This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json) Hash identifier: jboc4bqNwhLbW4TE2CVs6q2eK6u9sns9Oh7nlzdUGK4= Subject key identifier: A3:BA:4D:B5:55:95:97:40:D8:EE:56:7F:F6:D2:65:1B:91:46:26:4D Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0 Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0 Certificate serial: 019B35A08EA83256ED9569CC3C58509D43A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft Manifest number: 12FB Signing time: Fri 19 Dec 2025 08:01:13 +0000 Manifest this update: Fri 19 Dec 2025 08:01:13 +0000 Manifest next update: Sat 20 Dec 2025 08:01:13 +0000 Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: kV07g3NNsPV58Or07PQN1V2mVxxR/KYj5IUfgVA6xI8=) 2: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (hash: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:8e:a8:32:56:ed:95:69:cc:3c:58:50:9d:43:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0 Validity Not Before: Dec 19 08:01:13 2025 GMT Not After : Dec 20 08:01:13 2025 GMT Subject: CN=a3ba4db555959740d8ee567ff6d2651b9146264d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2b:e2:08:9c:c2:2c:2d:9b:48:18:b8:f5:de: 38:d8:e6:34:58:8f:ca:45:16:6a:71:6e:44:58:c2: 2d:3c:2e:95:94:19:4b:80:37:d6:1b:c2:c9:9d:29: d3:1d:e0:2d:74:6e:bf:99:aa:45:1c:2d:f4:f8:af: 47:1a:76:b8:6f:3d:dc:f7:81:de:51:c1:05:73:62: 8d:1c:15:1f:8d:1a:d1:42:4c:66:7d:da:9e:ae:83: 9a:b9:f9:0a:70:37:26:fb:38:20:a5:9f:f8:f0:56: 87:6d:45:b2:52:b1:81:c4:c1:c9:6b:04:fe:61:81: 05:25:3f:1c:e1:2b:90:c6:ed:8e:ad:8e:fe:c3:98: 2c:50:7f:6b:bf:e4:cd:ab:5b:88:71:67:15:a1:6f: b8:bb:4d:c1:c5:ae:0f:cc:9f:cc:c9:84:3e:b6:cf: 9e:3a:29:80:e7:e7:a6:01:9b:37:06:ac:39:3b:fd: 29:26:81:45:ad:f9:fc:6e:43:47:6d:57:60:57:96: d3:05:4c:07:f6:6b:63:79:d2:e4:82:98:27:d3:79: 13:d4:c5:96:2e:16:28:d5:4e:f4:78:f4:26:dd:57: f1:42:98:f8:bd:0f:62:b1:18:f3:ec:e6:bc:55:f1: f4:64:00:6d:f3:ac:28:e5:c8:7a:a5:ba:c7:9c:09: 90:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BA:4D:B5:55:95:97:40:D8:EE:56:7F:F6:D2:65:1B:91:46:26:4D X509v3 Authority Key Identifier: keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3b:3a:a9:b7:7a:1d:5b:3a:2b:67:c1:82:c8:e4:1a:0f:91: 9e:aa:5f:19:10:2d:11:18:85:ad:c0:4e:02:cb:cd:ce:f2:3d: 76:c2:1f:58:2e:ef:e7:c5:70:3a:e2:75:ad:62:68:16:84:2b: 60:06:8a:fe:29:15:af:ab:2c:e8:bc:99:37:06:f3:5e:62:14: 2f:21:b7:2d:e1:7f:3f:97:b3:71:ad:29:fb:d7:fa:37:13:04: 4c:42:8e:46:67:45:e1:5e:25:02:eb:29:0f:aa:be:53:9c:aa: ae:f1:dd:0c:c9:95:c4:20:8e:c7:f9:c4:d9:4c:7c:ef:8c:6b: e3:f0:43:37:7a:1b:a4:52:7f:64:fc:ce:20:ac:82:07:c0:40: 1d:de:30:bd:81:1a:c5:7d:6a:cd:55:32:f1:5c:72:e9:ed:69: 6a:05:20:c8:76:e5:d0:23:a3:1e:f6:90:5c:58:f0:35:08:b8: 5e:ec:7f:2d:aa:48:e2:b4:00:68:1d:dc:2f:66:91:2e:5f:1b: ae:b6:a4:b9:0c:ef:a1:a6:1c:c7:d9:f9:b3:7b:d3:5f:f3:33: fe:ff:db:41:72:8f:3e:fd:9b:bf:3e:a2:cd:ed:6e:da:33:fc: 27:bf:fb:7e:2c:6f:06:ba:5f:d2:c9:8a:91:9a:e4:f1:4f:7f: 5e:d2:60:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oI6oMlbtlWnMPFhQnUOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGY5YTY3MWJjZjE3ODljMWI1YWMzNjMwYzc0MWJlNTYw ZGFkYTAwHhcNMjUxMjE5MDgwMTEzWhcNMjUxMjIwMDgwMTEzWjAzMTEwLwYDVQQD EyhhM2JhNGRiNTU1OTU5NzQwZDhlZTU2N2ZmNmQyNjUxYjkxNDYyNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCviCJzCLC2bSBi49d442OY0WI/K RRZqcW5EWMItPC6VlBlLgDfWG8LJnSnTHeAtdG6/mapFHC30+K9HGna4bz3c94He UcEFc2KNHBUfjRrRQkxmfdqeroOaufkKcDcm+zggpZ/48FaHbUWyUrGBxMHJawT+ YYEFJT8c4SuQxu2OrY7+w5gsUH9rv+TNq1uIcWcVoW+4u03Bxa4PzJ/MyYQ+ts+e OimA5+emAZs3Bqw5O/0pJoFFrfn8bkNHbVdgV5bTBUwH9mtjedLkgpgn03kT1MWW LhYo1U70ePQm3VfxQpj4vQ9isRjz7Oa8VfH0ZABt86wo5ch6pbrHnAmQ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKO6TbVVlZdA2O5Wf/bSZRuRRiZNMB8GA1UdIwQY MBaAFN7fmmcbzxeJwbWsNjDHQb5WDa2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUt Nzc2NjA1MDFjNDc4LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUtNzc2NjA1MDFjNDc4 LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjs6qbd6 HVs6K2fBgsjkGg+RnqpfGRAtERiFrcBOAsvNzvI9dsIfWC7v58VwOuJ1rWJoFoQr YAaK/ikVr6ss6LyZNwbzXmIULyG3LeF/P5ezca0p+9f6NxMETEKORmdF4V4lAusp D6q+U5yqrvHdDMmVxCCOx/nE2Ux874xr4/BDN3obpFJ/ZPzOIKyCB8BAHd4wvYEa xX1qzVUy8Vxy6e1pagUgyHbl0COjHvaQXFjwNQi4Xux/LapI4rQAaB3cL2aRLl8b rrakuQzvoaYcx9n5s3vTX/Mz/v/bQXKPPv2bvz6ize1u2jP8J7/7fixvBrpf0smK kZrk8U9/XtJgkQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:37:11 2025 by rpki-client