This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json) Hash identifier: uFOYykswYja5pRiYNmFciehSYVH/D5XDeYzuBhBf3fY= Subject key identifier: 61:52:D5:3E:96:A1:C4:7C:62:98:09:8C:19:1C:29:74:A7:A7:FF:CD Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 019B3A2181801400B4944C7CCE2673F38A4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft Manifest number: 0E4B Signing time: Sat 20 Dec 2025 05:00:32 +0000 Manifest this update: Sat 20 Dec 2025 05:00:32 +0000 Manifest next update: Sun 21 Dec 2025 05:00:32 +0000 Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: qfj7BshdtP6EYt2+nlx1F+W61cmArKYr2+EO09UiliI=) 2: 3y9oPhhQ76ajFYxPaGTfj0mGenY.roa (hash: aJMldfOcg7PSjdceOikOWHYMelePcp968D1IHsbQCQs=) 3: Eru4dcnP3AWADVXKAGfzuxLYfJc.roa (hash: qrokzcnnG9HxWIaV9kzA+31DT5BxA/ZSbotCh3hraYc=) 4: Kbhh_-jKSqwyjY9YyEcKOFQSYSE.roa (hash: a+ayqrZ5gSfoloT8KLq9Di5/TpqXgWgvxKNvHS7J0us=) 5: Tz-eGTasLTxJaRB_AyMo0GbjCYY.roa (hash: y/BDSOiRtRFchkB8Upvuvb+MNs6zs82qA1XU7WJzVqs=) 6: n1PdHVenW5fayjdB9KftVERroVM.roa (hash: vk271JDoo1aPMh1SkN6xn//CcT9hk4SqnKTKa0JtzvQ=) 7: njV-GA0Ii5_5OkqbA6b8eDCoFt4.roa (hash: 3zM9PD2sx2obkpcLLLOA9+i/X09CCKUBp/Xzom7yXUE=) 8: zH0GORTR7Uyj1Cp9s_FZC30xG7E.roa (hash: hQY0rZB8ZrQ/2LTg6dzNd2hK2I9T6rcNdp9cuBHVHhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:81:80:14:00:b4:94:4c:7c:ce:26:73:f3:8a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Dec 20 05:00:32 2025 GMT Not After : Dec 21 05:00:32 2025 GMT Subject: CN=6152d53e96a1c47c6298098c191c2974a7a7ffcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:af:4f:14:5d:75:8a:5e:60:21:63:60:5c:26: 02:c0:98:7d:2b:f3:a1:7c:88:a2:89:6c:50:96:b8: 89:c7:c2:d5:a4:df:50:c1:29:ce:69:87:f3:92:73: ff:33:d2:8d:4f:6e:64:49:ea:66:2c:0a:0b:81:b6: bf:1d:69:04:ce:a1:d0:9d:6e:42:c8:d6:c5:ca:95: 05:9e:9b:a3:9f:d5:9a:e4:7a:cc:08:18:05:95:e9: ab:86:fe:79:ec:04:6b:e5:d5:0b:b3:99:b6:60:65: bc:aa:ab:35:15:bc:df:a5:76:e8:ed:57:cd:23:9b: 8c:91:c4:1e:1c:fa:47:3a:8e:15:19:b3:b5:63:06: 8a:67:e2:8b:2d:3a:12:2c:ea:93:e4:93:cc:d0:89: 76:05:f5:a2:23:66:de:30:7e:f1:f6:b9:ab:69:65: 23:a3:a4:eb:64:ca:69:11:24:de:ba:0f:5e:fb:b7: 37:e0:70:f3:93:65:16:c3:ee:ac:ee:95:61:47:81: 10:a5:46:84:f5:26:11:8e:a5:55:06:2a:10:81:9d: 2d:89:1f:e3:bc:fc:73:11:a5:29:e3:12:b6:9c:1b: b8:9b:be:a0:f6:e7:aa:e6:d5:4f:80:7d:7b:6b:13: 76:61:a2:75:ea:1c:9d:19:8a:14:a2:8e:1f:e8:db: d4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:52:D5:3E:96:A1:C4:7C:62:98:09:8C:19:1C:29:74:A7:A7:FF:CD X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1c:92:7c:06:e7:9a:a3:b6:93:55:cc:1b:49:c1:2b:a8:f7: 53:61:f0:8b:78:94:15:93:9d:1a:30:b1:f6:41:ed:5b:4a:0b: e4:bb:00:80:19:db:47:fb:64:65:5a:79:ae:ab:d4:02:d4:76: 4e:cd:be:29:af:4e:54:1c:c4:6e:fd:bf:40:76:aa:b1:d5:3a: 74:aa:fb:24:89:fe:d8:54:33:02:27:8d:e6:f1:f0:7d:1c:79: 56:2d:83:79:96:6f:7f:9c:42:4f:6d:2b:1c:d3:d8:45:d5:56: 06:82:37:57:ff:5e:c6:2e:1e:86:29:9b:18:46:55:ff:52:fd: 03:1d:09:81:b3:7e:1a:fe:5a:a2:c0:65:ea:83:60:12:2f:88: 87:4c:20:93:89:b8:77:3a:1b:cf:57:2b:30:63:6c:59:d7:a1: 04:26:65:45:15:2e:9b:de:5f:da:9e:41:2d:1a:db:dd:88:8b: c2:6d:b0:98:3b:3f:06:08:41:cb:15:e2:88:ce:af:71:3c:22: 63:e8:25:24:20:c2:58:04:05:6f:38:3d:17:1f:64:b5:2c:fe: f2:c8:6e:d2:6c:8c:26:09:d8:02:ac:09:4f:a7:a0:3c:8d:db: fb:84:ec:28:e3:dd:2a:a0:f8:95:9c:87:dd:54:3a:a2:e0:d6: e5:8c:09:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IYGAFAC0lEx8ziZz84pLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjUxMjIwMDUwMDMyWhcNMjUxMjIxMDUwMDMyWjAzMTEwLwYDVQQD Eyg2MTUyZDUzZTk2YTFjNDdjNjI5ODA5OGMxOTFjMjk3NGE3YTdmZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq9PFF11il5gIWNgXCYCwJh9K/Oh fIiiiWxQlriJx8LVpN9QwSnOaYfzknP/M9KNT25kSepmLAoLgba/HWkEzqHQnW5C yNbFypUFnpujn9Wa5HrMCBgFlemrhv557ARr5dULs5m2YGW8qqs1FbzfpXbo7VfN I5uMkcQeHPpHOo4VGbO1YwaKZ+KLLToSLOqT5JPM0Il2BfWiI2beMH7x9rmraWUj o6TrZMppESTeug9e+7c34HDzk2UWw+6s7pVhR4EQpUaE9SYRjqVVBioQgZ0tiR/j vPxzEaUp4xK2nBu4m76g9ueq5tVPgH17axN2YaJ16hydGYoUoo4f6NvUJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFS1T6WocR8YpgJjBkcKXSnp//NMB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxySfAbn mqO2k1XMG0nBK6j3U2Hwi3iUFZOdGjCx9kHtW0oL5LsAgBnbR/tkZVp5rqvUAtR2 Ts2+Ka9OVBzEbv2/QHaqsdU6dKr7JIn+2FQzAieN5vHwfRx5Vi2DeZZvf5xCT20r HNPYRdVWBoI3V/9exi4ehimbGEZV/1L9Ax0JgbN+Gv5aosBl6oNgEi+Ih0wgk4m4 dzobz1crMGNsWdehBCZlRRUum95f2p5BLRrb3YiLwm2wmDs/BghByxXiiM6vcTwi Y+glJCDCWAQFbzg9Fx9ktSz+8shu0myMJgnYAqwJT6egPI3b+4TsKOPdKqD4lZyH 3VQ6ouDW5YwJlw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:17:21 2025 by rpki-client