This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
File: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft (raw, json)
Hash identifier: IAt9sXc5zmuZYRqJ1hzmo6I3o/9onkaByhV3mFSOsok=
Subject key identifier: BC:A7:94:D7:D8:16:68:23:BC:A8:CA:46:4D:68:40:B5:2F:CB:7F:A9
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial: 019B115D14430676CF2660FE44A076C35A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
Manifest number: 1446
Signing time: Fri 12 Dec 2025 07:01:11 +0000
Manifest this update: Fri 12 Dec 2025 07:01:11 +0000
Manifest next update: Sat 13 Dec 2025 07:01:11 +0000
Files and hashes: 1: 2VevK0HBk8qY35gQ5UtjfqrB3nY.roa (hash: AmV1BLqc7vTs/6UGFEgRF0w9AuqYNGKRtxRFQd+4rZ8=)
2: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl (hash: ZgtTvQ+lhgnvnif0VBVfFyHxzR5LgPsiBSKFpluPsew=)
3: 5vHG0OxzvrqhI56hWt2APxlEca8.roa (hash: bzsGlpjOWPgo9xk0iMmmEBroNlHWE3HqNZ6pialCu6g=)
4: gr8V9GG2sn3v6HXV22VsNMEvx-4.roa (hash: sigWijBONNzFo5YlkJnYB4sz+kl8GULVAa+gCk4rEkg=)
5: v3bh2N4thqCv2jw1YX5PjUcZEd0.roa (hash: nIfMLuntg2xncQRj0ShSY9tFssqvjsfpfyRvdL0VSvM=)
6: yjS8W9q67f67-uZJSGqCLJtk9CY.roa (hash: M5J4UIW6ljIVCBEds8d+YToalBiEOBtwIgj/E8wpY8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Dec 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:11:5d:14:43:06:76:cf:26:60:fe:44:a0:76:c3:5a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Validity
Not Before: Dec 12 07:01:11 2025 GMT
Not After : Dec 13 07:01:11 2025 GMT
Subject: CN=bca794d7d8166823bca8ca464d6840b52fcb7fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:13:0b:af:a9:af:b2:b9:8e:12:56:7f:58:
21:d5:7d:f1:4c:54:15:71:76:54:d8:28:32:aa:cf:
25:81:d0:02:7a:0d:b5:35:fd:0e:ca:cb:83:8e:b8:
76:0f:57:e4:70:9e:c0:54:60:a3:a6:7d:aa:37:5d:
62:3d:5d:28:44:29:cb:5f:18:62:14:a7:b9:57:19:
ae:34:f3:23:1b:9a:29:cb:6f:91:d1:f8:3a:da:09:
4c:1d:0f:12:40:5c:3a:1d:4a:1d:81:1f:55:d5:4a:
c3:7f:ef:bc:df:97:4f:d9:a7:40:a9:0d:23:9f:eb:
56:5e:99:d3:3c:95:81:28:5a:f1:63:a7:06:5e:c8:
6b:ba:03:49:74:69:23:31:1d:08:b3:c8:01:be:0f:
ca:d5:34:71:52:69:d9:c2:62:1b:c4:b1:f8:50:d9:
e5:af:d8:62:44:b7:cd:b6:f4:93:21:fd:e6:d0:79:
bc:a8:62:5e:c9:1c:60:87:f4:22:9c:45:3f:a5:e5:
e5:ab:e2:72:52:89:47:ff:1f:0f:56:5a:f0:94:cd:
ae:75:d2:43:75:c4:31:0a:3d:c8:d4:3f:a5:95:ce:
7a:dc:69:ce:24:ba:65:4d:ee:7b:5d:51:57:df:a2:
fd:65:1c:f9:a7:99:01:f3:8f:88:a1:e6:4e:84:7b:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A7:94:D7:D8:16:68:23:BC:A8:CA:46:4D:68:40:B5:2F:CB:7F:A9
X509v3 Authority Key Identifier:
keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9e:68:20:78:f4:1c:77:c1:d0:71:a8:90:13:aa:ef:7d:4e:
ed:26:74:0c:ac:36:fa:77:20:19:b4:a3:a9:e6:38:27:4d:69:
7a:fe:50:03:92:ef:db:a7:69:ad:b5:d4:86:08:fe:de:81:51:
b2:5e:86:48:54:d2:37:29:cc:a6:0a:5b:c5:06:f9:2b:8f:9d:
d7:1c:ae:47:08:c9:35:9c:b8:80:9a:88:c4:f6:62:c5:89:04:
2f:d4:a9:17:f5:f4:e1:9c:f3:b9:65:97:71:c2:3d:de:5b:f6:
99:10:f0:7d:97:e2:3f:f0:3b:0a:b4:fe:d9:20:cf:01:c7:6b:
72:28:93:6b:10:c9:67:88:82:a8:d5:68:d0:bc:a8:44:cb:91:
03:c8:0b:2a:20:9a:b9:69:50:f6:5f:c8:5d:2d:47:56:aa:cb:
94:b7:09:0f:2c:f8:69:2b:cd:ae:5f:e1:4a:36:a9:97:6d:e3:
4c:28:d6:39:c8:f3:40:a7:aa:a0:44:98:54:db:34:78:ec:a8:
00:35:87:8f:1d:16:71:a5:2c:a1:67:47:98:e2:bc:03:e1:61:
d9:cc:b2:f2:4d:e9:58:d0:18:eb:ec:22:f7:7d:dd:96:3e:c1:
63:fc:ff:97:fd:b6:c0:32:2e:0a:fc:4d:af:ba:1b:d8:fa:e7:
56:33:47:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:11:49 2025 by rpki-client