This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json) Hash identifier: udeMC4cATXCKjwC0i6qn1aTkezIb1BKi1B0re63PWk4= Subject key identifier: EA:21:11:D9:AA:48:87:B7:BA:42:6E:5F:71:9E:3F:5F:65:CD:1B:CE Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29 Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729 Certificate serial: 019AABA83D6AE35AB9DEC77D1B83C8DE95F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft Manifest number: 097F Signing time: Sat 22 Nov 2025 13:02:00 +0000 Manifest this update: Sat 22 Nov 2025 13:02:00 +0000 Manifest next update: Sun 23 Nov 2025 13:02:00 +0000 Files and hashes: 1: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: 7fNH8Oy388+HYNDkgSqmvi/zwgkFx0m9MPlJt/X/vd4=) 2: W8Dpmpt_1-01qSbotVM15n3GSek.roa (hash: 8bMbdbcHjYf7KXHu+ym0lwgv0cPY/hCCrTp1Qv0O4sU=) 3: d-If6rwOnPiVqU22C8IZzGvMPvc.roa (hash: giLRuwy5wW+MIOBjFAF7Pd0PEoYtI2K0pgdHGw83fkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a8:3d:6a:e3:5a:b9:de:c7:7d:1b:83:c8:de:95:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729 Validity Not Before: Nov 22 13:02:00 2025 GMT Not After : Nov 23 13:02:00 2025 GMT Subject: CN=ea2111d9aa4887b7ba426e5f719e3f5f65cd1bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:b0:58:ae:a9:9d:7e:43:9a:01:64:18:ab: 55:5b:fa:3e:6c:ef:34:c8:28:d3:74:32:2c:10:20: 68:e0:21:eb:19:06:c8:53:cc:0b:31:3f:97:0f:52: 0a:20:26:36:f7:70:dc:0d:54:39:2a:77:29:06:00: 54:b8:6a:ea:3b:83:67:58:47:4c:69:af:4e:50:89: 46:4a:f4:be:a2:e8:f1:06:3c:16:63:91:ae:83:9a: 28:6f:90:a4:20:53:48:33:c7:db:c8:0a:53:31:ad: 01:c2:4b:7c:7a:85:84:cb:f2:fb:5b:73:7d:f1:35: 5f:07:1b:df:60:d5:32:3c:29:64:20:83:bd:0c:8f: ff:5b:82:e9:df:d9:bd:fc:33:61:b1:03:c1:6e:73: 5c:b1:e5:13:64:3f:b2:6f:67:13:23:d8:5e:03:db: e7:58:c8:50:cb:b0:f6:9b:ee:ca:08:00:5e:d6:48: cd:77:7e:21:b5:3a:48:22:56:aa:64:3c:04:ba:0c: 84:77:be:ea:73:4d:14:83:5d:19:1a:84:1b:c6:62: 45:4b:5c:87:4a:03:52:34:f7:82:c5:56:c5:9e:2d: a4:80:73:5e:15:b9:7d:a4:c7:76:31:98:fa:31:66: 19:96:b1:86:06:16:ab:43:c0:8d:64:2b:cd:42:30: 37:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:21:11:D9:AA:48:87:B7:BA:42:6E:5F:71:9E:3F:5F:65:CD:1B:CE X509v3 Authority Key Identifier: keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:4a:bf:1e:4d:3c:30:ee:ad:5f:0b:68:f1:83:d2:aa:63:74: cb:b0:9d:8f:56:c1:ab:69:17:a7:ac:24:ab:a4:d3:d5:8a:60: 16:43:bc:86:23:4e:40:46:81:dc:3b:1f:60:a9:a9:9b:f8:61: ee:87:b6:3e:04:a9:96:b3:d3:a6:83:2b:ba:4b:91:92:69:14: a9:2c:92:d7:2b:cd:33:7d:dd:76:05:36:0a:aa:f6:bb:5a:1f: 6d:6a:6d:64:2a:64:1b:6b:48:b7:47:c3:be:2c:58:69:07:f4: 64:18:14:7f:1f:cc:ad:02:a9:67:04:9e:ba:2c:41:81:04:58: 89:0c:f1:a3:cf:49:7a:60:63:9d:73:25:59:ed:a1:57:5c:f0: ec:4b:2d:c5:b4:4b:b6:9e:16:e2:ee:18:f9:1b:3d:97:cb:b1: 28:4c:0e:3b:ac:30:45:b8:02:6c:a9:5c:02:87:86:c6:f5:52: 70:00:12:b1:47:3f:a6:a4:d5:20:4d:fc:13:ac:ba:37:40:fb: dc:ba:9e:80:fd:a6:4d:70:96:2b:4c:0a:37:92:03:ec:99:42: a3:77:d0:cf:c4:7f:2f:32:c5:cd:82:c4:f3:e4:cb:dc:76:70: e4:99:1f:7e:86:87:ae:04:f3:10:2c:12:82:da:30:88:44:b2: 0c:55:ee:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrqD1q41q53sd9G4PI3pXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMDEwOTM4ZDllZjcyMTU4ZmM5OGJkNDVkZTcxYjBiMWE5 ZmY3MjkwHhcNMjUxMTIyMTMwMjAwWhcNMjUxMTIzMTMwMjAwWjAzMTEwLwYDVQQD EyhlYTIxMTFkOWFhNDg4N2I3YmE0MjZlNWY3MTllM2Y1ZjY1Y2QxYmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslewWK6pnX5DmgFkGKtVW/o+bO80 yCjTdDIsECBo4CHrGQbIU8wLMT+XD1IKICY293DcDVQ5KncpBgBUuGrqO4NnWEdM aa9OUIlGSvS+oujxBjwWY5Gug5oob5CkIFNIM8fbyApTMa0Bwkt8eoWEy/L7W3N9 8TVfBxvfYNUyPClkIIO9DI//W4Lp39m9/DNhsQPBbnNcseUTZD+yb2cTI9heA9vn WMhQy7D2m+7KCABe1kjNd34htTpIIlaqZDwEugyEd77qc00Ug10ZGoQbxmJFS1yH SgNSNPeCxVbFni2kgHNeFbl9pMd2MZj6MWYZlrGGBharQ8CNZCvNQjA3wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOohEdmqSIe3ukJuX3GeP19lzRvOMB8GA1UdIwQY MBaAFN0BCTjZ73IVj8mL1F3nGwsan/cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYt Y2VmZjU0NmM5MzNlLzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYtY2VmZjU0NmM5MzNl LzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUq/Hk08 MO6tXwto8YPSqmN0y7Cdj1bBq2kXp6wkq6TT1YpgFkO8hiNOQEaB3DsfYKmpm/hh 7oe2PgSplrPTpoMrukuRkmkUqSyS1yvNM33ddgU2Cqr2u1ofbWptZCpkG2tIt0fD vixYaQf0ZBgUfx/MrQKpZwSeuixBgQRYiQzxo89JemBjnXMlWe2hV1zw7EstxbRL tp4W4u4Y+Rs9l8uxKEwOO6wwRbgCbKlcAoeGxvVScAASsUc/pqTVIE38E6y6N0D7 3LqegP2mTXCWK0wKN5ID7JlCo3fQz8R/LzLFzYLE8+TL3HZw5JkffoaHrgTzECwS gtowiESyDFXuwg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:28 2025 by rpki-client