This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft File: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json) Hash identifier: rZJrttySbKasm/RMUmNhvLR4TKOnBHTWD6Z5TkAVHgk= Subject key identifier: F3:20:72:CB:04:CF:63:90:72:55:8E:83:B6:DA:7E:60:6E:4E:C0:7C Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43 Certificate issuer: /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843 Certificate serial: 019AF2ADB0A3B691D4A3DD987EDE89B468DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:01:00 +0000 Manifest this update: Sat 06 Dec 2025 08:01:00 +0000 Manifest next update: Sun 07 Dec 2025 08:01:00 +0000 Files and hashes: 1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: 722QrBQ2QqOu0quyWBk8/C3Yv7TRZ6mPwC7EIdkApa8=) 2: 5gG_Zi7UzMpPtarM4YgRPE41P0Y.roa (hash: h4U+fDKpUfUkNJ413pa9utTlvK0hGY5RmFrs2JwFVFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b0:a3:b6:91:d4:a3:dd:98:7e:de:89:b4:68:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843 Validity Not Before: Dec 6 08:01:00 2025 GMT Not After : Dec 7 08:01:00 2025 GMT Subject: CN=f32072cb04cf639072558e83b6da7e606e4ec07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:09:ec:df:62:c1:de:be:1b:e4:16:bd:84: f6:8d:a1:d0:bf:98:c6:88:90:ac:40:5b:ae:88:5d: dd:62:80:91:1f:29:a8:cb:59:48:06:37:71:37:47: 14:23:0d:b6:09:2f:00:87:7d:72:b9:7c:4b:d2:6d: 78:3d:81:2f:e8:9c:52:fa:dd:5d:fa:29:0d:79:08: c9:85:64:3a:3a:fc:37:e8:36:27:f0:1f:7b:c6:7f: 64:5e:8b:65:73:84:7a:ca:d9:57:74:51:77:67:94: 3b:9b:94:54:46:03:90:4f:39:1d:51:20:a7:8f:8f: a4:d6:91:44:4c:32:29:50:dd:92:e6:a7:13:cd:81: f7:20:38:4d:3d:4a:04:d8:fb:9c:4e:50:45:50:38: f1:2e:6f:35:cc:77:9b:d2:85:66:e2:88:16:bf:25: 55:ce:b6:ad:f5:36:5f:9b:de:5f:46:12:18:d3:d4: 3c:bc:01:40:72:f3:a8:d4:0c:81:7a:4e:d4:c2:96: 95:36:3e:53:86:98:57:ee:e8:d1:17:62:e2:23:a8: f8:1a:71:2d:66:67:58:a8:fe:26:12:69:5a:1c:0e: 6d:6b:94:90:b4:88:88:e5:bd:b6:5e:d7:fd:7b:ca: e8:5f:70:67:0b:7f:f5:8a:13:19:3c:b3:6e:d1:1c: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:20:72:CB:04:CF:63:90:72:55:8E:83:B6:DA:7E:60:6E:4E:C0:7C X509v3 Authority Key Identifier: keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:bc:cc:7f:af:4b:2f:a5:03:eb:eb:68:e9:d1:4f:bf:9c:4a: aa:44:20:08:87:04:2d:e1:a8:bf:39:39:e1:46:a8:9c:fd:2a: b4:94:e0:85:ec:9a:d9:09:f5:5a:55:41:cb:8c:f7:4f:fb:3d: 43:f7:2d:d9:a8:26:91:0b:92:6e:4b:1a:ed:e0:3e:ff:a1:07: 75:12:f5:07:18:7f:97:c6:76:cf:eb:63:c7:93:43:c8:1c:b7: 92:2e:32:e3:a4:81:4e:c5:11:6b:e2:f3:5c:b7:db:84:89:ac: 4d:f4:2d:e9:f0:9e:aa:57:f9:5e:14:91:9f:04:13:f9:13:23: 29:ba:11:df:bb:df:92:d1:81:40:a8:c9:23:e4:3f:6f:7f:0a: 06:d0:85:83:0a:a1:2a:bc:67:49:e1:2b:26:5f:f1:9a:86:53: 7e:64:2e:8c:82:93:62:2b:b9:89:ea:df:67:3e:9e:16:df:23: 3c:8a:ca:a3:9c:ab:0a:06:ce:7e:dd:6b:e0:ed:34:45:02:c9: d6:ff:6e:bf:af:70:f0:2d:f9:31:02:26:75:d3:59:3c:71:d6: 97:3b:23:0b:19:18:c5:ad:84:87:11:b0:40:f4:78:84:56:7b: 08:e9:40:36:22:da:6a:fd:e0:8f:03:95:61:6b:3f:a1:08:c4: db:26:98:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbCjtpHUo92Yft6JtGjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYjA0NmI2ZTMwOWU5YTg2NjUyMmMyYTQwYzY2ZmZjNDJm YmI4NDMwHhcNMjUxMjA2MDgwMTAwWhcNMjUxMjA3MDgwMTAwWjAzMTEwLwYDVQQD EyhmMzIwNzJjYjA0Y2Y2MzkwNzI1NThlODNiNmRhN2U2MDZlNGVjMDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO0J7N9iwd6+G+QWvYT2jaHQv5jG iJCsQFuuiF3dYoCRHymoy1lIBjdxN0cUIw22CS8Ah31yuXxL0m14PYEv6JxS+t1d +ikNeQjJhWQ6Ovw36DYn8B97xn9kXotlc4R6ytlXdFF3Z5Q7m5RURgOQTzkdUSCn j4+k1pFETDIpUN2S5qcTzYH3IDhNPUoE2PucTlBFUDjxLm81zHeb0oVm4ogWvyVV zrat9TZfm95fRhIY09Q8vAFAcvOo1AyBek7UwpaVNj5ThphX7ujRF2LiI6j4GnEt ZmdYqP4mEmlaHA5ta5SQtIiI5b22Xtf9e8roX3BnC3/1ihMZPLNu0RwYWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMgcssEz2OQclWOg7bafmBuTsB8MB8GA1UdIwQY MBaAFN6wRrbjCemoZlIsKkDGb/xC+7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kMjRiYzItNDJmMy00NmQ5LWJkZDkt MWM5NDkyMjQ1Y2FiLzEvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9kMjRiYzItNDJmMy00NmQ5LWJkZDktMWM5NDkyMjQ1Y2Fi LzEvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7zMf69L L6UD6+to6dFPv5xKqkQgCIcELeGovzk54UaonP0qtJTgheya2Qn1WlVBy4z3T/s9 Q/ct2agmkQuSbksa7eA+/6EHdRL1Bxh/l8Z2z+tjx5NDyBy3ki4y46SBTsURa+Lz XLfbhImsTfQt6fCeqlf5XhSRnwQT+RMjKboR37vfktGBQKjJI+Q/b38KBtCFgwqh KrxnSeErJl/xmoZTfmQujIKTYiu5ierfZz6eFt8jPIrKo5yrCgbOft1r4O00RQLJ 1v9uv69w8C35MQImddNZPHHWlzsjCxkYxa2EhxGwQPR4hFZ7COlANiLaav3gjwOV YWs/oQjE2yaYyw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:37 2025 by rpki-client