This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json) Hash identifier: cYux9oX4iKD5tNI+8GwHgW80C/2wE171PUdys2UpiL4= Subject key identifier: 6D:B3:DD:DB:21:F1:39:8F:2C:54:B3:3B:56:93:BC:D2:9B:3D:35:EE Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27 Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227 Certificate serial: 019AF0880CF71F4E863FBA9C72E8A3A6BC57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft Manifest number: 119B Signing time: Fri 05 Dec 2025 22:00:39 +0000 Manifest this update: Fri 05 Dec 2025 22:00:39 +0000 Manifest next update: Sat 06 Dec 2025 22:00:39 +0000 Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: usOVC2y/RZqCbtiXZsibBe2qJh0Rb+8Q2x7bEW0QnBI=) 2: AuGSVrNkGgUtthLzU1YbunCRJmA.roa (hash: N+p3SVnY5s1RjPh5Td733eJn6W460syQCiw/MVZ+pqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:0c:f7:1f:4e:86:3f:ba:9c:72:e8:a3:a6:bc:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227 Validity Not Before: Dec 5 22:00:39 2025 GMT Not After : Dec 6 22:00:39 2025 GMT Subject: CN=6db3dddb21f1398f2c54b33b5693bcd29b3d35ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:11:1d:e4:d5:8c:7f:3f:60:ef:b8:f6:39:43: 2d:98:01:f1:02:2b:fb:7d:ca:f4:7b:22:a6:76:d0: fb:15:42:d0:9c:7f:7c:a6:b6:eb:85:58:74:fd:1c: c0:bd:28:c2:79:18:13:45:60:22:bf:5c:b5:05:3a: 99:00:3d:36:b4:67:c0:e9:b2:32:e0:fb:00:fb:21: 2c:97:e3:23:14:3e:56:cd:9f:3c:c4:12:c8:bb:b4: c1:68:d1:21:0c:92:f4:e9:11:ba:4f:00:47:98:3a: 64:74:37:fc:2d:a2:a9:ca:33:b4:62:c7:26:24:8b: 86:46:bb:ea:7a:df:cc:fb:ba:63:59:29:18:18:61: 0a:84:de:c0:24:ae:93:6c:8c:36:68:be:5f:16:ea: 5b:5c:31:c9:95:2c:70:b5:7a:37:3d:87:83:d7:f2: 41:15:93:8a:ca:a5:0a:7d:24:08:52:28:12:39:81: 86:67:06:3c:84:6e:cc:f7:ea:7d:94:e4:4f:79:a2: 3e:67:f2:88:81:17:27:a1:1c:2d:24:ef:99:1a:e4: ac:82:95:55:97:13:21:52:4c:64:b0:4b:2e:e3:35: 72:1c:b0:a1:e2:e3:46:a9:1e:bc:44:9c:47:7a:49: 97:77:64:b9:f6:65:63:67:5a:e0:3d:ad:c8:13:b6: cb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B3:DD:DB:21:F1:39:8F:2C:54:B3:3B:56:93:BC:D2:9B:3D:35:EE X509v3 Authority Key Identifier: keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:bf:f0:f7:51:2b:c1:26:40:24:b0:49:b6:66:01:b9:09:c7: b9:f5:e9:fe:1b:8b:9c:92:04:ad:df:a3:9c:c9:38:4d:8a:fa: 7f:f9:ff:7a:cb:13:cc:ff:dc:13:66:fb:27:97:01:5d:67:74: da:0f:57:23:64:99:f8:7d:ce:9d:21:d5:8d:50:36:04:9a:1f: b0:37:14:ce:6b:b1:22:69:0a:7c:64:1a:5f:6e:94:68:0e:16: 2e:9f:87:5d:7f:b4:fe:28:6b:ec:d0:83:51:be:18:a2:e5:4c: d0:80:9d:84:c7:e8:42:c4:eb:46:d9:bd:3e:e8:ca:81:f2:83: 62:06:fc:87:df:6c:69:a8:e3:7e:8c:d5:f2:3f:fb:8c:af:9a: 9d:5e:4a:d0:3e:20:f8:56:90:30:2f:a1:e0:95:a1:35:01:20: 06:5a:e3:6e:a4:49:f1:89:d6:2f:7c:96:00:7d:e5:5b:82:23: 72:86:13:20:27:a1:23:ca:1a:43:b7:68:b4:5a:4f:3f:ed:86: 91:6f:00:2e:64:aa:55:5b:09:8f:e9:94:32:39:ab:b4:76:6e: 83:6d:70:a4:b7:65:c8:80:8a:50:3c:f2:a1:4c:8b:28:32:ab: b5:4f:90:df:39:ac:02:3f:73:c4:9f:2c:d5:63:11:2e:75:b2: ad:0b:e3:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiAz3H06GP7qccuijprxXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZjg1YzM2YzY5NmQ1ZGIyY2JiNDhmZDQzZTgyMTczN2Vl MzQyMjcwHhcNMjUxMjA1MjIwMDM5WhcNMjUxMjA2MjIwMDM5WjAzMTEwLwYDVQQD Eyg2ZGIzZGRkYjIxZjEzOThmMmM1NGIzM2I1NjkzYmNkMjliM2QzNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlREd5NWMfz9g77j2OUMtmAHxAiv7 fcr0eyKmdtD7FULQnH98prbrhVh0/RzAvSjCeRgTRWAiv1y1BTqZAD02tGfA6bIy 4PsA+yEsl+MjFD5WzZ88xBLIu7TBaNEhDJL06RG6TwBHmDpkdDf8LaKpyjO0Yscm JIuGRrvqet/M+7pjWSkYGGEKhN7AJK6TbIw2aL5fFupbXDHJlSxwtXo3PYeD1/JB FZOKyqUKfSQIUigSOYGGZwY8hG7M9+p9lORPeaI+Z/KIgRcnoRwtJO+ZGuSsgpVV lxMhUkxksEsu4zVyHLCh4uNGqR68RJxHekmXd2S59mVjZ1rgPa3IE7bL/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2z3dsh8TmPLFSzO1aTvNKbPTXuMB8GA1UdIwQY MBaAFNz4XDbGltXbLLtI/UPoIXN+40InMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jZmJjNjItNWQ1NC00MzI3LWIwNzIt MGY1MmY4NjcxNzhkLzEvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9jZmJjNjItNWQ1NC00MzI3LWIwNzItMGY1MmY4NjcxNzhk LzEvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeL/w91Er wSZAJLBJtmYBuQnHufXp/huLnJIErd+jnMk4TYr6f/n/essTzP/cE2b7J5cBXWd0 2g9XI2SZ+H3OnSHVjVA2BJofsDcUzmuxImkKfGQaX26UaA4WLp+HXX+0/ihr7NCD Ub4YouVM0ICdhMfoQsTrRtm9PujKgfKDYgb8h99saajjfozV8j/7jK+anV5K0D4g +FaQMC+h4JWhNQEgBlrjbqRJ8YnWL3yWAH3lW4IjcoYTICehI8oaQ7dotFpPP+2G kW8ALmSqVVsJj+mUMjmrtHZug21wpLdlyICKUDzyoUyLKDKrtU+Q3zmsAj9zxJ8s 1WMRLnWyrQvjaA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:47 2025 by rpki-client