This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json) Hash identifier: fNPdKukERnvlxngAMoyrHwidnSpyEUOvwk7gWZ/XQ0o= Subject key identifier: 6D:52:E6:F8:2E:44:50:22:84:C6:A8:11:87:5D:3D:E4:31:7C:D1:66 Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5 Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5 Certificate serial: 019B4438AD8C9EBA49FD349FDF9234B90FD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft Manifest number: 04B4 Signing time: Mon 22 Dec 2025 04:02:03 +0000 Manifest this update: Mon 22 Dec 2025 04:02:03 +0000 Manifest next update: Tue 23 Dec 2025 04:02:03 +0000 Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: fckTQRW4OR1+bmhHjm4ao06V00hL7mkZGb9Anz9lcAk=) 2: rsRHcAQsRZm8xo329vRETKcxCzw.roa (hash: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:ad:8c:9e:ba:49:fd:34:9f:df:92:34:b9:0f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5 Validity Not Before: Dec 22 04:02:03 2025 GMT Not After : Dec 23 04:02:03 2025 GMT Subject: CN=6d52e6f82e44502284c6a811875d3de4317cd166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:0d:91:81:27:5e:a0:9b:98:1e:a1:d9:9c: ca:7d:e9:f4:6c:1d:15:37:87:a5:3b:c3:9c:1f:2b: 0c:72:25:16:39:d0:28:61:57:01:97:57:5e:1b:af: 2c:0f:c5:40:11:99:6e:ae:53:e6:c9:d7:b3:c3:43: 3d:7c:57:52:a5:41:3c:f6:44:eb:10:da:8c:74:6a: 2a:e0:2f:0a:36:33:15:ec:44:0c:62:bf:3c:5a:b0: 59:98:a6:17:3a:41:4d:4d:ed:f0:8f:97:79:63:80: 22:fc:93:69:e4:f3:09:71:ce:72:13:32:6a:fc:fe: 7d:10:65:54:0c:20:5c:19:ec:9c:76:e9:53:9a:a3: d9:62:a0:23:1e:6e:bf:aa:83:28:78:25:e2:0b:16: 88:a9:b2:0a:bd:f9:9c:9c:fe:ac:43:70:da:79:9c: 34:89:1f:ad:1d:77:3f:9b:f1:54:48:77:a5:fa:ec: 0f:78:0a:d7:10:0c:a5:25:3b:58:ad:1c:39:b2:71: e6:f2:d9:b5:50:bb:ff:d7:27:7e:7a:8f:ce:48:11: 35:76:11:02:ec:e8:ab:b4:f3:0a:a2:d3:78:ef:aa: 98:de:12:7d:41:8a:53:74:a7:ca:f2:55:87:2a:9a: 5b:e0:aa:df:76:e7:68:fb:2f:80:a1:ab:8c:13:53: ef:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:52:E6:F8:2E:44:50:22:84:C6:A8:11:87:5D:3D:E4:31:7C:D1:66 X509v3 Authority Key Identifier: keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9e:e5:e6:07:ae:18:42:32:4a:c4:06:c4:67:0f:0e:7a:87: 65:bc:ee:bb:56:2d:ad:ae:6c:2d:77:61:46:a4:80:80:62:1d: 51:68:04:81:55:b4:1f:51:81:42:fb:ab:51:04:ea:20:aa:ec: 88:94:21:2f:ab:6e:54:dd:f6:a5:70:9d:13:c5:fb:77:83:a0: 05:6a:94:53:f1:71:cf:63:c4:55:33:f1:aa:aa:28:6f:f4:41: a2:82:24:24:ea:d0:06:43:73:3d:af:e0:30:5a:46:12:cb:9a: 07:28:37:26:f2:c9:d7:fe:18:a1:78:40:cb:93:c2:43:36:9c: c8:37:34:88:de:0d:a8:83:64:e1:42:be:62:c6:72:e7:f9:d4: 5e:52:30:cb:c7:3c:90:e9:15:56:9b:14:31:06:2f:20:a7:45: c5:a9:12:e2:49:b6:c3:2d:9f:34:bb:e2:02:5f:6c:0f:a7:2c: ac:3f:e9:c5:41:38:37:38:c3:5a:b5:fd:57:4a:59:d3:ab:53: a3:bc:23:58:35:3a:6e:83:3f:b2:90:eb:10:31:5e:ff:21:db: 4a:07:be:ea:5f:b7:1e:c2:0f:c8:a1:79:bf:70:2b:da:76:65: 22:ba:c4:6b:d9:71:83:2f:6b:96:8a:95:7b:ef:47:17:e3:dd: ef:84:0a:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOK2MnrpJ/TSf35I0uQ/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTE1OGUzZTQxZjYwZmZiZjdlY2FmZjcyMzA3ZDNkYzk1 Mjc3ZjUwHhcNMjUxMjIyMDQwMjAzWhcNMjUxMjIzMDQwMjAzWjAzMTEwLwYDVQQD Eyg2ZDUyZTZmODJlNDQ1MDIyODRjNmE4MTE4NzVkM2RlNDMxN2NkMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5MNkYEnXqCbmB6h2ZzKfen0bB0V N4elO8OcHysMciUWOdAoYVcBl1deG68sD8VAEZlurlPmydezw0M9fFdSpUE89kTr ENqMdGoq4C8KNjMV7EQMYr88WrBZmKYXOkFNTe3wj5d5Y4Ai/JNp5PMJcc5yEzJq /P59EGVUDCBcGeycdulTmqPZYqAjHm6/qoMoeCXiCxaIqbIKvfmcnP6sQ3DaeZw0 iR+tHXc/m/FUSHel+uwPeArXEAylJTtYrRw5snHm8tm1ULv/1yd+eo/OSBE1dhEC 7OirtPMKotN476qY3hJ9QYpTdKfK8lWHKppb4Krfdudo+y+AoauME1PvdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1S5vguRFAihMaoEYddPeQxfNFmMB8GA1UdIwQY MBaAFN2RWOPkH2D/v37K/3IwfT3JUnf1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUt NDNkN2ViNzI1NTFkLzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUtNDNkN2ViNzI1NTFk LzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG57l5geu GEIySsQGxGcPDnqHZbzuu1Ytra5sLXdhRqSAgGIdUWgEgVW0H1GBQvurUQTqIKrs iJQhL6tuVN32pXCdE8X7d4OgBWqUU/Fxz2PEVTPxqqoob/RBooIkJOrQBkNzPa/g MFpGEsuaByg3JvLJ1/4YoXhAy5PCQzacyDc0iN4NqINk4UK+YsZy5/nUXlIwy8c8 kOkVVpsUMQYvIKdFxakS4km2wy2fNLviAl9sD6csrD/pxUE4NzjDWrX9V0pZ06tT o7wjWDU6boM/spDrEDFe/yHbSge+6l+3HsIPyKF5v3Ar2nZlIrrEa9lxgy9rloqV e+9HF+Pd74QKgA== -----END CERTIFICATE-----Generated at Mon Dec 22 14:12:56 2025 by rpki-client