This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json) Hash identifier: hDPQijBdapfvrEBvD5T6rW4wx6R9LnoDSihjzBisUUY= Subject key identifier: 6C:79:8F:E5:B7:FE:A4:2A:DC:A2:F4:01:50:6A:FC:F9:49:94:72:58 Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e Certificate serial: 019AF31BB4118D7D465F4787F4D4F4F6E736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft Manifest number: 0E98 Signing time: Sat 06 Dec 2025 10:01:10 +0000 Manifest this update: Sat 06 Dec 2025 10:01:10 +0000 Manifest next update: Sun 07 Dec 2025 10:01:10 +0000 Files and hashes: 1: 3f1U8HcG3gg1d7c-AMV0OeLqnk4.roa (hash: 6g/YiGFM7SXH1avma+AWhdPQYeSM8xFquer6wIrnMrw=) 2: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: 5XVjzDZwGDxJXaHv3pyYAvOxCc29IxYwJSGXDthivRE=) 3: LKSIMzg2qS8EWL02SO5YPjrz_I0.roa (hash: ZtwqDuK6zfdHnP5iApdAnlCr/naZTEL8mOtuOOiHgUY=) 4: uKO3HquanWKUmJ90M8YK1DIe1PA.roa (hash: XUrZ548wn+DveWLDDAs++NbjxnozKfTkNs4dRtLEX4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b4:11:8d:7d:46:5f:47:87:f4:d4:f4:f6:e7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e Validity Not Before: Dec 6 10:01:10 2025 GMT Not After : Dec 7 10:01:10 2025 GMT Subject: CN=6c798fe5b7fea42adca2f401506afcf949947258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:09:f9:d5:e5:91:34:83:7f:09:81:76:9b:cb: 49:aa:29:74:c0:37:b4:f3:72:b6:dc:7f:10:58:19: 72:fe:05:dc:99:3e:5a:1f:53:3c:19:ef:0b:10:41: 9a:e6:89:44:cc:d1:09:a1:85:67:c7:59:65:ff:8b: 8b:04:ac:de:23:4a:03:fc:de:27:8a:86:97:55:11: ab:af:d9:fd:da:2f:60:b4:f4:60:6b:2c:b3:14:0b: 4a:7d:65:05:80:af:a9:b5:e8:e8:57:0e:70:c1:bc: da:36:7b:52:7b:09:1f:5a:e2:47:4e:bd:91:75:96: e6:f2:e8:a0:26:17:4f:db:37:0d:b0:3d:8b:11:02: b1:56:b0:60:37:13:e7:48:f2:d5:cf:6b:32:41:f0: c0:77:98:f3:47:95:a5:0b:f7:1d:93:10:bb:29:9e: c8:09:16:52:a7:44:f1:e0:e8:36:de:6f:3a:fe:d5: 1c:69:15:ff:7f:fd:a7:f1:37:56:e8:b4:a4:12:e5: 4c:3f:20:29:23:49:4d:c8:9c:c5:d8:ea:6c:df:9a: c7:d7:68:b5:a1:36:32:99:2e:d7:90:b2:bb:78:c7: fb:16:85:6f:24:fe:dc:82:45:4a:72:5f:ca:bc:f1: 06:e4:ec:5c:f8:87:d0:bd:59:f5:98:74:11:8a:d4: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:79:8F:E5:B7:FE:A4:2A:DC:A2:F4:01:50:6A:FC:F9:49:94:72:58 X509v3 Authority Key Identifier: keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:27:18:10:3a:57:9c:45:9b:42:26:91:56:af:53:56:d3:a0: b4:6b:b7:87:26:54:11:f3:c2:ca:3e:ac:5d:7e:0c:a4:de:fb: 15:60:f0:1e:93:b5:8f:94:f3:02:83:e2:e4:b5:45:8f:ca:af: 09:b1:f7:28:37:4f:f9:a3:75:1d:fe:37:ae:81:ff:e9:ca:bf: a1:a9:9f:d0:c9:da:69:dd:19:45:32:69:ea:98:94:7f:68:dc: b9:ae:d1:b1:d5:df:c6:49:28:2b:c7:ad:db:6c:26:bc:b1:30: b6:4f:91:0b:94:97:12:12:fb:c8:0b:50:78:fb:88:8f:d5:ed: ce:84:38:74:f7:8d:72:f5:6d:a1:f6:91:a3:de:bf:19:80:97: b5:be:09:f5:f2:8b:95:ce:74:b1:ac:55:2b:52:da:cd:ea:ae: 6a:e2:cf:06:d4:45:4e:f1:5b:ea:d3:f5:a8:ca:29:9e:ee:87: 0e:3f:07:71:48:3d:96:a7:6b:a2:45:98:62:3e:77:2f:b5:15: 20:0d:66:75:1c:3b:a5:21:fa:c7:a4:bf:7e:d3:5f:14:37:9d: 6f:62:56:7b:1b:bf:35:b0:90:72:4b:7d:d4:2d:ad:2c:89:16: 93:ca:15:c0:54:9b:a7:14:5a:6c:e8:3a:77:c4:f9:3c:4b:05: 65:b2:8a:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7QRjX1GX0eH9NT09uc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDg1ODJiMDI0Mzg2M2M1NzJjZTI1Nzg2Y2NiMzZmZjc5 NWIyMmUwHhcNMjUxMjA2MTAwMTEwWhcNMjUxMjA3MTAwMTEwWjAzMTEwLwYDVQQD Eyg2Yzc5OGZlNWI3ZmVhNDJhZGNhMmY0MDE1MDZhZmNmOTQ5OTQ3MjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQn51eWRNIN/CYF2m8tJqil0wDe0 83K23H8QWBly/gXcmT5aH1M8Ge8LEEGa5olEzNEJoYVnx1ll/4uLBKzeI0oD/N4n ioaXVRGrr9n92i9gtPRgayyzFAtKfWUFgK+ptejoVw5wwbzaNntSewkfWuJHTr2R dZbm8uigJhdP2zcNsD2LEQKxVrBgNxPnSPLVz2syQfDAd5jzR5WlC/cdkxC7KZ7I CRZSp0Tx4Og23m86/tUcaRX/f/2n8TdW6LSkEuVMPyApI0lNyJzF2Ops35rH12i1 oTYymS7XkLK7eMf7FoVvJP7cgkVKcl/KvPEG5Oxc+IfQvVn1mHQRitT09wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGx5j+W3/qQq3KL0AVBq/PlJlHJYMB8GA1UdIwQY MBaAFN7YWCsCQ4Y8VyziV4bMs2/3lbIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jYTUxMGMtYjZkMS00ZWIzLThkZDEt NDk4ZjRjMTBiNjU1LzEvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jYTUxMGMtYjZkMS00ZWIzLThkZDEtNDk4ZjRjMTBiNjU1 LzEvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEScYEDpX nEWbQiaRVq9TVtOgtGu3hyZUEfPCyj6sXX4MpN77FWDwHpO1j5TzAoPi5LVFj8qv CbH3KDdP+aN1Hf43roH/6cq/oamf0Mnaad0ZRTJp6piUf2jcua7RsdXfxkkoK8et 22wmvLEwtk+RC5SXEhL7yAtQePuIj9XtzoQ4dPeNcvVtofaRo96/GYCXtb4J9fKL lc50saxVK1LazequauLPBtRFTvFb6tP1qMopnu6HDj8HcUg9lqdrokWYYj53L7UV IA1mdRw7pSH6x6S/ftNfFDedb2JWexu/NbCQckt91C2tLIkWk8oVwFSbpxRabOg6 d8T5PEsFZbKKcA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:30:59 2025 by rpki-client