This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft File: 3tvumMupuOYloRR7s7VRl9LQoFc.mft (raw, json) Hash identifier: GQgzt4wq+ZARBTA3RAM6G+FUyy/RB7IA+IkdpbmnjJQ= Subject key identifier: 62:BD:F7:FE:7C:5C:99:E8:48:65:A0:58:00:C4:F0:EE:B5:A8:10:7F Authority key identifier: DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57 Certificate issuer: /CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057 Certificate serial: 019AF50A244C9739A7B376082EF759579E02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft Manifest number: 07CB Signing time: Sat 06 Dec 2025 19:01:13 +0000 Manifest this update: Sat 06 Dec 2025 19:01:13 +0000 Manifest next update: Sun 07 Dec 2025 19:01:13 +0000 Files and hashes: 1: 3tvumMupuOYloRR7s7VRl9LQoFc.crl (hash: Ts27dPIY6LPWtf4SG5wdvNM7Xhy+eouc4Opmx1B8Lp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:24:4c:97:39:a7:b3:76:08:2e:f7:59:57:9e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057 Validity Not Before: Dec 6 19:01:13 2025 GMT Not After : Dec 7 19:01:13 2025 GMT Subject: CN=62bdf7fe7c5c99e84865a05800c4f0eeb5a8107f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:3e:c6:d0:28:e3:b9:37:e4:26:cc:fd:5b: b3:8f:c2:64:b6:d9:74:3f:60:46:dc:9b:d3:61:09: 91:3c:48:4d:24:c3:b5:51:19:ae:9d:39:8d:f7:41: 9b:0a:99:1f:ef:31:07:8c:98:e5:03:3b:5a:0e:08: 67:38:b9:1d:bf:75:97:f7:86:06:71:c3:a4:ba:1e: 2c:50:3b:a0:94:08:03:ce:12:8a:3c:88:2b:57:74: 7c:47:64:b3:73:c0:d1:12:31:4f:46:9f:00:0d:26: 83:a0:f2:c7:ee:45:1f:29:c4:46:7d:4f:eb:02:1c: 79:7c:a8:c6:1c:3f:ed:cf:a1:39:85:1f:b9:a8:56: 5c:ec:27:ee:8f:a2:9d:d5:ca:98:72:70:f8:fa:16: 68:e7:df:5b:7e:a0:77:d9:d6:bd:df:b1:d5:0e:54: 34:7a:3c:96:78:9c:58:84:63:db:4b:43:cd:e1:18: ed:ab:b8:8b:86:ce:99:f9:d4:1b:27:38:10:fb:10: 9a:8c:5c:f0:b7:e0:9b:ef:e1:7d:95:ff:24:f5:77: 56:40:e1:41:a1:a6:67:07:47:a9:25:81:d4:5b:64: 2c:22:8c:ef:34:10:a9:39:2d:1b:fa:9d:7b:55:b8: c4:f1:16:6c:af:c4:3b:c6:44:5f:e1:2b:4b:b5:21: 79:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BD:F7:FE:7C:5C:99:E8:48:65:A0:58:00:C4:F0:EE:B5:A8:10:7F X509v3 Authority Key Identifier: keyid:DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:aa:53:74:f1:c5:64:07:5e:4e:34:76:db:4b:82:f2:14:c9: b9:2c:d5:a0:ea:44:39:17:af:af:69:82:3b:f2:5d:8d:1a:71: 43:dc:31:dc:76:af:ad:82:90:14:35:d1:87:2c:eb:9d:8f:74: 66:40:7b:9d:71:40:98:d5:bd:00:c7:e0:46:fa:a3:2c:31:80: d2:1c:99:03:9c:1c:d5:64:e4:78:58:6d:c2:c1:05:3f:14:9f: 40:e5:be:da:08:75:e1:01:19:f5:06:e2:ab:8e:ed:50:ff:c6: e9:58:d4:d9:19:0a:da:6c:28:36:7f:3d:74:42:e1:2c:30:8f: 0e:16:50:84:6e:14:e8:f0:3f:66:fc:99:c9:2f:3e:22:a9:f9: a0:1e:5c:c8:1d:0b:dd:80:73:e6:e8:dd:4a:3c:36:2b:03:d3: d5:d5:92:03:74:12:2c:99:24:9c:4a:bf:80:03:d6:cf:5f:fe: 41:67:ad:ee:c0:35:b2:67:bf:9c:bf:bf:73:dd:db:00:61:4b: 30:95:52:08:1f:0f:6e:09:5d:7b:36:87:58:ab:c6:16:5f:31: 29:a3:78:59:d1:c2:ac:03:d1:35:ea:92:fd:3f:31:6e:cc:df: 17:91:8e:65:d7:eb:8a:2b:28:1c:07:e5:7d:0a:a6:0f:03:ae: 49:9b:4c:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CiRMlzmns3YILvdZV54CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGJlZTk4Y2JhOWI4ZTYyNWExMTQ3YmIzYjU1MTk3ZDJk MGEwNTcwHhcNMjUxMjA2MTkwMTEzWhcNMjUxMjA3MTkwMTEzWjAzMTEwLwYDVQQD Eyg2MmJkZjdmZTdjNWM5OWU4NDg2NWEwNTgwMGM0ZjBlZWI1YTgxMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTY+xtAo47k35CbM/Vuzj8Jkttl0 P2BG3JvTYQmRPEhNJMO1URmunTmN90GbCpkf7zEHjJjlAztaDghnOLkdv3WX94YG ccOkuh4sUDuglAgDzhKKPIgrV3R8R2Szc8DREjFPRp8ADSaDoPLH7kUfKcRGfU/r Ahx5fKjGHD/tz6E5hR+5qFZc7Cfuj6Kd1cqYcnD4+hZo599bfqB32da937HVDlQ0 ejyWeJxYhGPbS0PN4Rjtq7iLhs6Z+dQbJzgQ+xCajFzwt+Cb7+F9lf8k9XdWQOFB oaZnB0epJYHUW2QsIozvNBCpOS0b+p17VbjE8RZsr8Q7xkRf4StLtSF5cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGK99/58XJnoSGWgWADE8O61qBB/MB8GA1UdIwQY MBaAFN7b7pjLqbjmJaEUe7O1UZfS0KBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZWY2NzgtNzg3MC00ZTA4LWFiMjUt MThmMGI4MGYyNTBkLzEvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZWY2NzgtNzg3MC00ZTA4LWFiMjUtMThmMGI4MGYyNTBk LzEvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqpTdPHF ZAdeTjR220uC8hTJuSzVoOpEORevr2mCO/JdjRpxQ9wx3HavrYKQFDXRhyzrnY90 ZkB7nXFAmNW9AMfgRvqjLDGA0hyZA5wc1WTkeFhtwsEFPxSfQOW+2gh14QEZ9Qbi q47tUP/G6VjU2RkK2mwoNn89dELhLDCPDhZQhG4U6PA/ZvyZyS8+Iqn5oB5cyB0L 3YBz5ujdSjw2KwPT1dWSA3QSLJkknEq/gAPWz1/+QWet7sA1sme/nL+/c93bAGFL MJVSCB8PbgldezaHWKvGFl8xKaN4WdHCrAPRNeqS/T8xbszfF5GOZdfriisoHAfl fQqmDwOuSZtMNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:53 2025 by rpki-client