This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft File: 3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft (raw, json) Hash identifier: gdfzIoW14kpT44YowxoYRsacXS3FIs1FDgbQFQixhio= Subject key identifier: DF:7D:68:0C:B1:85:E3:63:79:0E:3F:D7:C3:AE:D0:C9:65:90:F0:D2 Authority key identifier: DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5 Certificate issuer: /CN=dee02e267c89f50df1a176f0e75f5c28235b23a5 Certificate serial: 019AF19B26D32538D4B5332E5AA0AEAF8BB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: 3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl (hash: hHlOZOp8O/HusJXzui9zDhgUjpy3ElWDOh1gfbez6Ck=) 2: euCMx_LYVLnswJw2ZtJH1lfD6W0.roa (hash: RH8n6d/oLJKbEl/TRP31aGK7zEruU0/gmBS7WXFdED4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:26:d3:25:38:d4:b5:33:2e:5a:a0:ae:af:8b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee02e267c89f50df1a176f0e75f5c28235b23a5 Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=df7d680cb185e363790e3fd7c3aed0c96590f0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ed:9e:a3:e0:bc:4e:6b:36:a4:16:4b:ce:aa: 70:98:29:fb:ed:ff:67:91:e5:fd:35:07:28:f6:a6: 04:a4:4b:24:23:41:13:79:62:82:93:83:ee:53:2a: ed:69:20:7e:44:d0:4f:4c:c4:56:f7:6f:ab:13:32: 71:37:59:df:99:de:f6:05:ac:6a:ca:e2:9e:7c:54: 6a:1a:08:26:5b:07:6e:86:57:30:b4:6a:5b:24:a2: 53:ba:6f:91:68:7b:0b:c2:9d:6e:12:5b:87:ac:eb: f2:87:27:bc:82:3a:86:60:43:23:4a:c9:18:bc:de: 48:17:86:81:42:5b:36:ce:52:c0:b7:5b:7c:b7:78: 7e:53:dc:69:fb:20:9c:a4:02:b5:a4:c4:f0:0a:63: 4f:61:64:41:e6:8a:a8:b5:c7:e6:3b:45:4a:c3:72: 63:51:a3:e5:a6:86:65:cb:65:02:f1:c9:94:ab:fe: d0:0e:3c:c6:13:f4:40:87:50:9a:32:1a:e5:ee:30: 3d:f5:aa:58:9f:9b:81:4b:b9:62:79:40:62:59:50: aa:65:8c:2b:d8:64:0c:58:1e:8a:6e:31:77:c0:32: 63:4a:12:32:f2:8b:99:e0:45:15:cb:0d:08:e1:46: 79:6a:11:78:27:e4:c6:39:5e:32:3e:3c:6e:63:82: 3f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7D:68:0C:B1:85:E3:63:79:0E:3F:D7:C3:AE:D0:C9:65:90:F0:D2 X509v3 Authority Key Identifier: keyid:DE:E0:2E:26:7C:89:F5:0D:F1:A1:76:F0:E7:5F:5C:28:23:5B:23:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uAuJnyJ9Q3xoXbw519cKCNbI6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e9ba47-06ae-4988-8165-37018b1fe9fa/1/3uAuJnyJ9Q3xoXbw519cKCNbI6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:54:a0:9a:af:a3:92:7a:06:99:9b:06:25:da:2f:c0:4a:58: 5b:21:3a:47:3e:76:97:d7:9a:48:d8:47:89:e2:09:4a:8a:23: c5:39:5e:31:dd:b2:67:92:26:97:b4:7c:bf:9d:9d:b0:5d:39: 11:3a:02:1c:47:e7:f5:69:c3:7a:b3:2e:68:f7:28:be:de:89: 6b:48:a7:d3:a4:66:2b:e8:0a:f8:5e:80:56:dc:ff:3a:04:92: f8:c9:0f:09:97:95:40:b4:a5:99:74:98:72:80:a2:f1:72:fb: 68:f1:e6:da:2a:2c:52:93:22:42:ba:9d:35:86:3e:99:6e:1b: 42:dd:4d:79:2a:5a:15:b7:0d:7b:3f:ac:04:e2:29:d0:2d:40: 98:82:ba:81:8f:01:10:d5:6a:c0:60:76:fe:ab:c6:b4:0e:c6: 4a:51:0b:42:e1:41:0c:fa:25:f6:2c:af:1d:ff:7c:f3:6d:0d: e0:a8:51:33:a1:ba:fb:6e:92:4e:81:10:8f:ba:8c:db:76:ba: e0:79:cc:1f:69:1b:86:57:3c:f1:27:2a:b1:cc:35:fe:ef:93: e9:25:ed:e6:5a:6b:75:24:7f:72:8d:cd:c1:81:42:d8:37:42: 49:13:88:5b:b7:52:e5:f0:db:3e:81:76:6f:3b:9c:05:d5:f4: 67:24:05:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmybTJTjUtTMuWqCur4u3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTAyZTI2N2M4OWY1MGRmMWExNzZmMGU3NWY1YzI4MjM1 YjIzYTUwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD EyhkZjdkNjgwY2IxODVlMzYzNzkwZTNmZDdjM2FlZDBjOTY1OTBmMGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+2eo+C8Tms2pBZLzqpwmCn77f9n keX9NQco9qYEpEskI0ETeWKCk4PuUyrtaSB+RNBPTMRW92+rEzJxN1nfmd72Baxq yuKefFRqGggmWwduhlcwtGpbJKJTum+RaHsLwp1uEluHrOvyhye8gjqGYEMjSskY vN5IF4aBQls2zlLAt1t8t3h+U9xp+yCcpAK1pMTwCmNPYWRB5oqotcfmO0VKw3Jj UaPlpoZly2UC8cmUq/7QDjzGE/RAh1CaMhrl7jA99apYn5uBS7lieUBiWVCqZYwr 2GQMWB6KbjF3wDJjShIy8ouZ4EUVyw0I4UZ5ahF4J+TGOV4yPjxuY4I/owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN99aAyxheNjeQ4/18Ou0MllkPDSMB8GA1UdIwQY MBaAFN7gLiZ8ifUN8aF28OdfXCgjWyOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lOWJhNDctMDZhZS00OTg4LTgxNjUt MzcwMThiMWZlOWZhLzEvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lOWJhNDctMDZhZS00OTg4LTgxNjUtMzcwMThiMWZlOWZh LzEvM3VBdUpueUo5UTN4b1hidzUxOWNLQ05iSTZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVSgmq+j knoGmZsGJdovwEpYWyE6Rz52l9eaSNhHieIJSoojxTleMd2yZ5Iml7R8v52dsF05 EToCHEfn9WnDerMuaPcovt6Ja0in06RmK+gK+F6AVtz/OgSS+MkPCZeVQLSlmXSY coCi8XL7aPHm2iosUpMiQrqdNYY+mW4bQt1NeSpaFbcNez+sBOIp0C1AmIK6gY8B ENVqwGB2/qvGtA7GSlELQuFBDPol9iyvHf98820N4KhRM6G6+26SToEQj7qM23a6 4HnMH2kbhlc88Scqscw1/u+T6SXt5lprdSR/co3NwYFC2DdCSROIW7dS5fDbPoF2 bzucBdX0ZyQF4g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:35 2025 by rpki-client