This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json) Hash identifier: 7euCrBKA3WIz0qNgwbAheZvrcbN2s15NrCQ2k4RscUw= Subject key identifier: 3A:82:CC:F6:89:CB:B9:D8:B6:39:87:CE:31:33:ED:09:1D:7A:83:42 Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0 Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0 Certificate serial: 019B0E92AAB682D0234672B6A78CCF1A0598 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 18:00:51 +0000 Manifest this update: Thu 11 Dec 2025 18:00:51 +0000 Manifest next update: Fri 12 Dec 2025 18:00:51 +0000 Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: aHFhp9bJCqCYetSb0iEdVrpagXkA2s83iGS9UaR6fCc=) 2: eB3vCKwTA_4LHzl8qmjJhPE1E0I.roa (hash: 4iTyC4OoX2gbX1y0Qqu+BwBX8s/wE3y91+xS9nzRcWU=) 3: iXueNLg2YHA4AtVuNk2-_05ruYc.roa (hash: HtBZN3M7Ui+z2EtcVA5dF8igPoxnEs2Z1A040xU05DY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:aa:b6:82:d0:23:46:72:b6:a7:8c:cf:1a:05:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0 Validity Not Before: Dec 11 18:00:51 2025 GMT Not After : Dec 12 18:00:51 2025 GMT Subject: CN=3a82ccf689cbb9d8b63987ce3133ed091d7a8342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:4d:77:40:d3:20:dd:f8:4b:eb:93:c5:d3: 78:af:ce:07:eb:a7:99:38:99:2b:9b:94:88:a6:5e: e8:1b:08:ef:70:b7:e0:fc:36:c6:16:5f:9b:ec:d5: a0:c1:98:ba:11:5b:96:55:b7:34:de:5d:7e:c8:c7: ef:e0:f2:d1:a9:0c:6c:1b:bb:55:77:7e:0a:a6:52: fe:05:79:29:b1:b0:25:5c:d5:3d:d4:74:67:5f:1f: c8:a9:76:41:38:a8:5b:0d:b0:1a:86:b6:9e:9a:62: 15:31:d5:32:e3:58:8e:68:8e:00:bc:6a:54:ae:d4: 14:96:e9:4a:66:38:35:8c:6a:96:e6:10:b9:2b:f9: a5:05:e2:3d:73:f8:2b:56:3e:02:9c:a6:c4:d2:34: 54:2a:a1:30:fb:d5:28:15:32:cf:75:5c:bd:3f:b2: 98:6c:18:16:51:cc:f0:43:57:a4:6f:0d:48:fd:31: 99:54:4e:05:44:6d:05:1e:71:ca:74:ac:e2:8e:5c: 85:2d:65:16:af:69:ca:9b:7c:0d:c8:58:81:be:02: 23:9c:53:73:50:de:5e:f5:d9:d7:b6:72:44:40:ca: 09:d0:a8:43:73:0f:50:ce:4c:b3:0b:c5:12:a6:bb: a4:a7:a1:42:3c:89:90:cf:38:f5:29:0b:8e:b5:ef: 17:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:82:CC:F6:89:CB:B9:D8:B6:39:87:CE:31:33:ED:09:1D:7A:83:42 X509v3 Authority Key Identifier: keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:10:00:ea:34:67:07:d9:cf:f0:8a:bf:f9:73:86:34:0f:57: c1:13:a0:b0:fd:63:36:6f:03:cd:da:3c:b7:e9:52:ad:33:e8: ad:8f:6a:97:0b:06:54:f4:bf:f0:1d:93:c1:a8:7f:4a:62:4d: 83:f0:5a:9e:8e:01:b7:11:9e:28:fb:a0:8c:71:ee:84:d6:9d: 32:dd:e1:c6:66:85:59:a2:c8:7f:ba:e4:f5:fa:fc:5d:24:f7: 9f:56:c4:08:25:14:19:8a:0d:cb:18:63:3d:73:59:6c:93:23: b6:be:06:26:69:a7:de:88:c2:28:50:7e:a6:df:0d:35:94:b6: 1a:40:64:c5:8b:2e:2f:59:5d:93:53:39:70:2d:0f:41:e1:7c: 64:02:b9:22:87:48:24:f6:b2:2f:0a:65:2d:a3:d9:e2:61:fe: e9:a4:6d:f6:c8:48:95:aa:8b:eb:1c:92:c4:3c:8c:86:71:26: f1:ef:77:8a:d5:1f:63:32:96:27:62:24:8d:29:42:6f:3a:5d: 2d:c1:d6:43:ff:a7:dd:25:3e:39:bb:03:60:76:5c:21:b2:54: 83:85:b8:5c:87:76:f0:52:4f:aa:b6:09:b3:38:88:58:fe:88: c9:f3:fd:38:22:7f:96:29:27:4c:4f:9f:df:f7:ae:d8:92:4f: 4f:8a:80:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkqq2gtAjRnK2p4zPGgWYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDMwYWY4Yzc1MzhiOWM1YWY4NTJmMWM0MmExNzVhYWY0 NmY3ZTAwHhcNMjUxMjExMTgwMDUxWhcNMjUxMjEyMTgwMDUxWjAzMTEwLwYDVQQD EygzYTgyY2NmNjg5Y2JiOWQ4YjYzOTg3Y2UzMTMzZWQwOTFkN2E4MzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9dNd0DTIN34S+uTxdN4r84H66eZ OJkrm5SIpl7oGwjvcLfg/DbGFl+b7NWgwZi6EVuWVbc03l1+yMfv4PLRqQxsG7tV d34KplL+BXkpsbAlXNU91HRnXx/IqXZBOKhbDbAahraemmIVMdUy41iOaI4AvGpU rtQUlulKZjg1jGqW5hC5K/mlBeI9c/grVj4CnKbE0jRUKqEw+9UoFTLPdVy9P7KY bBgWUczwQ1ekbw1I/TGZVE4FRG0FHnHKdKzijlyFLWUWr2nKm3wNyFiBvgIjnFNz UN5e9dnXtnJEQMoJ0KhDcw9QzkyzC8USprukp6FCPImQzzj1KQuOte8XDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqCzPaJy7nYtjmHzjEz7QkdeoNCMB8GA1UdIwQY MBaAFNwDCvjHU4ucWvhS8cQqF1qvRvfgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEt YmRkYzE4YzdhM2YzLzEvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEtYmRkYzE4YzdhM2Yz LzEvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxAA6jRn B9nP8Iq/+XOGNA9XwROgsP1jNm8Dzdo8t+lSrTPorY9qlwsGVPS/8B2Twah/SmJN g/Bano4BtxGeKPugjHHuhNadMt3hxmaFWaLIf7rk9fr8XST3n1bECCUUGYoNyxhj PXNZbJMjtr4GJmmn3ojCKFB+pt8NNZS2GkBkxYsuL1ldk1M5cC0PQeF8ZAK5IodI JPayLwplLaPZ4mH+6aRt9shIlaqL6xySxDyMhnEm8e93itUfYzKWJ2IkjSlCbzpd LcHWQ/+n3SU+ObsDYHZcIbJUg4W4XId28FJPqrYJsziIWP6IyfP9OCJ/liknTE+f 3/eu2JJPT4qAqw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:31 2025 by rpki-client