This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json) Hash identifier: IU2o8dQaQxP1iWVMHVIMsC9Uku1rsJ+im2QqynbNEqQ= Subject key identifier: D6:0C:31:2B:F5:1D:18:DF:6C:62:FB:86:E3:41:5D:C3:2B:AE:62:FF Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50 Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250 Certificate serial: 019AF27735AC56F1B0DB8522FDECDE88BD7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft Manifest number: 0ADF Signing time: Sat 06 Dec 2025 07:01:30 +0000 Manifest this update: Sat 06 Dec 2025 07:01:30 +0000 Manifest next update: Sun 07 Dec 2025 07:01:30 +0000 Files and hashes: 1: 05EOtNo-Yw22y8nOEhjh34kR-xs.roa (hash: bx1cLzgI6GeSkKgZhlF0GUx8NZh0BLXhkqY0eigb2zc=) 2: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: 2ClSdtYLjxRY/dyNMciUOGT1ifYXlqidNFC7FdUzHZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:35:ac:56:f1:b0:db:85:22:fd:ec:de:88:bd:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250 Validity Not Before: Dec 6 07:01:30 2025 GMT Not After : Dec 7 07:01:30 2025 GMT Subject: CN=d60c312bf51d18df6c62fb86e3415dc32bae62ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:0f:50:39:72:d1:bc:a3:b9:ff:9f:b3:49: bf:22:86:d3:52:7e:3d:78:9f:9a:72:45:7e:98:25: 95:6e:4d:40:f3:91:e9:3f:1e:0f:bb:85:e8:4e:86: 39:c1:c3:7c:8a:7a:01:c7:11:9a:1e:ce:e0:98:60: 28:ed:a0:ef:c0:0a:97:c1:12:e6:93:7e:0a:e9:68: 36:5c:47:24:15:82:ef:ea:0b:4e:a1:ad:11:38:ff: 7e:d5:c8:f2:ab:8b:e7:5a:5a:eb:8f:12:df:98:9a: eb:35:c7:e0:ac:9f:4b:d8:10:4c:22:45:5f:42:4e: 99:6e:a9:18:ec:3b:cf:12:e1:62:42:7c:df:21:52: 1c:67:f1:a4:9a:7a:86:59:ca:ed:79:2d:b3:fb:66: 5c:c7:b9:3a:d1:a8:9b:25:97:48:cc:16:4f:94:23: 08:60:cc:61:09:3d:1f:3b:b0:e3:77:4c:84:ca:f4: ac:70:fe:16:a6:a8:e3:2a:b5:76:c6:05:a4:c1:9c: 62:ce:74:73:db:98:b6:4c:4d:e0:ce:4d:49:f5:9e: 3a:a4:10:bc:fc:16:d6:c2:b8:c1:66:c7:c3:f2:31: fc:a9:08:3a:26:91:8d:7e:03:af:d6:0f:c6:fd:8e: db:26:b8:f4:86:6f:a4:01:1f:db:e0:42:7d:95:3c: 69:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0C:31:2B:F5:1D:18:DF:6C:62:FB:86:E3:41:5D:C3:2B:AE:62:FF X509v3 Authority Key Identifier: keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c2:11:f3:22:7c:84:b5:05:e7:36:17:52:1c:33:ad:8d:00: 65:8a:6e:77:bc:7e:aa:01:88:cb:30:eb:91:99:0c:e5:70:25: 8f:fe:9a:43:78:3e:48:16:2b:1c:60:1a:a3:48:3d:fc:d1:bb: c7:c2:da:45:e3:b5:5c:a3:a3:49:df:bd:27:da:56:bb:e4:3e: 4c:a0:58:17:82:97:d4:c3:ec:ea:2c:ba:79:98:74:7b:92:57: 3a:a7:1d:94:2f:cb:ed:e7:f0:4e:fa:cc:6f:fd:53:dc:fe:48: 19:9f:a9:92:6f:ef:b1:ab:05:f5:01:bc:4a:8b:44:5e:d3:66: f5:16:89:4a:ca:67:bc:be:02:bb:7e:b5:70:fe:ea:21:bf:71: 06:b0:6d:a8:bf:14:3a:53:45:69:3f:bd:80:48:4b:5c:a8:af: 2f:a3:c6:77:61:00:e1:51:8b:b3:bc:a3:90:aa:b5:c1:d8:e7: 57:d6:18:cd:02:ac:c1:90:0c:3d:1a:80:a7:c8:a1:00:7b:59: 67:2a:5d:2e:88:a3:aa:d6:00:a9:c7:45:de:9e:9b:ab:fe:b1: 6e:d3:87:6c:58:48:8e:79:7f:0b:12:67:e8:db:6d:04:64:33: ae:9e:0d:0d:a7:e4:5e:91:16:bd:7a:c6:4d:a5:ea:f9:f9:3a: 58:d4:a3:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzWsVvGw24Ui/ezeiL1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlY2JlZjM1MmNhYzcxYWQ1YmFlMGU4YjFjMDIyNDZlM2I2 NTAyNTAwHhcNMjUxMjA2MDcwMTMwWhcNMjUxMjA3MDcwMTMwWjAzMTEwLwYDVQQD EyhkNjBjMzEyYmY1MWQxOGRmNmM2MmZiODZlMzQxNWRjMzJiYWU2MmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGsPUDly0byjuf+fs0m/IobTUn49 eJ+ackV+mCWVbk1A85HpPx4Pu4XoToY5wcN8inoBxxGaHs7gmGAo7aDvwAqXwRLm k34K6Wg2XEckFYLv6gtOoa0ROP9+1cjyq4vnWlrrjxLfmJrrNcfgrJ9L2BBMIkVf Qk6ZbqkY7DvPEuFiQnzfIVIcZ/GkmnqGWcrteS2z+2Zcx7k60aibJZdIzBZPlCMI YMxhCT0fO7Djd0yEyvSscP4WpqjjKrV2xgWkwZxiznRz25i2TE3gzk1J9Z46pBC8 /BbWwrjBZsfD8jH8qQg6JpGNfgOv1g/G/Y7bJrj0hm+kAR/b4EJ9lTxppwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYMMSv1HRjfbGL7huNBXcMrrmL/MB8GA1UdIwQY MBaAFN7L7zUsrHGtW64OixwCJG47ZQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWIt NTQxZjlmY2JhNzQyLzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWItNTQxZjlmY2JhNzQy LzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmsIR8yJ8 hLUF5zYXUhwzrY0AZYpud7x+qgGIyzDrkZkM5XAlj/6aQ3g+SBYrHGAao0g9/NG7 x8LaReO1XKOjSd+9J9pWu+Q+TKBYF4KX1MPs6iy6eZh0e5JXOqcdlC/L7efwTvrM b/1T3P5IGZ+pkm/vsasF9QG8SotEXtNm9RaJSspnvL4Cu361cP7qIb9xBrBtqL8U OlNFaT+9gEhLXKivL6PGd2EA4VGLs7yjkKq1wdjnV9YYzQKswZAMPRqAp8ihAHtZ ZypdLoijqtYAqcdF3p6bq/6xbtOHbFhIjnl/CxJn6NttBGQzrp4NDafkXpEWvXrG TaXq+fk6WNSjLw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:10 2025 by rpki-client