This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft File: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json) Hash identifier: aI+txVyI3AG5+SbhRsuNFQKbHcWARCsOrJrbKE1GNIs= Subject key identifier: E3:27:86:AC:AD:72:FA:D1:EB:E0:62:F1:56:7D:4D:A0:37:B1:D8:98 Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E Certificate issuer: /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e Certificate serial: 019B34C4B8C8A2386ED47A647A09D163F7FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 04:01:06 +0000 Manifest this update: Fri 19 Dec 2025 04:01:06 +0000 Manifest next update: Sat 20 Dec 2025 04:01:06 +0000 Files and hashes: 1: 3R3CMh1y4wsFDSZM0M3C1xZygbQ.roa (hash: XMT6KzECLufc9ZTbE5ZuXejsU3/rr0tksv09pEK0Cjw=) 2: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: Ebh7iGGEfGFt82Yzt36GgbbcRJkf/vW4Fs/EkAmtQKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:b8:c8:a2:38:6e:d4:7a:64:7a:09:d1:63:f7:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e Validity Not Before: Dec 19 04:01:06 2025 GMT Not After : Dec 20 04:01:06 2025 GMT Subject: CN=e32786acad72fad1ebe062f1567d4da037b1d898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:24:61:36:08:4a:fc:3d:01:66:c4:76:3b: 98:9e:01:92:92:c1:5c:97:df:cc:71:ff:09:4b:95: e4:4d:af:96:82:99:ee:03:39:97:61:34:10:d9:37: 86:98:bc:8f:f0:9f:3f:0e:45:4b:0d:dd:89:a3:02: 19:0f:0f:b0:2e:e7:0e:2a:7a:42:7a:76:67:7d:37: 43:75:81:ea:87:57:2d:bb:a5:1a:d2:74:c3:a5:3b: 5c:7f:cd:bb:7b:d8:3a:b1:cf:2d:bc:b3:09:4e:a0: 04:6a:b5:26:7f:6f:ae:f6:8d:66:20:53:f3:10:eb: d1:c7:37:08:95:89:ab:b5:e2:ef:2b:6e:54:5e:43: f1:1e:02:35:b6:a2:7e:66:04:61:00:9c:c4:6c:1a: f3:b8:09:b7:45:60:19:a3:93:c1:2e:cc:40:c7:7b: 58:91:b0:4f:95:54:2d:f5:54:da:9d:bc:3e:b0:66: 82:6a:30:ad:56:69:6f:4f:c8:a1:be:6f:a9:2a:de: 49:13:5b:74:f6:5a:55:d5:33:05:b9:79:98:b0:21: 2f:b0:a4:fb:b3:43:79:b0:71:55:2d:43:f3:8f:d9: a7:e1:65:27:f4:9e:a7:97:ab:c9:13:98:d3:28:27: 74:c3:28:ee:9e:f9:c9:5f:af:04:84:68:03:35:15: 3f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:27:86:AC:AD:72:FA:D1:EB:E0:62:F1:56:7D:4D:A0:37:B1:D8:98 X509v3 Authority Key Identifier: keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:75:73:87:6f:cd:9f:4c:07:71:19:79:48:f9:13:df:78:a7: b8:e8:47:20:4c:b2:49:55:af:b4:c2:28:99:b5:42:2f:ff:fc: a6:57:17:7f:c5:70:13:90:8d:a0:3b:04:2f:57:56:d4:8e:b0: a2:ca:ce:7f:7b:6d:44:09:a7:69:b2:7b:89:72:ae:9a:92:0a: 37:6d:7d:9c:b6:5d:f9:ea:ea:db:2f:71:08:dc:5d:77:a8:85: cb:d4:28:22:d7:aa:c6:99:e0:be:3e:c0:d9:62:0a:8b:bb:26: 1b:f2:8c:d5:c6:b5:fa:86:2c:a7:72:c5:d4:fd:95:e1:f1:67: 53:c7:44:b0:01:80:30:28:79:54:84:16:1a:8c:5f:72:89:a7: 8e:ad:3d:fc:98:5d:9b:b6:e0:a8:67:4b:f5:9d:a2:b5:3f:39: f6:7f:58:0d:fa:d0:09:16:d4:ba:c3:5b:73:4b:c8:f5:3a:54: 52:02:46:2c:c8:ac:26:57:ce:49:53:5e:da:e3:d1:3f:de:1f: 5c:21:35:4c:2e:27:9b:ff:ae:fc:3c:ea:71:fd:3f:ec:0e:b3: 38:7f:4b:dd:0c:9b:af:60:20:d1:91:91:52:1c:89:e0:33:29: 63:3a:a2:4c:cf:af:22:7b:c2:47:34:cf:43:ac:78:eb:76:1d: be:b0:90:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xLjIojhu1HpkegnRY/f8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2I3OTZjM2ZjNTU5YmZhZjRiNzY1NTA4OTRjZmY0ZDMw YjliN2UwHhcNMjUxMjE5MDQwMTA2WhcNMjUxMjIwMDQwMTA2WjAzMTEwLwYDVQQD EyhlMzI3ODZhY2FkNzJmYWQxZWJlMDYyZjE1NjdkNGRhMDM3YjFkODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkgkYTYISvw9AWbEdjuYngGSksFc l9/Mcf8JS5XkTa+WgpnuAzmXYTQQ2TeGmLyP8J8/DkVLDd2JowIZDw+wLucOKnpC enZnfTdDdYHqh1ctu6Ua0nTDpTtcf827e9g6sc8tvLMJTqAEarUmf2+u9o1mIFPz EOvRxzcIlYmrteLvK25UXkPxHgI1tqJ+ZgRhAJzEbBrzuAm3RWAZo5PBLsxAx3tY kbBPlVQt9VTanbw+sGaCajCtVmlvT8ihvm+pKt5JE1t09lpV1TMFuXmYsCEvsKT7 s0N5sHFVLUPzj9mn4WUn9J6nl6vJE5jTKCd0wyjunvnJX68EhGgDNRU/1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMnhqytcvrR6+Bi8VZ9TaA3sdiYMB8GA1UdIwQY MBaAFN87eWw/xVm/r0t2VQiUz/TTC5t+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUt MjhlNDRmMmVlOTBhLzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUtMjhlNDRmMmVlOTBh LzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnVzh2/N n0wHcRl5SPkT33inuOhHIEyySVWvtMIombVCL//8plcXf8VwE5CNoDsEL1dW1I6w osrOf3ttRAmnabJ7iXKumpIKN219nLZd+erq2y9xCNxdd6iFy9QoIteqxpngvj7A 2WIKi7smG/KM1ca1+oYsp3LF1P2V4fFnU8dEsAGAMCh5VIQWGoxfcomnjq09/Jhd m7bgqGdL9Z2itT859n9YDfrQCRbUusNbc0vI9TpUUgJGLMisJlfOSVNe2uPRP94f XCE1TC4nm/+u/Dzqcf0/7A6zOH9L3Qybr2Ag0ZGRUhyJ4DMpYzqiTM+vInvCRzTP Q6x463YdvrCQWQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:56:41 2025 by rpki-client