This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json) Hash identifier: sRJ9Tbr2Xx67c/UILvxqAEmNrpTupIhWT4skwLzEgbc= Subject key identifier: 3A:75:77:64:D4:DA:37:86:5E:17:9A:3C:FA:EB:BC:21:AB:2F:8D:CD Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82 Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82 Certificate serial: 019AF3529DD6CD4320D55AC918B45AC59CD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 11:01:08 +0000 Manifest this update: Sat 06 Dec 2025 11:01:08 +0000 Manifest next update: Sun 07 Dec 2025 11:01:08 +0000 Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: Z3tM8XbOru4rGknJwyOjvNTaTZRnXdIPnUebIEEEdB0=) 2: CgFc8x26QM3VY1KiLgccdsxhrXo.roa (hash: P9EWdQX/EOCp7WZ5gfsQmoM4qU0udbuMuOqDFw597IY=) 3: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:9d:d6:cd:43:20:d5:5a:c9:18:b4:5a:c5:9c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82 Validity Not Before: Dec 6 11:01:08 2025 GMT Not After : Dec 7 11:01:08 2025 GMT Subject: CN=3a757764d4da37865e179a3cfaebbc21ab2f8dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:8c:d7:f5:11:75:c3:47:d2:67:1b:ed:77: 2d:9d:6f:2e:68:26:84:a9:be:1c:8c:02:b2:0a:56: b7:f2:52:7c:19:9d:f0:d1:87:11:29:0d:4b:f6:68: 84:27:8a:ee:4d:91:8b:bd:da:37:e6:c7:58:a6:74: 83:96:3f:eb:6f:51:49:27:a2:77:b2:e2:dc:c7:43: 7e:9e:af:2e:87:db:26:58:a4:2a:41:78:48:65:6a: a4:0b:6d:a9:12:1e:a8:65:a0:f9:4c:ab:ad:9c:dc: 23:ce:44:ef:a3:4e:c6:1f:9e:9d:30:50:31:2b:26: 25:e4:bc:ed:2c:aa:7a:0d:52:f8:e9:39:a3:57:49: f9:e6:b1:ad:1c:94:81:75:38:92:39:a8:45:6f:ba: e3:0b:5f:ed:ce:38:7c:e4:aa:2f:8e:c0:90:cb:ed: 49:4c:a8:5a:76:34:c4:5f:bb:c6:43:73:f9:96:a3: ab:9d:c9:f9:96:b0:a1:99:d9:e9:4b:a1:7e:14:bf: 79:d3:10:b6:8c:ba:64:41:0e:9c:c6:46:16:34:7c: 20:33:42:fa:ca:6a:60:df:27:d9:f1:e1:b2:1a:b0: d0:39:a9:8b:22:b6:01:7d:de:8c:78:4f:a0:0a:d3: a8:df:2c:cb:69:d2:6d:75:7a:28:c4:78:45:39:57: c1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:75:77:64:D4:DA:37:86:5E:17:9A:3C:FA:EB:BC:21:AB:2F:8D:CD X509v3 Authority Key Identifier: keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6d:97:a4:d3:55:30:f9:92:84:55:3a:b9:56:53:04:af:df: 80:1d:c5:7d:2a:c5:e8:39:f3:53:cb:05:4e:06:34:fb:91:44: fe:9a:68:5b:a4:38:c7:df:44:8e:32:4a:d4:1b:7c:30:ab:db: 49:fe:da:9e:2b:7b:27:a0:c4:b4:8d:d2:d5:a5:c1:c0:51:48: 0f:4a:3c:79:0b:3b:11:59:61:b9:1e:44:59:2c:e5:8b:ff:eb: 73:a4:15:5f:bd:66:43:e7:88:89:e1:1f:58:9e:2c:47:cc:07: 95:bf:41:fd:2f:be:ba:24:65:50:36:3f:ac:1a:71:7c:51:44: 47:c0:98:da:b0:a9:e5:2a:a8:30:35:df:44:86:11:c5:77:6e: eb:67:ce:f4:36:c6:cb:97:24:7e:61:10:50:b4:f0:f9:70:3d: 07:0e:5a:57:39:c0:b5:74:e1:cc:8b:20:76:b0:5e:28:32:5d: 3d:53:7b:3c:e5:f6:3e:53:ba:91:ff:61:53:ff:67:01:33:b9: e0:28:41:f4:89:82:6c:b2:25:b9:17:a4:46:5d:4b:3a:c3:2a: d4:6f:5e:07:da:8d:e8:de:d7:c1:5d:6e:31:82:88:93:b5:d1: fe:01:2c:64:e1:ed:31:b5:73:e0:bf:29:23:fb:75:dc:29:b5: 52:62:db:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUp3WzUMg1VrJGLRaxZzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMGJhNGY1NmU2ZjAzNzcyNTI4NjAzN2FmYzNjMTRjMjkz YjliODIwHhcNMjUxMjA2MTEwMTA4WhcNMjUxMjA3MTEwMTA4WjAzMTEwLwYDVQQD EygzYTc1Nzc2NGQ0ZGEzNzg2NWUxNzlhM2NmYWViYmMyMWFiMmY4ZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRCM1/URdcNH0mcb7XctnW8uaCaE qb4cjAKyCla38lJ8GZ3w0YcRKQ1L9miEJ4ruTZGLvdo35sdYpnSDlj/rb1FJJ6J3 suLcx0N+nq8uh9smWKQqQXhIZWqkC22pEh6oZaD5TKutnNwjzkTvo07GH56dMFAx KyYl5LztLKp6DVL46TmjV0n55rGtHJSBdTiSOahFb7rjC1/tzjh85KovjsCQy+1J TKhadjTEX7vGQ3P5lqOrncn5lrChmdnpS6F+FL950xC2jLpkQQ6cxkYWNHwgM0L6 ympg3yfZ8eGyGrDQOamLIrYBfd6MeE+gCtOo3yzLadJtdXooxHhFOVfB7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp1d2TU2jeGXheaPPrrvCGrL43NMB8GA1UdIwQY MBaAFN8LpPVubwN3JShgN6/DwUwpO5uCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTIt MzZjNjc4OTAwZjc5LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTItMzZjNjc4OTAwZjc5 LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf22XpNNV MPmShFU6uVZTBK/fgB3FfSrF6DnzU8sFTgY0+5FE/ppoW6Q4x99EjjJK1Bt8MKvb Sf7anit7J6DEtI3S1aXBwFFID0o8eQs7EVlhuR5EWSzli//rc6QVX71mQ+eIieEf WJ4sR8wHlb9B/S++uiRlUDY/rBpxfFFER8CY2rCp5SqoMDXfRIYRxXdu62fO9DbG y5ckfmEQULTw+XA9Bw5aVznAtXThzIsgdrBeKDJdPVN7POX2PlO6kf9hU/9nATO5 4ChB9ImCbLIluRekRl1LOsMq1G9eB9qN6N7XwV1uMYKIk7XR/gEsZOHtMbVz4L8p I/t13Cm1UmLb6A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:48 2025 by rpki-client