This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json) Hash identifier: fs/EnaaUXM/5WUS+fiJ/NKEN4hS/StxeyP87v1Ebswk= Subject key identifier: 20:A4:CD:FC:F1:A7:C8:E9:62:E7:57:A5:D5:1D:AD:F5:A0:F9:4B:9C Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c Certificate serial: 019B3BD905A4F476CB2518BB32F6E7FC3A93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 13:00:37 +0000 Manifest this update: Sat 20 Dec 2025 13:00:37 +0000 Manifest next update: Sun 21 Dec 2025 13:00:37 +0000 Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: Z+rgDGYQOuy3cpLinle1fLXlL/I8C3VH2TcgSYL2wkc=) 2: 4iSMhBF2xZj26lycKx2j1fhAtX8.roa (hash: 5NzSosDSsdztn+kQLtfES98hJSpuF/nYSnJEW3vMqlE=) 3: MCaozM05EgQpOj9KWtfk_EMYWf0.roa (hash: I6Y0DISsiTz+oGPxMCPt4OQoH1zQxzx22/aiFTgMNtU=) 4: qMfArzwkX8G0WDNHJN4uX2h7ong.roa (hash: J4HIUTvl0CZ/07KSIMq+Jwo8Hxn+rCK5OIiJhW9OzqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:05:a4:f4:76:cb:25:18:bb:32:f6:e7:fc:3a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c Validity Not Before: Dec 20 13:00:37 2025 GMT Not After : Dec 21 13:00:37 2025 GMT Subject: CN=20a4cdfcf1a7c8e962e757a5d51dadf5a0f94b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:85:de:2a:d7:32:8c:06:f5:43:7f:51:53:a4: 89:ba:02:cc:c7:87:79:c5:c5:49:9c:7f:ab:0c:94: f2:12:7a:b0:04:86:84:95:d7:98:b9:28:78:61:1f: ae:8e:18:03:d5:d2:1a:95:7b:c4:ec:e1:88:60:86: dc:cd:df:ec:87:73:69:09:1d:78:14:85:19:4c:28: a8:ff:a9:2e:7e:33:57:ca:eb:f7:ba:09:39:99:67: b9:44:89:d3:59:e3:80:a1:fc:3d:7e:f7:d2:ff:bd: fa:1c:51:68:1e:21:18:e8:06:6e:16:fe:f9:eb:ff: cf:75:a4:13:a1:e6:a1:38:c3:bd:a0:6c:91:e0:69: 5f:c0:50:e6:61:cc:bd:b5:0f:e6:48:f6:7e:7b:43: 2e:41:47:3d:3c:33:47:05:57:4c:45:f3:f6:94:f1: 31:f4:5e:4a:17:d1:74:10:50:84:00:f5:20:52:b0: e9:6e:72:b5:3d:46:66:6a:eb:52:33:f0:88:6e:d4: f4:9b:49:00:1b:b8:f2:a8:d5:2f:aa:30:52:68:28: 8d:98:51:b4:12:03:44:77:ba:f1:b1:cc:06:ad:10: 90:72:9a:f5:07:bf:7c:d7:0a:41:2b:73:92:67:08: a8:18:3a:49:c4:14:96:2a:6a:ad:0d:c3:51:8e:70: 19:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A4:CD:FC:F1:A7:C8:E9:62:E7:57:A5:D5:1D:AD:F5:A0:F9:4B:9C X509v3 Authority Key Identifier: keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:2d:a2:59:e9:4e:16:be:46:62:8d:7d:8d:7f:3b:74:71:22: 22:e3:13:41:23:36:52:8f:7f:b4:8e:c7:8a:d6:85:ec:59:03: 1a:16:4a:fd:38:28:9a:88:bf:9c:20:ec:1d:cc:aa:a1:c5:25: d9:84:16:5a:f5:8c:59:9e:f9:0e:38:9d:61:d6:8f:09:b1:11: 3e:3a:61:fa:4b:3c:14:31:66:f6:19:dc:43:ca:e7:d8:b7:f3: 38:69:3d:b8:41:98:ee:63:79:24:82:48:5d:f4:3f:d6:82:60: 9b:e1:bd:af:1c:5f:18:42:3a:f0:51:b0:57:98:2b:c6:c7:c5: 7d:15:30:a3:33:6b:3e:58:07:21:51:65:c6:38:bf:c9:fc:06: 63:04:77:e8:e4:90:9b:88:db:94:f0:2c:1d:a5:99:37:4f:8d: 6f:69:e7:a0:97:35:95:42:6b:4b:3f:a0:cf:4b:26:26:ee:77: 47:4e:21:d9:be:eb:f2:2f:c6:33:d5:84:66:03:d5:65:b2:0b: 24:15:79:98:17:13:20:66:3a:45:f9:f1:8d:fa:42:23:2c:59: 31:2e:a4:40:2e:51:40:31:cc:cd:24:37:48:b2:26:4f:b9:5e: 51:0f:23:82:17:a2:9d:08:32:80:06:a8:a4:18:12:b4:25:da: 14:ee:c9:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72QWk9HbLJRi7Mvbn/DqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjY2IyZDVmYjI1Mzg1MmYxODIzYzY1NDM0ZThmMjc2ZDA0 ZTRlMGMwHhcNMjUxMjIwMTMwMDM3WhcNMjUxMjIxMTMwMDM3WjAzMTEwLwYDVQQD EygyMGE0Y2RmY2YxYTdjOGU5NjJlNzU3YTVkNTFkYWRmNWEwZjk0YjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIXeKtcyjAb1Q39RU6SJugLMx4d5 xcVJnH+rDJTyEnqwBIaEldeYuSh4YR+ujhgD1dIalXvE7OGIYIbczd/sh3NpCR14 FIUZTCio/6kufjNXyuv3ugk5mWe5RInTWeOAofw9fvfS/736HFFoHiEY6AZuFv75 6//PdaQToeahOMO9oGyR4GlfwFDmYcy9tQ/mSPZ+e0MuQUc9PDNHBVdMRfP2lPEx 9F5KF9F0EFCEAPUgUrDpbnK1PUZmautSM/CIbtT0m0kAG7jyqNUvqjBSaCiNmFG0 EgNEd7rxscwGrRCQcpr1B7981wpBK3OSZwioGDpJxBSWKmqtDcNRjnAZkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCkzfzxp8jpYudXpdUdrfWg+UucMB8GA1UdIwQY MBaAFNzLLV+yU4UvGCPGVDTo8nbQTk4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83YzFjMjktY2EwMi00OTBiLWFhODQt ZTFhOGE2ZjFkNTlhLzEvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83YzFjMjktY2EwMi00OTBiLWFhODQtZTFhOGE2ZjFkNTlh LzEvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARC2iWelO Fr5GYo19jX87dHEiIuMTQSM2Uo9/tI7HitaF7FkDGhZK/Tgomoi/nCDsHcyqocUl 2YQWWvWMWZ75DjidYdaPCbERPjph+ks8FDFm9hncQ8rn2LfzOGk9uEGY7mN5JIJI XfQ/1oJgm+G9rxxfGEI68FGwV5grxsfFfRUwozNrPlgHIVFlxji/yfwGYwR36OSQ m4jblPAsHaWZN0+Nb2nnoJc1lUJrSz+gz0smJu53R04h2b7r8i/GM9WEZgPVZbIL JBV5mBcTIGY6RfnxjfpCIyxZMS6kQC5RQDHMzSQ3SLImT7leUQ8jgheinQgygAao pBgStCXaFO7JSw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:26:03 2025 by rpki-client