This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft File: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft (raw, json) Hash identifier: yc3X8h98/7CZwHlG1XMjl14/i2G28ErNG4fpdfqNnSg= Subject key identifier: 6A:D5:5D:37:BC:5F:B7:29:B6:4B:6F:56:9D:25:FA:64:5B:1B:6C:A1 Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6 Certificate issuer: /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6 Certificate serial: 019AD691F00CACCBFC8AEAA49503AC338F71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft Manifest number: 0FD4 Signing time: Sun 30 Nov 2025 21:01:19 +0000 Manifest this update: Sun 30 Nov 2025 21:01:19 +0000 Manifest next update: Mon 01 Dec 2025 21:01:19 +0000 Files and hashes: 1: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl (hash: sX8a3wKLrPKHdr+V0ND0/75noJPkE+qGtBQ/do+lfEM=) 2: Kw550ydpOki0PWOYy-6z5BR-VIE.roa (hash: DJKKlAPQ1FQMVESwtaTdBMt71sNwkspOh/dlMgsjkTY=) 3: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (hash: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d6:91:f0:0c:ac:cb:fc:8a:ea:a4:95:03:ac:33:8f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6 Validity Not Before: Nov 30 21:01:19 2025 GMT Not After : Dec 1 21:01:19 2025 GMT Subject: CN=6ad55d37bc5fb729b64b6f569d25fa645b1b6ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:36:28:bc:6a:bf:64:3b:b8:4e:d1:24:5a: ee:b9:62:01:c6:d5:a0:9b:cf:cd:f7:78:6a:98:39: b5:af:b2:c1:9d:8a:85:50:56:78:8e:ae:5e:03:0a: 8b:e4:e0:e6:fb:eb:1e:b8:3d:e7:6d:43:0f:6a:65: 80:3d:ae:76:fb:0e:8b:f1:9c:a1:75:92:c4:bb:50: b3:90:27:5b:76:9b:52:ad:b7:8e:ed:c6:b4:fa:b5: ca:48:a3:6c:a7:ad:ae:7b:92:b0:b3:ee:2b:13:8e: 2d:59:f5:6e:be:34:22:09:fc:9b:a1:a3:a6:40:ba: 58:2a:0a:e5:64:ca:f1:fc:08:ec:03:01:1a:e9:4f: da:67:4c:68:08:04:5c:f9:e4:9c:35:5c:b6:e9:44: 83:67:bb:36:10:9e:1e:93:1b:01:7e:ad:0c:37:bf: 0d:00:6a:60:f9:4d:66:27:df:04:e5:47:e6:e3:8d: ef:a6:4d:01:e9:0c:b6:e3:86:78:bb:eb:16:14:c9: 11:6c:10:00:69:ae:6f:c1:75:94:62:81:b6:8a:6f: 75:10:a7:be:79:b0:cf:55:70:cb:fe:96:2f:b9:57: 65:b7:a4:08:03:71:3b:fd:c7:da:cd:9a:13:e5:ec: b3:36:75:4c:8a:d3:59:d0:a1:7a:15:51:34:9e:a4: 07:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D5:5D:37:BC:5F:B7:29:B6:4B:6F:56:9D:25:FA:64:5B:1B:6C:A1 X509v3 Authority Key Identifier: keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:21:d2:b6:ff:04:6f:69:26:d8:67:ab:60:e9:70:4e:c4:58: 8f:72:d4:49:0b:7c:1d:bb:cc:aa:4a:f9:e9:6b:e8:b4:2e:2b: 6d:3c:14:c6:47:ac:f1:34:17:84:2c:39:fc:c8:67:9e:91:93: e2:4b:c2:7a:b6:3c:22:41:cf:51:cd:13:bd:53:14:5d:9f:be: 1d:fe:83:b8:c3:b4:d6:97:e6:70:c0:fa:03:84:c0:a3:d5:df: ab:05:3e:2e:f7:49:a5:fb:60:36:fc:f8:80:9d:bc:eb:bc:be: e4:be:5b:0c:53:60:6d:36:0f:bf:e1:56:57:33:b1:f7:a0:7c: a2:d4:48:a9:ad:8d:cf:10:43:34:0b:14:82:3b:c2:fa:91:c0: d4:27:ef:79:9b:cb:70:d1:9f:7c:79:00:3e:7f:80:ea:8a:f7: 7a:57:3d:aa:fe:ec:3e:36:4e:8c:a9:9f:50:53:59:ce:0e:2b: 38:20:c3:ca:09:80:f5:c1:c6:bb:2b:9c:05:a3:56:4a:87:b8: c4:f3:17:fa:12:8b:6f:c2:48:f3:c3:6b:93:92:54:8c:21:35: 0e:92:9e:f8:c5:a6:38:4e:eb:d9:47:98:d4:cd:82:b7:ec:5d: 36:d2:c7:26:4a:08:42:b9:de:48:a5:13:3d:b6:6c:63:11:c4: 6f:d1:8e:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrWkfAMrMv8iuqklQOsM49xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZWE0ZTliZmYyOTRlMjBiZDc0OWVkMmVlYjkxODRmMjA4 YmM5ZDYwHhcNMjUxMTMwMjEwMTE5WhcNMjUxMjAxMjEwMTE5WjAzMTEwLwYDVQQD Eyg2YWQ1NWQzN2JjNWZiNzI5YjY0YjZmNTY5ZDI1ZmE2NDViMWI2Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Q2KLxqv2Q7uE7RJFruuWIBxtWg m8/N93hqmDm1r7LBnYqFUFZ4jq5eAwqL5ODm++seuD3nbUMPamWAPa52+w6L8Zyh dZLEu1CzkCdbdptSrbeO7ca0+rXKSKNsp62ue5Kws+4rE44tWfVuvjQiCfyboaOm QLpYKgrlZMrx/AjsAwEa6U/aZ0xoCARc+eScNVy26USDZ7s2EJ4ekxsBfq0MN78N AGpg+U1mJ98E5Ufm443vpk0B6Qy244Z4u+sWFMkRbBAAaa5vwXWUYoG2im91EKe+ ebDPVXDL/pYvuVdlt6QIA3E7/cfazZoT5eyzNnVMitNZ0KF6FVE0nqQH6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrVXTe8X7cptktvVp0l+mRbG2yhMB8GA1UdIwQY MBaAFN/qTpv/KU4gvXSe0u65GE8gi8nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMy1wT21fOHBUaUM5ZEo3Uzdya1lUeUNMeWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83M2Y0YWItYjNlNi00MjZkLWIyODQt NjliZmM5MjU5NzlkLzEvMy1wT21fOHBUaUM5ZEo3Uzdya1lUeUNMeWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS83M2Y0YWItYjNlNi00MjZkLWIyODQtNjliZmM5MjU5Nzlk LzEvMy1wT21fOHBUaUM5ZEo3Uzdya1lUeUNMeWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiHStv8E b2km2GerYOlwTsRYj3LUSQt8HbvMqkr56WvotC4rbTwUxkes8TQXhCw5/MhnnpGT 4kvCerY8IkHPUc0TvVMUXZ++Hf6DuMO01pfmcMD6A4TAo9XfqwU+LvdJpftgNvz4 gJ2867y+5L5bDFNgbTYPv+FWVzOx96B8otRIqa2NzxBDNAsUgjvC+pHA1CfveZvL cNGffHkAPn+A6or3elc9qv7sPjZOjKmfUFNZzg4rOCDDygmA9cHGuyucBaNWSoe4 xPMX+hKLb8JI88Nrk5JUjCE1DpKe+MWmOE7r2UeY1M2Ct+xdNtLHJkoIQrneSKUT PbZsYxHEb9GOYw== -----END CERTIFICATE-----Generated at Mon Dec 1 07:03:54 2025 by rpki-client