This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json) Hash identifier: eifLV2npt+1j2K2Rm2OVxS45g0D6/4UVMRpiHHvpihw= Subject key identifier: 60:98:68:FB:59:15:C3:87:97:CB:2B:C5:71:8B:56:97:C1:AD:DA:B0 Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33 Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933 Certificate serial: 019B3C7E6076DF68DD753068CA30A60B4A9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:01:13 +0000 Manifest this update: Sat 20 Dec 2025 16:01:13 +0000 Manifest next update: Sun 21 Dec 2025 16:01:13 +0000 Files and hashes: 1: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: Xq6eiINydbnOTgh/3tqDtajx5RuwhaMmScHqqlE16FQ=) 2: zwiEAg55TtHyIaM_PRVFnX4DSAo.roa (hash: ylKaMThBpY1ZvZheIftHUUCXqnEHukLo3wFRWG0DpZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:60:76:df:68:dd:75:30:68:ca:30:a6:0b:4a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af782dae3d40caf2223262541c4054e62945d933 Validity Not Before: Dec 20 16:01:13 2025 GMT Not After : Dec 21 16:01:13 2025 GMT Subject: CN=609868fb5915c38797cb2bc5718b5697c1addab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5b:43:ba:35:15:58:01:0f:1e:96:92:a3:c7: c2:6c:5e:8d:39:ba:60:10:ae:16:10:92:92:10:a1: 0e:ce:bf:51:61:5e:78:d4:08:f8:7a:85:cc:90:2f: 18:0b:cc:86:49:7f:50:e9:ad:75:ed:9b:62:88:d5: c3:bc:39:81:04:b3:c0:25:60:64:6d:6b:96:9a:31: f0:d1:c8:10:d6:46:6b:8f:ea:95:39:9b:c3:da:e8: d6:d4:51:82:16:80:03:54:40:68:57:52:09:f4:66: 88:d3:d4:47:4b:8c:4e:e9:cc:ca:b0:d3:36:25:95: aa:3d:cb:75:5b:3e:ff:c1:4f:b1:9f:ab:1f:ff:1a: 2c:a2:a0:bd:34:51:28:c6:e3:cd:de:82:7a:05:39: 43:62:84:4e:76:99:32:3a:33:b6:fe:a2:a7:e3:4e: 02:c6:da:85:f1:96:57:fa:ef:f1:c8:98:06:91:f2: 77:bf:ae:95:dd:13:8d:f3:56:39:41:b2:28:41:71: 81:1c:63:ea:bf:40:37:4f:42:f3:b6:07:19:de:ae: 66:18:41:e5:98:68:24:fb:87:20:8f:9d:26:5c:6d: cd:ee:58:49:cf:72:71:80:63:6a:e2:52:ef:e4:bd: 74:1c:fe:dd:be:90:51:00:4d:64:3e:d8:32:12:10: a3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:98:68:FB:59:15:C3:87:97:CB:2B:C5:71:8B:56:97:C1:AD:DA:B0 X509v3 Authority Key Identifier: keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:cb:e3:28:b6:53:c7:0d:8e:96:0e:48:fe:cf:cd:9a:c5:14: b4:93:62:1c:e1:4d:e5:72:d2:88:07:50:3a:06:63:52:35:22: a3:49:6e:9c:c0:f1:ff:51:23:44:a4:fb:16:04:36:38:8c:64: 09:3e:7a:06:6d:38:72:48:13:83:d7:35:63:2c:7a:3a:b0:42: 52:d3:5a:99:43:d3:3f:7b:e1:0c:42:f8:40:9d:7b:d4:f4:0b: a1:e9:c9:a2:24:39:12:ec:74:d1:ef:71:4f:ba:62:56:5e:df: 9a:7e:47:60:f0:8f:a7:bc:2d:2f:1f:a2:27:0e:86:a1:fa:bf: af:52:21:cf:57:60:13:48:dc:df:d3:81:2c:48:c3:9a:bb:5a: aa:c6:c3:62:dc:a1:a2:d0:6e:33:da:1a:47:42:93:c8:85:21: 8f:b8:9d:64:cd:ad:37:77:73:5d:dd:67:41:c3:96:cc:42:28: d5:94:6d:b4:97:20:35:87:b5:b0:9d:9e:ad:ca:99:9f:89:39: e8:62:12:8c:bf:32:9d:27:46:09:d9:26:52:d7:6a:b2:b4:06: df:08:e6:d2:a2:39:ef:93:84:4b:30:c6:1a:b4:ac:a5:de:05: 89:2e:d3:d3:b8:4c:ca:c2:15:5f:63:18:a1:dc:18:e3:32:9f: 22:3c:da:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fmB232jddTBoyjCmC0qdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzgyZGFlM2Q0MGNhZjIyMjMyNjI1NDFjNDA1NGU2Mjk0 NWQ5MzMwHhcNMjUxMjIwMTYwMTEzWhcNMjUxMjIxMTYwMTEzWjAzMTEwLwYDVQQD Eyg2MDk4NjhmYjU5MTVjMzg3OTdjYjJiYzU3MThiNTY5N2MxYWRkYWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1tDujUVWAEPHpaSo8fCbF6NObpg EK4WEJKSEKEOzr9RYV541Aj4eoXMkC8YC8yGSX9Q6a117ZtiiNXDvDmBBLPAJWBk bWuWmjHw0cgQ1kZrj+qVOZvD2ujW1FGCFoADVEBoV1IJ9GaI09RHS4xO6czKsNM2 JZWqPct1Wz7/wU+xn6sf/xosoqC9NFEoxuPN3oJ6BTlDYoROdpkyOjO2/qKn404C xtqF8ZZX+u/xyJgGkfJ3v66V3RON81Y5QbIoQXGBHGPqv0A3T0LztgcZ3q5mGEHl mGgk+4cgj50mXG3N7lhJz3JxgGNq4lLv5L10HP7dvpBRAE1kPtgyEhCjawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCYaPtZFcOHl8srxXGLVpfBrdqwMB8GA1UdIwQY MBaAFK94La49QMryIjJiVBxAVOYpRdkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kZWU4MzMtZmU1Yi00YzEwLWJiZWMt ZjAxMjVkMDJlMjYyLzEvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kZWU4MzMtZmU1Yi00YzEwLWJiZWMtZjAxMjVkMDJlMjYy LzEvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArMvjKLZT xw2Olg5I/s/NmsUUtJNiHOFN5XLSiAdQOgZjUjUio0lunMDx/1EjRKT7FgQ2OIxk CT56Bm04ckgTg9c1Yyx6OrBCUtNamUPTP3vhDEL4QJ171PQLoenJoiQ5Eux00e9x T7piVl7fmn5HYPCPp7wtLx+iJw6Gofq/r1Ihz1dgE0jc39OBLEjDmrtaqsbDYtyh otBuM9oaR0KTyIUhj7idZM2tN3dzXd1nQcOWzEIo1ZRttJcgNYe1sJ2ercqZn4k5 6GISjL8ynSdGCdkmUtdqsrQG3wjm0qI575OESzDGGrSspd4FiS7T07hMysIVX2MY odwY4zKfIjzaEA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:11 2025 by rpki-client