This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft File: 3MIAShrwMLqZ_PRR872I78U4Rqk.mft (raw, json) Hash identifier: tfFH+1vtnj7cQcD9gsYIGCIW2lRkD/jSTJDwboGBaFs= Subject key identifier: 75:22:5F:72:68:7C:31:15:EF:0B:96:76:28:76:B2:91:C7:4F:2C:85 Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9 Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9 Certificate serial: 019AD3FE67781D83C8B8E3425C87210AE914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft Manifest number: 1752 Signing time: Sun 30 Nov 2025 09:00:56 +0000 Manifest this update: Sun 30 Nov 2025 09:00:56 +0000 Manifest next update: Mon 01 Dec 2025 09:00:56 +0000 Files and hashes: 1: 3MIAShrwMLqZ_PRR872I78U4Rqk.crl (hash: dEDPeEm30F1A8vYWyaOQqFWC+cgmST3kOXyGYELsTAY=) 2: AL-L8asVgI-s4USXW1Jxulz_8Sg.roa (hash: UF0FyApaz9L8VccFK4e4NgnphNtboD57IyF8hP0doDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d3:fe:67:78:1d:83:c8:b8:e3:42:5c:87:21:0a:e9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9 Validity Not Before: Nov 30 09:00:56 2025 GMT Not After : Dec 1 09:00:56 2025 GMT Subject: CN=75225f72687c3115ef0b96762876b291c74f2c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:54:a5:60:59:61:a3:cd:4f:81:0d:c4:4e: d2:ab:b3:9f:5a:80:c6:88:c1:3b:c9:25:b7:b1:b5: fa:e5:45:88:7e:a6:74:89:5d:93:46:0a:aa:36:66: cf:cd:b9:9f:b5:b5:03:c4:ed:71:ed:3f:54:ad:59: 78:1f:10:44:fe:a4:ec:8a:4c:3b:af:6a:5a:67:7d: cb:28:3d:83:2e:b9:ec:c2:8c:88:33:66:ac:4a:75: cb:49:75:65:d4:7a:89:d3:4a:32:29:80:61:13:12: a2:8b:6f:4c:37:81:29:c1:d4:51:99:65:fd:a8:98: db:81:a7:3f:65:e9:03:b2:4c:bb:9a:7b:3c:eb:4a: db:10:16:d7:3f:e7:11:2e:04:aa:c5:de:81:10:69: 71:58:99:ad:48:f4:22:f3:a2:7f:11:e6:01:04:86: 6a:73:b2:64:79:5d:c7:0a:8e:7e:46:e9:c8:55:f9: 94:71:7f:02:56:fe:9e:0b:d5:f7:f4:b6:d7:56:a9: 99:54:c5:1f:41:fb:ac:1f:45:f0:26:75:92:52:a4: fe:b5:dd:d9:e2:ec:20:a0:53:5b:8f:71:51:20:30: 45:cd:4c:12:0d:ff:68:1b:07:e6:d2:b7:bd:53:4b: 75:00:38:cb:f2:4a:7d:cf:19:0a:f9:0b:c8:1c:d5: 6b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:22:5F:72:68:7C:31:15:EF:0B:96:76:28:76:B2:91:C7:4F:2C:85 X509v3 Authority Key Identifier: keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c7:be:a1:a8:66:09:e3:63:6c:93:17:94:5b:2a:31:26:69: e6:a5:46:5f:3f:17:0f:15:08:ab:a8:d1:92:cd:1c:0e:35:f6: 4a:ab:f1:c1:5a:ec:1c:65:85:65:1a:9a:46:f7:51:15:4f:0f: b0:8c:c1:8a:c2:5e:be:97:94:bf:ef:ff:18:2c:e9:31:49:89: 2b:30:45:a6:94:a4:7f:1b:37:48:68:f0:61:bb:f3:e0:c2:71: 1b:8f:d4:76:93:33:7f:4e:5c:ce:50:15:8a:49:3a:8b:b5:d9: 4d:31:c9:87:b3:f1:fe:ed:16:8c:e9:21:7f:da:9b:a2:22:66: a3:73:6d:3f:f9:f5:36:dd:f7:29:8e:7b:1b:0b:b8:44:b8:de: 44:1b:21:a6:79:1a:e4:04:8d:57:d0:d2:58:06:f7:cc:27:ff: 4d:b7:68:29:4c:af:63:da:c5:57:23:f0:2e:ba:cf:a7:c6:06: d2:23:fb:cc:95:56:84:3d:be:4e:5b:56:b3:2b:2d:59:a3:e0: d5:c4:03:4a:89:d7:6b:c3:e0:89:4e:b0:af:d5:f0:8c:41:43: 9f:c9:fd:10:45:c1:40:21:31:a6:4d:66:d9:8a:93:0c:17:59: b7:c4:95:df:34:1e:95:4c:08:fc:2c:6c:7c:74:fb:dc:24:5e: 8b:ce:79:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrT/md4HYPIuONCXIchCukUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYzIwMDRhMWFmMDMwYmE5OWZjZjQ1MWYzYmQ4OGVmYzUz ODQ2YTkwHhcNMjUxMTMwMDkwMDU2WhcNMjUxMjAxMDkwMDU2WjAzMTEwLwYDVQQD Eyg3NTIyNWY3MjY4N2MzMTE1ZWYwYjk2NzYyODc2YjI5MWM3NGYyYzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCVUpWBZYaPNT4ENxE7Sq7OfWoDG iME7ySW3sbX65UWIfqZ0iV2TRgqqNmbPzbmftbUDxO1x7T9UrVl4HxBE/qTsikw7 r2paZ33LKD2DLrnswoyIM2asSnXLSXVl1HqJ00oyKYBhExKii29MN4EpwdRRmWX9 qJjbgac/ZekDsky7mns860rbEBbXP+cRLgSqxd6BEGlxWJmtSPQi86J/EeYBBIZq c7JkeV3HCo5+RunIVfmUcX8CVv6eC9X39LbXVqmZVMUfQfusH0XwJnWSUqT+td3Z 4uwgoFNbj3FRIDBFzUwSDf9oGwfm0re9U0t1ADjL8kp9zxkK+QvIHNVrdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUiX3JofDEV7wuWdih2spHHTyyFMB8GA1UdIwQY MBaAFNzCAEoa8DC6mfz0UfO9iO/FOEapMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MTJiNDAtNTNhZS00OTUzLWFmZjUt NTZhMzMwNTc0OTdiLzEvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83MTJiNDAtNTNhZS00OTUzLWFmZjUtNTZhMzMwNTc0OTdi LzEvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATce+oahm CeNjbJMXlFsqMSZp5qVGXz8XDxUIq6jRks0cDjX2SqvxwVrsHGWFZRqaRvdRFU8P sIzBisJevpeUv+//GCzpMUmJKzBFppSkfxs3SGjwYbvz4MJxG4/UdpMzf05czlAV ikk6i7XZTTHJh7Px/u0WjOkhf9qboiJmo3NtP/n1Nt33KY57Gwu4RLjeRBshpnka 5ASNV9DSWAb3zCf/TbdoKUyvY9rFVyPwLrrPp8YG0iP7zJVWhD2+TltWsystWaPg 1cQDSonXa8PgiU6wr9XwjEFDn8n9EEXBQCExpk1m2YqTDBdZt8SV3zQelUwI/Cxs fHT73CRei855YQ== -----END CERTIFICATE-----Generated at Sun Nov 30 18:51:08 2025 by rpki-client