This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json) Hash identifier: L7kx9Xl3IIvW/YnCn2Xn5Hkir0hkxaiZpB44/Iw5yFg= Subject key identifier: AC:F4:9A:77:88:9E:25:28:A4:32:04:95:1C:E4:3A:58:28:12:1A:A0 Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41 Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641 Certificate serial: 019B077E001F628A49CA7399D07DCE88A896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft Manifest number: 1775 Signing time: Wed 10 Dec 2025 09:00:56 +0000 Manifest this update: Wed 10 Dec 2025 09:00:56 +0000 Manifest next update: Thu 11 Dec 2025 09:00:56 +0000 Files and hashes: 1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=) 2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=) 3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: 043zgve2DGiTjz+LxUGByyLrR0Hfb+i0YCmFS3R6vj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7e:00:1f:62:8a:49:ca:73:99:d0:7d:ce:88:a8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641 Validity Not Before: Dec 10 09:00:56 2025 GMT Not After : Dec 11 09:00:56 2025 GMT Subject: CN=acf49a77889e2528a43204951ce43a5828121aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:da:09:bc:24:1c:c6:e2:e2:c7:a7:5e:8b:bb: 59:11:cb:3a:8a:be:77:29:f5:5a:15:53:f0:c2:74: 8c:1e:31:5a:8e:a7:a6:e9:fd:be:56:d9:bf:f9:a4: 1c:30:df:10:0e:e3:d9:82:3c:5a:2b:f1:2d:0f:cb: 61:e1:80:6f:52:8e:56:66:e3:04:61:dd:2f:a9:01: f2:93:e9:ad:06:36:4b:ae:c3:d9:dd:62:2f:b6:f8: 53:33:83:80:bf:1a:0e:59:8a:d3:a3:77:21:85:67: 6f:a1:5b:7e:aa:35:6f:fe:9d:3e:c0:b5:9c:04:12: c3:39:a4:a7:57:5e:24:e5:e7:96:af:d6:cd:22:57: 3b:fe:66:60:c6:98:70:79:2b:92:c8:c8:7c:21:a2: 01:92:aa:05:62:55:1b:bf:a8:36:df:34:41:a6:84: 1d:6f:c5:66:56:5f:d8:6c:d2:b7:11:47:b2:8d:2d: 47:27:e5:18:25:98:cd:fc:33:db:19:11:97:b6:54: fd:a9:8f:8c:44:59:df:5f:ba:0b:67:cd:74:61:c8: 37:e0:8b:a0:bf:17:01:56:96:97:73:17:26:82:ef: 5c:47:1f:8f:16:86:0a:27:25:8a:2e:5b:95:b1:cf: e4:b2:49:ef:ac:20:64:78:2c:cd:27:8a:6a:e7:46: 91:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F4:9A:77:88:9E:25:28:A4:32:04:95:1C:E4:3A:58:28:12:1A:A0 X509v3 Authority Key Identifier: keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:32:e8:95:64:af:ba:68:bf:c3:d4:88:66:88:7b:18:5f:2b: 11:93:63:17:68:ec:71:64:c8:44:d1:58:ee:f6:99:33:10:85: 48:13:8d:9e:c5:31:1c:ca:c6:bf:e2:70:e5:bf:57:ea:5b:df: fb:ad:3c:33:dc:6c:d9:88:87:6f:6a:ab:13:40:b6:14:ba:14: d1:38:b9:10:50:e1:76:12:60:2f:c9:82:e1:6e:08:44:90:f0: e7:11:bd:cc:85:b1:47:90:f9:77:3e:00:52:52:c5:a2:f0:36: ad:4f:f8:fe:99:d0:19:9e:b7:69:c8:7e:94:f9:3b:56:50:ae: 0d:42:32:35:0c:00:4f:ef:aa:89:08:cd:f0:69:5b:e9:8d:6e: 16:c9:6c:8a:f0:8c:83:bd:f8:b7:8b:78:eb:ca:fe:6d:29:b2: 99:ae:38:b3:10:6a:fb:37:a7:9c:61:ea:38:56:81:72:37:9a: 2c:b1:d1:6d:d0:34:37:fa:b4:67:ef:8b:64:fd:bb:28:db:2b: 24:0a:3c:e2:76:c8:93:e7:a6:6e:b4:8a:e3:4a:ed:98:14:4f: e9:4b:81:5e:06:83:e0:ae:ea:68:83:10:e8:39:19:cb:59:35: a1:5c:5a:88:68:8b:30:77:22:d2:6d:81:62:28:03:68:e4:95: b2:95:00:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfgAfYopJynOZ0H3OiKiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTBkNDMyOTNjZmViZjg3ZTdlYWIyYjBkNTUzZmQyMWE2 ZTk2NDEwHhcNMjUxMjEwMDkwMDU2WhcNMjUxMjExMDkwMDU2WjAzMTEwLwYDVQQD EyhhY2Y0OWE3Nzg4OWUyNTI4YTQzMjA0OTUxY2U0M2E1ODI4MTIxYWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotoJvCQcxuLix6dei7tZEcs6ir53 KfVaFVPwwnSMHjFajqem6f2+Vtm/+aQcMN8QDuPZgjxaK/EtD8th4YBvUo5WZuME Yd0vqQHyk+mtBjZLrsPZ3WIvtvhTM4OAvxoOWYrTo3chhWdvoVt+qjVv/p0+wLWc BBLDOaSnV14k5eeWr9bNIlc7/mZgxphweSuSyMh8IaIBkqoFYlUbv6g23zRBpoQd b8VmVl/YbNK3EUeyjS1HJ+UYJZjN/DPbGRGXtlT9qY+MRFnfX7oLZ810Ycg34Iug vxcBVpaXcxcmgu9cRx+PFoYKJyWKLluVsc/ksknvrCBkeCzNJ4pq50aRsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKz0mneIniUopDIElRzkOlgoEhqgMB8GA1UdIwQY MBaAFN6Q1DKTz+v4fn6rKw1VP9IabpZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODkt NTNlZGM2MjZiMjg3LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODktNTNlZGM2MjZiMjg3 LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTLolWSv umi/w9SIZoh7GF8rEZNjF2jscWTIRNFY7vaZMxCFSBONnsUxHMrGv+Jw5b9X6lvf +608M9xs2YiHb2qrE0C2FLoU0Ti5EFDhdhJgL8mC4W4IRJDw5xG9zIWxR5D5dz4A UlLFovA2rU/4/pnQGZ63ach+lPk7VlCuDUIyNQwAT++qiQjN8Glb6Y1uFslsivCM g734t4t468r+bSmyma44sxBq+zennGHqOFaBcjeaLLHRbdA0N/q0Z++LZP27KNsr JAo84nbIk+embrSK40rtmBRP6UuBXgaD4K7qaIMQ6DkZy1k1oVxaiGiLMHci0m2B YigDaOSVspUAMg== -----END CERTIFICATE-----Generated at Wed Dec 10 18:18:18 2025 by rpki-client