This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft File: 3EFBHpPiXV7GUJlWmxtcX63Brj0.mft (raw, json) Hash identifier: NzLy+TvT80zEUl+q7++q//LzzuG5YOJkpofxyuHTTz8= Subject key identifier: DF:63:81:5B:A9:15:2E:85:DA:3A:CF:B9:6B:BE:2F:5F:02:2A:5D:36 Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d Certificate serial: 019B0EC9DA4A83E5C0D6D568A495E4E2EA12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft Manifest number: 133A Signing time: Thu 11 Dec 2025 19:01:08 +0000 Manifest this update: Thu 11 Dec 2025 19:01:08 +0000 Manifest next update: Fri 12 Dec 2025 19:01:08 +0000 Files and hashes: 1: 3EFBHpPiXV7GUJlWmxtcX63Brj0.crl (hash: HvLEUhz9Lzz8dkGifNOGQnX3NsA2qs+HXvEGlh/DCqY=) 2: I5wQnrgvMCaYn9C8yDvoLQWI0Fs.roa (hash: LLp7jSaPRxKkmfQPCgmC3oWPlWcodXukIf+OL2Y6Xy4=) 3: h62oWk5e6sS8zDCwC47t23u4hGk.roa (hash: KIOG5EX7T8Dsm3c4MU4hyZU5pek+PylPfC7rdsiyJoY=) 4: jGoTTL_48yWV-ohs_hgmOjEwT4E.roa (hash: Q0KSsruo9YLV5d/ARziN3CSGqP5OR6gQhOox+XP9FnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:da:4a:83:e5:c0:d6:d5:68:a4:95:e4:e2:ea:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d Validity Not Before: Dec 11 19:01:08 2025 GMT Not After : Dec 12 19:01:08 2025 GMT Subject: CN=df63815ba9152e85da3acfb96bbe2f5f022a5d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:77:b9:b0:07:77:61:8c:cd:1d:63:85:32: 49:a2:2a:bb:67:64:d7:ce:71:bf:fd:eb:b7:0c:39: 9d:b2:cd:16:bf:e3:51:1f:f6:7d:54:15:ef:f4:d7: 51:8b:70:b5:3b:66:75:dc:96:58:d9:eb:ee:91:fa: fc:d3:ae:a1:b3:1d:c6:47:b2:40:51:38:ae:81:37: b0:e8:3a:77:09:64:5b:87:12:b5:54:e3:30:7b:7d: ae:07:09:27:c9:7d:5c:a7:17:3a:8f:21:3d:33:8e: 8b:56:24:bd:f3:2e:a1:f8:8b:fb:52:88:2c:ae:2f: 09:e5:02:e6:df:dd:d3:e0:40:d2:f7:b4:c0:b7:bd: 38:40:69:2f:5b:e8:5f:a4:3b:19:55:a3:c8:07:bf: fa:50:2d:9a:2d:99:d8:dd:a1:e7:e5:2e:74:bd:b9: af:80:b7:aa:8b:01:bc:cf:91:31:bf:1e:ce:b2:5f: 08:a0:a2:a3:40:07:99:35:10:5e:aa:44:0f:ff:90: 23:06:6c:4f:4b:78:22:bb:76:04:27:37:5c:e6:eb: f9:b1:c3:54:52:40:be:00:37:59:74:b8:5f:b1:39: 96:90:2e:e8:27:bc:d4:1d:f0:7f:11:37:4a:50:f3: 1d:90:24:5b:ca:d6:68:7c:75:e1:87:c0:17:fc:ac: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:63:81:5B:A9:15:2E:85:DA:3A:CF:B9:6B:BE:2F:5F:02:2A:5D:36 X509v3 Authority Key Identifier: keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:8f:fe:de:71:48:b1:39:0a:22:9b:44:b7:a1:63:95:5d:bb: 54:ab:11:8c:17:c2:92:fc:47:5c:32:27:e2:ff:0d:34:e8:b6: ee:af:71:2e:f0:7d:66:21:31:19:b0:32:31:0e:be:57:66:65: 8c:8c:ab:8e:3f:fa:e8:61:c8:37:3d:30:12:9c:6c:58:3e:0d: 14:45:09:8f:95:a3:c3:22:b1:d5:2a:5b:10:a4:d1:5b:1f:d4: 1c:86:1d:50:2c:61:9f:1f:3f:a8:4d:41:1f:aa:89:30:3c:15: ef:69:3d:cf:c8:0d:36:35:e7:81:d6:bd:c4:5f:0d:7b:df:54: 89:3a:85:e4:5d:b4:20:6e:2e:3a:69:43:34:23:22:e3:eb:77: ee:60:7d:c8:86:b2:ea:98:09:dd:c2:34:56:53:82:95:69:31: 4b:35:15:a6:5c:0c:0f:75:ee:c5:ee:21:45:4f:3c:6c:1f:8b: 22:48:a1:ea:25:a2:4e:47:c5:36:49:18:36:12:49:85:3d:80: b3:91:62:29:58:3f:92:49:4f:00:76:87:7d:03:be:b5:a3:c4: b2:d3:33:9d:5a:88:ab:87:d6:e1:ba:03:51:eb:76:de:52:32: eb:4f:aa:95:5c:13:96:6b:be:f9:15:ee:a7:c0:ba:9d:5f:5d: f5:dc:7e:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOydpKg+XA1tVopJXk4uoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDE0MTFlOTNlMjVkNWVjNjUwOTk1NjliMWI1YzVmYWRj MWFlM2QwHhcNMjUxMjExMTkwMTA4WhcNMjUxMjEyMTkwMTA4WjAzMTEwLwYDVQQD EyhkZjYzODE1YmE5MTUyZTg1ZGEzYWNmYjk2YmJlMmY1ZjAyMmE1ZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHd3ubAHd2GMzR1jhTJJoiq7Z2TX znG//eu3DDmdss0Wv+NRH/Z9VBXv9NdRi3C1O2Z13JZY2evukfr8066hsx3GR7JA UTiugTew6Dp3CWRbhxK1VOMwe32uBwknyX1cpxc6jyE9M46LViS98y6h+Iv7Uogs ri8J5QLm393T4EDS97TAt704QGkvW+hfpDsZVaPIB7/6UC2aLZnY3aHn5S50vbmv gLeqiwG8z5Exvx7Osl8IoKKjQAeZNRBeqkQP/5AjBmxPS3giu3YEJzdc5uv5scNU UkC+ADdZdLhfsTmWkC7oJ7zUHfB/ETdKUPMdkCRbytZofHXhh8AX/KziLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9jgVupFS6F2jrPuWu+L18CKl02MB8GA1UdIwQY MBaAFNxBQR6T4l1exlCZVpsbXF+twa49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEt NTEzODdkMTYwYmE5LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEtNTEzODdkMTYwYmE5 LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKo/+3nFI sTkKIptEt6FjlV27VKsRjBfCkvxHXDIn4v8NNOi27q9xLvB9ZiExGbAyMQ6+V2Zl jIyrjj/66GHINz0wEpxsWD4NFEUJj5WjwyKx1SpbEKTRWx/UHIYdUCxhnx8/qE1B H6qJMDwV72k9z8gNNjXngda9xF8Ne99UiTqF5F20IG4uOmlDNCMi4+t37mB9yIay 6pgJ3cI0VlOClWkxSzUVplwMD3Xuxe4hRU88bB+LIkih6iWiTkfFNkkYNhJJhT2A s5FiKVg/kklPAHaHfQO+taPEstMznVqIq4fW4boDUet23lIy60+qlVwTlmu++RXu p8C6nV9d9dx+Zg== -----END CERTIFICATE-----Generated at Thu Dec 11 22:20:32 2025 by rpki-client