ee:bb:8e:d2:40: da:bd:cc:9c:13:74:5f:c4:2a:d4:a0:35:51:52:6a: 09:a1:27:ec:2c:50:44:10:b8:a8:90:0e:3f:d0:2c: 2c:22:eb:a4:83:11:d4:ad:38:4d:a0:67:c0:ff:56: ab:1b:18:21:4e:67:90:1a:31:f0:fe:00:8b:8f:0d: f0:ca:a2:a0:ce:0f:d0:04:d5:72:02:46:dd:68:d3: ab:b0:4d:6b:d4:40:dc:60:f6:81:3d:61:15:f3:6d: 02:99:92:22:bd:d6:18:24:b4:0e:b8:c9:cb:19:44: fd:32:b5:73:d2:28:b1:97:6c:10:71:5d:ab:ee:41: f9:23:46:58:5a:9b:4a:47:b1:53:f8:ba:30:46:80: 76:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FE:AC:45:ED:D5:4E:01:57:AA:C6:FF:A0:EB:D0:DF:2C:F3:D2:E4 X509v3 Authority Key Identifier: keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:40:5d:1f:c2:20:ac:44:09:8b:22:d8:27:ca:02:d4:38:9a: c1:0f:8f:72:51:7c:af:7e:21:88:9f:87:d3:80:8e:24:ca:bc: 1e:e0:4d:7e:e9:84:e1:ee:68:71:53:d9:50:6a:91:6b:ca:f1: 69:e4:9c:e1:ef:8c:f4:2f:5c:cc:83:fe:90:04:1b:3d:b6:97: f1:35:68:00:68:39:fd:6d:54:3f:09:48:f2:85:3e:1d:df:c3: 7b:eb:71:25:fd:9e:2c:f7:cf:9b:c3:2f:45:37:56:21:eb:1d: 0a:4e:1a:87:cb:a7:d0:0d:93:60:f1:e2:17:5c:fd:45:44:d6: 03:c7:0b:cb:ae:09:f9:07:9c:ac:04:19:52:8e:5c:f8:7f:6e: 3b:a3:05:9d:3c:ca:d8:51:15:5b:99:d8:a0:62:9c:27:d5:50: 07:b7:1c:85:f2:85:4f:71:c4:69:9d:e7:d5:04:42:d4:d0:cc: af:2c:50:d6:bf:5f:16:dc:6a:bf:0a:71:8a:34:94:b4:83:8e: 22:80:f3:63:c8:89:74:5d:46:09:72:7e:ef:e8:24:2a:71:fc: b3:42:23:4d:61:94:2c:66:5d:6c:d7:ee:73:de:df:92:f0:fe: f1:22:06:8a:c2:3e:ec:41:86:11:45:ad:78:53:1c:de:df:f7: 7a:d5:ed:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYS7A0PIXHP06G37jd5eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGIyMDAzMDkwMWZmMmRmNGViZDFmNDllNDg5MWNiMjhm ZTA3MzAwHhcNMjUxMjA2MDgwMDQ5WhcNMjUxMjA3MDgwMDQ5WjAzMTEwLwYDVQQD EyhiMWZlYWM0NWVkZDU0ZTAxNTdhYWM2ZmZhMGViZDBkZjJjZjNkMmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVfI3VHvj4lXxyjsEhAIQkS6sBfW oBLs9icmv6VQbGbMaAueasIN3SjobP5WNzPRQ+8e4784XFmwVSmPBIZseFsXcogp XGOPLE4BHFrK3mgoy7IsYBWvF0xesyOOqijOwJrYUwIkYcNyJnWJJtMCKQPa7ruO 0kDavcycE3RfxCrUoDVRUmoJoSfsLFBEELiokA4/0CwsIuukgxHUrThNoGfA/1ar GxghTmeQGjHw/gCLjw3wyqKgzg/QBNVyAkbdaNOrsE1r1EDcYPaBPWEV820CmZIi vdYYJLQOuMnLGUT9MrVz0iixl2wQcV2r7kH5I0ZYWptKR7FT+LowRoB29QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLH+rEXt1U4BV6rG/6Dr0N8s89LkMB8GA1UdIwQY MBaAFN7bIAMJAf8t9OvR9J5Ikcso/gcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Nzg5NjQtZDgwMi00OGY5LTk2ZjEt ZTNiZmE3MmQ3ZWY4LzEvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82Nzg5NjQtZDgwMi00OGY5LTk2ZjEtZTNiZmE3MmQ3ZWY4 LzEvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEBdH8Ig rEQJiyLYJ8oC1DiawQ+PclF8r34hiJ+H04COJMq8HuBNfumE4e5ocVPZUGqRa8rx aeSc4e+M9C9czIP+kAQbPbaX8TVoAGg5/W1UPwlI8oU+Hd/De+txJf2eLPfPm8Mv RTdWIesdCk4ah8un0A2TYPHiF1z9RUTWA8cLy64J+QecrAQZUo5c+H9uO6MFnTzK 2FEVW5nYoGKcJ9VQB7cchfKFT3HEaZ3n1QRC1NDMryxQ1r9fFtxqvwpxijSUtIOO IoDzY8iJdF1GCXJ+7+gkKnH8s0IjTWGULGZdbNfuc97fkvD+8SIGisI+7EGGEUWt eFMc3t/3etXtbg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:47 2025 by rpki-client