This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json) Hash identifier: YX1UBEr4rA2Gt6DR6mL6JkPdF7GbqToImoUijayxOwI= Subject key identifier: DF:F0:2C:7F:83:6B:F0:8E:FC:84:ED:0A:9D:94:C3:C8:2A:45:10:FC Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c Certificate serial: 019AF42E7D847A8F687999B6415C5780B975 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft Manifest number: 0938 Signing time: Sat 06 Dec 2025 15:01:18 +0000 Manifest this update: Sat 06 Dec 2025 15:01:18 +0000 Manifest next update: Sun 07 Dec 2025 15:01:18 +0000 Files and hashes: 1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: UKA424cTkdnE49wLpDrb6WcUD1V/c6XlfwXykicmPK8=) 2: tmyLpJpJchhVaXtc4hY4-3-tLv0.roa (hash: ptDhwK/duydywl6VxB7EOOZhOpM1y3n5bCF72ET2KLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:7d:84:7a:8f:68:79:99:b6:41:5c:57:80:b9:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c Validity Not Before: Dec 6 15:01:18 2025 GMT Not After : Dec 7 15:01:18 2025 GMT Subject: CN=dff02c7f836bf08efc84ed0a9d94c3c82a4510fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:ac:ee:1c:6c:64:6f:d4:7e:75:6b:e5:0a: d2:8a:bf:fb:85:fe:91:df:04:96:3d:3e:b4:bd:36: f6:87:24:e4:ab:69:ea:6c:2f:e6:1c:40:4b:36:33: 58:a3:e5:96:b1:91:20:0d:8f:e0:6f:00:29:09:9f: 6f:54:d2:40:57:90:9f:f0:af:53:a8:d0:f2:5c:d8: ab:0d:fb:78:a6:b3:bc:5b:98:a7:b4:c7:e9:f6:00: 26:95:d2:c3:d9:da:c2:db:a0:5f:15:b6:89:6d:8d: 6c:19:2d:12:dd:f4:bc:d3:92:d4:b8:47:7b:68:86: df:12:0b:9a:dd:98:59:35:53:72:26:a6:ee:71:b8: 48:e7:19:b8:17:4a:e7:56:bd:e0:f6:69:4d:d0:38: 17:53:a0:17:c0:d6:28:ef:e9:50:d0:a4:37:12:d4: 1f:99:cc:81:67:39:26:c1:e4:17:43:fd:a0:3c:12: 36:92:6a:28:7d:e1:bb:7a:26:5b:56:2d:66:f1:6c: ef:a1:83:a3:c4:85:b0:cd:f1:f6:20:64:77:56:83: 2b:95:e6:6a:98:38:c1:1e:b6:0c:d4:b3:4d:85:aa: e5:90:45:12:a9:0e:2e:d0:2a:30:52:c0:12:b7:0b: 8c:7f:cc:29:d0:6c:36:da:0d:9b:e0:38:a4:7c:72: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F0:2C:7F:83:6B:F0:8E:FC:84:ED:0A:9D:94:C3:C8:2A:45:10:FC X509v3 Authority Key Identifier: keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c3:ec:ff:e0:19:71:3f:54:2a:e9:00:d0:91:0a:f1:d0:00: d6:29:e1:c3:0d:c8:16:77:9c:1e:42:cc:23:48:cf:33:23:bc: d2:be:72:dc:81:bd:f4:16:3c:e1:88:3d:68:1c:ef:78:a1:23: 78:c0:a9:d3:ca:ca:52:8c:4d:6a:08:fb:35:6f:95:28:9c:a3: 31:2a:a3:7b:8e:dc:51:14:ba:13:9d:ac:d1:75:66:83:04:0d: eb:92:99:c3:2f:17:82:a2:c3:91:18:0b:08:77:3e:80:2d:d9: 82:0d:41:e2:ee:23:1f:0d:fe:75:e7:87:8f:ec:95:f4:42:85: c4:28:3e:9d:36:d0:1a:cf:95:3b:b5:64:7b:42:fc:04:5a:74: 09:32:ce:05:c0:39:8f:c8:05:8f:c0:49:70:9e:00:13:e0:19: 4d:29:a8:cc:e2:3e:ac:28:0e:ab:2c:ae:a9:16:95:b0:89:63: 51:24:57:b9:98:ca:91:43:93:c7:5b:af:fa:81:c5:b2:26:4f: 80:d1:76:b6:13:e3:72:b5:5a:58:88:7d:68:9a:af:73:82:81: 56:0b:61:7b:b5:29:4d:2a:a1:4c:2b:f3:a6:72:7b:83:d7:5c: ee:39:d1:2c:3b:1d:8e:71:dc:59:c1:00:52:df:36:32:de:af: 4e:98:d3:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Ln2Eeo9oeZm2QVxXgLl1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMWEzYWEwY2Y4ZGZhOTE2N2QyNGQ5MmVkOGExNmViNGU3 ODA0NGMwHhcNMjUxMjA2MTUwMTE4WhcNMjUxMjA3MTUwMTE4WjAzMTEwLwYDVQQD EyhkZmYwMmM3ZjgzNmJmMDhlZmM4NGVkMGE5ZDk0YzNjODJhNDUxMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfes7hxsZG/UfnVr5QrSir/7hf6R 3wSWPT60vTb2hyTkq2nqbC/mHEBLNjNYo+WWsZEgDY/gbwApCZ9vVNJAV5Cf8K9T qNDyXNirDft4prO8W5intMfp9gAmldLD2drC26BfFbaJbY1sGS0S3fS805LUuEd7 aIbfEgua3ZhZNVNyJqbucbhI5xm4F0rnVr3g9mlN0DgXU6AXwNYo7+lQ0KQ3EtQf mcyBZzkmweQXQ/2gPBI2kmoofeG7eiZbVi1m8WzvoYOjxIWwzfH2IGR3VoMrleZq mDjBHrYM1LNNharlkEUSqQ4u0CowUsAStwuMf8wp0Gw22g2b4DikfHJ6GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/wLH+Da/CO/ITtCp2Uw8gqRRD8MB8GA1UdIwQY MBaAFNwaOqDPjfqRZ9JNku2KFutOeARMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85OTE4NGYtMWM4MC00N2NkLWE2ODUt MmRkNjUwZWE0YWMzLzEvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85OTE4NGYtMWM4MC00N2NkLWE2ODUtMmRkNjUwZWE0YWMz LzEvM0JvNm9NLU4tcEZuMGsyUzdZb1c2MDU0QkV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsPs/+AZ cT9UKukA0JEK8dAA1inhww3IFnecHkLMI0jPMyO80r5y3IG99BY84Yg9aBzveKEj eMCp08rKUoxNagj7NW+VKJyjMSqje47cURS6E52s0XVmgwQN65KZwy8XgqLDkRgL CHc+gC3Zgg1B4u4jHw3+deeHj+yV9EKFxCg+nTbQGs+VO7Vke0L8BFp0CTLOBcA5 j8gFj8BJcJ4AE+AZTSmozOI+rCgOqyyuqRaVsIljUSRXuZjKkUOTx1uv+oHFsiZP gNF2thPjcrVaWIh9aJqvc4KBVgthe7UpTSqhTCvzpnJ7g9dc7jnRLDsdjnHcWcEA Ut82Mt6vTpjTuA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:21 2025 by rpki-client