This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json) Hash identifier: s1gxEZodKX4ENJ6SU9ZsS5eJQFVCQJRPVGSvLDn9n20= Subject key identifier: 65:84:FB:63:A3:CA:10:61:8C:8D:D7:72:E1:25:01:56:97:95:01:B6 Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51 Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51 Certificate serial: 019AF12E5E071C9CE8520DDC5623D9704F86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:02:19 +0000 Manifest this update: Sat 06 Dec 2025 01:02:19 +0000 Manifest next update: Sun 07 Dec 2025 01:02:19 +0000 Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: nzWk9cQkIuB1hCKtkodt3ctU876Jx0igDzulu6nP92o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:5e:07:1c:9c:e8:52:0d:dc:56:23:d9:70:4f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51 Validity Not Before: Dec 6 01:02:19 2025 GMT Not After : Dec 7 01:02:19 2025 GMT Subject: CN=6584fb63a3ca10618c8dd772e1250156979501b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:4f:38:9e:b8:db:bb:34:15:e8:6d:41:7d: 3c:e9:cf:1a:20:83:a7:77:5d:86:90:76:67:d8:ad: ba:f2:e5:0b:e7:ac:9e:ab:44:e6:06:94:7d:a5:c7: 31:30:b9:42:d3:3d:1f:e2:79:ef:4e:db:53:5a:dc: 42:13:2b:3e:e3:8a:e2:35:e2:f2:00:b7:ee:61:4f: 77:0e:d8:46:cb:d4:14:40:98:3d:f6:fd:23:c4:74: 02:fc:6a:de:80:40:10:08:f7:e3:1f:36:b8:63:45: 11:f4:d9:0f:a7:83:09:83:9e:b9:b2:1c:df:b4:9f: ab:15:4c:e9:7d:8b:b3:d8:2a:fc:67:df:6e:14:61: dc:a9:56:50:d9:6a:bd:a0:3e:30:07:e2:92:39:92: 46:f4:b9:54:e5:bf:ca:34:54:75:19:7d:e7:47:66: 5b:1f:75:4a:3e:7b:9b:72:06:6d:ca:0a:3c:40:0e: 2f:3b:fb:12:78:8a:c9:01:59:48:ea:37:75:42:be: 96:15:2d:94:21:8f:9a:d6:24:7a:58:95:7b:d1:e0: a3:af:20:42:4e:d7:8d:6c:1d:e9:f4:fb:03:e1:d3: 77:3f:a4:9a:98:4a:c3:ff:db:cd:cc:39:05:ce:c2: 71:5b:c6:d6:39:d3:1a:f2:56:6f:50:4a:42:da:c5: 1c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:84:FB:63:A3:CA:10:61:8C:8D:D7:72:E1:25:01:56:97:95:01:B6 X509v3 Authority Key Identifier: keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ab:9c:07:e9:66:54:14:2d:83:1d:6d:49:60:75:e3:94:23: 35:55:c6:55:0e:57:32:46:1c:4b:4c:6c:ce:34:3b:0a:3c:33: 27:94:27:d1:0a:8a:79:d8:cd:e8:1f:a2:9e:7c:b0:4f:51:83: 9d:72:51:c3:41:55:a1:e8:71:33:64:9d:f8:9c:79:1f:36:2f: 69:ad:0f:8d:39:42:1c:ab:6b:1c:a8:df:69:4f:f0:85:30:b1: 60:cc:40:ab:01:4d:77:ab:4b:ee:34:67:5a:c4:d9:df:0a:93: 37:a3:aa:96:30:8f:20:80:5a:a2:01:3a:99:92:f6:95:e1:70: de:b8:6f:7c:72:7b:49:ca:b3:65:ab:1a:a0:a3:3f:cf:dc:23: ec:28:62:45:29:54:3f:aa:19:93:ec:a0:d2:15:41:6f:01:fe: a9:07:2b:71:1a:95:5a:cb:1c:14:18:ea:da:33:4e:53:dc:e3: c3:a5:57:c6:96:47:b6:24:a7:fa:90:0c:65:76:7b:30:82:1c: a4:89:fb:ad:da:fd:56:6e:4e:31:b6:2d:6b:c4:58:08:75:53: 10:2c:2b:b3:76:7d:fc:c8:8a:ef:c8:b9:9a:46:d0:b0:c1:80: 7d:91:58:67:28:15:75:59:1d:46:57:7a:2f:eb:4a:e1:d1:2d: 1c:a0:57:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLl4HHJzoUg3cViPZcE+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZjRkNGJhODViNzU1ZWY5MjljOWI5OTVlYWY3NDZkMGUw YjZlNTEwHhcNMjUxMjA2MDEwMjE5WhcNMjUxMjA3MDEwMjE5WjAzMTEwLwYDVQQD Eyg2NTg0ZmI2M2EzY2ExMDYxOGM4ZGQ3NzJlMTI1MDE1Njk3OTUwMWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpZPOJ6427s0FehtQX086c8aIIOn d12GkHZn2K268uUL56yeq0TmBpR9pccxMLlC0z0f4nnvTttTWtxCEys+44riNeLy ALfuYU93DthGy9QUQJg99v0jxHQC/GregEAQCPfjHza4Y0UR9NkPp4MJg565shzf tJ+rFUzpfYuz2Cr8Z99uFGHcqVZQ2Wq9oD4wB+KSOZJG9LlU5b/KNFR1GX3nR2Zb H3VKPnubcgZtygo8QA4vO/sSeIrJAVlI6jd1Qr6WFS2UIY+a1iR6WJV70eCjryBC TteNbB3p9PsD4dN3P6SamErD/9vNzDkFzsJxW8bWOdMa8lZvUEpC2sUc4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWE+2OjyhBhjI3XcuElAVaXlQG2MB8GA1UdIwQY MBaAFNz01LqFt1XvkpybmV6vdG0OC25RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NjUyMzYtYzA1ZS00MTgwLWI1OTAt NDE0NzBhOTQ1OWExLzEvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85NjUyMzYtYzA1ZS00MTgwLWI1OTAtNDE0NzBhOTQ1OWEx LzEvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6ucB+lm VBQtgx1tSWB145QjNVXGVQ5XMkYcS0xszjQ7CjwzJ5Qn0QqKedjN6B+innywT1GD nXJRw0FVoehxM2Sd+Jx5HzYvaa0PjTlCHKtrHKjfaU/whTCxYMxAqwFNd6tL7jRn WsTZ3wqTN6OqljCPIIBaogE6mZL2leFw3rhvfHJ7ScqzZasaoKM/z9wj7ChiRSlU P6oZk+yg0hVBbwH+qQcrcRqVWsscFBjq2jNOU9zjw6VXxpZHtiSn+pAMZXZ7MIIc pIn7rdr9Vm5OMbYta8RYCHVTECwrs3Z9/MiK78i5mkbQsMGAfZFYZygVdVkdRld6 L+tK4dEtHKBXiA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:11:18 2025 by rpki-client