This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft File: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json) Hash identifier: JpU6NHD5KEhFQk0vwg6qA52SbzQFV8MP3w/XS2CioaM= Subject key identifier: 63:E3:E4:C3:DF:4B:22:AC:2B:B7:6E:EB:C5:0F:CE:7B:9D:F9:EE:65 Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3 Certificate issuer: /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3 Certificate serial: 019AF12E4649CE7B0B6B4D6EB3D7C08845B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:02:12 +0000 Manifest this update: Sat 06 Dec 2025 01:02:12 +0000 Manifest next update: Sun 07 Dec 2025 01:02:12 +0000 Files and hashes: 1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: rA/fIFh6tQxEf1UnMgJenApGMltdxLGvxbLg9Q3b/nM=) 2: XQd1c0isqEth9h07f_gdrmhW6kM.roa (hash: WoVAodjsDqf5sS0K6LPcCANkMFHDsRKs5Hf+/9kb228=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:46:49:ce:7b:0b:6b:4d:6e:b3:d7:c0:88:45:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3 Validity Not Before: Dec 6 01:02:12 2025 GMT Not After : Dec 7 01:02:12 2025 GMT Subject: CN=63e3e4c3df4b22ac2bb76eebc50fce7b9df9ee65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5e:71:63:51:b7:bc:64:ac:36:5b:89:09:a2: 22:6c:7d:a8:86:e1:1f:32:d5:26:1f:9b:c9:66:c9: fd:46:32:93:3f:19:e8:5c:fe:23:cc:c8:5d:64:ee: 7c:58:82:51:4f:dc:ed:d2:52:d9:88:07:b0:6b:9e: 7d:e4:8f:67:e0:87:e8:ec:d5:e6:3a:7d:c6:21:ee: 75:7b:b0:e1:1d:bb:b5:9b:39:f4:3e:f5:91:ed:b1: 10:3a:d0:b4:c0:7d:9c:4c:fa:92:ff:db:02:fa:70: a8:0f:20:32:20:3e:45:79:bc:f5:0d:c2:c2:0e:b2: d7:af:89:47:67:8d:33:b4:e3:d7:5f:85:32:a6:ca: 4b:2f:6f:0b:ad:33:13:ed:3f:bd:72:bc:db:9a:9d: f5:4b:a4:75:89:4a:83:40:57:d7:db:38:c3:60:40: 06:0d:0c:cc:72:f0:16:00:14:f4:10:b3:fc:45:b9: cc:5e:66:a2:bc:c8:fa:ba:83:f3:6a:29:ed:eb:75: 57:58:8a:bd:19:a4:2a:2b:b0:d9:37:81:bb:62:40: 10:f3:d1:3c:89:84:15:f4:99:06:49:a7:ae:1c:59: 40:31:8e:94:e0:7e:d0:44:55:f9:4c:86:8d:dd:f5: 02:23:31:9f:2a:de:9c:d6:56:b9:3a:01:4e:3f:58: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E3:E4:C3:DF:4B:22:AC:2B:B7:6E:EB:C5:0F:CE:7B:9D:F9:EE:65 X509v3 Authority Key Identifier: keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:74:da:50:c6:32:99:af:90:63:6f:88:dc:93:d7:2b:65:76: 3e:15:12:8c:cd:40:03:3d:c7:1a:3e:69:4b:f2:12:ff:5e:31: f7:54:98:07:b4:f8:11:81:74:ec:04:3e:e2:34:86:2c:41:a6: 5b:bc:82:7d:bb:c2:57:0d:07:79:4b:fd:c1:55:97:51:3f:a8: 11:3f:56:a1:07:51:e5:00:95:bc:ee:09:4b:07:df:02:8f:2b: ad:37:f6:03:f5:7c:82:d7:ea:2d:2b:41:f3:4b:df:ce:59:c9: b9:37:80:43:ee:cf:80:85:d7:5d:d5:ca:1f:28:18:dd:50:ec: 0c:3a:63:7b:f8:5d:a5:34:c8:0e:a5:d9:12:f7:24:7c:e3:f8: 8f:d7:6c:be:0b:44:da:cb:6c:74:29:8c:aa:48:58:00:c7:1a: 37:2d:cd:60:cc:37:a7:02:2f:d1:67:8b:08:dd:4f:18:0d:aa: 0f:0f:94:d9:b0:2f:14:f8:f9:df:e1:bf:6c:ec:ce:aa:b0:b8: 38:f1:e8:5e:5b:b5:9e:98:4d:45:b1:c4:38:02:aa:3b:6d:8b: 33:81:d0:ed:6a:8d:6a:c1:bf:60:88:09:60:bb:51:5d:75:a2: 34:0a:5e:0d:41:62:49:42:34:eb:21:e0:20:c9:be:a6:54:ac: 4e:6f:bd:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkZJznsLa01us9fAiEW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMzc4MTJiZDQ1MjczZWEzYjJhNTNkOWU5NmY2ZGJhMjE1 ODI2ZjMwHhcNMjUxMjA2MDEwMjEyWhcNMjUxMjA3MDEwMjEyWjAzMTEwLwYDVQQD Eyg2M2UzZTRjM2RmNGIyMmFjMmJiNzZlZWJjNTBmY2U3YjlkZjllZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl5xY1G3vGSsNluJCaIibH2ohuEf MtUmH5vJZsn9RjKTPxnoXP4jzMhdZO58WIJRT9zt0lLZiAewa5595I9n4Ifo7NXm On3GIe51e7DhHbu1mzn0PvWR7bEQOtC0wH2cTPqS/9sC+nCoDyAyID5Febz1DcLC DrLXr4lHZ40ztOPXX4UypspLL28LrTMT7T+9crzbmp31S6R1iUqDQFfX2zjDYEAG DQzMcvAWABT0ELP8RbnMXmaivMj6uoPzaint63VXWIq9GaQqK7DZN4G7YkAQ89E8 iYQV9JkGSaeuHFlAMY6U4H7QRFX5TIaN3fUCIzGfKt6c1la5OgFOP1jdKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPj5MPfSyKsK7du68UPznud+e5lMB8GA1UdIwQY MBaAFN43gSvUUnPqOypT2elvbbohWCbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2plQks5UlNjLW83S2xQWjZXOXR1aUZZSnZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iMjZjNDQtOWQxNi00YzNkLTlmMWQt YWY2NDZjOGY0YWY2LzEvM2plQks5UlNjLW83S2xQWjZXOXR1aUZZSnZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iMjZjNDQtOWQxNi00YzNkLTlmMWQtYWY2NDZjOGY0YWY2 LzEvM2plQks5UlNjLW83S2xQWjZXOXR1aUZZSnZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3TaUMYy ma+QY2+I3JPXK2V2PhUSjM1AAz3HGj5pS/IS/14x91SYB7T4EYF07AQ+4jSGLEGm W7yCfbvCVw0HeUv9wVWXUT+oET9WoQdR5QCVvO4JSwffAo8rrTf2A/V8gtfqLStB 80vfzlnJuTeAQ+7PgIXXXdXKHygY3VDsDDpje/hdpTTIDqXZEvckfOP4j9dsvgtE 2stsdCmMqkhYAMcaNy3NYMw3pwIv0WeLCN1PGA2qDw+U2bAvFPj53+G/bOzOqrC4 OPHoXlu1nphNRbHEOAKqO22LM4HQ7WqNasG/YIgJYLtRXXWiNApeDUFiSUI06yHg IMm+plSsTm+9OA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:01 2025 by rpki-client