This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft File: 3tRskpaCjJwCVTCqaEFgmt8FaaA.mft (raw, json) Hash identifier: mxrENY6KtQsFuznh3TNw8kh9ac4fAmtCaYkWPhwYUh0= Subject key identifier: A0:D7:9B:F3:77:55:BD:7D:0A:85:97:80:33:A6:7F:30:3D:4A:13:62 Authority key identifier: DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0 Certificate issuer: /CN=ded46c9296828c9c025530aa6841609adf0569a0 Certificate serial: 019B435BB0554FFE5F472B415338B84FD7E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft Manifest number: 04A3 Signing time: Mon 22 Dec 2025 00:00:40 +0000 Manifest this update: Mon 22 Dec 2025 00:00:40 +0000 Manifest next update: Tue 23 Dec 2025 00:00:40 +0000 Files and hashes: 1: 3tRskpaCjJwCVTCqaEFgmt8FaaA.crl (hash: V61ZyLpEeg5BQmM8MAcnkI6SJ21K6scKfVcZDgxWUsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:b0:55:4f:fe:5f:47:2b:41:53:38:b8:4f:d7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded46c9296828c9c025530aa6841609adf0569a0 Validity Not Before: Dec 22 00:00:40 2025 GMT Not After : Dec 23 00:00:40 2025 GMT Subject: CN=a0d79bf37755bd7d0a85978033a67f303d4a1362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:fe:b3:a3:dc:29:f8:f1:58:e3:0f:37:30: ee:da:2b:d5:04:6b:70:24:8a:84:7b:86:53:58:43: 53:f2:cf:b8:16:fd:1d:13:a0:3b:6d:64:ea:44:ab: a9:e5:87:cd:24:b3:d3:7b:51:8a:02:87:c7:9d:48: 02:61:cf:7f:59:2a:8d:a3:28:2e:ab:b9:74:49:d4: 60:96:57:e0:7e:01:e9:23:d7:34:84:b2:4d:93:99: 4c:7b:cd:1c:5c:14:e2:16:be:c0:3f:ac:e3:c7:a8: 9b:27:85:15:1a:59:8a:75:77:50:b9:04:04:85:7c: 95:25:54:8d:b9:2c:dc:5f:50:80:b3:ab:e8:13:51: f5:d5:d7:99:b0:11:0b:46:cf:58:8a:03:7c:f1:b6: 19:04:bb:fd:5e:3a:3e:00:57:38:7d:59:66:33:e4: 3d:92:fc:41:a0:20:39:d4:32:ce:74:83:f1:7c:58: e1:2c:b7:87:be:60:61:59:a6:69:fd:ce:87:ca:e9: 00:0e:87:2f:38:ff:60:ef:c5:23:60:ef:35:5b:71: 54:d6:47:43:d1:98:30:ab:e8:1b:d3:fb:db:da:6c: c3:e5:a2:3a:6d:76:68:0c:dd:aa:c3:06:83:9f:5e: 1a:6d:69:30:45:ad:a2:c2:0c:ce:a6:fe:d1:32:4e: ca:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D7:9B:F3:77:55:BD:7D:0A:85:97:80:33:A6:7F:30:3D:4A:13:62 X509v3 Authority Key Identifier: keyid:DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:2f:67:fc:3e:bc:52:fb:a5:d6:5e:d6:50:fd:5d:40:47:d2: 3f:87:5a:db:94:be:01:b6:86:8b:b4:e7:4c:90:16:b7:33:3a: 0f:1d:a3:6f:ef:73:43:0f:ba:83:0e:e4:e5:c0:a3:f4:d3:ac: 56:03:b5:05:82:81:97:d6:ae:e7:a7:b1:35:ae:0f:73:01:e5: 17:90:21:26:8f:f1:3b:8c:22:e4:26:80:63:29:88:a0:a9:03: 11:a8:76:f7:4d:6e:aa:e4:f4:45:a9:77:bf:b7:6e:00:24:9e: fd:aa:0a:cc:33:86:a3:c8:e1:d5:17:8d:d7:9f:a0:ee:45:0f: 2d:66:c6:e2:a3:10:40:b7:fd:6a:16:51:b1:94:45:39:1d:79: d6:b5:b3:ff:07:7d:2d:bc:ec:48:d4:e8:ed:22:ba:28:6b:f5: f9:c8:01:d3:1a:43:72:26:48:cd:d7:2f:41:16:39:48:55:94: f6:e9:8d:96:1a:de:d1:ca:66:7e:bb:6a:0f:55:62:79:4d:be: ae:94:a9:55:cf:5c:ee:24:43:5e:d1:c0:75:5e:b0:36:2d:7a: 2f:7c:db:eb:2d:6a:b5:b6:8e:2f:b7:96:57:cd:ec:dd:2a:d4: 41:53:4d:bb:b6:d8:79:72:29:b3:b3:a4:b6:4b:9b:f1:43:3e: 24:87:6d:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW7BVT/5fRytBUzi4T9fiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDQ2YzkyOTY4MjhjOWMwMjU1MzBhYTY4NDE2MDlhZGYw NTY5YTAwHhcNMjUxMjIyMDAwMDQwWhcNMjUxMjIzMDAwMDQwWjAzMTEwLwYDVQQD EyhhMGQ3OWJmMzc3NTViZDdkMGE4NTk3ODAzM2E2N2YzMDNkNGExMzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqn+s6PcKfjxWOMPNzDu2ivVBGtw JIqEe4ZTWENT8s+4Fv0dE6A7bWTqRKup5YfNJLPTe1GKAofHnUgCYc9/WSqNoygu q7l0SdRgllfgfgHpI9c0hLJNk5lMe80cXBTiFr7AP6zjx6ibJ4UVGlmKdXdQuQQE hXyVJVSNuSzcX1CAs6voE1H11deZsBELRs9YigN88bYZBLv9Xjo+AFc4fVlmM+Q9 kvxBoCA51DLOdIPxfFjhLLeHvmBhWaZp/c6HyukADocvOP9g78UjYO81W3FU1kdD 0Zgwq+gb0/vb2mzD5aI6bXZoDN2qwwaDn14abWkwRa2iwgzOpv7RMk7KNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDXm/N3Vb19CoWXgDOmfzA9ShNiMB8GA1UdIwQY MBaAFN7UbJKWgoycAlUwqmhBYJrfBWmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3RSc2twYUNqSndDVlRDcWFFRmdtdDhGYWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85MzZmOTMtMDkyMi00ZjVkLThlM2Et YTAwMDdiZDVhY2U3LzEvM3RSc2twYUNqSndDVlRDcWFFRmdtdDhGYWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85MzZmOTMtMDkyMi00ZjVkLThlM2EtYTAwMDdiZDVhY2U3 LzEvM3RSc2twYUNqSndDVlRDcWFFRmdtdDhGYWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZy9n/D68 Uvul1l7WUP1dQEfSP4da25S+AbaGi7TnTJAWtzM6Dx2jb+9zQw+6gw7k5cCj9NOs VgO1BYKBl9au56exNa4PcwHlF5AhJo/xO4wi5CaAYymIoKkDEah2901uquT0Ral3 v7duACSe/aoKzDOGo8jh1ReN15+g7kUPLWbG4qMQQLf9ahZRsZRFOR151rWz/wd9 LbzsSNTo7SK6KGv1+cgB0xpDciZIzdcvQRY5SFWU9umNlhre0cpmfrtqD1VieU2+ rpSpVc9c7iRDXtHAdV6wNi16L3zb6y1qtbaOL7eWV83s3SrUQVNNu7bYeXIps7Ok tkub8UM+JIdtyg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:26:07 2025 by rpki-client