This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft File: 3DhEUAcx1V-JiN3phVnP7QswmrY.mft (raw, json) Hash identifier: W8D4UkdgLeAaRIF2GgkmYgXxD1AJ0KnfjwqRkYKtg3s= Subject key identifier: 0A:95:FC:BA:B4:C0:E6:50:3A:64:31:B6:78:94:22:E4:2D:CE:82:BC Authority key identifier: DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6 Certificate issuer: /CN=dc3844500731d55f8988dde98559cfed0b309ab6 Certificate serial: 019B39EB56E09F556B2442CB94C3D0A27F30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft Manifest number: 0282 Signing time: Sat 20 Dec 2025 04:01:23 +0000 Manifest this update: Sat 20 Dec 2025 04:01:23 +0000 Manifest next update: Sun 21 Dec 2025 04:01:23 +0000 Files and hashes: 1: 3DhEUAcx1V-JiN3phVnP7QswmrY.crl (hash: DYhlI1cGHZmcFKXILdva3JFyz68Stad4wkhdisUpP3E=) 2: 4YPbiAtEI4aIVwSYoOB9atG5l_o.roa (hash: 5G9M3UH6Px38TdWKWNsZTcUTomaq2supA1BUuPBFOUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:56:e0:9f:55:6b:24:42:cb:94:c3:d0:a2:7f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3844500731d55f8988dde98559cfed0b309ab6 Validity Not Before: Dec 20 04:01:23 2025 GMT Not After : Dec 21 04:01:23 2025 GMT Subject: CN=0a95fcbab4c0e6503a6431b6789422e42dce82bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e0:28:42:89:b2:ec:b0:90:2c:10:eb:a5:b8: 68:cc:6e:db:47:de:f2:f1:9f:5e:d8:03:c6:14:6c: a4:49:ea:94:8e:17:e9:b8:bb:cf:10:63:d0:6d:26: db:d0:65:73:86:95:e8:9c:2a:0a:92:e8:7d:00:cc: ed:f8:62:1a:11:07:2b:c2:41:5d:35:a4:b0:e0:b4: 59:9f:ca:28:b2:3a:4b:a1:86:51:ca:d2:6e:61:54: 54:8f:b7:89:76:da:fb:33:88:b4:28:9a:85:5b:ea: 81:15:51:30:20:81:8a:21:0b:88:2a:5f:96:90:14: aa:ee:ba:3d:e1:4f:9f:b6:b9:1f:f2:19:bb:dd:d8: c5:13:ac:3e:f7:b8:94:34:13:4c:53:e6:70:69:58: 7c:2e:f4:d2:9d:2b:20:25:7c:c5:63:f3:f9:98:d5: 24:b4:89:93:d6:87:ed:a9:87:35:56:b8:86:14:50: e9:fa:00:66:ff:5e:0b:3d:30:80:46:62:98:15:6d: d2:14:e8:4f:4d:80:51:cb:32:15:38:1a:8a:18:0e: 14:7c:3f:cd:2f:52:90:a7:11:f4:48:07:dc:a9:da: ea:c4:f0:ac:bc:4c:76:b0:5d:39:0f:c2:81:e6:ac: c7:89:bf:f1:31:85:a0:3b:64:1e:16:ed:53:85:05: 55:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:95:FC:BA:B4:C0:E6:50:3A:64:31:B6:78:94:22:E4:2D:CE:82:BC X509v3 Authority Key Identifier: keyid:DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:6b:ef:95:97:c3:0f:94:db:27:a7:2a:2a:87:0f:0b:27:c8: 27:98:f6:92:01:21:93:ec:c1:96:48:c8:5d:a7:a7:aa:97:26: c0:70:9c:8a:5f:3a:07:50:dc:c7:4b:bf:6c:f5:0c:67:f5:eb: fb:15:8e:d8:f5:bf:6d:e4:f0:47:fc:1a:a5:d1:19:bb:4f:c4: a9:83:72:39:13:3b:b0:91:19:81:e0:c1:bb:13:f7:62:ea:21: 49:49:2f:36:c9:58:05:43:54:a6:57:d1:64:26:44:8b:46:69: 5e:f4:1b:43:ed:e1:7c:51:ee:57:0a:7d:f0:9a:22:bf:a7:c6: 0b:15:91:ce:da:61:3f:23:9e:47:8b:f9:f7:08:f8:2b:e0:94: 61:84:64:20:a3:9f:78:f7:f1:fe:13:2c:38:85:57:08:75:3f: a6:fe:4a:84:f9:15:4b:91:95:3e:fc:e4:70:a3:f3:8e:a7:1d: 2f:a1:0a:21:22:30:56:6f:f8:ea:4f:ea:b7:d6:70:b5:a9:94: cc:e5:62:8b:f5:a0:b0:b9:0c:07:3f:e2:97:a0:32:9a:85:14: 40:e7:bb:8a:7a:33:4c:0c:3c:d5:97:bf:4a:20:4f:a1:4a:35: 7a:c2:5f:8f:c8:f2:4a:b4:38:4c:d3:43:e2:01:e6:2a:39:1c: 1e:11:f7:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs561bgn1VrJELLlMPQon8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMzg0NDUwMDczMWQ1NWY4OTg4ZGRlOTg1NTljZmVkMGIz MDlhYjYwHhcNMjUxMjIwMDQwMTIzWhcNMjUxMjIxMDQwMTIzWjAzMTEwLwYDVQQD EygwYTk1ZmNiYWI0YzBlNjUwM2E2NDMxYjY3ODk0MjJlNDJkY2U4MmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeAoQomy7LCQLBDrpbhozG7bR97y 8Z9e2APGFGykSeqUjhfpuLvPEGPQbSbb0GVzhpXonCoKkuh9AMzt+GIaEQcrwkFd NaSw4LRZn8oosjpLoYZRytJuYVRUj7eJdtr7M4i0KJqFW+qBFVEwIIGKIQuIKl+W kBSq7ro94U+ftrkf8hm73djFE6w+97iUNBNMU+ZwaVh8LvTSnSsgJXzFY/P5mNUk tImT1oftqYc1VriGFFDp+gBm/14LPTCARmKYFW3SFOhPTYBRyzIVOBqKGA4UfD/N L1KQpxH0SAfcqdrqxPCsvEx2sF05D8KB5qzHib/xMYWgO2QeFu1ThQVV0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqV/Lq0wOZQOmQxtniUIuQtzoK8MB8GA1UdIwQY MBaAFNw4RFAHMdVfiYjd6YVZz+0LMJq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0RoRVVBY3gxVi1KaU4zcGhWblA3UXN3bXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iZmZjNzItYmI2ZC00OTk4LWExMGIt NmZmOGMzN2RiMWE4LzEvM0RoRVVBY3gxVi1KaU4zcGhWblA3UXN3bXJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9iZmZjNzItYmI2ZC00OTk4LWExMGItNmZmOGMzN2RiMWE4 LzEvM0RoRVVBY3gxVi1KaU4zcGhWblA3UXN3bXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2vvlZfD D5TbJ6cqKocPCyfIJ5j2kgEhk+zBlkjIXaenqpcmwHCcil86B1Dcx0u/bPUMZ/Xr +xWO2PW/beTwR/wapdEZu0/EqYNyORM7sJEZgeDBuxP3YuohSUkvNslYBUNUplfR ZCZEi0ZpXvQbQ+3hfFHuVwp98Joiv6fGCxWRztphPyOeR4v59wj4K+CUYYRkIKOf ePfx/hMsOIVXCHU/pv5KhPkVS5GVPvzkcKPzjqcdL6EKISIwVm/46k/qt9ZwtamU zOVii/WgsLkMBz/il6AymoUUQOe7inozTAw81Ze/SiBPoUo1esJfj8jySrQ4TNND 4gHmKjkcHhH3dQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:45:57 2025 by rpki-client