This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json) Hash identifier: kwW7tKfaxLuejbEHvoLFfrq2xA+WRf9qWiYPr7GLSeA= Subject key identifier: F8:D7:36:B6:5E:5D:56:79:F4:44:71:F5:6B:04:55:E3:73:EC:D5:3D Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee Certificate serial: 019B1012EAC67BF1E43CE07E90E4D788B281 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft Manifest number: 0E05 Signing time: Fri 12 Dec 2025 01:00:33 +0000 Manifest this update: Fri 12 Dec 2025 01:00:33 +0000 Manifest next update: Sat 13 Dec 2025 01:00:33 +0000 Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: lpMtOC7nn5oh/FZfRJaeq+GpQ5i48VPVbWamoTCqvjE=) 2: 8miIDeBQxB0aKJY-TlsIuuJ2hww.roa (hash: mQmM8Cjnfx5WSvhPSj11m+hm6JvBiNUtIRExWbof9J8=) 3: IRGnT1eQmUBmgR6_xtusELr-83s.roa (hash: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=) 4: aw3P8V17V992wZUulFnFkkVrMmo.roa (hash: O9AIELr13JUWTjKqPnJ8lbjYgl5+VRQqDU69j3HTMwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:12:ea:c6:7b:f1:e4:3c:e0:7e:90:e4:d7:88:b2:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee Validity Not Before: Dec 12 01:00:33 2025 GMT Not After : Dec 13 01:00:33 2025 GMT Subject: CN=f8d736b65e5d5679f44471f56b0455e373ecd53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b0:77:bd:28:21:c6:1f:53:f5:c1:83:43:d0: 5e:48:94:7a:52:8a:9d:a5:50:f1:38:30:3a:47:d4: 7b:b9:71:c6:90:5b:3e:e8:6e:4a:e7:91:99:24:7c: 32:e2:a7:81:e9:38:56:ba:b0:45:01:d4:8a:02:48: ab:5e:12:9f:78:c4:2b:80:88:b2:33:70:36:5f:20: 90:f8:47:c1:53:18:1d:09:bb:0c:3e:3f:55:c4:bb: 27:57:8b:dd:6c:7f:a4:1d:f7:1b:35:02:75:f5:18: 12:d7:4f:bb:29:bd:5b:e2:8a:97:54:4b:90:0d:1a: 9d:2d:15:28:87:94:2b:9b:ba:67:3e:88:93:82:a1: cd:a5:ea:36:20:db:75:18:fd:f7:88:38:dd:7c:8a: 08:c2:d6:fb:26:01:29:09:05:89:a0:3c:04:b3:4e: 94:bb:e0:52:99:3f:20:0b:05:f1:24:27:c8:1a:07: 5b:b9:88:94:d3:3f:ce:7b:a3:32:16:8a:50:71:33: bb:ac:fe:ea:5f:6f:f5:ff:1c:0f:c3:5c:ec:df:0c: 10:b6:ae:58:8b:4a:8b:67:2c:58:68:f3:8d:c0:45: 8a:84:22:8d:64:7f:89:93:2d:e4:5f:8f:85:41:3a: 57:71:b6:e5:19:96:dd:d7:2f:88:ac:46:4c:50:e4: 1b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D7:36:B6:5E:5D:56:79:F4:44:71:F5:6B:04:55:E3:73:EC:D5:3D X509v3 Authority Key Identifier: keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5b:88:4c:55:8b:21:86:1c:48:a3:e2:91:9f:1b:42:40:98: 5f:ac:5c:93:1e:fd:73:d7:73:4b:2e:55:f0:84:32:2f:61:81: 79:ec:a8:3a:38:29:5e:4e:70:4f:36:50:30:c1:19:5d:f4:a4: ab:5c:0b:3b:99:20:b2:3b:92:72:ca:f4:73:e0:c5:ff:50:89: c9:ac:6a:c5:c9:91:82:be:6b:f8:b2:f7:21:e8:4f:06:04:85: 2c:8a:18:30:51:0d:fe:70:e6:11:ea:8f:f3:bb:60:2a:44:0f: 12:69:0c:82:80:58:1f:bb:77:46:c8:e8:0a:5d:cb:56:b0:cd: 02:01:9c:b6:09:f4:bb:77:e7:95:6d:85:eb:f3:29:5c:3b:9c: a0:da:61:d5:df:f0:9f:d6:ec:39:15:58:03:dd:3c:12:4b:ce: 37:6a:c3:fe:e4:94:64:b2:c0:e6:8a:e8:02:ae:11:00:e9:09: 56:1d:c8:e1:20:80:3a:a0:bc:43:b4:5b:27:76:3b:3f:16:fe: 2e:e2:f3:f9:8f:a7:67:7f:ef:5b:85:8b:1d:ae:0a:53:9f:00: 41:27:ca:e3:65:11:92:55:ad:fb:4f:b2:99:ee:0c:dd:0d:0e: ec:a9:0c:19:fa:b8:da:cc:56:b2:40:e7:aa:19:89:c7:12:96: 79:4b:52:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEurGe/HkPOB+kOTXiLKBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJi NWJlZWUwHhcNMjUxMjEyMDEwMDMzWhcNMjUxMjEzMDEwMDMzWjAzMTEwLwYDVQQD EyhmOGQ3MzZiNjVlNWQ1Njc5ZjQ0NDcxZjU2YjA0NTVlMzczZWNkNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLB3vSghxh9T9cGDQ9BeSJR6Uoqd pVDxODA6R9R7uXHGkFs+6G5K55GZJHwy4qeB6ThWurBFAdSKAkirXhKfeMQrgIiy M3A2XyCQ+EfBUxgdCbsMPj9VxLsnV4vdbH+kHfcbNQJ19RgS10+7Kb1b4oqXVEuQ DRqdLRUoh5Qrm7pnPoiTgqHNpeo2INt1GP33iDjdfIoIwtb7JgEpCQWJoDwEs06U u+BSmT8gCwXxJCfIGgdbuYiU0z/Oe6MyFopQcTO7rP7qX2/1/xwPw1zs3wwQtq5Y i0qLZyxYaPONwEWKhCKNZH+Jky3kX4+FQTpXcbblGZbd1y+IrEZMUOQbQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjXNrZeXVZ59ERx9WsEVeNz7NU9MB8GA1UdIwQY MBaAFN23FHE3O7BgPDVu7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgt NjIxMmFjNDljYTNiLzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNi LzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFuITFWL IYYcSKPikZ8bQkCYX6xckx79c9dzSy5V8IQyL2GBeeyoOjgpXk5wTzZQMMEZXfSk q1wLO5kgsjuScsr0c+DF/1CJyaxqxcmRgr5r+LL3IehPBgSFLIoYMFEN/nDmEeqP 87tgKkQPEmkMgoBYH7t3RsjoCl3LVrDNAgGctgn0u3fnlW2F6/MpXDucoNph1d/w n9bsORVYA908EkvON2rD/uSUZLLA5oroAq4RAOkJVh3I4SCAOqC8Q7RbJ3Y7Pxb+ LuLz+Y+nZ3/vW4WLHa4KU58AQSfK42URklWt+0+yme4M3Q0O7KkMGfq42sxWskDn qhmJxxKWeUtSpw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:40 2025 by rpki-client