This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json) Hash identifier: d9lapcJG1dwq9CPQJHFronrOrn/zg94JMt6WwpFo41M= Subject key identifier: 94:2B:B9:B2:70:D4:71:50:F2:54:BC:3F:63:BE:B4:6B:0F:BE:A3:75 Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88 Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588 Certificate serial: 019AF2AD3825239BBD8E7528F3C883960DDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft Manifest number: 0EC4 Signing time: Sat 06 Dec 2025 08:00:29 +0000 Manifest this update: Sat 06 Dec 2025 08:00:29 +0000 Manifest next update: Sun 07 Dec 2025 08:00:29 +0000 Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: Fno2uDcQUypco8GD13YgCG4ds46AZrXlp8WYgSwtPd8=) 2: OK60eEXoBVz15pEwVmX0yYULZbk.roa (hash: irOuBXNJpmhp7Bb40BZggz4rGVp00h/PvH1AyeAmbL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:38:25:23:9b:bd:8e:75:28:f3:c8:83:96:0d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588 Validity Not Before: Dec 6 08:00:29 2025 GMT Not After : Dec 7 08:00:29 2025 GMT Subject: CN=942bb9b270d47150f254bc3f63beb46b0fbea375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:1f:a0:1e:cd:e8:2a:eb:64:e9:91:54:98: 16:dd:01:18:21:85:27:15:d7:c4:e0:63:79:1c:e7: 6f:b1:a1:be:9f:fb:36:8d:59:37:4a:0e:85:89:8b: ed:13:69:7a:50:8f:ba:97:c8:49:65:06:69:a3:bc: 24:0e:91:b6:85:7a:34:35:91:e3:5a:e0:87:c9:55: 3f:2c:60:be:f3:ba:4e:c9:95:ec:b6:87:f6:4f:bb: 91:55:0e:cb:d5:c1:03:a3:e0:88:80:b9:d8:50:f7: fe:68:1f:3f:eb:fb:f1:a2:3b:e4:c9:bf:84:22:1a: 1f:e9:1a:29:35:aa:46:7d:d8:ac:47:f8:ab:dd:6a: 11:b2:a7:41:56:86:da:b7:b4:2a:98:e0:b8:1c:ba: f9:6d:e6:e1:2f:fd:9e:6e:a6:ec:a6:94:82:3c:89: d4:a9:27:1c:f9:f2:a9:71:06:9d:94:1f:c6:1d:d6: f5:c5:46:26:31:dd:ad:f4:ba:b9:7e:bc:63:87:78: 6a:9e:27:59:b1:23:53:61:9a:27:0d:c8:a5:6e:bf: ea:dd:4f:36:99:2a:e0:43:04:92:4c:dc:e2:39:55: a3:36:97:4a:63:5c:0a:e5:d5:9c:0a:9c:e7:a1:6a: 50:f5:65:1a:f7:5a:06:38:82:37:fc:5a:4b:e4:9f: d8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2B:B9:B2:70:D4:71:50:F2:54:BC:3F:63:BE:B4:6B:0F:BE:A3:75 X509v3 Authority Key Identifier: keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8e:9e:20:9e:1b:b6:79:f0:75:3f:3d:4e:02:ac:b3:09:4c: c3:df:98:15:1f:f9:67:f0:5a:7e:01:b3:a5:54:ee:06:49:33: e2:7d:b0:86:e7:b6:fa:0b:fe:45:8a:1f:54:14:31:fa:27:e1: 1a:23:69:3d:9e:7f:29:ba:6e:6c:bb:45:82:b3:86:32:cc:83: 02:6e:af:80:0b:06:0f:6f:0d:bd:a3:c8:d1:f0:2d:48:e4:9c: 35:87:38:ae:1d:87:fd:e7:67:40:84:e5:f2:e9:c0:58:c5:99: e0:25:91:c6:5b:10:35:c9:43:44:af:6b:d3:93:e9:c9:09:e7: d2:e0:d4:7c:17:3a:64:36:8a:15:60:fe:5b:98:21:55:34:00: 6d:5a:93:21:b6:91:0b:72:36:a7:8c:6d:0b:58:2a:9d:6b:9a: 73:37:1b:95:29:c2:42:04:72:cb:95:d3:ae:99:25:1a:5c:8a: 8f:06:bc:b6:05:88:ff:87:72:06:17:97:98:10:c2:43:bf:19: 1c:58:6f:34:a1:8c:05:f1:b3:a4:47:49:ac:49:22:bf:9d:c5: 67:c4:46:fa:ef:fa:7c:3b:54:bf:02:ed:2f:a7:42:07:78:6f: f4:3f:53:db:da:3e:55:5a:bf:52:90:ac:69:14:07:60:11:c0: c9:0e:16:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrTglI5u9jnUo88iDlg3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYzg4MjMyYzA3ZGUyY2RjYjk2ZWFmOWU3NTE1NTBiYWE2 NmM1ODgwHhcNMjUxMjA2MDgwMDI5WhcNMjUxMjA3MDgwMDI5WjAzMTEwLwYDVQQD Eyg5NDJiYjliMjcwZDQ3MTUwZjI1NGJjM2Y2M2JlYjQ2YjBmYmVhMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnkfoB7N6CrrZOmRVJgW3QEYIYUn FdfE4GN5HOdvsaG+n/s2jVk3Sg6FiYvtE2l6UI+6l8hJZQZpo7wkDpG2hXo0NZHj WuCHyVU/LGC+87pOyZXstof2T7uRVQ7L1cEDo+CIgLnYUPf+aB8/6/vxojvkyb+E Ihof6RopNapGfdisR/ir3WoRsqdBVobat7QqmOC4HLr5bebhL/2ebqbsppSCPInU qScc+fKpcQadlB/GHdb1xUYmMd2t9Lq5frxjh3hqnidZsSNTYZonDcilbr/q3U82 mSrgQwSSTNziOVWjNpdKY1wK5dWcCpznoWpQ9WUa91oGOII3/FpL5J/YwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQrubJw1HFQ8lS8P2O+tGsPvqN1MB8GA1UdIwQY MBaAFN3IgjLAfeLNy5bq+edRVQuqZsWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2NpQ01zQjk0czNMbHVyNTUxRlZDNnBteFlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wYzk2ZDQtYzc2MC00YWE2LTg1ZGIt NDJjNzliMDNiNGRmLzEvM2NpQ01zQjk0czNMbHVyNTUxRlZDNnBteFlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wYzk2ZDQtYzc2MC00YWE2LTg1ZGItNDJjNzliMDNiNGRm LzEvM2NpQ01zQjk0czNMbHVyNTUxRlZDNnBteFlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWo6eIJ4b tnnwdT89TgKsswlMw9+YFR/5Z/BafgGzpVTuBkkz4n2whue2+gv+RYofVBQx+ifh GiNpPZ5/KbpubLtFgrOGMsyDAm6vgAsGD28NvaPI0fAtSOScNYc4rh2H/ednQITl 8unAWMWZ4CWRxlsQNclDRK9r05PpyQnn0uDUfBc6ZDaKFWD+W5ghVTQAbVqTIbaR C3I2p4xtC1gqnWuaczcblSnCQgRyy5XTrpklGlyKjwa8tgWI/4dyBheXmBDCQ78Z HFhvNKGMBfGzpEdJrEkiv53FZ8RG+u/6fDtUvwLtL6dCB3hv9D9T29o+VVq/UpCs aRQHYBHAyQ4Wnw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:46:46 2025 by rpki-client