This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json) Hash identifier: IlgJBcpGB8x5vqI4vKzFGFOe1QCvRtROn8r1DcE/EY4= Subject key identifier: 1E:D9:53:B9:1D:0A:B7:4D:E7:45:29:ED:B5:99:23:04:19:2A:A4:A6 Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b Certificate serial: 019AF19B11935FEB90CA11E600B1C8EEF2A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft Manifest number: 0BD7 Signing time: Sat 06 Dec 2025 03:01:02 +0000 Manifest this update: Sat 06 Dec 2025 03:01:02 +0000 Manifest next update: Sun 07 Dec 2025 03:01:02 +0000 Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: iKAxtSSuH5ivbv8ZEQPVCYQRrUnP2+f2dCHJYadFHyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:11:93:5f:eb:90:ca:11:e6:00:b1:c8:ee:f2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b Validity Not Before: Dec 6 03:01:02 2025 GMT Not After : Dec 7 03:01:02 2025 GMT Subject: CN=1ed953b91d0ab74de74529edb5992304192aa4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2b:01:7b:be:9f:fd:a0:13:68:b8:2e:b8:54: 17:28:a7:94:af:dc:8f:37:2b:d7:b2:1a:62:53:02: 48:f5:b8:6c:fc:dd:55:fd:dd:d5:d0:6a:b5:2f:1c: 50:34:50:f1:32:f3:ad:11:97:c4:e5:06:f0:5a:07: a8:14:b7:b1:23:21:13:66:09:f4:d5:97:ad:70:09: 77:5f:85:aa:3a:3a:89:47:92:cf:83:27:3d:24:c0: a6:67:5d:61:9f:2c:51:27:bf:39:46:81:e9:10:8e: e8:53:fc:44:cc:5e:b1:88:5d:de:03:8a:ce:27:7f: 8f:0a:35:ce:73:93:96:be:44:4e:d8:78:19:69:00: 47:0f:07:b7:26:76:0a:18:16:c6:8d:87:24:80:74: df:ae:ac:48:e5:ea:4a:64:2f:1b:c9:7d:98:8c:ee: 1a:57:1c:3d:a1:7b:28:52:fe:fc:b6:a1:46:4b:3c: 92:a1:cc:74:99:04:28:c4:ba:17:17:be:ca:6d:f5: a7:19:47:62:1d:2e:21:74:42:57:cb:d6:4a:21:2e: 2c:b5:2d:54:ee:38:8a:1b:88:47:5f:05:09:36:54: 00:4c:54:dd:1d:9c:28:4a:be:e7:e2:31:7f:85:40: bc:6c:ec:20:51:c8:e0:8d:0e:21:d3:a5:53:29:df: 2e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D9:53:B9:1D:0A:B7:4D:E7:45:29:ED:B5:99:23:04:19:2A:A4:A6 X509v3 Authority Key Identifier: keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:85:39:b0:6b:79:5b:07:dd:48:5e:f9:00:af:60:88:a2:67: ed:a0:a7:d6:44:4e:f8:97:d8:fe:4d:33:6f:ac:be:bf:06:d6: 97:dd:63:08:51:70:76:72:cf:4a:bd:f6:7b:73:93:6e:ca:cc: df:cc:be:bd:4d:3b:db:45:99:4a:a6:c6:9e:48:7c:de:0d:18: f6:54:f8:ec:bc:03:b4:2b:25:54:67:86:3b:58:3f:27:1a:42: e1:ba:66:d4:44:76:a0:9c:22:b3:79:ae:f8:63:80:41:b7:ca: 7e:38:71:a3:45:fb:bc:8f:8d:1e:e8:b3:53:d0:4d:da:75:35: 2a:a5:cf:8b:6f:fa:42:a5:8d:fb:69:2d:70:7d:9e:c8:b8:3c: 9c:bf:18:d5:fa:64:8c:05:dc:32:9a:8a:59:a3:b5:51:35:b7: 6c:d0:bb:fb:d4:4c:c6:c7:9d:4c:da:01:35:06:a5:2d:e1:56: 5f:59:5c:b7:0a:4e:b5:7b:ef:a9:33:90:c1:2f:af:82:a0:e7: c0:d3:67:41:ec:12:ad:da:69:d1:0d:81:f5:b6:a7:bb:f4:cd: ad:cc:ba:ae:b5:62:ac:45:94:05:5e:d6:6d:71:12:f6:92:49: ca:21:45:ce:f2:69:fe:62:14:55:75:f6:50:e7:6c:6b:b4:e5: 98:de:d0:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxGTX+uQyhHmALHI7vKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNTdhMWY5YzEyMWM5YzJiNmY5NGQzOGE3NWZiZmRjYzU0 ZGYwNWIwHhcNMjUxMjA2MDMwMTAyWhcNMjUxMjA3MDMwMTAyWjAzMTEwLwYDVQQD EygxZWQ5NTNiOTFkMGFiNzRkZTc0NTI5ZWRiNTk5MjMwNDE5MmFhNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCsBe76f/aATaLguuFQXKKeUr9yP NyvXshpiUwJI9bhs/N1V/d3V0Gq1LxxQNFDxMvOtEZfE5QbwWgeoFLexIyETZgn0 1ZetcAl3X4WqOjqJR5LPgyc9JMCmZ11hnyxRJ785RoHpEI7oU/xEzF6xiF3eA4rO J3+PCjXOc5OWvkRO2HgZaQBHDwe3JnYKGBbGjYckgHTfrqxI5epKZC8byX2YjO4a Vxw9oXsoUv78tqFGSzySocx0mQQoxLoXF77KbfWnGUdiHS4hdEJXy9ZKIS4stS1U 7jiKG4hHXwUJNlQATFTdHZwoSr7n4jF/hUC8bOwgUcjgjQ4h06VTKd8udQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7ZU7kdCrdN50Up7bWZIwQZKqSmMB8GA1UdIwQY MBaAFNxXofnBIcnCtvlNOKdfv9zFTfBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZTY3NjUtODZlMi00MDEwLThmOGUt ZGQxMTNjNjk4ZDEyLzEvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wZTY3NjUtODZlMi00MDEwLThmOGUtZGQxMTNjNjk4ZDEy LzEvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIU5sGt5 WwfdSF75AK9giKJn7aCn1kRO+JfY/k0zb6y+vwbWl91jCFFwdnLPSr32e3OTbsrM 38y+vU0720WZSqbGnkh83g0Y9lT47LwDtCslVGeGO1g/JxpC4bpm1ER2oJwis3mu +GOAQbfKfjhxo0X7vI+NHuizU9BN2nU1KqXPi2/6QqWN+2ktcH2eyLg8nL8Y1fpk jAXcMpqKWaO1UTW3bNC7+9RMxsedTNoBNQalLeFWX1lctwpOtXvvqTOQwS+vgqDn wNNnQewSrdpp0Q2B9banu/TNrcy6rrVirEWUBV7WbXES9pJJyiFFzvJp/mIUVXX2 UOdsa7TlmN7Q9g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:33 2025 by rpki-client