This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json) Hash identifier: PMNB9ZFlbnpzv37m4BL0spp2e17QRJncUVNE0csf+5A= Subject key identifier: 5C:9E:ED:42:E1:F9:3B:BC:F5:28:89:E8:80:E4:21:B6:27:01:22:8A Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29 Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729 Certificate serial: 019B38A1F170D588E9417CBEEA74372B0E01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft Manifest number: 09C8 Signing time: Fri 19 Dec 2025 22:01:35 +0000 Manifest this update: Fri 19 Dec 2025 22:01:35 +0000 Manifest next update: Sat 20 Dec 2025 22:01:35 +0000 Files and hashes: 1: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: m1mzRA7rRWRC1UO0zGPGfT6SLY3PLZiPuszrLDlacHQ=) 2: W8Dpmpt_1-01qSbotVM15n3GSek.roa (hash: 8bMbdbcHjYf7KXHu+ym0lwgv0cPY/hCCrTp1Qv0O4sU=) 3: d-If6rwOnPiVqU22C8IZzGvMPvc.roa (hash: giLRuwy5wW+MIOBjFAF7Pd0PEoYtI2K0pgdHGw83fkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:f1:70:d5:88:e9:41:7c:be:ea:74:37:2b:0e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729 Validity Not Before: Dec 19 22:01:35 2025 GMT Not After : Dec 20 22:01:35 2025 GMT Subject: CN=5c9eed42e1f93bbcf52889e880e421b62701228a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:66:56:dd:63:c5:3c:95:21:65:97:8a:03:a5: 11:0e:b5:85:04:12:8e:b6:39:1e:23:d5:66:67:f4: bc:1f:03:54:63:c5:b0:c9:7a:9d:a7:15:80:85:9a: 5c:6a:a9:b9:4a:ab:3e:ee:9e:43:37:09:ce:af:34: 0a:0e:e5:61:28:2b:6b:39:72:c4:d0:69:77:31:f4: a5:30:58:a7:a1:a3:d6:b9:49:ac:f7:2d:a5:0c:85: 3e:49:45:0a:d7:66:ed:06:d2:3d:d2:9e:b0:26:7f: 4c:e7:ef:46:58:c1:fe:70:35:d3:b6:c2:24:26:36: 56:66:3d:60:32:9f:f1:56:b8:bb:37:67:4e:89:15: eb:91:6b:61:c7:00:02:70:04:38:65:92:c0:b7:ac: 7c:56:0a:53:9c:5c:0e:45:0a:a6:5c:f7:f6:9b:10: e0:28:1a:38:d5:54:57:43:79:ea:89:17:2c:02:85: a9:ba:a9:4a:9f:17:61:51:e7:80:0c:c0:d2:79:84: af:34:35:1b:23:7c:51:82:11:68:3a:48:96:03:8b: 6f:15:bd:b3:94:a4:09:b0:74:31:92:ae:84:49:fa: 13:c8:76:4c:f4:a7:1c:c0:73:66:cd:09:23:db:57: 75:5e:8c:a3:5f:74:b6:69:9b:a8:0e:de:be:a0:c0: f6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9E:ED:42:E1:F9:3B:BC:F5:28:89:E8:80:E4:21:B6:27:01:22:8A X509v3 Authority Key Identifier: keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0b:6f:8a:a5:27:13:2e:0a:63:ba:01:0f:50:a0:c1:f1:3e: f7:d3:bd:39:59:dd:51:02:2b:b5:44:57:14:25:30:2e:ce:9b: 02:5f:d9:32:2c:37:62:37:e3:92:bf:70:d0:47:59:bd:72:b3: b8:3c:28:b5:3a:f0:33:88:a5:31:2f:ed:4b:e2:3b:9c:09:5d: ec:fc:34:d4:16:8a:08:82:f3:4b:36:cb:c4:ef:d1:bd:4e:da: fd:83:e1:f1:f8:bf:67:31:4d:f4:3d:0f:6d:f7:6b:46:b5:60: 2a:ee:b3:9c:38:05:03:09:c5:b6:42:34:3c:5e:bc:0a:ec:3f: 66:43:38:4a:7b:46:9c:99:74:c2:22:8e:d8:41:94:3a:c0:d4: 31:7a:f3:f8:b6:37:7b:5a:13:c5:c6:21:13:55:3f:c4:7a:e3: 9c:dc:61:c9:5c:3c:6a:5f:82:28:b9:f6:61:d9:23:33:62:a9: f8:ab:c6:68:bb:8a:a6:b0:f2:24:6d:18:7c:e9:71:4a:e9:91: bd:b1:90:50:26:3f:43:c1:4a:6f:f6:05:d0:4f:af:c7:ca:79: 4a:90:3d:be:c2:c7:09:53:05:99:bd:59:ce:49:b2:c1:7a:79: 6b:55:83:d7:d8:4e:88:2b:c1:53:1d:b4:07:66:79:bb:0b:fb: 01:25:e0:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ofFw1YjpQXy+6nQ3Kw4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMDEwOTM4ZDllZjcyMTU4ZmM5OGJkNDVkZTcxYjBiMWE5 ZmY3MjkwHhcNMjUxMjE5MjIwMTM1WhcNMjUxMjIwMjIwMTM1WjAzMTEwLwYDVQQD Eyg1YzllZWQ0MmUxZjkzYmJjZjUyODg5ZTg4MGU0MjFiNjI3MDEyMjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2ZW3WPFPJUhZZeKA6URDrWFBBKO tjkeI9VmZ/S8HwNUY8WwyXqdpxWAhZpcaqm5Sqs+7p5DNwnOrzQKDuVhKCtrOXLE 0Gl3MfSlMFinoaPWuUms9y2lDIU+SUUK12btBtI90p6wJn9M5+9GWMH+cDXTtsIk JjZWZj1gMp/xVri7N2dOiRXrkWthxwACcAQ4ZZLAt6x8VgpTnFwORQqmXPf2mxDg KBo41VRXQ3nqiRcsAoWpuqlKnxdhUeeADMDSeYSvNDUbI3xRghFoOkiWA4tvFb2z lKQJsHQxkq6ESfoTyHZM9KccwHNmzQkj21d1XoyjX3S2aZuoDt6+oMD2+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFye7ULh+Tu89SiJ6IDkIbYnASKKMB8GA1UdIwQY MBaAFN0BCTjZ73IVj8mL1F3nGwsan/cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYt Y2VmZjU0NmM5MzNlLzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYtY2VmZjU0NmM5MzNl LzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwtviqUn Ey4KY7oBD1CgwfE+99O9OVndUQIrtURXFCUwLs6bAl/ZMiw3Yjfjkr9w0EdZvXKz uDwotTrwM4ilMS/tS+I7nAld7Pw01BaKCILzSzbLxO/RvU7a/YPh8fi/ZzFN9D0P bfdrRrVgKu6znDgFAwnFtkI0PF68Cuw/ZkM4SntGnJl0wiKO2EGUOsDUMXrz+LY3 e1oTxcYhE1U/xHrjnNxhyVw8al+CKLn2YdkjM2Kp+KvGaLuKprDyJG0YfOlxSumR vbGQUCY/Q8FKb/YF0E+vx8p5SpA9vsLHCVMFmb1ZzkmywXp5a1WD19hOiCvBUx20 B2Z5uwv7ASXggA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:22:42 2025 by rpki-client