This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json) Hash identifier: NF44yK8GgsmFkp7gMOFVxHlqcSXQnw8vWrgaEuL1VuI= Subject key identifier: F1:32:95:32:39:58:C7:9A:7D:D4:C2:EA:05:D1:7B:A4:31:D7:22:2F Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4 Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4 Certificate serial: 019AF2095C559A8EDABE2D52C8207C0B71B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft Manifest number: 15E3 Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: wgC2Z2P/oJK/TvsIW7Y0m029fW381AJvFhbbJ+C1+Fg=) 2: KgwBKHljj7pwEemei4izTFatz2I.roa (hash: eVDUYtbHqOXwc5M3emIOpC/IOXEvGmty2120RNJjtQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5c:55:9a:8e:da:be:2d:52:c8:20:7c:0b:71:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4 Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=f13295323958c79a7dd4c2ea05d17ba431d7222f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:99:5f:9a:e1:cf:85:34:17:0d:e1:8d:46:ca: 83:cb:cc:ef:30:b3:c0:ca:a4:8b:5f:1a:62:12:46: bd:b8:f7:8b:02:59:b7:f7:d6:66:c9:51:e8:a4:e5: 87:1b:ab:e9:60:03:12:9f:11:56:27:21:d7:59:40: 0e:dc:69:b6:db:35:c7:e0:ec:42:af:dc:54:58:98: c5:06:e4:d1:6c:d9:b2:4d:93:0d:12:bb:d1:69:27: a4:0a:4d:ad:b3:78:6a:12:a2:0b:4a:d7:e6:ee:fa: 82:3f:57:4c:0c:ca:26:fe:95:86:22:ed:ad:23:8e: 20:82:aa:ba:0e:44:9e:3b:6b:41:ce:f6:fa:97:3c: 15:bc:e4:b3:1a:68:3b:c9:ea:f1:72:51:16:26:93: 84:aa:fd:0e:1b:2e:c0:70:5b:bc:a6:75:8b:f1:b5: ac:ba:2a:8f:20:d9:7b:6b:4d:77:bd:7c:19:7a:d0: db:76:4c:6c:86:49:66:ed:dd:96:d8:08:8c:c6:76: f2:98:79:f3:7c:f3:cc:e0:90:a7:e7:47:c5:42:7f: 01:25:c5:68:a3:29:2a:d3:bd:8b:5d:4f:ef:b0:76: f6:6d:19:31:f4:a1:53:a4:34:7a:f1:ad:69:42:6f: 2a:2e:23:8f:b2:a1:b5:52:df:36:dc:cc:af:94:27: a5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:32:95:32:39:58:C7:9A:7D:D4:C2:EA:05:D1:7B:A4:31:D7:22:2F X509v3 Authority Key Identifier: keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:97:43:4a:4d:c2:6c:6e:03:1a:24:68:64:35:79:eb:ee:1a: 2f:ec:57:f2:b4:c4:ba:64:6b:e0:71:20:f3:f2:f1:7a:72:8f: 3f:d4:7a:e6:11:cd:cc:f7:54:78:ed:23:ca:f9:c7:5e:dd:a6: 15:12:3f:14:9a:14:62:ad:77:40:83:ea:18:00:ce:24:29:35: bf:11:4e:e0:83:13:6b:0f:3d:2d:83:bd:0c:e9:e5:bc:34:71: ab:69:6c:d3:2f:99:8c:a5:42:0e:30:80:ea:09:d5:50:fc:f2: a9:cb:37:a2:22:6f:42:56:b7:5e:62:74:da:78:a8:fe:46:19: 96:d6:6c:64:d6:88:ab:cd:38:f6:2f:e6:a3:46:e7:02:1b:a2: 6f:72:66:f0:bd:98:0d:0b:13:1d:48:ad:00:9e:c9:a9:26:ff: d7:81:6f:cf:3b:f6:6f:42:7e:e0:f3:14:a4:72:ac:b7:86:1d: ca:0c:d2:9a:23:e5:ad:4f:61:d7:3d:2e:8d:6b:13:16:5e:c0: 73:14:4f:3f:ce:33:96:45:64:92:e1:df:80:a6:dd:4f:2b:1e: 8e:0b:66:b9:7f:f4:5d:43:ab:26:ed:4b:28:5c:36:1b:f7:46: e9:7d:ea:b2:00:5b:7e:c1:02:17:13:d4:8c:c5:b4:70:25:92: 63:2f:6a:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVxVmo7avi1SyCB8C3GyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMjljMzcwNDYwYmVjNzUzMDEwZmM3ZTY4MzY1YzU3NzBi ZjQ1ZTQwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD EyhmMTMyOTUzMjM5NThjNzlhN2RkNGMyZWEwNWQxN2JhNDMxZDcyMjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApplfmuHPhTQXDeGNRsqDy8zvMLPA yqSLXxpiEka9uPeLAlm399ZmyVHopOWHG6vpYAMSnxFWJyHXWUAO3Gm22zXH4OxC r9xUWJjFBuTRbNmyTZMNErvRaSekCk2ts3hqEqILStfm7vqCP1dMDMom/pWGIu2t I44ggqq6DkSeO2tBzvb6lzwVvOSzGmg7yerxclEWJpOEqv0OGy7AcFu8pnWL8bWs uiqPINl7a013vXwZetDbdkxshklm7d2W2AiMxnbymHnzfPPM4JCn50fFQn8BJcVo oykq072LXU/vsHb2bRkx9KFTpDR68a1pQm8qLiOPsqG1Ut823MyvlCelbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEylTI5WMeafdTC6gXRe6Qx1yIvMB8GA1UdIwQY MBaAFN0pw3BGC+x1MBD8fmg2XFdwv0XkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iMzAxOWMtNjZjZi00Zjk4LWE4NTYt MTM0YzQ3Yjk0OTEzLzEvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iMzAxOWMtNjZjZi00Zjk4LWE4NTYtMTM0YzQ3Yjk0OTEz LzEvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpdDSk3C bG4DGiRoZDV56+4aL+xX8rTEumRr4HEg8/LxenKPP9R65hHNzPdUeO0jyvnHXt2m FRI/FJoUYq13QIPqGADOJCk1vxFO4IMTaw89LYO9DOnlvDRxq2ls0y+ZjKVCDjCA 6gnVUPzyqcs3oiJvQla3XmJ02nio/kYZltZsZNaIq8049i/mo0bnAhuib3Jm8L2Y DQsTHUitAJ7JqSb/14Fvzzv2b0J+4PMUpHKst4YdygzSmiPlrU9h1z0ujWsTFl7A cxRPP84zlkVkkuHfgKbdTysejgtmuX/0XUOrJu1LKFw2G/dG6X3qsgBbfsECFxPU jMW0cCWSYy9qwA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:42 2025 by rpki-client