This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json) Hash identifier: WVhWQ8EBln2SlIwsdjkE7g6a5viRu3UyBSkHppsrnK4= Subject key identifier: BB:99:E2:17:7D:2B:CF:5E:44:5B:FB:30:8B:DF:44:2D:DB:6B:3C:68 Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93 Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93 Certificate serial: 019B6F8FDBA9CCCA775434FA9457D455C934 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft Manifest number: 074B Signing time: Tue 30 Dec 2025 14:00:57 +0000 Manifest this update: Tue 30 Dec 2025 14:00:57 +0000 Manifest next update: Wed 31 Dec 2025 14:00:57 +0000 Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: iyRcBxeI8iOEgkTfmKPuvMrYsi2rrdVIbNQ+iwRX5aM=) 2: Q6We2_Kzknmf_FU65X_ThS9Li9U.roa (hash: T5kdvis2FcaJDZX7ZiymCfqr46qyRqmHtR1xf7wekhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:8f:db:a9:cc:ca:77:54:34:fa:94:57:d4:55:c9:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93 Validity Not Before: Dec 30 14:00:57 2025 GMT Not After : Dec 31 14:00:57 2025 GMT Subject: CN=bb99e2177d2bcf5e445bfb308bdf442ddb6b3c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:48:a5:56:a1:e2:90:a0:70:1c:36:b6:32: 5d:85:ae:ab:c4:0a:ff:62:20:0f:c8:75:49:92:19: ac:fe:06:c8:f6:df:00:93:05:00:7b:a8:bd:95:db: 87:59:07:0a:bb:ce:65:54:3c:46:56:5d:86:b5:46: 2c:52:af:64:66:e4:f0:31:3d:07:2c:ec:f7:b6:51: 26:f9:8c:5c:a2:d5:31:39:9c:18:a2:e4:ee:5f:4e: c0:29:2a:88:8d:fc:cf:81:4b:35:58:cc:66:1e:33: 76:b6:22:8a:9e:5d:7a:10:d9:62:36:87:67:a0:a4: 8a:a0:72:d2:75:30:d1:f5:88:2d:75:2b:6a:00:7a: 38:bb:22:ef:7b:ea:8c:9d:92:00:b7:89:46:73:3b: 17:7b:36:45:c2:e4:7d:e2:b4:ff:bf:47:52:25:2f: 50:22:a7:14:6d:eb:4b:fc:e2:22:99:8f:55:df:7b: 58:1a:9c:93:d4:19:ad:e8:64:00:59:e9:c9:0a:30: 3a:a7:b9:65:74:80:05:fe:53:a2:b9:32:f3:e0:38: 02:a8:31:c5:f2:33:10:d8:61:82:12:0b:b2:8c:f9: 41:0c:5d:ed:15:d3:bc:de:91:d0:e9:32:72:a8:11: 04:fe:d1:70:e7:67:ed:6a:ba:2b:68:26:14:91:9f: 43:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:99:E2:17:7D:2B:CF:5E:44:5B:FB:30:8B:DF:44:2D:DB:6B:3C:68 X509v3 Authority Key Identifier: keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:29:ab:d0:0f:59:21:2c:ed:b6:37:a2:63:67:78:9e:d5:ce: ac:cc:81:a3:96:f8:e0:d1:9a:6b:44:58:25:f5:23:50:bb:02: 2b:58:38:68:10:f3:41:4e:e9:c6:7b:52:63:5a:36:3a:54:72: 95:57:02:48:06:15:10:e5:fd:06:6f:2c:fe:52:62:40:32:4c: af:d1:11:5f:79:c5:70:61:e4:0b:81:25:9f:43:0e:84:1b:74: ce:86:cf:17:bf:17:e0:00:e1:41:db:1c:d0:cd:dc:29:51:b0: a5:8b:05:db:b7:dd:ea:2b:12:78:c3:16:68:e2:f8:09:96:3a: d6:75:2b:b9:4b:39:62:9d:c3:5c:6a:dd:ca:c0:62:00:b4:9a: 58:a4:b9:43:bd:f3:99:3b:f0:29:a3:a6:8c:21:54:e0:eb:ac: 72:42:5f:e3:01:fa:69:eb:d0:41:ac:2d:c5:03:a8:62:57:7c: c7:7f:12:11:8f:ff:67:8b:f3:90:57:f5:1a:af:e6:20:a5:91: eb:0a:06:4d:d2:47:69:38:e8:73:d8:48:d6:c7:83:88:5e:8c: ce:bc:9e:64:38:33:bb:00:99:23:c2:c4:12:c1:f9:61:b3:5e: a8:ab:5f:eb:7b:af:a7:4e:31:ce:52:96:d5:6f:13:a7:0b:48: 1c:48:e3:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvj9upzMp3VDT6lFfUVck0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGI0YTE4YTdlMTUxYTM3ZGE1ZTRjY2RhYTllN2RiZDg4 ZTlkOTMwHhcNMjUxMjMwMTQwMDU3WhcNMjUxMjMxMTQwMDU3WjAzMTEwLwYDVQQD EyhiYjk5ZTIxNzdkMmJjZjVlNDQ1YmZiMzA4YmRmNDQyZGRiNmIzYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVBIpVah4pCgcBw2tjJdha6rxAr/ YiAPyHVJkhms/gbI9t8AkwUAe6i9lduHWQcKu85lVDxGVl2GtUYsUq9kZuTwMT0H LOz3tlEm+YxcotUxOZwYouTuX07AKSqIjfzPgUs1WMxmHjN2tiKKnl16ENliNodn oKSKoHLSdTDR9YgtdStqAHo4uyLve+qMnZIAt4lGczsXezZFwuR94rT/v0dSJS9Q IqcUbetL/OIimY9V33tYGpyT1Bmt6GQAWenJCjA6p7lldIAF/lOiuTLz4DgCqDHF 8jMQ2GGCEguyjPlBDF3tFdO83pHQ6TJyqBEE/tFw52ftaroraCYUkZ9D3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuZ4hd9K89eRFv7MIvfRC3bazxoMB8GA1UdIwQY MBaAFNxLShin4VGjfaXkzNqp59vYjp2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUt M2RkMjkzZjc0ZTVlLzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUtM2RkMjkzZjc0ZTVl LzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVimr0A9Z ISzttjeiY2d4ntXOrMyBo5b44NGaa0RYJfUjULsCK1g4aBDzQU7pxntSY1o2OlRy lVcCSAYVEOX9Bm8s/lJiQDJMr9ERX3nFcGHkC4Eln0MOhBt0zobPF78X4ADhQdsc 0M3cKVGwpYsF27fd6isSeMMWaOL4CZY61nUruUs5Yp3DXGrdysBiALSaWKS5Q73z mTvwKaOmjCFU4OusckJf4wH6aevQQawtxQOoYld8x38SEY//Z4vzkFf1Gq/mIKWR 6woGTdJHaTjoc9hI1seDiF6MzryeZDgzuwCZI8LEEsH5YbNeqKtf63uvp04xzlKW 1W8TpwtIHEjjjA== -----END CERTIFICATE-----Generated at Tue Dec 30 16:32:32 2025 by rpki-client