This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json) Hash identifier: GCXlEEyXWFKouBthYN/n4UoGjLdb98ceywVHqMOuVK4= Subject key identifier: 39:FB:AC:02:AC:85:36:3C:1E:86:2A:BD:98:A5:01:1C:06:27:EF:32 Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1 Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1 Certificate serial: 019AF209543556299C6FAB7A4F6C038B687C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft Manifest number: 16BB Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: jK++i1qLwg/DtqZ/F/ujCCKQy3gXmS9lNb/TYOb1K2M=) 2: bPbl9DKxYJUxR3ZUVzukhGWYurM.roa (hash: FAnYMWhXeH8TjI8m2ivn5nzVc0hLKvZ4QbjQQh/aekU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:54:35:56:29:9c:6f:ab:7a:4f:6c:03:8b:68:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1 Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=39fbac02ac85363c1e862abd98a5011c0627ef32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:38:01:9c:92:6a:f6:15:65:a4:d4:e5:b0: 74:1f:d1:cf:91:a3:37:b7:39:38:dd:a4:1e:7f:27: cf:fa:82:60:90:08:2d:4b:f7:4e:30:79:d1:ca:51: 2d:a8:25:14:a8:31:6e:f1:08:9e:ad:db:fa:fa:08: 7e:a8:e6:ed:cb:1f:41:89:3b:3c:ce:6e:1f:08:39: 9e:17:fb:06:5d:b5:21:ec:98:86:20:dd:3d:c7:89: b5:c3:16:ce:f9:10:88:40:67:5a:30:f3:9b:be:53: fa:f3:9e:de:00:84:1a:04:10:8b:44:b0:f9:73:20: 69:d5:a4:b4:7a:fe:1f:2e:31:4e:09:40:3d:f2:eb: a8:9a:be:68:16:9f:d9:16:45:d9:a6:68:d6:91:08: d2:9d:17:13:25:aa:db:f0:d0:3a:48:81:46:7e:b2: 97:65:df:dd:df:3f:9f:a6:16:fe:14:61:22:e0:fb: dd:bc:5a:83:16:74:03:ba:5e:47:41:73:95:3e:48: 8d:dd:b9:2a:94:5e:ce:31:98:6b:d1:11:ec:ad:9c: 55:02:db:a0:62:ff:af:c7:00:41:7e:d7:04:fb:95: 24:e5:b8:62:9c:2b:3f:10:9a:0b:47:fb:fd:1e:07: 9a:38:4c:5c:34:53:d5:d7:c5:a6:85:bd:7c:b9:29: f5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FB:AC:02:AC:85:36:3C:1E:86:2A:BD:98:A5:01:1C:06:27:EF:32 X509v3 Authority Key Identifier: keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a6:90:77:b7:9b:12:f9:3b:1d:2e:ad:0c:91:47:a8:bc:cf: 46:61:43:36:17:10:66:15:35:c9:eb:fb:58:46:ab:c5:50:ae: 8c:9d:b8:25:0a:37:10:fa:8f:87:be:be:43:65:cc:4e:23:71: 87:3f:ca:61:24:7f:88:35:99:fa:c1:e0:68:25:f9:89:6a:56: ae:de:c5:ea:88:90:7f:10:22:16:2b:81:2c:6c:d7:b5:4f:18: f3:84:3e:91:8c:65:5c:98:d8:7b:e2:cc:91:2f:72:ca:1f:e4: 06:1e:42:13:b3:a4:16:2b:7d:ff:2e:1b:9d:f2:ae:b4:76:68: e6:fb:68:de:dd:94:72:fe:51:07:03:58:70:a8:d9:43:e7:24: b6:ad:28:0b:a3:4d:88:0d:de:db:33:b7:3d:ba:1c:9d:6a:2d: a0:e0:b3:4b:c5:9f:80:c6:c6:a3:e6:da:df:39:4c:e3:06:79: 5b:02:ab:5b:52:e9:ba:28:d0:8a:49:88:10:bf:d2:6d:75:5a: a5:74:77:3e:6b:34:33:42:8f:e3:cc:2d:a6:6d:b6:62:7c:b5: 1c:39:f9:63:11:52:2d:ad:f9:96:ec:ff:6e:40:d2:f0:23:3e: 28:3c:2f:0c:eb:80:43:75:bd:e9:6e:88:29:0d:da:61:f0:04: c8:bf:c7:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVQ1Vimcb6t6T2wDi2h8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDIyYzI0MTQ3ZWM3OWZhOTA2NDY0YWIxNDNmZDQ3ZTNi ZWIzYTEwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD EygzOWZiYWMwMmFjODUzNjNjMWU4NjJhYmQ5OGE1MDExYzA2MjdlZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0M4AZySavYVZaTU5bB0H9HPkaM3 tzk43aQefyfP+oJgkAgtS/dOMHnRylEtqCUUqDFu8Qierdv6+gh+qObtyx9BiTs8 zm4fCDmeF/sGXbUh7JiGIN09x4m1wxbO+RCIQGdaMPObvlP6857eAIQaBBCLRLD5 cyBp1aS0ev4fLjFOCUA98uuomr5oFp/ZFkXZpmjWkQjSnRcTJarb8NA6SIFGfrKX Zd/d3z+fphb+FGEi4PvdvFqDFnQDul5HQXOVPkiN3bkqlF7OMZhr0RHsrZxVAtug Yv+vxwBBftcE+5Uk5bhinCs/EJoLR/v9HgeaOExcNFPV18Wmhb18uSn1wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDn7rAKshTY8HoYqvZilARwGJ+8yMB8GA1UdIwQY MBaAFNxCLCQUfsefqQZGSrFD/UfjvrOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMt MjE2NTEzNmM5ZDlhLzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMtMjE2NTEzNmM5ZDlh LzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6aQd7eb Evk7HS6tDJFHqLzPRmFDNhcQZhU1yev7WEarxVCujJ24JQo3EPqPh76+Q2XMTiNx hz/KYSR/iDWZ+sHgaCX5iWpWrt7F6oiQfxAiFiuBLGzXtU8Y84Q+kYxlXJjYe+LM kS9yyh/kBh5CE7OkFit9/y4bnfKutHZo5vto3t2Ucv5RBwNYcKjZQ+cktq0oC6NN iA3e2zO3PbocnWotoOCzS8WfgMbGo+ba3zlM4wZ5WwKrW1LpuijQikmIEL/SbXVa pXR3Pms0M0KP48wtpm22Yny1HDn5YxFSLa35luz/bkDS8CM+KDwvDOuAQ3W96W6I KQ3aYfAEyL/Hsg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:59 2025 by rpki-client