This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft File: 3ofTW9yrEjr_wakdFzaGeWlwmiM.mft (raw, json) Hash identifier: l8kapRZfcGVZsFNmopavWR7ZOX8SbR6UWYVt0BgRQws= Subject key identifier: E8:A4:1B:4F:0C:3A:0F:0B:91:C0:E4:E8:8C:B4:F2:14:CF:EC:67:D3 Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23 Certificate issuer: /CN=de87d35bdcab123affc1a91d1736867969709a23 Certificate serial: 019AF12D4B3B87F7601679BD0A4BB5FF959D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft Manifest number: 0EAD Signing time: Sat 06 Dec 2025 01:01:08 +0000 Manifest this update: Sat 06 Dec 2025 01:01:08 +0000 Manifest next update: Sun 07 Dec 2025 01:01:08 +0000 Files and hashes: 1: 3ofTW9yrEjr_wakdFzaGeWlwmiM.crl (hash: D7iDMUDq4xgOiGeYzkf84oWPN+iaXpiHtw3SK9cPJTM=) 2: 6QLt8gn6308YVRHTv77skONgyv0.roa (hash: WOVtEt3WWdPmMOLnSpBdtQecprDqkDjMDowLpoTrLSs=) 3: BlrozZPONvKYEp2UEAlnW_YzHI4.roa (hash: L9GHrxzoIcunUF/HHDD1IUg78PGRjvbme0vJn+zzCvE=) 4: CyRu--zwDhYd5zhamEbAkFcQBvQ.roa (hash: sO2VoYkxgTRufknOOSGAsTFVUrBvzkN0qo3ZnwDHlpE=) 5: m2FaQjqwdirKnIXjWYvZqBXz6X8.roa (hash: T2eJCXBDxAgsoT/g2qbdU7r93yFYU14KBtRd6n9GR68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4b:3b:87:f7:60:16:79:bd:0a:4b:b5:ff:95:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23 Validity Not Before: Dec 6 01:01:08 2025 GMT Not After : Dec 7 01:01:08 2025 GMT Subject: CN=e8a41b4f0c3a0f0b91c0e4e88cb4f214cfec67d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:77:ca:f7:1f:84:d3:97:85:d1:ff:cb:4e:c7: e8:e9:1f:4e:21:37:ed:fe:be:64:26:5b:46:d5:6c: e5:53:e3:14:1d:c8:a1:ec:d3:ec:76:2b:d9:a7:34: 60:30:80:06:64:1a:3a:0f:33:85:cf:b9:da:94:36: db:4f:e9:dc:5b:57:65:a4:d4:8f:b1:ad:54:03:02: b7:b1:3c:56:bb:6a:60:5f:94:d6:2b:c0:15:60:49: b9:ce:04:b8:9d:61:f1:3b:e2:b0:0f:31:b9:e8:d1: 6c:84:74:e6:19:a6:9a:e8:5e:8d:96:97:d8:64:5f: 90:58:29:22:86:96:da:1b:cc:d6:3b:cb:87:73:ed: 2e:f7:41:cc:af:bb:b6:1f:07:2a:4e:e3:4d:68:4d: 99:80:20:c0:f7:d4:d4:72:e6:d4:9a:12:d7:a0:20: f5:7e:7f:cc:57:2f:66:0e:6c:7d:8b:ae:7a:94:a4: b2:f6:e6:03:71:36:ba:83:1e:ed:cb:d9:d7:cf:f4: 94:4d:8d:08:ce:2e:8f:21:f1:4b:49:6f:96:1b:64: 6b:cf:e8:e2:f3:7e:bb:2c:2d:ec:cb:53:6d:40:6c: 6e:b4:5c:54:ea:21:1c:37:44:18:f0:fd:fb:b0:ee: 61:dc:8b:d3:c3:ff:18:a4:74:80:8f:d6:62:13:b4: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A4:1B:4F:0C:3A:0F:0B:91:C0:E4:E8:8C:B4:F2:14:CF:EC:67:D3 X509v3 Authority Key Identifier: keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:53:7f:05:fd:b2:e6:7b:19:5b:d3:05:b9:05:92:18:5c:ee: f0:7d:42:9a:61:ef:c1:ee:bc:66:a8:54:04:dd:80:fd:52:9e: 15:58:bf:25:47:d4:22:75:48:25:18:e7:85:dc:72:58:6e:ea: df:0d:8c:35:55:0b:09:bf:fc:3d:d2:e5:f1:e0:5b:20:d2:d8: a6:72:f0:e0:03:29:2c:fe:4b:86:b0:f9:8a:02:24:cb:ac:c3: 04:73:45:15:23:83:14:4e:5f:19:99:54:74:ca:e4:18:42:cd: 61:bd:4c:b9:75:84:a6:e2:fb:4b:af:c5:c8:86:c0:55:cf:5a: 66:3e:a7:0d:6b:b1:b7:74:ee:f8:8f:cd:14:19:ed:12:3f:4b: 18:24:cc:45:27:9e:7f:39:0c:dd:9d:2c:3b:a7:ba:cc:d5:14: c9:c7:6e:ff:94:fe:33:54:c8:ba:2c:1a:cb:ef:eb:6c:b0:5e: a7:fe:17:8d:6d:fb:93:d4:21:32:9a:75:02:08:18:11:b4:6d: 90:cd:4c:0f:f6:e7:4e:21:6b:68:13:93:a2:94:91:9f:c1:03: 3c:76:1d:00:58:f6:97:29:c4:27:dd:dc:ea:76:f8:e1:66:3f: 9b:97:d7:64:35:92:c0:0e:0c:41:74:64:e7:7d:4c:12:b8:3c: b6:5c:b8:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUs7h/dgFnm9Cku1/5WdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlODdkMzViZGNhYjEyM2FmZmMxYTkxZDE3MzY4Njc5Njk3 MDlhMjMwHhcNMjUxMjA2MDEwMTA4WhcNMjUxMjA3MDEwMTA4WjAzMTEwLwYDVQQD EyhlOGE0MWI0ZjBjM2EwZjBiOTFjMGU0ZTg4Y2I0ZjIxNGNmZWM2N2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XfK9x+E05eF0f/LTsfo6R9OITft /r5kJltG1WzlU+MUHcih7NPsdivZpzRgMIAGZBo6DzOFz7nalDbbT+ncW1dlpNSP sa1UAwK3sTxWu2pgX5TWK8AVYEm5zgS4nWHxO+KwDzG56NFshHTmGaaa6F6NlpfY ZF+QWCkihpbaG8zWO8uHc+0u90HMr7u2HwcqTuNNaE2ZgCDA99TUcubUmhLXoCD1 fn/MVy9mDmx9i656lKSy9uYDcTa6gx7ty9nXz/SUTY0Izi6PIfFLSW+WG2Rrz+ji 8367LC3sy1NtQGxutFxU6iEcN0QY8P37sO5h3IvTw/8YpHSAj9ZiE7S8YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOikG08MOg8LkcDk6Iy08hTP7GfTMB8GA1UdIwQY MBaAFN6H01vcqxI6/8GpHRc2hnlpcJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM29mVFc5eXJFanJfd2FrZEZ6YUdlV2x3bWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MTA3MTYtZjI2Ni00N2YwLTliYWQt YzIyMzkwZThkOWE2LzEvM29mVFc5eXJFanJfd2FrZEZ6YUdlV2x3bWlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85MTA3MTYtZjI2Ni00N2YwLTliYWQtYzIyMzkwZThkOWE2 LzEvM29mVFc5eXJFanJfd2FrZEZ6YUdlV2x3bWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlN/Bf2y 5nsZW9MFuQWSGFzu8H1CmmHvwe68ZqhUBN2A/VKeFVi/JUfUInVIJRjnhdxyWG7q 3w2MNVULCb/8PdLl8eBbINLYpnLw4AMpLP5LhrD5igIky6zDBHNFFSODFE5fGZlU dMrkGELNYb1MuXWEpuL7S6/FyIbAVc9aZj6nDWuxt3Tu+I/NFBntEj9LGCTMRSee fzkM3Z0sO6e6zNUUycdu/5T+M1TIuiway+/rbLBep/4XjW37k9QhMpp1AggYEbRt kM1MD/bnTiFraBOTopSRn8EDPHYdAFj2lynEJ93c6nb44WY/m5fXZDWSwA4MQXRk 531MErg8tly4kw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:45 2025 by rpki-client