This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json) Hash identifier: u8QKocbvAOqmsjXsogE+AE9NfttI/KJ2zh+mIMNlPHs= Subject key identifier: C6:32:B2:48:BA:8A:C1:56:30:F7:FC:C1:80:0A:1C:D9:DC:DA:7F:FE Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06 Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06 Certificate serial: 019AF12EB32A232D26ED1C4B901C63EBBF92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft Manifest number: 0E9B Signing time: Sat 06 Dec 2025 01:02:40 +0000 Manifest this update: Sat 06 Dec 2025 01:02:40 +0000 Manifest next update: Sun 07 Dec 2025 01:02:40 +0000 Files and hashes: 1: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (hash: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=) 2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: OJ+wYgmD43eWWfSBpH4kjh6Fya1+T+7h41z3Lh6Sgqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b3:2a:23:2d:26:ed:1c:4b:90:1c:63:eb:bf:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06 Validity Not Before: Dec 6 01:02:40 2025 GMT Not After : Dec 7 01:02:40 2025 GMT Subject: CN=c632b248ba8ac15630f7fcc1800a1cd9dcda7ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:38:b4:e7:d1:d1:d5:7e:d0:39:4a:18:c8: 54:2b:24:d9:e0:1f:5e:24:62:16:47:e9:c3:7f:8d: c0:ae:6c:12:68:ef:f4:ea:4d:52:30:5c:9c:79:d8: fb:1c:41:12:0c:41:98:d5:62:a1:97:fa:b2:ba:39: 6e:cc:c8:c1:26:c9:f8:89:93:7c:f2:7c:80:c8:fe: 55:98:b3:f2:7a:44:a5:39:8f:08:7c:b6:cc:7b:62: 50:80:70:58:9a:0c:ff:19:14:f0:04:97:c5:72:b4: c4:25:39:f3:e3:c1:94:16:b9:48:78:40:e9:40:e0: 88:b6:c9:22:78:20:8c:8f:77:2c:67:84:3b:e1:0e: 67:64:78:19:02:27:e9:f0:a2:03:62:81:2f:ef:5a: b5:0f:6f:c7:43:04:5f:ea:42:1a:10:32:ee:8f:eb: 49:90:df:ee:03:b6:5f:d7:f5:57:31:a4:f1:26:dc: 1c:97:9b:fd:48:a5:83:a2:14:18:5e:7a:7e:b1:3c: 0c:c2:ef:67:bf:10:af:2a:56:4f:28:0a:d5:ea:05: f9:34:47:e4:fb:d1:1a:c0:6e:ef:8b:38:0e:eb:ae: a5:b4:0e:cb:43:16:76:e1:6e:6c:83:da:c8:bd:03: 9e:98:78:8a:24:19:a3:7d:fe:68:50:f5:96:68:c0: f6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:32:B2:48:BA:8A:C1:56:30:F7:FC:C1:80:0A:1C:D9:DC:DA:7F:FE X509v3 Authority Key Identifier: keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:01:62:de:25:c7:b5:66:6a:cf:50:ed:23:ee:19:05:ef:a3: 65:40:9e:2e:26:91:55:e9:d9:96:1a:79:3f:6a:be:f9:53:24: 6e:8c:a6:62:bf:88:32:7c:a5:17:46:be:ae:84:f9:85:7e:fc: ce:24:3f:cf:74:04:62:78:dc:0b:f4:f4:e5:6a:36:bd:04:9f: a6:cc:4f:45:7c:d6:b0:ba:15:a6:96:b6:0b:ab:9e:df:66:43: 44:68:4b:bb:98:bd:26:76:05:ac:cc:e8:17:7e:57:55:62:0c: de:cd:4a:97:c6:5a:8d:df:ff:6f:05:17:79:9f:80:7e:2f:60: 73:b8:c4:34:64:a4:48:31:c9:84:3f:c9:03:d9:3a:5c:36:61: 49:b8:eb:97:45:1e:00:76:5c:36:6f:f6:9c:16:66:3c:cf:5a: c1:38:50:03:55:85:d0:6a:de:40:7b:5e:78:fe:b8:e5:b4:e8: 0c:14:fa:02:25:3b:9b:67:e5:8f:6a:0d:f2:f2:85:cb:ba:ff: e2:50:c6:39:ec:25:ab:8e:03:95:df:28:b6:bc:96:90:9a:59: cf:b4:90:ca:19:7d:b7:22:ad:5e:aa:60:35:4a:c4:73:da:d4: c4:1a:97:a9:05:5a:c4:06:ef:6b:15:86:15:76:80:b4:9d:e5: 6b:e7:4e:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrMqIy0m7RxLkBxj67+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNzA4NjhmMGMyYzIxODc2NWZhNmI1M2FiOWFmMDY1ZmYz MzlmMDYwHhcNMjUxMjA2MDEwMjQwWhcNMjUxMjA3MDEwMjQwWjAzMTEwLwYDVQQD EyhjNjMyYjI0OGJhOGFjMTU2MzBmN2ZjYzE4MDBhMWNkOWRjZGE3ZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/w4tOfR0dV+0DlKGMhUKyTZ4B9e JGIWR+nDf43ArmwSaO/06k1SMFycedj7HEESDEGY1WKhl/qyujluzMjBJsn4iZN8 8nyAyP5VmLPyekSlOY8IfLbMe2JQgHBYmgz/GRTwBJfFcrTEJTnz48GUFrlIeEDp QOCItskieCCMj3csZ4Q74Q5nZHgZAifp8KIDYoEv71q1D2/HQwRf6kIaEDLuj+tJ kN/uA7Zf1/VXMaTxJtwcl5v9SKWDohQYXnp+sTwMwu9nvxCvKlZPKArV6gX5NEfk +9EawG7vizgO666ltA7LQxZ24W5sg9rIvQOemHiKJBmjff5oUPWWaMD2ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYyski6isFWMPf8wYAKHNnc2n/+MB8GA1UdIwQY MBaAFP9who8MLCGHZfprU6ua8GX/M58GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNTRiM2ItNWQ3Ni00OWQ1LWE1NmMt MDA3YzRlNTg1MjdlLzEvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8zNTRiM2ItNWQ3Ni00OWQ1LWE1NmMtMDA3YzRlNTg1Mjdl LzEvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwFi3iXH tWZqz1DtI+4ZBe+jZUCeLiaRVenZlhp5P2q++VMkboymYr+IMnylF0a+roT5hX78 ziQ/z3QEYnjcC/T05Wo2vQSfpsxPRXzWsLoVppa2C6ue32ZDRGhLu5i9JnYFrMzo F35XVWIM3s1Kl8Zajd//bwUXeZ+Afi9gc7jENGSkSDHJhD/JA9k6XDZhSbjrl0Ue AHZcNm/2nBZmPM9awThQA1WF0GreQHteeP645bToDBT6AiU7m2flj2oN8vKFy7r/ 4lDGOewlq44Dld8otryWkJpZz7SQyhl9tyKtXqpgNUrEc9rUxBqXqQVaxAbvaxWG FXaAtJ3la+dOOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:54 2025 by rpki-client