This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json) Hash identifier: k/b9IkMRfoJ8CTzcYEn7GlM7jiU81VNPRGylzIumGvo= Subject key identifier: 7A:A5:77:A6:E1:8A:6C:E6:06:5A:23:ED:FE:8A:A1:D1:AC:47:A4:8C Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 019B0BC8A069C7E37C77337C178FEEF0BE85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft Manifest number: 0E33 Signing time: Thu 11 Dec 2025 05:00:56 +0000 Manifest this update: Thu 11 Dec 2025 05:00:56 +0000 Manifest next update: Fri 12 Dec 2025 05:00:56 +0000 Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: nOS7ENt/n8v33gSOF+2F62XIdve9vPG1xELNVmGq6+0=) 2: 3y9oPhhQ76ajFYxPaGTfj0mGenY.roa (hash: aJMldfOcg7PSjdceOikOWHYMelePcp968D1IHsbQCQs=) 3: Eru4dcnP3AWADVXKAGfzuxLYfJc.roa (hash: qrokzcnnG9HxWIaV9kzA+31DT5BxA/ZSbotCh3hraYc=) 4: Kbhh_-jKSqwyjY9YyEcKOFQSYSE.roa (hash: a+ayqrZ5gSfoloT8KLq9Di5/TpqXgWgvxKNvHS7J0us=) 5: Tz-eGTasLTxJaRB_AyMo0GbjCYY.roa (hash: y/BDSOiRtRFchkB8Upvuvb+MNs6zs82qA1XU7WJzVqs=) 6: n1PdHVenW5fayjdB9KftVERroVM.roa (hash: vk271JDoo1aPMh1SkN6xn//CcT9hk4SqnKTKa0JtzvQ=) 7: njV-GA0Ii5_5OkqbA6b8eDCoFt4.roa (hash: 3zM9PD2sx2obkpcLLLOA9+i/X09CCKUBp/Xzom7yXUE=) 8: zH0GORTR7Uyj1Cp9s_FZC30xG7E.roa (hash: hQY0rZB8ZrQ/2LTg6dzNd2hK2I9T6rcNdp9cuBHVHhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:c8:a0:69:c7:e3:7c:77:33:7c:17:8f:ee:f0:be:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Dec 11 05:00:56 2025 GMT Not After : Dec 12 05:00:56 2025 GMT Subject: CN=7aa577a6e18a6ce6065a23edfe8aa1d1ac47a48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:e2:43:39:0c:b8:f5:b1:36:75:6f:cf:8c: ca:d1:93:b5:35:4e:8a:af:f1:a5:f6:83:93:92:f5: 46:b4:31:2a:8d:35:5e:66:a9:e8:cb:f0:0f:d2:e0: 1c:f5:fc:24:0b:07:5b:43:97:02:4d:80:dc:ea:29: 39:8d:ae:0d:84:24:5d:46:95:9a:2c:6e:60:3d:82: c3:9f:62:90:79:33:5b:50:69:fa:f3:2a:1b:d1:ad: 5f:a6:23:40:e1:90:32:73:26:db:da:5d:2d:47:fc: f4:36:1e:8a:f1:b3:8b:66:12:3b:1e:00:eb:76:87: 4d:f7:91:50:8e:da:3c:8b:bf:4c:58:14:16:fe:2d: 7b:dd:cd:1f:69:56:4c:5a:9a:7e:3b:38:e1:36:b1: e5:3c:e5:f7:75:29:fc:80:4e:b0:d6:a9:c9:2f:f8: 3a:94:3c:5d:9c:ef:ad:9f:6c:28:eb:fd:6c:6f:70: ee:3f:82:75:c7:70:58:a9:ab:64:c5:2f:1d:8e:fa: a6:4d:63:3c:82:a5:ba:fd:98:a8:b0:da:26:99:1f: 73:7f:62:a0:7f:96:fd:46:e5:4c:f9:51:31:76:3b: 85:e9:27:6a:95:8a:99:05:69:e3:9c:2c:55:df:6c: 8f:3d:b9:ff:ee:c1:12:41:29:b3:42:01:21:47:bb: e7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A5:77:A6:E1:8A:6C:E6:06:5A:23:ED:FE:8A:A1:D1:AC:47:A4:8C X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e8:51:ed:ef:5d:a8:e0:6f:58:be:7c:e8:fe:33:55:d1:96: 4e:39:6f:04:27:cf:da:94:c2:a2:b5:d1:0c:92:7f:00:c5:18: 86:45:d8:f0:08:1d:19:03:50:42:37:df:9d:d5:cf:16:fb:ac: 60:b2:db:20:a0:60:4c:c3:43:94:2d:99:57:fd:fc:c0:93:92: 0e:1f:a6:a2:c4:a9:ae:c3:18:6b:9e:aa:fc:46:f0:86:17:ff: cb:44:ca:a7:4c:ef:78:ba:16:8c:e8:4c:86:f4:af:da:ce:2f: 47:0f:8b:99:07:9b:dd:4e:f3:3e:f3:fb:42:c8:c5:04:29:67: fa:fd:c1:93:ba:c6:01:1b:7f:84:97:e6:7d:af:b9:9c:23:0e: 3b:7a:74:39:c1:27:fc:27:79:1f:b5:80:4c:ca:69:eb:13:f8: 95:88:41:9d:4e:f6:81:6d:0d:ba:ff:8f:e4:da:be:d8:89:fc: 73:20:a9:c6:77:a0:e9:7b:d8:fd:5a:f8:45:a5:7a:ef:7b:a7: b8:eb:4b:7b:52:19:60:7c:24:19:1c:de:6f:36:8b:96:11:22: b9:20:45:ab:61:8f:2f:9d:ee:72:7e:28:99:89:5f:94:7b:04: 74:4a:49:91:a6:bb:10:21:15:3b:a1:97:5d:cc:8e:79:af:93: 5a:8a:b7:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLyKBpx+N8dzN8F4/u8L6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjUxMjExMDUwMDU2WhcNMjUxMjEyMDUwMDU2WjAzMTEwLwYDVQQD Eyg3YWE1NzdhNmUxOGE2Y2U2MDY1YTIzZWRmZThhYTFkMWFjNDdhNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr/iQzkMuPWxNnVvz4zK0ZO1NU6K r/Gl9oOTkvVGtDEqjTVeZqnoy/AP0uAc9fwkCwdbQ5cCTYDc6ik5ja4NhCRdRpWa LG5gPYLDn2KQeTNbUGn68yob0a1fpiNA4ZAycybb2l0tR/z0Nh6K8bOLZhI7HgDr dodN95FQjto8i79MWBQW/i173c0faVZMWpp+OzjhNrHlPOX3dSn8gE6w1qnJL/g6 lDxdnO+tn2wo6/1sb3DuP4J1x3BYqatkxS8djvqmTWM8gqW6/ZiosNommR9zf2Kg f5b9RuVM+VExdjuF6SdqlYqZBWnjnCxV32yPPbn/7sESQSmzQgEhR7vnswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqld6bhimzmBloj7f6KodGsR6SMMB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOhR7e9d qOBvWL586P4zVdGWTjlvBCfP2pTCorXRDJJ/AMUYhkXY8AgdGQNQQjffndXPFvus YLLbIKBgTMNDlC2ZV/38wJOSDh+mosSprsMYa56q/Ebwhhf/y0TKp0zveLoWjOhM hvSv2s4vRw+LmQeb3U7zPvP7QsjFBCln+v3Bk7rGARt/hJfmfa+5nCMOO3p0OcEn /Cd5H7WATMpp6xP4lYhBnU72gW0Nuv+P5Nq+2In8cyCpxneg6XvY/Vr4RaV673un uOtLe1IZYHwkGRzebzaLlhEiuSBFq2GPL53ucn4omYlflHsEdEpJkaa7ECEVO6GX XcyOea+TWoq31A== -----END CERTIFICATE-----Generated at Thu Dec 11 07:07:34 2025 by rpki-client