This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json) Hash identifier: NblQP9CZ8QKSN87NVTlYZEC+kQZ/vs9Xz+KVqb45+bU= Subject key identifier: 81:69:BF:C2:27:27:6A:60:94:F1:B8:61:B7:FC:BA:E3:AB:AC:FF:00 Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d Certificate serial: 019B0F6EFC5D59FCED7C8BAB18A41E49FF8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft Manifest number: 05FC Signing time: Thu 11 Dec 2025 22:01:30 +0000 Manifest this update: Thu 11 Dec 2025 22:01:30 +0000 Manifest next update: Fri 12 Dec 2025 22:01:30 +0000 Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: 1FQvo2gmRVD5QT7yK9jkbH+VBRomVnuZEJLYWjRVoiQ=) 2: EZxzjJ6XhYd6ltYTmizd41s0hPw.roa (hash: JYFppnIvAuxE4lEcobv5nYUUPDwGguXkpkPpHyixP6g=) 3: NGkgR_rl3fLugEg3BgzB-iR4GzY.roa (hash: /ZmEtv61Y7p4XUZGiWjRkOyM1ttDKeEvzWRAeWuz5J4=) 4: pDcEYeot4lgy_bkjWpL92IIpXPQ.roa (hash: vcGeqv8PVg2OoSc/Cr515xlb+m+AzD6T+7zvq9R7mH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:fc:5d:59:fc:ed:7c:8b:ab:18:a4:1e:49:ff:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d Validity Not Before: Dec 11 22:01:30 2025 GMT Not After : Dec 12 22:01:30 2025 GMT Subject: CN=8169bfc227276a6094f1b861b7fcbae3abacff00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:79:45:cc:20:de:df:e4:5d:b4:7d:69:64: 64:49:df:9a:3e:c8:fc:b0:d6:7c:cc:89:55:ff:ee: 7d:94:4c:ac:d5:8c:a4:7e:a6:39:a4:7d:60:3b:9a: 75:4d:45:33:ab:4e:58:35:46:91:eb:cd:65:7a:7c: f2:82:d7:b4:b1:f6:e4:f5:04:85:31:b9:73:66:3a: ad:22:c5:72:96:a9:7d:f8:e1:b4:53:7a:66:31:b1: 95:5b:4a:20:48:8c:cd:e9:ed:30:35:d9:66:6f:cb: a7:d5:fa:82:f2:c8:cd:7a:50:35:21:27:92:11:73: c3:a0:34:4b:bb:49:0b:81:10:89:f7:74:4e:0b:14: a1:59:44:a1:b6:32:dd:2e:32:11:bd:5c:eb:ec:9d: ff:19:4c:ee:13:79:87:7b:2a:fd:68:cc:fb:a9:69: d8:6a:6b:b2:95:ad:ee:d3:f6:72:f0:2b:d7:96:1b: 36:55:a8:55:b5:89:39:82:2b:90:48:89:c0:b0:67: e7:56:0b:33:b9:16:e8:c7:e3:3d:d7:f5:5e:76:82: df:4a:10:dd:37:3a:cd:68:fd:b6:70:89:12:96:4e: 95:a0:51:4f:e3:c6:88:4b:a9:f0:31:8e:45:54:d3: bc:cd:0b:21:99:1b:3d:18:95:1b:95:fe:40:45:e7: 34:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:69:BF:C2:27:27:6A:60:94:F1:B8:61:B7:FC:BA:E3:AB:AC:FF:00 X509v3 Authority Key Identifier: keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b5:35:11:5a:3d:f2:9d:0e:db:49:83:30:c9:78:f5:a9:0e: 76:6d:27:80:19:b2:64:ab:81:3e:60:d5:0e:16:bf:30:08:91: b6:75:f6:79:24:62:8c:34:48:a0:05:ba:2f:42:d1:ce:4e:b8: 57:21:f3:f2:ab:06:d3:73:0e:b6:dd:38:62:5f:e6:01:01:96: b1:f4:5b:87:bf:93:20:3a:c0:18:52:b6:78:6e:af:4e:87:cc: 81:41:8f:c5:99:71:1d:a3:6a:27:5a:ed:53:65:af:29:14:f9: ff:f0:d1:0e:fd:93:84:0a:03:8d:4b:5e:f7:0e:86:42:67:4b: dd:d1:8f:16:7c:3a:0c:66:e6:8b:a3:c4:c0:e9:4b:1c:8a:f4: 2a:1c:bb:74:1e:e0:41:ef:fa:9c:2a:10:a0:e5:05:fa:3a:86: 99:93:7d:37:4e:19:b0:04:22:1b:c2:7c:db:26:f6:42:71:e0: e4:89:7b:b7:5a:95:13:9a:95:26:68:ef:13:54:b8:a3:a4:96: 29:9b:2f:95:f9:1d:d3:b0:38:54:6b:32:4e:02:27:cf:62:89: 43:64:fc:a9:83:7c:19:c3:aa:3e:b8:47:95:3e:4b:74:e4:76: 4f:89:bb:42:31:b6:7c:0f:0b:9e:56:64:22:cd:3f:c1:e0:a2: 87:77:ca:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbvxdWfztfIurGKQeSf+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGJkZTE0Njc4OTVjNmYzYTQ3MTk3ZWFjNThjYTEzYWU0 YmI3OGQwHhcNMjUxMjExMjIwMTMwWhcNMjUxMjEyMjIwMTMwWjAzMTEwLwYDVQQD Eyg4MTY5YmZjMjI3Mjc2YTYwOTRmMWI4NjFiN2ZjYmFlM2FiYWNmZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR15Rcwg3t/kXbR9aWRkSd+aPsj8 sNZ8zIlV/+59lEys1YykfqY5pH1gO5p1TUUzq05YNUaR681lenzygte0sfbk9QSF MblzZjqtIsVylql9+OG0U3pmMbGVW0ogSIzN6e0wNdlmb8un1fqC8sjNelA1ISeS EXPDoDRLu0kLgRCJ93ROCxShWUShtjLdLjIRvVzr7J3/GUzuE3mHeyr9aMz7qWnY amuyla3u0/Zy8CvXlhs2VahVtYk5giuQSInAsGfnVgszuRbox+M91/VedoLfShDd NzrNaP22cIkSlk6VoFFP48aIS6nwMY5FVNO8zQshmRs9GJUblf5ARec0bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFpv8InJ2pglPG4Ybf8uuOrrP8AMB8GA1UdIwQY MBaAFNwL3hRniVxvOkcZfqxYyhOuS7eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEt MzFjN2ZiNDcxNWY2LzEvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEtMzFjN2ZiNDcxNWY2 LzEvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7U1EVo9 8p0O20mDMMl49akOdm0ngBmyZKuBPmDVDha/MAiRtnX2eSRijDRIoAW6L0LRzk64 VyHz8qsG03MOtt04Yl/mAQGWsfRbh7+TIDrAGFK2eG6vTofMgUGPxZlxHaNqJ1rt U2WvKRT5//DRDv2ThAoDjUte9w6GQmdL3dGPFnw6DGbmi6PEwOlLHIr0Khy7dB7g Qe/6nCoQoOUF+jqGmZN9N04ZsAQiG8J82yb2QnHg5Il7t1qVE5qVJmjvE1S4o6SW KZsvlfkd07A4VGsyTgInz2KJQ2T8qYN8GcOqPrhHlT5LdOR2T4m7QjG2fA8LnlZk Is0/weCih3fKJQ== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:27 2025 by rpki-client