This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft File: _D39VAG24EhxYrQuBDdnosKTGnc.mft (raw, json) Hash identifier: tyDBMKKJ72C/oECj975kutxobLTTN8akDjZl7r1emf8= Subject key identifier: 9E:D6:3C:03:8E:00:50:57:EE:B0:FA:87:09:7C:4C:03:A9:E5:C0:4A Authority key identifier: FC:3D:FD:54:01:B6:E0:48:71:62:B4:2E:04:37:67:A2:C2:93:1A:77 Certificate issuer: /CN=fc3dfd5401b6e0487162b42e043767a2c2931a77 Certificate serial: 019AF12D715194C33C2BA7AED01CF5CB45FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_D39VAG24EhxYrQuBDdnosKTGnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft Manifest number: 0AE3 Signing time: Sat 06 Dec 2025 01:01:18 +0000 Manifest this update: Sat 06 Dec 2025 01:01:18 +0000 Manifest next update: Sun 07 Dec 2025 01:01:18 +0000 Files and hashes: 1: _D39VAG24EhxYrQuBDdnosKTGnc.crl (hash: /KSEDyvTANhvZqsnVfWWSzZH8FY0OfN9bsT0+HTV+Zw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft rsync://rpki.ripe.net/repository/DEFAULT/_D39VAG24EhxYrQuBDdnosKTGnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:71:51:94:c3:3c:2b:a7:ae:d0:1c:f5:cb:45:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3dfd5401b6e0487162b42e043767a2c2931a77 Validity Not Before: Dec 6 01:01:18 2025 GMT Not After : Dec 7 01:01:18 2025 GMT Subject: CN=9ed63c038e005057eeb0fa87097c4c03a9e5c04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:12:22:e9:f7:6f:e4:ff:4c:6a:b5:f3:e4: 35:85:a8:2b:8e:36:f1:89:4e:3b:bf:e0:fc:c0:08: a0:90:89:c0:96:aa:d0:fb:10:7d:79:90:74:47:07: 53:19:a6:7e:86:e9:eb:0b:0c:fb:36:96:69:42:7a: 51:2c:4d:01:28:ef:72:1a:0b:5c:74:68:5a:07:93: e7:55:be:61:23:0d:83:47:8c:77:28:9c:13:1a:b5: 03:d6:c7:ec:08:a5:5e:90:79:e4:af:7d:40:eb:95: 5c:71:52:e9:c9:1a:60:6d:f1:d8:80:d4:d6:ca:74: 10:8b:f2:ac:35:4d:ad:8b:40:08:3a:f4:3a:8c:ec: 38:aa:ed:24:77:68:fb:1b:99:3f:76:26:01:6a:7f: f3:4b:a2:b0:82:e8:22:80:95:30:9e:93:4c:a6:66: f4:36:ea:b4:7f:b5:c1:9d:c5:eb:0d:d8:32:42:32: 83:04:14:38:a0:68:fe:a0:d9:8e:46:de:a4:43:dc: c9:9b:8f:99:25:c2:e1:75:96:90:78:d7:d8:3f:bc: be:a3:db:02:57:41:9a:ba:64:8d:2c:50:85:cc:de: c0:0d:42:9d:2d:b7:c7:af:f1:4e:4c:3a:93:b8:20: ec:97:04:fb:a7:c1:97:eb:2a:9b:51:de:00:89:29: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D6:3C:03:8E:00:50:57:EE:B0:FA:87:09:7C:4C:03:A9:E5:C0:4A X509v3 Authority Key Identifier: keyid:FC:3D:FD:54:01:B6:E0:48:71:62:B4:2E:04:37:67:A2:C2:93:1A:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_D39VAG24EhxYrQuBDdnosKTGnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:46:5c:fd:02:2a:62:d6:78:e0:96:df:43:64:9a:5e:66:11: 1c:08:5e:f1:4e:ee:df:70:9b:bf:86:16:63:5c:47:77:38:d3: 20:fe:97:c2:b3:01:f1:8b:ae:31:6b:1e:42:7e:49:7d:06:8a: 01:ad:52:e1:5a:d4:9e:ff:63:45:91:63:ff:42:30:c7:01:01: 0f:cb:21:06:6e:c5:40:9a:d0:31:f8:f3:fd:1e:d7:b7:d3:26: 12:d0:e0:89:10:4d:78:9e:0e:b3:ac:2f:74:b7:9d:9f:66:4c: 19:38:fc:d5:7a:ba:80:02:75:45:8e:cd:8d:5f:04:be:a0:20: 1d:8e:b7:72:58:85:27:4e:4b:c0:ac:bb:c9:b3:ce:2b:b8:db: 8c:7e:d5:b3:97:f7:58:14:93:46:20:85:0e:39:77:ac:b0:2e: 32:13:3c:dd:1e:01:dc:f8:40:8a:55:86:01:6b:9d:7a:35:96: 1c:09:f8:d6:d9:24:76:40:37:9b:36:9b:b4:95:3a:b0:b5:01: 88:16:28:08:df:a8:93:75:11:89:0a:da:6c:95:0b:b0:b2:bb: 16:23:64:1d:25:1d:c7:ac:1e:48:f9:84:76:9f:eb:45:4c:b6: a5:0f:a1:e6:17:cc:df:26:8d:62:46:92:79:aa:0f:de:c4:25: ed:e7:38:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXFRlMM8K6eu0Bz1y0X8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjM2RmZDU0MDFiNmUwNDg3MTYyYjQyZTA0Mzc2N2EyYzI5 MzFhNzcwHhcNMjUxMjA2MDEwMTE4WhcNMjUxMjA3MDEwMTE4WjAzMTEwLwYDVQQD Eyg5ZWQ2M2MwMzhlMDA1MDU3ZWViMGZhODcwOTdjNGMwM2E5ZTVjMDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq38SIun3b+T/TGq18+Q1hagrjjbx iU47v+D8wAigkInAlqrQ+xB9eZB0RwdTGaZ+hunrCwz7NpZpQnpRLE0BKO9yGgtc dGhaB5PnVb5hIw2DR4x3KJwTGrUD1sfsCKVekHnkr31A65VccVLpyRpgbfHYgNTW ynQQi/KsNU2ti0AIOvQ6jOw4qu0kd2j7G5k/diYBan/zS6KwgugigJUwnpNMpmb0 Nuq0f7XBncXrDdgyQjKDBBQ4oGj+oNmORt6kQ9zJm4+ZJcLhdZaQeNfYP7y+o9sC V0GaumSNLFCFzN7ADUKdLbfHr/FOTDqTuCDslwT7p8GX6yqbUd4AiSnOSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7WPAOOAFBX7rD6hwl8TAOp5cBKMB8GA1UdIwQY MBaAFPw9/VQBtuBIcWK0LgQ3Z6LCkxp3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0QzOVZBRzI0RWh4WXJRdUJEZG5vc0tUR25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zMzVlOTgtOGIzNi00MDE3LTkyOGEt ZGRhZGUzZDM0MWM3LzEvX0QzOVZBRzI0RWh4WXJRdUJEZG5vc0tUR25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zMzVlOTgtOGIzNi00MDE3LTkyOGEtZGRhZGUzZDM0MWM3 LzEvX0QzOVZBRzI0RWh4WXJRdUJEZG5vc0tUR25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEZc/QIq YtZ44JbfQ2SaXmYRHAhe8U7u33Cbv4YWY1xHdzjTIP6XwrMB8YuuMWseQn5JfQaK Aa1S4VrUnv9jRZFj/0IwxwEBD8shBm7FQJrQMfjz/R7Xt9MmEtDgiRBNeJ4Os6wv dLedn2ZMGTj81Xq6gAJ1RY7NjV8EvqAgHY63cliFJ05LwKy7ybPOK7jbjH7Vs5f3 WBSTRiCFDjl3rLAuMhM83R4B3PhAilWGAWudejWWHAn41tkkdkA3mzabtJU6sLUB iBYoCN+ok3URiQrabJULsLK7FiNkHSUdx6weSPmEdp/rRUy2pQ+h5hfM3yaNYkaS eaoP3sQl7ec4oQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:34 2025 by rpki-client