This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json) Hash identifier: 3Kh9MhZGZ8MDY13b/nvrU4XNSNx3uSK2sjAk0mPHHZY= Subject key identifier: FB:D8:E6:F4:C1:73:05:42:FE:8B:D9:7B:23:BD:D1:71:48:24:AC:4B Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3 Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3 Certificate serial: 019B37C6078B47B9497B2DC3571D3BAF2A2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft Manifest number: 06FF Signing time: Fri 19 Dec 2025 18:01:23 +0000 Manifest this update: Fri 19 Dec 2025 18:01:23 +0000 Manifest next update: Sat 20 Dec 2025 18:01:23 +0000 Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: qjr8o9WB/90cXv/VQB+Ocm8MbCOQ8rvhDjPhjTUYxfk=) 2: C-HPFOYCMQLmFVZYqIoVsP8I6Tw.roa (hash: D+5EahY4vodx621ahpBPycW58S7hhxRlUsk16p9n/KY=) 3: Flwmylii1lP-MMaWa6R3fM_H_Es.roa (hash: aNm41ikzEihuWLERMSzHoFpO6VWTvJgEUeUEGOyvPMU=) 4: REcuhoFutyP-YyVPcAnPgwvOxpk.roa (hash: dwBs1o+a6wblc+zzrwzH1YLpD0Cw6cgDxBvorJz36jA=) 5: RVm4PleqV8m6zGkcPiKBRGWO1cI.roa (hash: 3p0hXdk+JmHhQEiq1MExor2f3lGKmZyobEJTxOu9buE=) 6: eHnC0ZqJNqxv3y7mak9QRJMJw-o.roa (hash: +LqAwsdmA3jPuO+2IgsX5kZHBO+HuvNtjbjVsU8ziig=) 7: f25v4uVZY4JbTyMqNXKXGA35WKk.roa (hash: Cmqw5364kiAvR31aujca3rQebhgV1WXm34C80bI/lTU=) 8: xJ0_FRg6EplS-mzoDbYvP1y_mUw.roa (hash: 7evtOJQCPXqekbIigyPzPGbzquzgJixLY3c438GOL/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c6:07:8b:47:b9:49:7b:2d:c3:57:1d:3b:af:2a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3 Validity Not Before: Dec 19 18:01:23 2025 GMT Not After : Dec 20 18:01:23 2025 GMT Subject: CN=fbd8e6f4c1730542fe8bd97b23bdd1714824ac4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2c:65:bd:a5:36:d2:93:62:f1:8b:ab:a6:00: a7:94:db:7c:d6:49:f1:b2:14:11:0f:17:5e:49:f8: 0f:53:94:aa:28:a6:e1:14:f8:78:07:4e:62:52:1f: 9d:44:64:3a:5b:c5:a9:57:25:88:b3:5f:37:07:af: e1:2a:ad:6e:3d:d3:50:97:1a:d6:2b:5b:ce:50:1e: b3:83:a1:46:d0:8b:84:55:2a:c2:18:23:df:0d:96: 92:ea:de:5b:08:cd:f9:0b:f8:16:0c:85:95:4d:2c: 1e:e4:09:93:2b:11:44:53:5d:ff:91:6c:e0:3a:41: e6:ad:56:28:b3:2f:b8:03:e8:04:01:90:3b:ed:bc: 40:5f:d8:cf:b6:bb:c7:c5:53:80:30:2a:ce:ce:78: 1b:89:f8:38:3f:34:13:06:56:aa:0b:6c:79:2a:19: 98:b0:1a:67:cc:30:04:17:35:7e:6b:42:92:06:f3: 22:eb:7b:42:69:24:08:44:dc:09:fc:de:b0:95:38: 74:cd:c4:98:67:6b:5c:54:61:fb:81:97:74:03:24: 41:04:9e:c0:a0:44:0a:78:60:cb:e0:68:4f:ae:8d: e5:94:2e:5f:a5:0e:56:3c:76:ca:6d:f6:39:e1:f3: 37:37:22:f2:79:1f:9c:02:a3:26:3e:ca:32:01:0a: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D8:E6:F4:C1:73:05:42:FE:8B:D9:7B:23:BD:D1:71:48:24:AC:4B X509v3 Authority Key Identifier: keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:43:80:93:2a:96:1b:b7:65:4c:aa:d3:ed:a9:ba:46:97:7c: 67:75:9a:e8:e6:04:ff:2a:64:cc:77:ee:6d:12:d9:02:30:bf: a3:16:39:1c:7a:81:c7:2b:dd:b6:f8:3c:22:56:9c:b4:90:e9: ab:3e:3a:18:db:25:e7:50:35:da:d7:60:ea:59:69:d2:9c:8d: 7b:a9:3c:ed:50:7b:bf:01:da:7e:ad:9a:0a:eb:ce:e0:6e:3d: 7a:be:5a:d1:c3:1a:d1:dd:4c:d8:a6:04:78:cc:d2:21:34:ae: d0:e7:30:00:47:6a:8c:15:fd:83:c9:ed:c5:fb:c9:09:b6:5d: 2b:73:97:8e:df:c2:c1:1b:b2:72:0f:5d:f0:1e:da:39:11:63: a0:71:8b:fb:89:30:79:fb:cf:94:2f:90:ef:c8:9a:33:27:84: 32:b1:c1:e7:dd:fa:e4:aa:38:99:6c:f8:e4:f2:82:b5:ce:97: 56:74:6e:a4:8d:fb:b0:c2:46:ae:4e:ba:0d:28:90:86:a3:a2: 78:3b:50:1d:e6:2b:cb:97:70:f9:63:5e:fc:6f:a7:52:04:55: 6e:5d:ca:f2:5e:d5:c5:33:55:9e:6c:21:61:a8:0a:da:47:d1: 7c:b6:84:0b:5c:6b:46:77:5d:f1:dd:1e:8d:a8:8e:7d:60:2e: fe:10:b7:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xgeLR7lJey3DVx07ryoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2ZkYzRiZjMzYmQ4MGZlMTI4ZDc1Njg0M2Y2MGIzOWQ1 YmVlZTMwHhcNMjUxMjE5MTgwMTIzWhcNMjUxMjIwMTgwMTIzWjAzMTEwLwYDVQQD EyhmYmQ4ZTZmNGMxNzMwNTQyZmU4YmQ5N2IyM2JkZDE3MTQ4MjRhYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SxlvaU20pNi8YurpgCnlNt81knx shQRDxdeSfgPU5SqKKbhFPh4B05iUh+dRGQ6W8WpVyWIs183B6/hKq1uPdNQlxrW K1vOUB6zg6FG0IuEVSrCGCPfDZaS6t5bCM35C/gWDIWVTSwe5AmTKxFEU13/kWzg OkHmrVYosy+4A+gEAZA77bxAX9jPtrvHxVOAMCrOzngbifg4PzQTBlaqC2x5KhmY sBpnzDAEFzV+a0KSBvMi63tCaSQIRNwJ/N6wlTh0zcSYZ2tcVGH7gZd0AyRBBJ7A oEQKeGDL4GhPro3llC5fpQ5WPHbKbfY54fM3NyLyeR+cAqMmPsoyAQoFTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvY5vTBcwVC/ovZeyO90XFIJKxLMB8GA1UdIwQY MBaAFN8/3EvzO9gP4SjXVoQ/YLOdW+7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMt YTQ3M2VjNTQxMGMzLzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMtYTQ3M2VjNTQxMGMz LzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEOAkyqW G7dlTKrT7am6Rpd8Z3Wa6OYE/ypkzHfubRLZAjC/oxY5HHqBxyvdtvg8IlactJDp qz46GNsl51A12tdg6llp0pyNe6k87VB7vwHafq2aCuvO4G49er5a0cMa0d1M2KYE eMzSITSu0OcwAEdqjBX9g8ntxfvJCbZdK3OXjt/CwRuycg9d8B7aORFjoHGL+4kw efvPlC+Q78iaMyeEMrHB59365Ko4mWz45PKCtc6XVnRupI37sMJGrk66DSiQhqOi eDtQHeYry5dw+WNe/G+nUgRVbl3K8l7VxTNVnmwhYagK2kfRfLaEC1xrRndd8d0e jaiOfWAu/hC3eQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:22:46 2025 by rpki-client