This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json) Hash identifier: GJ1dwKPKnmhPb89mdU/W58dJdNEtIGpmY0XzRLT9Esw= Subject key identifier: F6:4C:75:99:1B:29:9F:76:DF:0C:09:A5:DD:F2:8B:35:27:E2:60:70 Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89 Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89 Certificate serial: 019AF389AE9575D05B8790E0028093326BC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft Manifest number: 1269 Signing time: Sat 06 Dec 2025 12:01:17 +0000 Manifest this update: Sat 06 Dec 2025 12:01:17 +0000 Manifest next update: Sun 07 Dec 2025 12:01:17 +0000 Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: FEzdYnn5Oet09PfQU0rig95CNNw/8kCMDd0+eKTtVCE=) 2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ae:95:75:d0:5b:87:90:e0:02:80:93:32:6b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89 Validity Not Before: Dec 6 12:01:17 2025 GMT Not After : Dec 7 12:01:17 2025 GMT Subject: CN=f64c75991b299f76df0c09a5ddf28b3527e26070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:b7:5b:04:5b:fe:a2:f7:54:fa:4e:bb:2b: 66:8f:d4:27:92:d8:3c:23:4c:b9:cb:15:6d:4e:ba: 91:f7:68:7d:a6:4d:58:4a:43:99:81:fa:b7:88:94: e8:09:f5:fb:ab:3d:3f:27:e6:fb:89:b5:39:95:25: ba:0c:9e:b2:91:f2:bd:82:01:29:81:a7:bb:9f:5e: 29:6b:bd:94:82:c5:bf:e8:73:5a:16:b0:ab:af:0c: f6:48:d6:8c:f7:01:da:72:6c:d0:d0:39:0a:a8:ad: 18:7c:eb:a9:5b:5b:97:97:fb:01:a0:01:71:7e:cf: cd:2a:00:7a:ad:44:bf:76:f9:7b:14:9f:3b:0e:22: ed:d5:7c:72:9d:5b:a5:d7:d8:06:c9:0a:5d:1b:d4: a8:29:ad:82:6d:8a:5b:15:9c:c7:f5:43:60:d0:d8: 52:23:f5:71:db:70:69:19:9f:c0:aa:b9:34:ab:bc: bc:47:ea:29:81:97:6b:a7:fe:b0:a9:cf:08:aa:50: 9d:74:08:b2:66:71:dc:f4:1f:0f:ce:82:f9:db:20: 14:48:63:cc:bf:6d:09:37:19:21:3d:e8:3b:b4:9a: e6:30:33:49:ae:25:4f:78:dc:b6:65:b1:9e:74:c2: a6:c4:cc:ab:09:bc:a8:9a:3e:40:79:d3:b7:8e:25: 18:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4C:75:99:1B:29:9F:76:DF:0C:09:A5:DD:F2:8B:35:27:E2:60:70 X509v3 Authority Key Identifier: keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:22:b5:c8:47:52:17:6d:b8:b6:f9:4f:d5:6b:3c:4b:c3:39: 38:d6:2d:71:3e:9b:f8:82:89:12:cd:14:1c:12:e3:70:fe:bb: 67:f3:57:90:ef:dd:5c:d4:0e:64:55:6a:4e:13:e3:9a:5a:3d: e4:a1:c0:d2:ae:73:09:4c:6e:d0:f8:29:6b:59:05:ce:6a:6a: e2:e6:a6:a5:7a:21:3d:ec:c7:c3:51:e4:f7:67:3a:47:17:4f: e0:f8:30:ff:a3:2f:24:ab:9d:da:b8:dd:8c:74:bb:b5:2e:69: 61:0d:12:31:7a:4c:c6:83:d2:f8:60:ce:a1:1a:69:4c:2a:25: c2:54:cf:14:fb:1d:f0:92:d5:1b:ce:6d:fe:06:4e:b8:e9:c3: cf:fd:2a:06:d4:46:cf:00:88:f2:46:8f:f2:3c:7e:a5:27:d9: e8:bf:be:4a:c1:2c:55:df:c2:f3:5f:d2:33:16:29:60:55:ee: 1d:11:52:51:d5:86:e7:69:97:5f:ee:10:47:a6:5f:58:93:d9: 88:fa:bb:62:a6:7d:9a:2b:6a:c4:14:6d:e5:f5:10:56:13:02: 1a:08:57:4e:26:22:ec:5c:b5:39:01:14:2a:4a:92:00:89:4a: bf:77:2e:90:4f:8b:06:48:4a:22:47:7d:4d:be:bc:86:36:37: 8c:5f:01:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzia6VddBbh5DgAoCTMmvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMjk2Y2Y3MDQzODM2ZWJlMTc0OWM1YzE0NTQ3Yzc5ODQx ZTFiODkwHhcNMjUxMjA2MTIwMTE3WhcNMjUxMjA3MTIwMTE3WjAzMTEwLwYDVQQD EyhmNjRjNzU5OTFiMjk5Zjc2ZGYwYzA5YTVkZGYyOGIzNTI3ZTI2MDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcG3WwRb/qL3VPpOuytmj9Qnktg8 I0y5yxVtTrqR92h9pk1YSkOZgfq3iJToCfX7qz0/J+b7ibU5lSW6DJ6ykfK9ggEp gae7n14pa72UgsW/6HNaFrCrrwz2SNaM9wHacmzQ0DkKqK0YfOupW1uXl/sBoAFx fs/NKgB6rUS/dvl7FJ87DiLt1XxynVul19gGyQpdG9SoKa2CbYpbFZzH9UNg0NhS I/Vx23BpGZ/Aqrk0q7y8R+opgZdrp/6wqc8IqlCddAiyZnHc9B8PzoL52yAUSGPM v20JNxkhPeg7tJrmMDNJriVPeNy2ZbGedMKmxMyrCbyomj5AedO3jiUYSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZMdZkbKZ923wwJpd3yizUn4mBwMB8GA1UdIwQY MBaAFNwpbPcEODbr4XScXBRUfHmEHhuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMt NjhhYmU1MmQzMDM0LzEvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMtNjhhYmU1MmQzMDM0 LzEvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiK1yEdS F224tvlP1Ws8S8M5ONYtcT6b+IKJEs0UHBLjcP67Z/NXkO/dXNQOZFVqThPjmlo9 5KHA0q5zCUxu0Pgpa1kFzmpq4uampXohPezHw1Hk92c6RxdP4Pgw/6MvJKud2rjd jHS7tS5pYQ0SMXpMxoPS+GDOoRppTColwlTPFPsd8JLVG85t/gZOuOnDz/0qBtRG zwCI8kaP8jx+pSfZ6L++SsEsVd/C81/SMxYpYFXuHRFSUdWG52mXX+4QR6ZfWJPZ iPq7YqZ9mitqxBRt5fUQVhMCGghXTiYi7Fy1OQEUKkqSAIlKv3cukE+LBkhKIkd9 Tb68hjY3jF8Btw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:21:20 2025 by rpki-client