This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json) Hash identifier: gBqovnU9e90XfwRei+E0nJDV6C7425NOe9WAtXhROHk= Subject key identifier: B6:B9:96:11:75:19:72:EC:0D:6E:63:BB:38:52:D2:35:04:5F:33:4B Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5 Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5 Certificate serial: 019B30E7F00D51F66A62FBFAB64A9A2D162E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft Manifest number: 04AA Signing time: Thu 18 Dec 2025 10:01:05 +0000 Manifest this update: Thu 18 Dec 2025 10:01:05 +0000 Manifest next update: Fri 19 Dec 2025 10:01:05 +0000 Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: bKhGNe8BmECHozUaCNyeh+IL3U8JLEQNHvLswr4IpB8=) 2: rsRHcAQsRZm8xo329vRETKcxCzw.roa (hash: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e7:f0:0d:51:f6:6a:62:fb:fa:b6:4a:9a:2d:16:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5 Validity Not Before: Dec 18 10:01:05 2025 GMT Not After : Dec 19 10:01:05 2025 GMT Subject: CN=b6b99611751972ec0d6e63bb3852d235045f334b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d2:7b:10:52:9c:93:e3:7a:e2:15:a6:ea:1f: 3d:9a:43:f0:f7:e0:35:04:27:a1:aa:69:a7:88:68: 86:f5:44:d7:f4:f0:64:f7:18:da:80:d6:8e:49:41: fe:ac:c9:b7:35:a4:4e:2c:f3:cb:be:99:3e:93:87: a4:16:d6:da:ba:62:04:b6:07:70:cd:4c:b9:13:c5: 00:85:74:51:9a:c6:10:cd:c4:24:2a:e2:ed:77:71: 46:8f:47:96:8b:e8:1c:84:9c:62:b1:6a:6b:2f:49: a3:d7:4a:83:95:80:bf:68:0b:42:9a:54:be:59:20: ad:d4:2e:1b:39:c8:6a:e2:25:5d:55:d4:a7:5a:e4: 3b:16:db:4e:01:b3:fc:1f:f0:10:77:13:fe:c9:d7: 4a:c1:b7:5d:ce:b6:46:ad:a0:c2:7e:ef:1c:4a:8a: e9:9e:d3:1a:4e:f3:e1:41:a7:0f:c9:76:e7:85:3a: ce:51:02:c1:90:42:68:85:62:9f:68:b3:f3:1c:d2: db:42:54:15:53:76:8c:d7:b6:c5:cd:33:f9:72:28: 54:e1:9b:ac:21:6e:6d:59:83:03:63:06:02:ca:71: 63:39:6b:5d:30:7f:44:6c:bd:9a:18:43:ef:3e:ce: 30:f2:38:52:a9:f3:09:81:2d:71:be:19:9a:1b:5c: 64:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B9:96:11:75:19:72:EC:0D:6E:63:BB:38:52:D2:35:04:5F:33:4B X509v3 Authority Key Identifier: keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9d:23:69:28:51:5c:74:ee:da:7c:8a:e5:d6:2f:b6:f1:15: f7:6a:d1:14:39:99:7a:dd:88:12:88:83:e2:65:b8:d6:ff:9d: dd:94:d1:fa:c3:d7:a7:bc:9d:41:23:f2:6f:ae:df:9a:1d:96: b1:a6:ba:44:df:2a:79:12:18:6e:da:41:af:31:da:23:bf:4f: ce:d2:e2:42:a0:f3:39:23:db:30:7c:9d:1a:24:28:44:0b:cb: fd:c4:9e:d0:20:1b:3a:a9:a7:1c:5e:a9:b9:69:aa:b5:78:64: c1:37:f9:00:91:69:00:54:05:0b:42:9a:2b:9d:84:c5:5b:c4: ab:3d:ef:de:b4:99:cf:5e:62:5d:c8:0c:10:0e:0c:95:d5:8c: e7:2c:34:31:60:e7:a9:1a:7f:90:8f:c6:0c:47:86:b3:7c:0f: 2a:3c:99:a9:6c:2d:36:ea:14:68:bd:e7:ae:64:94:9a:8b:45: 83:dd:58:df:88:06:5c:6a:50:f5:62:71:a2:c9:2c:a2:58:07: 32:c6:7b:b2:16:90:7e:62:56:73:1c:a0:5f:a2:c3:2f:06:18: 26:06:cc:bd:94:02:cb:7c:eb:d5:01:bb:dc:84:fd:05:58:bd: e3:97:04:98:db:2e:f0:bc:21:01:42:d1:58:d8:2d:6d:88:4a: e0:6d:f9:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw5/ANUfZqYvv6tkqaLRYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTE1OGUzZTQxZjYwZmZiZjdlY2FmZjcyMzA3ZDNkYzk1 Mjc3ZjUwHhcNMjUxMjE4MTAwMTA1WhcNMjUxMjE5MTAwMTA1WjAzMTEwLwYDVQQD EyhiNmI5OTYxMTc1MTk3MmVjMGQ2ZTYzYmIzODUyZDIzNTA0NWYzMzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdJ7EFKck+N64hWm6h89mkPw9+A1 BCehqmmniGiG9UTX9PBk9xjagNaOSUH+rMm3NaROLPPLvpk+k4ekFtbaumIEtgdw zUy5E8UAhXRRmsYQzcQkKuLtd3FGj0eWi+gchJxisWprL0mj10qDlYC/aAtCmlS+ WSCt1C4bOchq4iVdVdSnWuQ7FttOAbP8H/AQdxP+yddKwbddzrZGraDCfu8cSorp ntMaTvPhQacPyXbnhTrOUQLBkEJohWKfaLPzHNLbQlQVU3aM17bFzTP5cihU4Zus IW5tWYMDYwYCynFjOWtdMH9EbL2aGEPvPs4w8jhSqfMJgS1xvhmaG1xknQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLa5lhF1GXLsDW5juzhS0jUEXzNLMB8GA1UdIwQY MBaAFN2RWOPkH2D/v37K/3IwfT3JUnf1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUt NDNkN2ViNzI1NTFkLzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUtNDNkN2ViNzI1NTFk LzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHp0jaShR XHTu2nyK5dYvtvEV92rRFDmZet2IEoiD4mW41v+d3ZTR+sPXp7ydQSPyb67fmh2W saa6RN8qeRIYbtpBrzHaI79PztLiQqDzOSPbMHydGiQoRAvL/cSe0CAbOqmnHF6p uWmqtXhkwTf5AJFpAFQFC0KaK52ExVvEqz3v3rSZz15iXcgMEA4MldWM5yw0MWDn qRp/kI/GDEeGs3wPKjyZqWwtNuoUaL3nrmSUmotFg91Y34gGXGpQ9WJxosksolgH MsZ7shaQfmJWcxygX6LDLwYYJgbMvZQCy3zr1QG73IT9BVi945cEmNsu8LwhAULR WNgtbYhK4G35Hw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:22:39 2025 by rpki-client