This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json) Hash identifier: QJ6WFEx/g7tR+sXl79CkhE/mGnS6eCEL97iJVI36YIM= Subject key identifier: 15:A9:23:73:70:CC:A4:62:17:66:3F:FA:4E:3D:30:15:57:E1:A2:13 Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f Certificate serial: 019B58637EA30FEF1BE5DB3C0EDE9CE00882 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 02:01:13 +0000 Manifest this update: Fri 26 Dec 2025 02:01:13 +0000 Manifest next update: Sat 27 Dec 2025 02:01:13 +0000 Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: FULBub/fLSd7YwImrQyACSL7w00mrfsa/xF0anRqXH4=) 2: sHHovkPcLVWIMQ_tboQIdcTBHy0.roa (hash: fYwK2GNfLuzV598M+4d1qnmBbMriSVB83QSoeu+hALg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:63:7e:a3:0f:ef:1b:e5:db:3c:0e:de:9c:e0:08:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f Validity Not Before: Dec 26 02:01:13 2025 GMT Not After : Dec 27 02:01:13 2025 GMT Subject: CN=15a9237370cca46217663ffa4e3d301557e1a213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:de:ec:3d:c0:71:07:53:d1:aa:2b:0e:c9: a9:9a:42:cb:56:8b:81:2a:b9:2b:b8:c2:fe:12:d2: 7e:f2:b8:65:7b:98:96:78:cd:51:ef:07:8d:34:69: ef:9c:5c:c2:d4:99:47:d1:61:bc:25:6f:bc:18:29: 5c:dc:18:77:1c:44:61:fc:e0:da:f3:ef:8b:78:60: 3c:a2:8c:e0:8c:96:c1:ff:cf:d0:50:ea:9d:5a:34: 08:9d:c0:3e:2d:f1:e7:e8:d2:5e:8a:a4:de:5a:d1: 05:ad:04:6f:19:4f:eb:06:86:24:65:ea:ae:92:ed: d7:a6:29:f1:a6:fb:ff:df:88:9a:bc:88:ec:2e:41: 35:12:05:0e:f0:c3:2c:c0:66:d6:ef:0c:a2:a7:f5: e2:9e:ae:1d:6b:c0:4a:6e:14:1e:31:57:86:ea:2f: 0f:60:d9:86:60:bd:0b:bc:cd:26:6e:bf:b3:e0:4b: 2e:2a:53:b4:71:e8:df:88:93:56:83:1b:a2:45:74: f5:85:0e:9b:3d:dd:82:47:24:75:bd:27:93:93:1b: a5:ab:42:8d:af:c3:1b:fd:98:dd:06:5a:7c:bb:78: 41:72:28:98:73:3f:eb:e0:d0:19:d6:45:e8:bf:34: b6:f7:43:b3:5b:ee:54:ec:3e:81:2e:66:b0:5c:04: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A9:23:73:70:CC:A4:62:17:66:3F:FA:4E:3D:30:15:57:E1:A2:13 X509v3 Authority Key Identifier: keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e6:bd:7f:4f:5b:4f:a7:c1:d3:b7:4a:75:ab:6d:aa:54:d1: c4:4e:e0:90:8e:4b:93:e9:c4:f4:86:ae:f3:99:ff:ad:ba:e1: 89:3b:cb:2e:85:8e:07:f4:95:8f:fa:48:0b:06:6d:10:06:a1: 74:09:37:a5:7f:f3:48:d4:6b:89:29:27:e8:dd:ff:91:b3:68: 00:1f:32:f9:9f:75:a1:67:2d:7c:e9:c3:31:20:ff:a0:a8:7a: 25:c0:c9:82:98:60:2b:00:a5:b9:82:d6:84:15:82:36:4b:db: 85:34:cc:46:c7:f8:7c:d8:9e:54:2a:ef:45:64:15:25:1b:ef: ba:50:82:f7:55:e6:63:ac:a8:ae:c5:ac:c7:26:36:9a:a2:5b: de:59:a6:1b:68:71:79:b1:c4:e1:fb:4d:4a:ba:5c:39:58:4b: f8:9d:c7:58:3f:2f:55:61:33:64:7b:17:83:f7:88:ed:ba:40: c9:66:38:f6:6c:fc:76:c2:ba:41:90:2f:0e:17:03:fa:f0:13: a7:60:61:48:64:df:bc:7b:84:56:84:69:38:5c:e4:9d:f0:bf: 53:c1:7f:a5:44:1d:a1:42:87:27:75:4b:e0:c6:43:e6:59:fc: 6b:ef:92:fa:96:a3:52:f1:27:02:0e:59:07:46:02:0f:91:e1: 59:5b:04:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYY36jD+8b5ds8Dt6c4AiCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMDg1YjBkMWJiZjllNzgxYjE1NGIwNmY3YjkxNDExMjlk Yjc3NWYwHhcNMjUxMjI2MDIwMTEzWhcNMjUxMjI3MDIwMTEzWjAzMTEwLwYDVQQD EygxNWE5MjM3MzcwY2NhNDYyMTc2NjNmZmE0ZTNkMzAxNTU3ZTFhMjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjDe7D3AcQdT0aorDsmpmkLLVouB KrkruML+EtJ+8rhle5iWeM1R7weNNGnvnFzC1JlH0WG8JW+8GClc3Bh3HERh/ODa 8++LeGA8oozgjJbB/8/QUOqdWjQIncA+LfHn6NJeiqTeWtEFrQRvGU/rBoYkZequ ku3Xpinxpvv/34iavIjsLkE1EgUO8MMswGbW7wyip/Xinq4da8BKbhQeMVeG6i8P YNmGYL0LvM0mbr+z4EsuKlO0cejfiJNWgxuiRXT1hQ6bPd2CRyR1vSeTkxulq0KN r8Mb/ZjdBlp8u3hBciiYcz/r4NAZ1kXovzS290OzW+5U7D6BLmawXATuwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWpI3NwzKRiF2Y/+k49MBVX4aITMB8GA1UdIwQY MBaAFN4IWw0bv554GxVLBve5FBEp23dfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZjAzYTMtMzFhMS00ZGExLWI4ZTkt N2EwYjNkNWQ5MTU2LzEvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mZjAzYTMtMzFhMS00ZGExLWI4ZTktN2EwYjNkNWQ5MTU2 LzEvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOa9f09b T6fB07dKdattqlTRxE7gkI5Lk+nE9Iau85n/rbrhiTvLLoWOB/SVj/pICwZtEAah dAk3pX/zSNRriSkn6N3/kbNoAB8y+Z91oWctfOnDMSD/oKh6JcDJgphgKwCluYLW hBWCNkvbhTTMRsf4fNieVCrvRWQVJRvvulCC91XmY6yorsWsxyY2mqJb3lmmG2hx ebHE4ftNSrpcOVhL+J3HWD8vVWEzZHsXg/eI7bpAyWY49mz8dsK6QZAvDhcD+vAT p2BhSGTfvHuEVoRpOFzknfC/U8F/pUQdoUKHJ3VL4MZD5ln8a++S+pajUvEnAg5Z B0YCD5HhWVsEdw== -----END CERTIFICATE-----Generated at Fri Dec 26 03:11:24 2025 by rpki-client