This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft File: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json) Hash identifier: cFP/PZDT7JmvCaIUPkrTGnlM4fQV0NTA5MK32Q48vFg= Subject key identifier: 9A:05:04:BF:0C:5C:76:FB:29:E6:4D:64:B7:13:84:CE:2E:9A:21:68 Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19 Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19 Certificate serial: 019AF0512C97620285756402043038FBC349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft Manifest number: 0DBC Signing time: Fri 05 Dec 2025 21:00:42 +0000 Manifest this update: Fri 05 Dec 2025 21:00:42 +0000 Manifest next update: Sat 06 Dec 2025 21:00:42 +0000 Files and hashes: 1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: KSl7hYjr7sUvkCuLnq20gE7MYM9UQV3oHPyW1El71/c=) 2: bJQvsBvbQPoYZP2_LHbwvNkWsqI.roa (hash: 6bSavq+Amxtx/G0AW8vYM/flHBEJUHj3DU6R3v4xOug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:2c:97:62:02:85:75:64:02:04:30:38:fb:c3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19 Validity Not Before: Dec 5 21:00:42 2025 GMT Not After : Dec 6 21:00:42 2025 GMT Subject: CN=9a0504bf0c5c76fb29e64d64b71384ce2e9a2168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:80:11:33:17:e1:30:16:8d:4a:87:37:b6:10: e0:a9:7d:c3:37:a9:9a:f2:4a:ea:cb:55:0d:19:4f: 61:76:b7:04:35:e2:3a:53:e9:b1:68:24:5b:b1:c0: 01:2f:c8:0c:ee:58:cf:72:be:99:3e:73:4b:1a:f5: 8e:fa:c4:21:88:3b:85:ec:cc:6c:5d:f4:b8:d5:23: 40:6f:fa:ad:16:53:89:12:dc:1d:61:05:8a:de:d7: 6d:53:ca:4c:e5:e2:9a:4b:06:43:cb:a0:bf:a0:71: d8:a5:37:bf:05:7a:c4:28:4c:2c:22:03:67:e8:0c: 63:13:79:3d:19:69:e6:12:6b:7f:06:88:20:75:2d: 0c:47:67:3f:54:3b:36:f6:00:45:f5:0b:f6:56:a6: ab:7f:30:aa:42:8d:65:87:80:d4:a2:3c:de:55:cf: f7:11:8f:8e:63:0e:85:11:46:05:31:dc:72:e8:15: 6d:8b:76:e6:09:58:f8:ca:f6:11:df:e0:de:35:db: 2d:e5:b5:24:c0:1b:4e:f2:25:1d:b5:cd:be:e6:bb: be:d7:43:07:85:02:76:8d:4d:ab:3d:16:69:28:f6: 47:7e:8a:dc:19:ec:ff:c6:e2:bb:75:fb:b7:41:d1: f3:e2:41:3c:7c:92:41:e7:a2:cf:89:6c:55:c1:03: 92:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:05:04:BF:0C:5C:76:FB:29:E6:4D:64:B7:13:84:CE:2E:9A:21:68 X509v3 Authority Key Identifier: keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4a:a5:5b:ce:08:cf:58:1d:02:b2:11:e4:d8:49:7a:e7:52: d9:07:ab:5f:04:f3:b9:54:bd:3c:09:3f:76:c9:48:06:55:92: 14:da:90:28:3d:5f:7e:b2:35:3a:f4:91:2d:c0:c0:07:ad:54: 09:0a:ca:8e:d0:21:a5:9d:38:ce:e1:be:42:2a:6f:ba:19:98: e8:95:52:f4:3b:a8:26:8e:d1:13:7a:ae:fa:cd:ff:2a:4e:96: a5:56:67:69:5c:bb:73:14:30:68:8b:23:99:29:4c:5c:3b:5c: e4:27:04:81:80:2e:a7:51:67:3e:32:c5:cc:03:ed:28:81:6c: 1c:01:29:f7:79:1e:62:3b:7c:3f:0d:e8:a9:28:d3:37:17:3c: b7:fc:36:14:a9:22:c1:e4:55:03:c0:ca:34:91:4f:74:b6:2f: 9c:e5:68:bb:dc:9d:dc:5d:61:ca:4c:74:f7:51:97:6a:34:98: aa:09:66:c8:a8:c7:2b:9c:a6:f9:cc:31:5f:b9:24:12:77:c1: 4c:bd:af:4f:19:fc:74:a0:60:51:f5:44:ff:f0:75:76:da:b3: 24:f5:d0:7f:5e:75:59:13:5c:d5:b5:44:24:06:0f:61:36:91: 1d:62:1c:50:da:af:cb:ef:79:ab:dd:c8:50:37:cd:99:1b:e2: 69:59:6c:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUSyXYgKFdWQCBDA4+8NJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZmE1NTI2MDFjNDc3YzUyYmZjZTRhODhkYmFiZTFiN2Nk NzJlMTkwHhcNMjUxMjA1MjEwMDQyWhcNMjUxMjA2MjEwMDQyWjAzMTEwLwYDVQQD Eyg5YTA1MDRiZjBjNWM3NmZiMjllNjRkNjRiNzEzODRjZTJlOWEyMTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YARMxfhMBaNSoc3thDgqX3DN6ma 8krqy1UNGU9hdrcENeI6U+mxaCRbscABL8gM7ljPcr6ZPnNLGvWO+sQhiDuF7Mxs XfS41SNAb/qtFlOJEtwdYQWK3tdtU8pM5eKaSwZDy6C/oHHYpTe/BXrEKEwsIgNn 6AxjE3k9GWnmEmt/BoggdS0MR2c/VDs29gBF9Qv2VqarfzCqQo1lh4DUojzeVc/3 EY+OYw6FEUYFMdxy6BVti3bmCVj4yvYR3+DeNdst5bUkwBtO8iUdtc2+5ru+10MH hQJ2jU2rPRZpKPZHforcGez/xuK7dfu3QdHz4kE8fJJB56LPiWxVwQOS+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoFBL8MXHb7KeZNZLcThM4umiFoMB8GA1UdIwQY MBaAFNz6VSYBxHfFK/zkqI26vht81y4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NWU4YzUtY2JkMC00MWQ2LWEwYmQt NDdjNjNjZGZmZDA4LzEvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83NWU4YzUtY2JkMC00MWQ2LWEwYmQtNDdjNjNjZGZmZDA4 LzEvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUqlW84I z1gdArIR5NhJeudS2QerXwTzuVS9PAk/dslIBlWSFNqQKD1ffrI1OvSRLcDAB61U CQrKjtAhpZ04zuG+QipvuhmY6JVS9DuoJo7RE3qu+s3/Kk6WpVZnaVy7cxQwaIsj mSlMXDtc5CcEgYAup1FnPjLFzAPtKIFsHAEp93keYjt8Pw3oqSjTNxc8t/w2FKki weRVA8DKNJFPdLYvnOVou9yd3F1hykx091GXajSYqglmyKjHK5ym+cwxX7kkEnfB TL2vTxn8dKBgUfVE//B1dtqzJPXQf151WRNc1bVEJAYPYTaRHWIcUNqvy+95q93I UDfNmRviaVlsmA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:37 2025 by rpki-client