This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft File: 3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json) Hash identifier: yZWwEG/vjuU0Kf8AbMwumwG3rmA+zMP799rFZV4YlEo= Subject key identifier: 59:D8:71:B4:CC:DA:AD:A1:ED:2F:AE:01:AF:38:9F:52:7C:C1:31:EA Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28 Certificate issuer: /CN=dc849c7369e7e52c7051d21dba7298308be9c428 Certificate serial: 019B1CF367328C5F166F705DC6E911E620BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 13:01:12 +0000 Manifest this update: Sun 14 Dec 2025 13:01:12 +0000 Manifest next update: Mon 15 Dec 2025 13:01:12 +0000 Files and hashes: 1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: e6vbg/DtZAvlFqtbYmS0Vac6ibr04DAKhNNSUCcdTno=) 2: A1Kij3UmuqlYPUgtFwkRpc3mYFI.roa (hash: 7eehR/MKaZhrxZxZgGixZL1BWxFDBQrZZYdPEfeskDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:67:32:8c:5f:16:6f:70:5d:c6:e9:11:e6:20:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428 Validity Not Before: Dec 14 13:01:12 2025 GMT Not After : Dec 15 13:01:12 2025 GMT Subject: CN=59d871b4ccdaada1ed2fae01af389f527cc131ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:21:4d:8e:58:e0:d1:f9:23:3a:07:f8:fe: 85:24:6a:eb:67:92:db:74:b5:58:12:3c:36:c7:56: 45:1f:99:dd:1e:d8:b9:23:d2:46:f7:1b:fa:58:33: 56:93:19:b6:72:7d:dd:8f:3c:72:69:67:75:70:88: e6:93:60:23:39:7b:64:43:e6:0d:54:f2:cb:20:a9: dd:44:09:23:03:89:92:f3:e7:49:fc:e0:ce:d7:b1: 4c:e4:85:ec:ee:f0:f6:08:af:ca:61:7c:a9:25:d1: 6f:95:61:cc:51:6f:9d:78:76:43:21:a4:66:a2:f2: 5c:73:e7:57:0b:38:91:dc:d5:c3:78:a1:37:47:b1: e5:34:20:75:0a:fe:44:e4:32:7a:31:8b:a6:46:11: 34:3c:bd:54:01:8d:ae:61:eb:77:e4:1c:8f:6c:80: 62:c0:aa:37:97:d2:e6:ca:59:27:d1:64:fd:58:b2: 25:2d:7c:05:15:85:5b:51:8d:7c:23:4d:fc:03:2b: c9:a0:83:93:81:7d:4d:41:94:98:0f:62:03:f4:e6: 5b:8a:c5:99:01:ce:60:4f:0e:c6:f9:6f:eb:cf:6a: 0b:2f:0d:71:31:55:ea:bb:18:f5:95:78:3b:44:cf: 40:a3:1e:76:7a:5b:f9:3d:6f:19:90:cb:4b:38:ad: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D8:71:B4:CC:DA:AD:A1:ED:2F:AE:01:AF:38:9F:52:7C:C1:31:EA X509v3 Authority Key Identifier: keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ca:44:e5:aa:1a:10:f2:42:7b:db:ad:16:23:37:5a:8f:a3: c6:17:ef:3d:58:6d:45:bf:1a:ec:53:03:65:d8:e6:a1:96:23: 9b:1e:a7:cd:65:41:f5:b2:a7:14:10:ec:51:ad:48:73:f3:3b: 73:1d:e6:43:e1:c5:d1:8e:f1:5e:b3:d7:2b:4c:98:16:11:81: 89:92:03:67:67:2b:84:cf:e1:20:ce:76:42:af:2c:c1:36:ae: 4c:10:97:05:85:a8:8c:f0:52:fe:c4:42:0b:9a:6b:1a:10:80: 10:01:9b:7b:a0:1b:02:b0:d6:7c:08:b5:da:6b:3d:b3:e0:9d: 16:76:de:ce:45:31:66:8b:3f:d9:64:16:17:5a:11:f1:a9:d1: 1c:3c:4e:9b:52:64:ba:59:ad:ce:52:87:2a:5c:2b:ba:55:4d: 92:30:e4:61:e1:22:3a:72:a7:e3:26:55:62:0a:b2:03:f0:08: 12:01:51:60:47:53:ee:43:b6:ac:34:3c:66:c6:17:d0:c5:99: c8:43:6d:6d:cb:f4:9a:8a:25:09:9b:80:8e:a7:f1:92:3e:07: 31:7d:20:fc:df:cd:25:77:08:3d:0c:35:c7:26:ff:ba:79:7a: 85:0b:03:ca:14:ec:4b:e5:0c:5e:e7:8e:24:30:08:e4:4e:05: 1a:a3:93:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc82cyjF8Wb3BdxukR5iC/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODQ5YzczNjllN2U1MmM3MDUxZDIxZGJhNzI5ODMwOGJl OWM0MjgwHhcNMjUxMjE0MTMwMTEyWhcNMjUxMjE1MTMwMTEyWjAzMTEwLwYDVQQD Eyg1OWQ4NzFiNGNjZGFhZGExZWQyZmFlMDFhZjM4OWY1MjdjYzEzMWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJshTY5Y4NH5IzoH+P6FJGrrZ5Lb dLVYEjw2x1ZFH5ndHti5I9JG9xv6WDNWkxm2cn3djzxyaWd1cIjmk2AjOXtkQ+YN VPLLIKndRAkjA4mS8+dJ/ODO17FM5IXs7vD2CK/KYXypJdFvlWHMUW+deHZDIaRm ovJcc+dXCziR3NXDeKE3R7HlNCB1Cv5E5DJ6MYumRhE0PL1UAY2uYet35ByPbIBi wKo3l9Lmylkn0WT9WLIlLXwFFYVbUY18I038AyvJoIOTgX1NQZSYD2ID9OZbisWZ Ac5gTw7G+W/rz2oLLw1xMVXquxj1lXg7RM9Aox52elv5PW8ZkMtLOK0y+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnYcbTM2q2h7S+uAa84n1J8wTHqMB8GA1UdIwQY MBaAFNyEnHNp5+UscFHSHbpymDCL6cQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYmU4Y2YtMDdlYy00N2NiLThmNjMt ZDNhMDZkMWY1YjRiLzEvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xYmU4Y2YtMDdlYy00N2NiLThmNjMtZDNhMDZkMWY1YjRi LzEvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcpE5aoa EPJCe9utFiM3Wo+jxhfvPVhtRb8a7FMDZdjmoZYjmx6nzWVB9bKnFBDsUa1Ic/M7 cx3mQ+HF0Y7xXrPXK0yYFhGBiZIDZ2crhM/hIM52Qq8swTauTBCXBYWojPBS/sRC C5prGhCAEAGbe6AbArDWfAi12ms9s+CdFnbezkUxZos/2WQWF1oR8anRHDxOm1Jk ulmtzlKHKlwrulVNkjDkYeEiOnKn4yZVYgqyA/AIEgFRYEdT7kO2rDQ8ZsYX0MWZ yENtbcv0moolCZuAjqfxkj4HMX0g/N/NJXcIPQw1xyb/unl6hQsDyhTsS+UMXueO JDAI5E4FGqOT+g== -----END CERTIFICATE-----Generated at Sun Dec 14 16:24:35 2025 by rpki-client