This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json) Hash identifier: wz6Rz2MDOgfKpY3H351zcy96PwE6EFlF00Rxz5qZNLA= Subject key identifier: 14:78:BB:9B:38:74:85:F3:1D:AC:DC:94:11:F6:5F:17:5F:EC:F4:A9 Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2 Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2 Certificate serial: 019AFB796DB31F81EFE213300DD67B4B2583 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft Manifest number: 0DF4 Signing time: Mon 08 Dec 2025 01:00:30 +0000 Manifest this update: Mon 08 Dec 2025 01:00:30 +0000 Manifest next update: Tue 09 Dec 2025 01:00:30 +0000 Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: tAVLlGZT7siHJubVJyBNiUgR/aiopzspdUjVGP3SPZw=) 2: prKzcOdb2gq7whbRtn2j18st210.roa (hash: TLxvtHMzXY4Lge96VJalh1cOFoXVbLd9V2/rCUHRN3g=) 3: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:79:6d:b3:1f:81:ef:e2:13:30:0d:d6:7b:4b:25:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2 Validity Not Before: Dec 8 01:00:30 2025 GMT Not After : Dec 9 01:00:30 2025 GMT Subject: CN=1478bb9b387485f31dacdc9411f65f175fecf4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d9:77:20:45:32:e8:11:ce:53:fd:65:5d:24: 4c:33:b1:00:46:18:3f:52:01:33:33:7d:d3:2b:45: 59:9d:4d:bc:32:70:8d:ea:25:44:49:6b:4a:b6:4b: e2:95:90:62:42:27:f4:e8:b6:20:36:0f:23:b4:35: d6:b1:46:5c:e8:d4:7a:82:56:50:49:73:d0:0f:a9: 69:5f:ef:4a:59:d3:8c:cf:4c:e9:fb:41:ee:7d:b7: 31:02:50:26:8d:b6:17:ff:c5:17:14:db:27:b6:e8: 71:67:91:95:48:7c:53:90:1d:ff:7d:d7:8d:1e:0f: 14:14:c1:5c:15:0e:91:48:a0:c4:28:7d:da:4e:8a: 6d:61:2a:30:9b:be:ed:62:75:f0:d4:04:a1:14:e5: 39:90:c1:c3:b3:a4:ad:74:32:46:d5:07:d0:aa:33: 03:e6:68:8a:3a:ee:e0:a6:8c:17:68:06:8d:8c:87: c8:cb:e1:06:5c:0f:e4:1e:48:29:51:19:41:56:2d: 89:f6:cf:dd:cc:3f:31:5c:dd:eb:44:1b:43:02:9d: 6a:76:01:2a:e2:3c:c5:3b:38:33:d6:92:31:4b:83: 67:cf:6c:7f:dd:d1:ea:c8:b2:9e:78:b3:62:b2:11: 82:23:3d:2c:e3:7a:75:b8:82:e6:21:5a:61:4d:91: 9e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:78:BB:9B:38:74:85:F3:1D:AC:DC:94:11:F6:5F:17:5F:EC:F4:A9 X509v3 Authority Key Identifier: keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:01:a8:ce:27:f8:ab:90:71:6a:88:9c:3d:b0:ad:bd:63:4d: cc:43:34:aa:d6:fe:48:88:1e:0e:ef:2e:a2:bc:d0:7f:1a:0b: 1e:36:5e:16:d4:bc:4f:a6:26:78:6e:1d:c6:74:ec:5f:6e:4e: c3:74:49:d9:dd:2c:82:a1:99:2e:6a:67:82:c1:9e:50:4f:d0: f7:fb:ee:65:b1:0a:d4:6d:b3:ad:8e:10:43:0b:8c:62:dc:25: 0d:e2:fe:84:63:f2:fb:ad:5e:13:ff:48:2f:d3:ef:62:3a:76: 65:5c:e9:21:27:c9:45:7f:b4:94:ae:ca:b7:d9:56:c5:84:e7: 89:f5:03:b1:bb:70:7f:30:24:ef:d2:a7:c4:f0:57:18:aa:e8: bc:a4:26:37:4d:49:d3:70:39:df:61:35:26:a5:4b:22:95:98: d6:48:65:8b:1e:d4:e4:49:01:15:84:36:97:2b:b4:c4:16:34: ac:bc:d4:04:ba:1a:69:73:53:bd:4b:07:e9:70:c6:3e:23:5f: 4b:f2:9f:4d:99:1a:8d:e1:46:67:f6:75:34:9f:7b:51:88:12: a5:86:8b:ba:7f:a1:d0:14:d4:05:d8:0b:38:12:18:a7:79:34: 1d:61:c1:7d:d6:ee:47:da:5f:aa:0d:e4:5f:84:79:9f:50:9a: 56:59:7b:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7eW2zH4Hv4hMwDdZ7SyWDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTcyYzhmYWVjYjcwNTJjODQxMjAxYjI1ZjZhMDE4ZTQ3 N2IxYzIwHhcNMjUxMjA4MDEwMDMwWhcNMjUxMjA5MDEwMDMwWjAzMTEwLwYDVQQD EygxNDc4YmI5YjM4NzQ4NWYzMWRhY2RjOTQxMWY2NWYxNzVmZWNmNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tl3IEUy6BHOU/1lXSRMM7EARhg/ UgEzM33TK0VZnU28MnCN6iVESWtKtkvilZBiQif06LYgNg8jtDXWsUZc6NR6glZQ SXPQD6lpX+9KWdOMz0zp+0HufbcxAlAmjbYX/8UXFNsntuhxZ5GVSHxTkB3/fdeN Hg8UFMFcFQ6RSKDEKH3aToptYSowm77tYnXw1AShFOU5kMHDs6StdDJG1QfQqjMD 5miKOu7gpowXaAaNjIfIy+EGXA/kHkgpURlBVi2J9s/dzD8xXN3rRBtDAp1qdgEq 4jzFOzgz1pIxS4Nnz2x/3dHqyLKeeLNishGCIz0s43p1uILmIVphTZGeuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBR4u5s4dIXzHazclBH2Xxdf7PSpMB8GA1UdIwQY MBaAFN7nLI+uy3BSyEEgGyX2oBjkd7HCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lZjgyOWEtYWNmYy00NDAyLTk1Y2Ut MzgzZmIyYjk1NGQ5LzEvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lZjgyOWEtYWNmYy00NDAyLTk1Y2UtMzgzZmIyYjk1NGQ5 LzEvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAGozif4 q5BxaoicPbCtvWNNzEM0qtb+SIgeDu8uorzQfxoLHjZeFtS8T6YmeG4dxnTsX25O w3RJ2d0sgqGZLmpngsGeUE/Q9/vuZbEK1G2zrY4QQwuMYtwlDeL+hGPy+61eE/9I L9PvYjp2ZVzpISfJRX+0lK7Kt9lWxYTnifUDsbtwfzAk79KnxPBXGKrovKQmN01J 03A532E1JqVLIpWY1khlix7U5EkBFYQ2lyu0xBY0rLzUBLoaaXNTvUsH6XDGPiNf S/KfTZkajeFGZ/Z1NJ97UYgSpYaLun+h0BTUBdgLOBIYp3k0HWHBfdbuR9pfqg3k X4R5n1CaVll7cw== -----END CERTIFICATE-----Generated at Mon Dec 8 06:21:03 2025 by rpki-client