This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json) Hash identifier: TDZeC/bD5Mx1+ygKQAFo7mT0zBBHdD7BKEbK7xgyxC0= Subject key identifier: CB:2E:7F:07:23:68:96:9F:2A:66:FC:3E:DF:00:02:C2:F6:97:44:19 Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5 Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5 Certificate serial: 019AF2095133E9CCA9F4C20A76B29A77477D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft Manifest number: 0679 Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: jZKtnXrJgS3nVxOMCjbo24gdvF/aYknr+pRlwXsUAmk=) 2: r0UegqSm-Osf5dt7xIToVoSc8i8.roa (hash: iiKp30ve0a7AciqqMBvmQPAjij1PEXVHVGDlOgok+18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:51:33:e9:cc:a9:f4:c2:0a:76:b2:9a:77:47:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5 Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=cb2e7f072368969f2a66fc3edf0002c2f6974419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:12:f7:95:eb:c8:45:09:47:ca:4b:fa:24:57: b9:78:ca:90:21:af:a5:db:dc:91:49:cf:8b:7a:dd: 17:49:92:85:65:c6:88:01:c6:43:4b:de:fe:71:09: 0d:fb:60:49:dd:86:d0:cd:40:2b:e2:da:3b:9d:65: 58:03:ac:e8:67:d4:7f:eb:50:77:1d:a8:82:27:27: a6:47:58:a2:97:ee:b5:ec:81:01:d4:1a:22:42:51: 62:b5:2a:b9:83:b9:a8:6c:37:98:26:e9:51:33:5c: 91:14:5d:88:2b:d4:b6:f2:dd:8e:e8:93:a5:d2:15: fa:57:20:2b:8e:a3:12:12:b4:13:fd:95:f4:d6:12: c9:21:3a:1e:6d:d5:fa:72:45:b9:57:a8:2e:c0:b6: 1b:ba:a6:cf:5e:fc:47:58:ef:c2:b4:60:e8:fa:48: da:d0:96:15:a0:64:9a:98:27:73:54:fa:67:d2:94: 2b:a4:6e:a6:5e:1c:ff:aa:36:93:68:a7:78:26:52: 53:05:f9:c8:4b:84:72:da:04:a9:a1:58:6a:1a:50: bb:75:61:27:41:ea:b5:8e:6f:ce:1f:43:0a:d0:2b: 60:35:98:21:3b:7f:10:07:54:80:68:1f:d6:68:8e: 44:58:ac:78:cc:5c:8d:31:c5:76:71:a3:54:52:fc: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2E:7F:07:23:68:96:9F:2A:66:FC:3E:DF:00:02:C2:F6:97:44:19 X509v3 Authority Key Identifier: keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:10:11:23:25:7b:45:6d:dc:2b:1c:fa:9e:37:b6:f1:fc:ef: 22:38:41:55:53:a8:14:66:13:e8:19:30:97:c0:67:da:13:b6: 9c:80:85:75:17:16:a7:6a:db:65:a8:c6:f7:2a:2c:13:7c:d6: 39:2a:e3:4f:0b:78:5e:45:89:74:cf:86:56:dd:80:3b:13:1f: e0:06:2c:90:fd:79:69:5e:6f:6a:01:43:c0:64:6e:62:98:91: da:f5:e1:e0:bf:d4:2a:c1:80:43:db:92:0e:08:a7:7f:04:61: 97:e9:ca:cd:0a:7d:e9:bb:2b:86:38:cc:64:f2:f2:c0:e3:a4: b5:46:d1:00:0e:67:1f:03:45:09:06:33:79:d2:f7:98:e6:6f: 21:6e:fb:c3:9e:e2:5a:5b:3d:29:73:bc:94:ff:ff:b2:30:ab: 14:7b:83:0b:fc:b0:00:6f:9e:25:2f:b3:03:ac:3b:d1:57:8c: 56:2c:f2:ea:b4:11:3e:b0:88:d3:6e:6d:47:d6:bd:aa:7d:fc: b5:7d:19:0d:e9:d1:30:de:2f:c4:aa:c6:34:61:36:dd:27:39: db:fc:ea:2c:f8:87:03:31:83:e1:3f:0d:8e:be:20:8d:9c:27: 73:42:c3:58:6b:b7:65:6c:82:49:40:04:65:e5:20:6d:5e:92: f7:97:b3:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVEz6cyp9MIKdrKad0d9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOGFlNGQ5YWQ4NjNkZGExNDAxYjQ5MGMyOGNmZjgyZDk5 OGUzYjUwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD EyhjYjJlN2YwNzIzNjg5NjlmMmE2NmZjM2VkZjAwMDJjMmY2OTc0NDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhL3levIRQlHykv6JFe5eMqQIa+l 29yRSc+Let0XSZKFZcaIAcZDS97+cQkN+2BJ3YbQzUAr4to7nWVYA6zoZ9R/61B3 HaiCJyemR1iil+617IEB1BoiQlFitSq5g7mobDeYJulRM1yRFF2IK9S28t2O6JOl 0hX6VyArjqMSErQT/ZX01hLJIToebdX6ckW5V6guwLYbuqbPXvxHWO/CtGDo+kja 0JYVoGSamCdzVPpn0pQrpG6mXhz/qjaTaKd4JlJTBfnIS4Ry2gSpoVhqGlC7dWEn Qeq1jm/OH0MK0CtgNZghO38QB1SAaB/WaI5EWKx4zFyNMcV2caNUUvxFRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsufwcjaJafKmb8Pt8AAsL2l0QZMB8GA1UdIwQY MBaAFN2K5Nmthj3aFAG0kMKM/4LZmOO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGIt NGRlOTM0NWM4M2JmLzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGItNGRlOTM0NWM4M2Jm LzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxARIyV7 RW3cKxz6nje28fzvIjhBVVOoFGYT6Bkwl8Bn2hO2nICFdRcWp2rbZajG9yosE3zW OSrjTwt4XkWJdM+GVt2AOxMf4AYskP15aV5vagFDwGRuYpiR2vXh4L/UKsGAQ9uS DginfwRhl+nKzQp96bsrhjjMZPLywOOktUbRAA5nHwNFCQYzedL3mOZvIW77w57i Wls9KXO8lP//sjCrFHuDC/ywAG+eJS+zA6w70VeMVizy6rQRPrCI025tR9a9qn38 tX0ZDenRMN4vxKrGNGE23Sc52/zqLPiHAzGD4T8Njr4gjZwnc0LDWGu3ZWyCSUAE ZeUgbV6S95ezag== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:31 2025 by rpki-client