This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json) Hash identifier: HtUO/jFWrwLbMEJVxxv4Hzo3jCk4S1ATLVTDUbfFJY8= Subject key identifier: FF:4C:0E:2F:73:37:45:BA:AB:6A:FB:9A:A8:40:F8:EE:FD:01:B6:F9 Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93 Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93 Certificate serial: 019B3B6BB24AF7DA347CFB47803CDDADA2DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft Manifest number: 0730 Signing time: Sat 20 Dec 2025 11:01:12 +0000 Manifest this update: Sat 20 Dec 2025 11:01:12 +0000 Manifest next update: Sun 21 Dec 2025 11:01:12 +0000 Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: /eExP41P8XaXhbrYiIAhnbcXNv4ilrmTaPh4kznCimk=) 2: Q6We2_Kzknmf_FU65X_ThS9Li9U.roa (hash: T5kdvis2FcaJDZX7ZiymCfqr46qyRqmHtR1xf7wekhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:b2:4a:f7:da:34:7c:fb:47:80:3c:dd:ad:a2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93 Validity Not Before: Dec 20 11:01:12 2025 GMT Not After : Dec 21 11:01:12 2025 GMT Subject: CN=ff4c0e2f733745baab6afb9aa840f8eefd01b6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:08:1f:8a:c5:00:98:f7:78:a4:ce:97:9d:79: 31:60:f7:32:1d:1b:ec:d9:d1:48:30:70:5f:d0:b5: 36:d8:ea:fa:56:1b:3a:f9:e4:aa:86:99:19:69:d1: c6:d2:8a:5b:0e:9e:02:b4:ea:b6:78:1c:43:68:48: 3a:e1:5b:45:ac:c2:0e:e3:1a:42:72:38:19:1f:3b: ee:75:e8:34:3a:06:ff:e4:30:ed:59:76:8d:fa:27: 9d:2e:16:22:ba:29:2a:e2:fb:57:62:42:af:f7:a0: 79:43:0e:be:80:14:28:1c:bc:e5:b3:d8:fb:fe:43: cd:a8:20:bb:ac:a4:03:d5:af:ed:b0:26:28:06:98: b6:eb:20:10:dd:cc:b9:13:f1:d6:d7:76:72:e9:e9: 96:e4:36:32:7f:d1:d7:70:ea:6f:b2:f8:2c:e3:4b: 2f:55:ca:a9:33:b0:9d:9b:e6:af:14:e0:38:61:99: ed:a1:4e:05:1e:89:bd:b1:77:42:2f:78:56:cc:5b: 9e:99:c2:8a:8e:1f:13:ca:eb:67:8b:dd:85:1c:6b: e1:6c:c7:f5:5c:d2:10:62:9a:59:b4:f2:63:1c:fe: 8f:f9:31:64:3f:23:e0:57:a0:e4:0b:1a:2a:80:e9: f6:6f:8b:8f:63:57:75:2e:07:9d:bd:17:5a:dd:bf: 51:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4C:0E:2F:73:37:45:BA:AB:6A:FB:9A:A8:40:F8:EE:FD:01:B6:F9 X509v3 Authority Key Identifier: keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5f:32:4c:11:e2:1a:28:99:27:cf:51:f2:49:84:34:90:53: 3c:12:e3:f2:4d:e3:3a:f1:8a:ae:da:e2:d7:7b:3c:f4:31:fe: ef:a9:79:a0:1a:0e:41:93:5e:65:e6:fe:f5:72:da:52:78:84: dd:c3:e9:a2:0a:b4:16:21:db:01:a9:ba:d2:eb:5b:06:53:87: bb:00:cb:a0:89:ec:31:33:10:6b:aa:dc:a1:70:df:2f:08:ef: 78:db:a8:cd:16:49:d6:59:27:ba:70:9c:4d:fc:b2:33:0a:e9: be:cb:74:c7:dc:13:c7:54:76:8d:f7:e5:0f:a1:38:0c:3e:ce: 01:45:56:9d:ac:6f:e4:96:65:23:ea:12:b2:bd:65:ee:6c:62: 3c:c1:a2:21:05:ce:19:b1:6b:a5:ae:37:ec:34:89:af:e7:7c: 1f:4f:74:7b:7a:20:c5:fc:36:42:b8:b9:3b:0c:3b:08:0e:ae: e3:e3:db:78:59:32:6d:e3:26:3d:a6:21:24:3c:e9:65:2a:6d: e6:37:63:75:32:5d:4d:49:0c:b3:ba:ed:9b:ff:35:8f:68:2f: 99:b4:1c:af:a0:12:d6:7e:1f:9b:4b:78:2c:cd:b8:40:1d:71: 8d:08:65:ba:f7:1f:77:40:0b:b1:97:2f:2b:df:b4:0c:73:e8: 39:4a:e8:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a7JK99o0fPtHgDzdraLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGI0YTE4YTdlMTUxYTM3ZGE1ZTRjY2RhYTllN2RiZDg4 ZTlkOTMwHhcNMjUxMjIwMTEwMTEyWhcNMjUxMjIxMTEwMTEyWjAzMTEwLwYDVQQD EyhmZjRjMGUyZjczMzc0NWJhYWI2YWZiOWFhODQwZjhlZWZkMDFiNmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wgfisUAmPd4pM6XnXkxYPcyHRvs 2dFIMHBf0LU22Or6Vhs6+eSqhpkZadHG0opbDp4CtOq2eBxDaEg64VtFrMIO4xpC cjgZHzvudeg0Ogb/5DDtWXaN+iedLhYiuikq4vtXYkKv96B5Qw6+gBQoHLzls9j7 /kPNqCC7rKQD1a/tsCYoBpi26yAQ3cy5E/HW13Zy6emW5DYyf9HXcOpvsvgs40sv VcqpM7Cdm+avFOA4YZntoU4FHom9sXdCL3hWzFuemcKKjh8Tyutni92FHGvhbMf1 XNIQYppZtPJjHP6P+TFkPyPgV6DkCxoqgOn2b4uPY1d1LgedvRda3b9RcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9MDi9zN0W6q2r7mqhA+O79Abb5MB8GA1UdIwQY MBaAFNxLShin4VGjfaXkzNqp59vYjp2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUt M2RkMjkzZjc0ZTVlLzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUtM2RkMjkzZjc0ZTVl LzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa18yTBHi GiiZJ89R8kmENJBTPBLj8k3jOvGKrtri13s89DH+76l5oBoOQZNeZeb+9XLaUniE 3cPpogq0FiHbAam60utbBlOHuwDLoInsMTMQa6rcoXDfLwjveNuozRZJ1lknunCc TfyyMwrpvst0x9wTx1R2jfflD6E4DD7OAUVWnaxv5JZlI+oSsr1l7mxiPMGiIQXO GbFrpa437DSJr+d8H090e3ogxfw2Qri5Oww7CA6u4+PbeFkybeMmPaYhJDzpZSpt 5jdjdTJdTUkMs7rtm/81j2gvmbQcr6AS1n4fm0t4LM24QB1xjQhluvcfd0ALsZcv K9+0DHPoOUro1g== -----END CERTIFICATE-----Generated at Sat Dec 20 20:00:06 2025 by rpki-client