This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json) Hash identifier: QtVVbfe+SeOlwAbusBzcynR72r5GclnbuUdLDmLOImc= Subject key identifier: 2A:42:27:1D:1C:55:7C:44:2C:5F:7C:C3:0D:E2:18:FF:CF:4B:37:70 Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92 Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92 Certificate serial: 019AF42DEF72EDCC66DF1998EB6328B68C75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft Manifest number: 06CA Signing time: Sat 06 Dec 2025 15:00:42 +0000 Manifest this update: Sat 06 Dec 2025 15:00:42 +0000 Manifest next update: Sun 07 Dec 2025 15:00:42 +0000 Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: Hzn3F+/M0f3f0wBwLntT1lLgvin5Yan+DIOucEakuUc=) 2: S2et9u3-k4c1RbSQYpZyfZKneKE.roa (hash: Ha/+fD6TOAGH3fDS11rGJPIxFiX3z4IR9RxVgbeKPDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:ef:72:ed:cc:66:df:19:98:eb:63:28:b6:8c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de182707c444c31064b1899c597e9efd73438f92 Validity Not Before: Dec 6 15:00:42 2025 GMT Not After : Dec 7 15:00:42 2025 GMT Subject: CN=2a42271d1c557c442c5f7cc30de218ffcf4b3770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:a7:25:db:fe:54:d3:31:ae:1a:b8:2d:af: 55:d1:2c:38:e6:2b:7c:bd:a2:9e:0b:0d:ae:a3:74: 58:62:ac:09:5b:d6:34:c7:b4:71:21:1f:6a:5a:f4: d6:8d:92:de:3a:1c:6f:ec:2b:ce:dd:bc:45:2c:a7: d5:82:2b:98:43:ad:7e:4a:5f:41:87:ea:c6:40:21: 0b:76:82:05:27:e7:ad:d6:9a:0a:a6:56:9d:82:94: 6e:17:2b:90:04:f1:dd:96:99:16:e4:2e:3b:a3:9f: 74:dc:5b:94:cb:27:04:a3:db:15:dc:6d:30:30:d1: df:ab:0a:c4:5d:6e:6a:7f:dd:91:fe:de:fd:fb:fe: 79:d1:79:66:67:45:b6:8d:14:fc:38:c6:ca:0b:33: 6e:ad:55:8b:a7:2a:ad:c2:6b:0b:aa:5c:b3:bf:58: 60:87:58:80:05:f3:f5:df:ee:a8:6e:59:fc:28:dc: 9d:37:fe:6c:7e:15:b4:31:76:95:cc:ea:4a:4b:1e: a9:47:e3:bb:8e:f2:52:03:8d:3a:24:bf:d4:f3:00: 77:58:0b:3b:5f:bb:56:ba:9f:7c:e5:eb:c4:7a:c2: f1:57:e8:6e:8f:f9:fc:d2:2a:7c:c0:0b:2c:7f:4a: c8:75:44:f6:5a:d0:8c:4f:fb:98:24:52:98:d1:5d: 0a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:42:27:1D:1C:55:7C:44:2C:5F:7C:C3:0D:E2:18:FF:CF:4B:37:70 X509v3 Authority Key Identifier: keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:44:c9:e8:62:7f:0d:ac:12:ad:7e:33:75:f2:6c:d1:cb:d3: 11:9a:85:47:cb:c0:63:0b:b9:ae:1d:18:fa:fc:3b:9d:6f:a8: a1:5f:fe:e6:33:21:c7:35:fd:80:e5:a9:9f:2c:9d:af:32:f3: c5:48:7f:54:1c:0a:61:6e:df:eb:95:d1:21:28:5c:d2:21:10: d5:43:ae:98:0f:1c:5a:d2:aa:ce:92:8e:68:a1:f4:c0:18:91: 0c:0e:a4:54:d1:57:6a:78:79:0c:fe:91:10:c4:33:67:f6:87: 08:92:28:3f:82:c1:0c:ea:3e:40:46:18:ff:e2:35:89:d9:d5: 1f:4b:22:e7:7d:e2:86:d5:96:d0:71:1e:90:e2:e4:61:92:24: d4:fb:ea:62:ef:39:d4:51:24:d2:7d:c7:f3:fc:d9:b3:a8:35: f3:8a:c3:fb:55:4e:e8:59:37:76:91:18:1f:d5:4c:c7:92:d0: a0:eb:69:c5:7f:2b:46:77:c8:fe:f3:de:66:b5:da:6c:fe:40: 56:dd:95:a8:37:ba:04:c1:ec:32:96:7d:85:de:83:0a:e3:65: 00:09:f8:52:24:34:44:21:f1:83:96:f1:f6:cc:82:18:03:66: 6a:ff:f6:1a:93:e4:58:9c:80:37:c1:c8:93:db:8f:6b:a5:1c: 45:38:97:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Le9y7cxm3xmY62Motox1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTgyNzA3YzQ0NGMzMTA2NGIxODk5YzU5N2U5ZWZkNzM0 MzhmOTIwHhcNMjUxMjA2MTUwMDQyWhcNMjUxMjA3MTUwMDQyWjAzMTEwLwYDVQQD EygyYTQyMjcxZDFjNTU3YzQ0MmM1ZjdjYzMwZGUyMThmZmNmNGIzNzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2WnJdv+VNMxrhq4La9V0Sw45it8 vaKeCw2uo3RYYqwJW9Y0x7RxIR9qWvTWjZLeOhxv7CvO3bxFLKfVgiuYQ61+Sl9B h+rGQCELdoIFJ+et1poKpladgpRuFyuQBPHdlpkW5C47o5903FuUyycEo9sV3G0w MNHfqwrEXW5qf92R/t79+/550XlmZ0W2jRT8OMbKCzNurVWLpyqtwmsLqlyzv1hg h1iABfP13+6obln8KNydN/5sfhW0MXaVzOpKSx6pR+O7jvJSA406JL/U8wB3WAs7 X7tWup985evEesLxV+huj/n80ip8wAssf0rIdUT2WtCMT/uYJFKY0V0KoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpCJx0cVXxELF98ww3iGP/PSzdwMB8GA1UdIwQY MBaAFN4YJwfERMMQZLGJnFl+nv1zQ4+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zYmYzMDEtZDE4OS00NzVkLTk1ZGMt ZWFhZTNkZThhYjU4LzEvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zYmYzMDEtZDE4OS00NzVkLTk1ZGMtZWFhZTNkZThhYjU4 LzEvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkTJ6GJ/ DawSrX4zdfJs0cvTEZqFR8vAYwu5rh0Y+vw7nW+ooV/+5jMhxzX9gOWpnyydrzLz xUh/VBwKYW7f65XRIShc0iEQ1UOumA8cWtKqzpKOaKH0wBiRDA6kVNFXanh5DP6R EMQzZ/aHCJIoP4LBDOo+QEYY/+I1idnVH0si533ihtWW0HEekOLkYZIk1PvqYu85 1FEk0n3H8/zZs6g184rD+1VO6Fk3dpEYH9VMx5LQoOtpxX8rRnfI/vPeZrXabP5A Vt2VqDe6BMHsMpZ9hd6DCuNlAAn4UiQ0RCHxg5bx9syCGANmav/2GpPkWJyAN8HI k9uPa6UcRTiXNg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:59 2025 by rpki-client