This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json) Hash identifier: fCpA5qTefb/+p3O7zl76LTw6ViO78B4oYJwpyK1N0zQ= Subject key identifier: A3:6C:D2:5D:0E:92:FD:F9:4F:B0:73:51:DD:EC:C3:E4:3D:48:F9:2E Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5 Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5 Certificate serial: 019AF12E2E9EB7AFD5C1095A6E680F662146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft Manifest number: 0489 Signing time: Sat 06 Dec 2025 01:02:06 +0000 Manifest this update: Sat 06 Dec 2025 01:02:06 +0000 Manifest next update: Sun 07 Dec 2025 01:02:06 +0000 Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: iwtpomWMZpXfnICcyk9IXTG18QTQnjBJOB/SRM2zYlg=) 2: rsRHcAQsRZm8xo329vRETKcxCzw.roa (hash: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2e:9e:b7:af:d5:c1:09:5a:6e:68:0f:66:21:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5 Validity Not Before: Dec 6 01:02:06 2025 GMT Not After : Dec 7 01:02:06 2025 GMT Subject: CN=a36cd25d0e92fdf94fb07351ddecc3e43d48f92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e0:d4:55:7a:eb:df:01:13:41:b7:5a:0a:c7: 25:57:b2:c9:2b:30:40:70:77:ba:14:a1:12:c6:56: 54:06:dc:1f:28:89:45:47:8c:e5:56:63:c8:f9:b3: 9e:5c:dd:6b:66:38:db:81:65:eb:f3:ad:6a:2f:d6: f8:9d:fc:f9:32:5f:a1:d2:38:37:8f:74:5a:5a:c4: 04:95:77:d5:cb:d4:94:57:8d:1a:bc:3f:77:0a:a0: e8:65:c8:24:fa:98:6b:15:fd:24:ca:19:01:e6:b8: ff:3f:75:47:f4:b2:d9:7f:54:13:b9:91:a6:a2:d1: b2:c8:1d:84:ad:97:c2:8e:d0:91:2b:cc:5c:60:15: 49:09:d5:73:f0:1b:36:c5:0a:0d:64:af:84:65:e7: d9:f0:24:35:85:50:b1:02:c4:7a:b2:87:59:40:15: 14:c2:f6:41:f5:61:67:a1:04:00:b4:fc:98:3f:da: c0:cf:c0:ba:d2:ec:6d:c1:dc:8b:71:aa:f5:54:1c: ae:3c:18:c6:0f:86:a3:3a:cb:59:62:d7:32:f3:7f: 3a:16:d8:7a:11:1d:af:ec:81:9a:cc:df:6d:be:3e: 28:3c:cf:a2:d6:36:ea:a7:af:ad:c4:74:3c:c3:20: 48:d6:b8:de:42:00:3f:07:be:cc:24:83:11:28:67: 5c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6C:D2:5D:0E:92:FD:F9:4F:B0:73:51:DD:EC:C3:E4:3D:48:F9:2E X509v3 Authority Key Identifier: keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:41:b2:60:9c:f9:80:19:10:5c:43:6c:ad:9c:d4:f1:6b:b8: 00:f7:cc:2f:29:e7:a0:43:9a:59:08:91:89:15:57:05:50:e9: c6:32:72:a1:45:40:b3:c3:79:fb:c4:72:68:1d:7d:6b:03:43: bd:2a:2f:21:ee:6e:b4:91:ce:a8:cb:20:57:44:e1:10:dd:b6: e8:a1:07:10:ba:4a:1e:cd:48:5f:14:1e:82:38:5c:3a:ff:22: 60:f1:5a:40:1c:ec:f6:41:59:a6:20:7d:3c:a5:af:73:5b:e2: 98:68:72:ed:fe:ad:23:d4:1e:dc:65:d7:39:cc:17:8b:ad:26: 8e:f3:ca:f6:78:39:c5:d4:e2:57:b0:c4:26:86:85:f7:b3:a2: 65:d5:1f:b2:2f:37:dd:c0:3d:8e:ed:45:a4:2f:9f:04:aa:58: 46:a4:de:bc:9c:8f:e9:39:29:00:46:5f:26:91:e2:a1:fa:4a: b2:59:83:3f:a2:7a:ae:55:a4:b2:03:cd:04:3e:01:a8:5b:8c: 6a:e9:13:ba:55:75:14:d8:bf:14:cb:68:85:ae:fb:ae:6e:14: ef:b7:0b:cb:29:6f:05:06:a6:01:23:c1:5a:d3:4d:6f:bd:e0: ef:d3:0f:58:07:a3:fd:37:70:6f:0d:af:84:71:b9:c5:7e:dd: f9:8f:e2:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLi6et6/VwQlabmgPZiFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTE1OGUzZTQxZjYwZmZiZjdlY2FmZjcyMzA3ZDNkYzk1 Mjc3ZjUwHhcNMjUxMjA2MDEwMjA2WhcNMjUxMjA3MDEwMjA2WjAzMTEwLwYDVQQD EyhhMzZjZDI1ZDBlOTJmZGY5NGZiMDczNTFkZGVjYzNlNDNkNDhmOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uDUVXrr3wETQbdaCsclV7LJKzBA cHe6FKESxlZUBtwfKIlFR4zlVmPI+bOeXN1rZjjbgWXr861qL9b4nfz5Ml+h0jg3 j3RaWsQElXfVy9SUV40avD93CqDoZcgk+phrFf0kyhkB5rj/P3VH9LLZf1QTuZGm otGyyB2ErZfCjtCRK8xcYBVJCdVz8Bs2xQoNZK+EZefZ8CQ1hVCxAsR6sodZQBUU wvZB9WFnoQQAtPyYP9rAz8C60uxtwdyLcar1VByuPBjGD4ajOstZYtcy8386Fth6 ER2v7IGazN9tvj4oPM+i1jbqp6+txHQ8wyBI1rjeQgA/B77MJIMRKGdc2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNs0l0Okv35T7BzUd3sw+Q9SPkuMB8GA1UdIwQY MBaAFN2RWOPkH2D/v37K/3IwfT3JUnf1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUt NDNkN2ViNzI1NTFkLzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUtNDNkN2ViNzI1NTFk LzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEGyYJz5 gBkQXENsrZzU8Wu4APfMLynnoEOaWQiRiRVXBVDpxjJyoUVAs8N5+8RyaB19awND vSovIe5utJHOqMsgV0ThEN226KEHELpKHs1IXxQegjhcOv8iYPFaQBzs9kFZpiB9 PKWvc1vimGhy7f6tI9Qe3GXXOcwXi60mjvPK9ng5xdTiV7DEJoaF97OiZdUfsi83 3cA9ju1FpC+fBKpYRqTevJyP6TkpAEZfJpHiofpKslmDP6J6rlWksgPNBD4BqFuM aukTulV1FNi/FMtoha77rm4U77cLyylvBQamASPBWtNNb73g79MPWAej/Tdwbw2v hHG5xX7d+Y/iKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:14 2025 by rpki-client