This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json) Hash identifier: zlwd+sY00d0mFPM+44Ypwx8PsGDt0goCGKomiD+D95Q= Subject key identifier: 6C:D1:03:9C:85:FC:F8:4B:25:05:48:A7:11:FD:04:81:F6:CE:2F:0A Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75 Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75 Certificate serial: 019AF1D25381A8443F17C1910E0406C19035 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft Manifest number: 1702 Signing time: Sat 06 Dec 2025 04:01:24 +0000 Manifest this update: Sat 06 Dec 2025 04:01:24 +0000 Manifest next update: Sun 07 Dec 2025 04:01:24 +0000 Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: O0hRFOjBoZoxorqKm/DIaTIKERfYL1O+yv/TY017czI=) 2: MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa (hash: 0fQ4kAnNMwAWjVPJbNDfudzXYDSGRSTHXnaddIlGIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:53:81:a8:44:3f:17:c1:91:0e:04:06:c1:90:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75 Validity Not Before: Dec 6 04:01:24 2025 GMT Not After : Dec 7 04:01:24 2025 GMT Subject: CN=6cd1039c85fcf84b250548a711fd0481f6ce2f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:57:9c:b8:c3:7c:94:3d:83:43:a1:5e:af:ec: 38:83:63:09:26:08:55:c4:f8:f8:57:43:80:b3:98: 78:14:ac:0b:37:7c:ac:0d:b0:2b:d3:54:d4:23:5c: 73:5a:31:bb:87:cc:67:4d:4b:ce:ae:fd:c7:2d:26: 09:6c:d6:03:2c:46:a5:86:8f:a2:3b:99:c7:f4:2c: 32:64:f5:5a:39:93:38:8d:c2:00:bf:0e:cb:cc:2d: b7:5a:9b:a3:fc:22:6e:a3:f1:39:fa:e0:36:ee:dc: 9c:5b:dd:0e:c1:ef:07:27:20:3a:47:89:07:97:b1: f6:ab:53:ae:74:3d:6b:b5:13:7d:e3:4b:01:ef:f1: 40:0e:a6:96:5e:29:05:b6:6e:96:77:2a:a8:50:09: 9b:ee:21:1a:a6:61:ce:b8:55:06:10:de:9d:91:f2: 7e:75:e3:77:d5:03:60:4d:b7:68:ee:8d:e9:39:96: c6:47:6f:a5:1c:fd:75:97:de:e0:9f:dd:c3:03:3c: 1e:b1:f8:a0:09:a7:52:fa:84:e5:52:bb:d0:05:28: ce:e7:bd:d2:27:f2:ba:27:0d:42:55:89:c6:eb:57: 02:9c:ba:1b:98:4b:81:b3:dd:ca:e7:68:c4:d0:dd: 65:9b:58:c7:68:13:1e:74:a9:cf:ee:b4:6d:03:84: 31:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D1:03:9C:85:FC:F8:4B:25:05:48:A7:11:FD:04:81:F6:CE:2F:0A X509v3 Authority Key Identifier: keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7d:20:24:e1:86:b8:6e:04:95:90:bc:6f:ac:00:f9:ac:f0: d4:55:22:4d:46:4c:f8:a1:e4:12:39:8d:77:75:a0:1c:83:7f: 7a:02:81:b4:37:69:47:c3:10:94:fd:10:bf:d1:24:b9:2c:46: ad:a6:b4:b4:61:df:8b:e8:c8:6c:d3:67:2d:de:48:0d:0b:c2: 7e:4d:c9:a0:74:cf:48:0c:3d:de:37:9f:a5:f1:c8:3a:bd:1d: 66:40:db:d1:b9:42:3e:0b:64:c4:90:3b:24:13:e2:31:a3:c3: 24:58:fb:f4:9f:b4:f5:20:c7:3c:f3:b6:8d:e4:be:72:8a:06: 42:78:89:6c:4a:90:d2:46:89:b2:7b:70:89:d9:1c:2b:af:80: 57:cd:54:f0:06:58:2f:35:ef:bf:53:1c:2a:34:d5:1b:5f:2a: cc:1c:1d:50:38:c1:2e:f5:12:c3:df:e8:78:44:0d:46:ae:7e: ca:ef:34:53:9c:4f:7e:bc:e2:5b:71:7e:50:42:f0:c0:a5:05: 29:43:ec:55:31:3d:26:a1:63:79:fc:7d:d7:de:b2:c2:4a:12: 77:da:60:2a:f6:32:44:31:ce:ae:5d:91:b8:27:d8:f0:da:8f: 27:46:d1:66:76:85:fb:50:1b:94:ee:ed:e4:80:20:0b:7e:e8: 9b:d4:75:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lOBqEQ/F8GRDgQGwZA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2I3NmQzYzBjNjBkNjYzNTA2YTI1MjY3MWM1MjhlMzQz OWZmNzUwHhcNMjUxMjA2MDQwMTI0WhcNMjUxMjA3MDQwMTI0WjAzMTEwLwYDVQQD Eyg2Y2QxMDM5Yzg1ZmNmODRiMjUwNTQ4YTcxMWZkMDQ4MWY2Y2UyZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51ecuMN8lD2DQ6Fer+w4g2MJJghV xPj4V0OAs5h4FKwLN3ysDbAr01TUI1xzWjG7h8xnTUvOrv3HLSYJbNYDLEalho+i O5nH9CwyZPVaOZM4jcIAvw7LzC23Wpuj/CJuo/E5+uA27tycW90Owe8HJyA6R4kH l7H2q1OudD1rtRN940sB7/FADqaWXikFtm6WdyqoUAmb7iEapmHOuFUGEN6dkfJ+ deN31QNgTbdo7o3pOZbGR2+lHP11l97gn93DAzwesfigCadS+oTlUrvQBSjO573S J/K6Jw1CVYnG61cCnLobmEuBs93K52jE0N1lm1jHaBMedKnP7rRtA4QxBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzRA5yF/PhLJQVIpxH9BIH2zi8KMB8GA1UdIwQY MBaAFN87dtPAxg1mNQaiUmccUo40Of91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYt ZDllMTEzN2YwMmI1LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYtZDllMTEzN2YwMmI1 LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACn0gJOGG uG4ElZC8b6wA+azw1FUiTUZM+KHkEjmNd3WgHIN/egKBtDdpR8MQlP0Qv9EkuSxG raa0tGHfi+jIbNNnLd5IDQvCfk3JoHTPSAw93jefpfHIOr0dZkDb0blCPgtkxJA7 JBPiMaPDJFj79J+09SDHPPO2jeS+cooGQniJbEqQ0kaJsntwidkcK6+AV81U8AZY LzXvv1McKjTVG18qzBwdUDjBLvUSw9/oeEQNRq5+yu80U5xPfrziW3F+UELwwKUF KUPsVTE9JqFjefx9196ywkoSd9pgKvYyRDHOrl2RuCfY8NqPJ0bRZnaF+1AblO7t 5IAgC37om9R1uQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:18 2025 by rpki-client