This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft File: 3Cc-HiGEHOLDNf4clhznaAF-7ik.mft (raw, json) Hash identifier: ZIblNyOxP4f9vk4gs51R5nph7mf2HLHdyqItTz31edc= Subject key identifier: 0F:F0:AC:65:0C:9B:B9:E7:6F:3B:27:5C:7D:3A:82:A3:F8:9F:8B:F0 Authority key identifier: DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29 Certificate issuer: /CN=dc273e1e21841ce2c335fe1c961ce768017eee29 Certificate serial: 019AF1D1932BEF9AE3AF43536E7595597821 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: 3Cc-HiGEHOLDNf4clhznaAF-7ik.crl (hash: qWwbD8We7cj1bogtxGNNjLOo8x5eiKrH9dM9w0XuKz0=) 2: cB2GV3lhDMXOaIXUex8JR9eH0nE.roa (hash: mFtVuvigR9Qf1WYXi/PECacALAmiDcjnPr9gUNHSYfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:93:2b:ef:9a:e3:af:43:53:6e:75:95:59:78:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc273e1e21841ce2c335fe1c961ce768017eee29 Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=0ff0ac650c9bb9e76f3b275c7d3a82a3f89f8bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a3:07:3d:be:57:0d:e6:5b:7d:72:f5:1c:65: cf:c6:99:d6:be:67:de:6b:01:71:c7:bb:01:13:4c: 8b:43:2d:e8:6c:f0:ad:51:d4:f1:ff:09:20:e2:84: 73:ae:2e:3e:1d:00:2a:9f:9a:d2:00:77:7f:49:6f: fb:31:24:f3:00:eb:68:de:6b:ff:4a:66:ba:66:f4: 8c:5a:ea:40:76:ca:6f:c9:24:19:6d:38:e7:5b:ea: ea:62:82:3f:c6:82:97:2a:5a:1a:c0:1f:6f:d1:1a: f4:e3:77:0e:df:4e:d6:81:27:8b:cd:51:be:6f:44: cb:04:6c:44:fb:a8:79:4f:2c:04:c0:1b:4a:b5:0b: c5:6f:b7:4b:c4:01:98:14:2d:f3:4e:8f:51:3f:3e: 65:4b:23:75:4b:4a:c1:26:9e:bd:14:50:2d:59:21: f3:25:6e:8b:cc:67:e8:1b:df:9a:2b:35:7e:b1:e8: c3:82:56:9d:69:3e:3c:4b:5b:5b:98:f3:74:fd:db: c9:27:c1:fb:b7:ca:7c:8b:28:12:fd:6d:83:a7:b0: 64:01:65:7f:41:3a:e2:f5:01:31:b4:77:6d:c2:42: cc:e0:af:8c:e2:b8:4d:61:af:07:19:75:9d:de:c9: ca:d3:81:e0:a0:b1:5d:fd:c1:9c:d8:7f:44:16:8e: 02:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F0:AC:65:0C:9B:B9:E7:6F:3B:27:5C:7D:3A:82:A3:F8:9F:8B:F0 X509v3 Authority Key Identifier: keyid:DC:27:3E:1E:21:84:1C:E2:C3:35:FE:1C:96:1C:E7:68:01:7E:EE:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cc-HiGEHOLDNf4clhznaAF-7ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b4a71a-eb37-469a-8bb5-27841f507735/1/3Cc-HiGEHOLDNf4clhznaAF-7ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:2d:72:81:80:07:b3:34:6e:63:ff:48:f9:92:85:c8:eb:84: b6:f4:a4:17:59:f0:6d:c6:f7:66:8d:83:44:ae:a5:84:0f:b9: b8:f7:56:4e:74:9b:3a:e0:13:95:a0:83:1b:b3:3a:2b:5d:6b: 9a:b5:8f:81:e5:8c:0f:7a:31:c6:52:10:45:ad:fe:5d:8d:cf: 45:00:ae:81:05:61:57:3b:87:1c:5c:03:80:a5:e4:9d:55:bd: fa:42:fb:2c:ee:fc:03:59:78:d2:69:f1:77:54:20:13:03:5f: 66:45:b1:6d:c3:25:48:b1:07:12:06:e6:87:ff:65:bc:81:a8: 3e:59:d8:9a:91:7f:dc:16:71:78:5f:6b:be:28:fd:19:cf:c6: 4c:ef:f4:2b:14:b4:8b:69:11:cc:d4:e7:19:e5:88:38:d7:7c: a3:01:72:83:a6:24:bc:0e:cc:5a:5e:d9:35:d9:08:59:be:27: ed:3b:44:0d:2a:6d:87:31:d3:6b:40:03:2f:33:21:99:80:e9: fd:ab:96:e3:c4:fb:bd:62:95:67:a1:4d:6a:c0:4c:02:cd:db: 1f:5c:80:ac:8b:a1:cd:04:e4:a1:3f:38:35:78:ba:38:f1:63: e0:9f:84:45:d7:2f:cf:27:bf:4f:be:c0:5b:be:7f:01:07:3d: 5d:e0:4e:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZMr75rjr0NTbnWVWXghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMjczZTFlMjE4NDFjZTJjMzM1ZmUxYzk2MWNlNzY4MDE3 ZWVlMjkwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD EygwZmYwYWM2NTBjOWJiOWU3NmYzYjI3NWM3ZDNhODJhM2Y4OWY4YmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qMHPb5XDeZbfXL1HGXPxpnWvmfe awFxx7sBE0yLQy3obPCtUdTx/wkg4oRzri4+HQAqn5rSAHd/SW/7MSTzAOto3mv/ Sma6ZvSMWupAdspvySQZbTjnW+rqYoI/xoKXKloawB9v0Rr043cO307WgSeLzVG+ b0TLBGxE+6h5TywEwBtKtQvFb7dLxAGYFC3zTo9RPz5lSyN1S0rBJp69FFAtWSHz JW6LzGfoG9+aKzV+sejDgladaT48S1tbmPN0/dvJJ8H7t8p8iygS/W2Dp7BkAWV/ QTri9QExtHdtwkLM4K+M4rhNYa8HGXWd3snK04HgoLFd/cGc2H9EFo4CKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/wrGUMm7nnbzsnXH06gqP4n4vwMB8GA1UdIwQY MBaAFNwnPh4hhBziwzX+HJYc52gBfu4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iNGE3MWEtZWIzNy00NjlhLThiYjUt Mjc4NDFmNTA3NzM1LzEvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iNGE3MWEtZWIzNy00NjlhLThiYjUtMjc4NDFmNTA3NzM1 LzEvM0NjLUhpR0VIT0xETmY0Y2xoem5hQUYtN2lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEC1ygYAH szRuY/9I+ZKFyOuEtvSkF1nwbcb3Zo2DRK6lhA+5uPdWTnSbOuATlaCDG7M6K11r mrWPgeWMD3oxxlIQRa3+XY3PRQCugQVhVzuHHFwDgKXknVW9+kL7LO78A1l40mnx d1QgEwNfZkWxbcMlSLEHEgbmh/9lvIGoPlnYmpF/3BZxeF9rvij9Gc/GTO/0KxS0 i2kRzNTnGeWIONd8owFyg6YkvA7MWl7ZNdkIWb4n7TtEDSpthzHTa0ADLzMhmYDp /auW48T7vWKVZ6FNasBMAs3bH1yArIuhzQTkoT84NXi6OPFj4J+ERdcvzye/T77A W75/AQc9XeBO6A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:33 2025 by rpki-client