This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json) Hash identifier: dDkeay37prJkWaS47yCh16f/IqOJa67C8bCTL5nX1LQ= Subject key identifier: 2E:F0:F6:A2:04:6D:09:64:88:04:BA:00:29:69:98:BB:93:9C:8E:2A Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a Certificate serial: 019B0F37879EC7DF9AB82B3DB69558ABCE79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft Manifest number: 10B1 Signing time: Thu 11 Dec 2025 21:00:55 +0000 Manifest this update: Thu 11 Dec 2025 21:00:55 +0000 Manifest next update: Fri 12 Dec 2025 21:00:55 +0000 Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: kxMw7vqETwaTTdIZmkzMAePJcvm80tO25j5y+uZx3uY=) 2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:87:9e:c7:df:9a:b8:2b:3d:b6:95:58:ab:ce:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a Validity Not Before: Dec 11 21:00:55 2025 GMT Not After : Dec 12 21:00:55 2025 GMT Subject: CN=2ef0f6a2046d09648804ba00296998bb939c8e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:db:4d:ef:75:f3:85:0b:c2:f5:e3:83:9d:fc: df:18:cc:d3:dc:60:3a:c0:68:ee:a8:20:c6:f7:5d: 20:f9:83:20:c1:42:5e:b4:ff:ab:8c:42:15:90:c4: 2d:e7:5a:45:bf:e0:a8:ba:20:59:3e:2d:ee:fc:22: f5:c7:b0:5d:f7:35:0c:ee:ee:66:16:17:7f:78:53: ed:d2:2f:db:63:6f:18:c4:82:5f:3c:86:ec:ec:a8: b8:23:da:d6:53:db:04:78:d5:93:a2:e7:4b:1f:76: 95:35:a4:90:96:96:02:0c:f1:1e:38:bd:2a:4f:4c: 08:19:76:92:17:f6:f6:dc:6a:90:7e:48:61:3c:b5: d6:3d:0d:e4:bb:06:5b:32:9f:e4:a4:f9:52:ce:e6: 53:bf:d8:94:b4:40:31:93:0c:06:88:68:23:17:01: 1c:43:d9:16:da:8a:21:7b:62:3f:5b:8d:f8:6d:f6: e1:14:ef:ba:8f:2f:cd:8e:aa:e2:c4:49:5e:44:42: b9:5b:9c:e5:e2:d0:0f:f3:ba:10:c0:28:e9:7b:17: c6:7a:e5:1a:f2:49:f7:e7:a8:f1:2d:ba:0c:e5:ed: 77:a6:d9:cb:91:d1:45:af:c1:4c:9b:df:b6:bd:e0: e2:5e:07:2c:b7:31:f9:c8:eb:c0:56:97:6c:03:71: 27:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F0:F6:A2:04:6D:09:64:88:04:BA:00:29:69:98:BB:93:9C:8E:2A X509v3 Authority Key Identifier: keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:10:6d:5c:36:4d:0c:5c:2f:3e:29:5b:7a:83:b0:d7:4c:97: 85:6a:36:b0:c7:30:cf:29:af:50:81:2a:04:7b:68:75:db:cc: 75:c6:ee:38:bd:70:de:1e:bb:ea:c6:b0:19:88:3b:a9:c3:cb: 3f:4e:8b:28:02:38:ee:93:74:49:43:62:10:97:08:f2:4f:80: 64:de:27:90:d5:bc:8c:8b:69:8a:4c:95:85:f6:42:01:15:2b: 7e:19:b4:f0:1e:62:1d:63:43:6c:0f:ed:8a:e9:47:4c:45:59: 4d:a7:22:3b:2e:5a:2e:40:b0:6b:c3:59:9c:9b:08:f5:66:dd: 54:e0:62:99:f7:44:eb:c0:57:e5:55:98:4c:f5:15:18:38:ea: 59:ea:35:8c:a7:09:e3:3a:54:3c:f8:83:a3:13:92:b5:3e:43: a3:c8:ad:2c:49:27:03:10:a0:e0:38:26:72:d2:d2:ab:32:e9: 0f:b1:82:18:aa:ba:38:58:47:84:26:68:9c:87:cb:8a:86:0c: e9:bd:e4:50:69:64:ee:48:8a:94:d8:a6:41:1a:14:9f:58:af: f8:3f:50:f4:16:8d:40:97:54:5e:88:e6:a7:c7:c7:dc:c1:4c: 93:5f:57:14:2f:60:2d:1c:45:6c:f1:b4:8d:d6:3f:af:21:ca: 9c:88:74:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN4eex9+auCs9tpVYq855MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYjE0NTc1NjA4MGFmZjFiYjAwZjVmOTBmZDlmMmYyN2Nj NTczMmEwHhcNMjUxMjExMjEwMDU1WhcNMjUxMjEyMjEwMDU1WjAzMTEwLwYDVQQD EygyZWYwZjZhMjA0NmQwOTY0ODgwNGJhMDAyOTY5OThiYjkzOWM4ZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdtN73XzhQvC9eODnfzfGMzT3GA6 wGjuqCDG910g+YMgwUJetP+rjEIVkMQt51pFv+CouiBZPi3u/CL1x7Bd9zUM7u5m Fhd/eFPt0i/bY28YxIJfPIbs7Ki4I9rWU9sEeNWToudLH3aVNaSQlpYCDPEeOL0q T0wIGXaSF/b23GqQfkhhPLXWPQ3kuwZbMp/kpPlSzuZTv9iUtEAxkwwGiGgjFwEc Q9kW2oohe2I/W434bfbhFO+6jy/NjqrixEleREK5W5zl4tAP87oQwCjpexfGeuUa 8kn356jxLboM5e13ptnLkdFFr8FMm9+2veDiXgcstzH5yOvAVpdsA3EnZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7w9qIEbQlkiAS6AClpmLuTnI4qMB8GA1UdIwQY MBaAFN6xRXVggK/xuwD1+Q/Z8vJ8xXMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1Njgt M2ZmOTY0NTUwM2U5LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1NjgtM2ZmOTY0NTUwM2U5 LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhBtXDZN DFwvPilbeoOw10yXhWo2sMcwzymvUIEqBHtoddvMdcbuOL1w3h676sawGYg7qcPL P06LKAI47pN0SUNiEJcI8k+AZN4nkNW8jItpikyVhfZCARUrfhm08B5iHWNDbA/t iulHTEVZTaciOy5aLkCwa8NZnJsI9WbdVOBimfdE68BX5VWYTPUVGDjqWeo1jKcJ 4zpUPPiDoxOStT5Do8itLEknAxCg4DgmctLSqzLpD7GCGKq6OFhHhCZonIfLioYM 6b3kUGlk7kiKlNimQRoUn1iv+D9Q9BaNQJdUXojmp8fH3MFMk19XFC9gLRxFbPG0 jdY/ryHKnIh0nQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:28 2025 by rpki-client