This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json) Hash identifier: rav1hKyeJQSCihPv/CQLkumVkRSgDA3+JhNq/m/dr/E= Subject key identifier: C4:5C:89:EB:F2:68:00:67:0C:A6:A0:0A:B2:78:EE:93:C1:9F:73:62 Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38 Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538 Certificate serial: 019B300BEEC54253E371BC32F8725856E04E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft Manifest number: 0A15 Signing time: Thu 18 Dec 2025 06:00:46 +0000 Manifest this update: Thu 18 Dec 2025 06:00:46 +0000 Manifest next update: Fri 19 Dec 2025 06:00:46 +0000 Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: C1aOup9o/b6Zv3uZUVh0PLY8B9X+cE/5J9MjSHTxifI=) 2: ij43C7xr8xTz-pjXAc9irjAaFXA.roa (hash: TchsYLXYDpTrG6rR/zLX/7ji8qJkl2gfrI50UG67KC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:ee:c5:42:53:e3:71:bc:32:f8:72:58:56:e0:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538 Validity Not Before: Dec 18 06:00:46 2025 GMT Not After : Dec 19 06:00:46 2025 GMT Subject: CN=c45c89ebf26800670ca6a00ab278ee93c19f7362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:d7:3e:07:65:70:fc:08:c2:97:27:c2:11: 17:1e:f1:41:86:ca:86:64:a4:85:4c:b2:2b:c9:cd: af:5c:20:40:fb:d2:c3:66:49:6d:29:59:ef:45:04: 68:29:e0:5a:10:a3:55:2b:66:e9:8e:b7:83:5b:e0: 0d:67:5d:62:f1:38:b9:59:63:02:f1:ec:e8:33:c3: 7b:35:21:f5:8e:28:7f:66:a4:b0:d9:09:a8:e4:ad: b5:b2:38:a9:28:c1:f5:91:ec:97:73:50:bd:89:16: a2:08:c4:a7:1e:0d:8d:41:61:34:51:b8:c6:62:12: 11:01:f0:5b:dc:ea:25:16:5c:92:ef:34:0c:c6:0b: 95:82:3c:30:4f:9c:32:d0:3c:ee:17:e2:52:4e:1e: 27:30:e3:da:fd:95:34:00:74:c7:d5:a7:8f:7a:7d: 32:9a:fe:53:0a:ed:83:cf:a6:79:7f:46:f5:c2:43: 49:a5:53:11:ba:18:12:09:f2:7f:46:34:9b:6e:b3: 0f:86:75:45:eb:b6:6c:ab:9f:2e:64:fc:69:25:82: 14:b8:a9:bc:74:af:30:36:e4:d0:df:02:09:6f:90: 36:c1:3a:14:13:c9:09:3d:ad:9a:1f:3e:92:8c:88: 24:10:bd:f9:16:09:67:ea:e9:60:a2:c8:26:a0:d5: 6e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5C:89:EB:F2:68:00:67:0C:A6:A0:0A:B2:78:EE:93:C1:9F:73:62 X509v3 Authority Key Identifier: keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:28:b9:dc:0d:44:5b:33:f7:bd:4c:a4:09:1f:8f:20:a1:84: 60:12:1c:5d:4d:88:96:42:36:e3:37:52:3e:5d:70:f1:45:b6: 75:10:93:36:56:65:fb:73:c2:a0:59:68:84:dc:80:fd:5b:19: aa:38:6d:68:fc:5f:d1:37:92:c4:85:71:b1:da:ff:28:8c:6d: 44:1c:ae:b1:cb:a1:44:3a:0e:72:6e:d6:97:21:4e:bb:91:85: 16:3e:7c:58:2f:11:e8:b4:6d:0e:12:5a:c2:b2:b8:7b:c8:9f: dd:78:e0:68:c0:e9:96:b6:2b:c4:6d:d4:53:a3:c4:81:4c:c0: 23:8c:1c:50:00:31:12:d7:46:f7:46:f9:38:1e:68:50:f1:a9: 0d:33:4f:34:c2:24:81:22:a2:7e:c9:3b:c7:41:6b:b7:39:1b: 82:60:c2:4b:69:42:80:85:c3:75:64:9e:64:b2:24:91:ab:56: 57:c8:91:65:81:df:bf:07:5f:d8:31:57:40:22:7a:05:59:1a: 65:c3:46:cf:2d:86:95:f8:b2:e0:35:d8:72:3d:3a:89:4d:e3: 70:63:39:e7:67:63:39:41:5a:98:9b:5a:f3:78:53:d1:bb:3f: b2:74:20:88:76:2e:1c:94:3c:16:c4:e6:a5:e4:a6:3c:47:59: b5:75:43:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC+7FQlPjcbwy+HJYVuBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYmU1MTdlNzQ3NWUxN2MwNjk2NDM5MTBmZDZmNzdiMzE3 Yjg1MzgwHhcNMjUxMjE4MDYwMDQ2WhcNMjUxMjE5MDYwMDQ2WjAzMTEwLwYDVQQD EyhjNDVjODllYmYyNjgwMDY3MGNhNmEwMGFiMjc4ZWU5M2MxOWY3MzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy43XPgdlcPwIwpcnwhEXHvFBhsqG ZKSFTLIryc2vXCBA+9LDZkltKVnvRQRoKeBaEKNVK2bpjreDW+ANZ11i8Ti5WWMC 8ezoM8N7NSH1jih/ZqSw2Qmo5K21sjipKMH1keyXc1C9iRaiCMSnHg2NQWE0UbjG YhIRAfBb3OolFlyS7zQMxguVgjwwT5wy0DzuF+JSTh4nMOPa/ZU0AHTH1aePen0y mv5TCu2Dz6Z5f0b1wkNJpVMRuhgSCfJ/RjSbbrMPhnVF67Zsq58uZPxpJYIUuKm8 dK8wNuTQ3wIJb5A2wToUE8kJPa2aHz6SjIgkEL35Fgln6ulgosgmoNVu8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRcievyaABnDKagCrJ47pPBn3NiMB8GA1UdIwQY MBaAFN6+UX50deF8BpZDkQ/W93sxe4U4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zODUwYzktOWM2OC00NjEzLWE4NzAt ODlmNWM0ZjMyOTcwLzEvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zODUwYzktOWM2OC00NjEzLWE4NzAtODlmNWM0ZjMyOTcw LzEvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESi53A1E WzP3vUykCR+PIKGEYBIcXU2IlkI24zdSPl1w8UW2dRCTNlZl+3PCoFlohNyA/VsZ qjhtaPxf0TeSxIVxsdr/KIxtRByuscuhRDoOcm7WlyFOu5GFFj58WC8R6LRtDhJa wrK4e8if3XjgaMDplrYrxG3UU6PEgUzAI4wcUAAxEtdG90b5OB5oUPGpDTNPNMIk gSKifsk7x0FrtzkbgmDCS2lCgIXDdWSeZLIkkatWV8iRZYHfvwdf2DFXQCJ6BVka ZcNGzy2Glfiy4DXYcj06iU3jcGM552djOUFamJta83hT0bs/snQgiHYuHJQ8FsTm peSmPEdZtXVDcQ== -----END CERTIFICATE-----Generated at Thu Dec 18 12:47:31 2025 by rpki-client