This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json) Hash identifier: +jodx5UMbzrzuFAorwZqhSJAloQHY0qUabh8ogiKGmA= Subject key identifier: 58:28:24:5E:A5:86:B4:86:B8:BC:AD:9B:C9:A5:39:D0:76:2F:30:13 Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8 Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8 Certificate serial: 019B3F480F7DDECAC5A96AB8640FC8DEDEDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft Manifest number: 0937 Signing time: Sun 21 Dec 2025 05:00:45 +0000 Manifest this update: Sun 21 Dec 2025 05:00:45 +0000 Manifest next update: Mon 22 Dec 2025 05:00:45 +0000 Files and hashes: 1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=) 2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=) 3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: Wha3yFxi1o8vdrId2+Ts914OutBRgYaP8EJkSq5GqRE=) 4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:0f:7d:de:ca:c5:a9:6a:b8:64:0f:c8:de:de:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8 Validity Not Before: Dec 21 05:00:45 2025 GMT Not After : Dec 22 05:00:45 2025 GMT Subject: CN=5828245ea586b486b8bcad9bc9a539d0762f3013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:37:f3:92:df:79:84:57:48:a6:1c:89:94:d0: 33:0a:99:1b:b6:77:bf:49:8e:55:04:6b:5a:06:e0: b0:75:3d:8f:71:af:10:ab:bc:15:61:50:ab:f8:9e: bf:27:e5:75:d2:2c:4f:12:c0:46:fb:69:34:70:e7: 75:0e:f8:f4:22:43:36:50:f7:6e:62:e5:03:eb:1c: 9c:05:5a:e3:6f:e7:60:3b:de:cb:03:40:40:24:64: fb:60:92:81:8b:15:d3:54:c3:60:ee:6f:9d:4a:da: 03:d7:0f:cf:07:17:64:c2:1b:40:97:38:03:2f:21: d4:f6:bb:51:b0:b1:cd:4e:e6:58:2a:ea:31:a9:e8: 2f:ad:f5:22:2b:47:07:47:34:af:35:1f:c6:bd:a1: 68:d2:11:e2:4d:11:9a:26:42:55:07:7d:4c:c9:cb: 61:36:42:2c:df:b9:7f:c2:a5:eb:5e:e3:13:b9:63: 7e:d1:89:31:87:74:36:e0:ee:2f:e4:66:20:cc:1f: 73:2c:ac:ba:20:33:03:e0:ff:5c:d1:0d:4e:c0:7c: e1:1e:6a:a9:90:7a:10:25:4e:69:97:b5:af:59:1c: 3a:d6:66:63:dc:18:d0:c6:3d:2a:64:8d:01:f3:d6: c4:ad:8b:88:42:70:3e:02:c3:e2:c6:2a:dd:98:fa: 5d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:28:24:5E:A5:86:B4:86:B8:BC:AD:9B:C9:A5:39:D0:76:2F:30:13 X509v3 Authority Key Identifier: keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:3e:ea:82:a7:bb:d3:09:3f:82:4e:73:3e:80:08:fb:da:a5: cd:ac:1f:35:43:b4:30:a6:cb:b1:d7:b9:70:f1:5d:15:35:e5: f4:cd:cd:07:ed:fe:6b:5c:e3:22:a0:9c:7c:b6:30:b9:eb:e7: 6f:d4:4b:30:b1:c4:f5:21:6b:ae:4e:3b:3b:af:f9:30:5f:74: ff:2c:14:a7:de:92:9a:3f:dd:2b:34:0e:12:26:65:e3:d5:4c: 0f:29:6e:5d:07:cd:0c:8b:92:73:4d:d9:c7:3c:75:fd:9a:f4: 42:45:60:2d:24:92:2b:b0:74:34:c5:36:a4:1f:bb:81:10:d3: 09:3e:44:3f:f0:d7:5c:88:03:27:ce:a7:28:dd:1c:61:15:0b: 66:1d:c5:96:20:45:28:c8:69:ed:60:c2:aa:01:8a:8e:d4:f0: ab:07:4c:6e:4a:6e:84:86:a4:e6:24:12:a1:3b:f9:ad:b3:34: 8a:f3:e5:3e:19:f0:02:94:cc:52:1e:f6:80:f1:7d:39:98:e8: a1:4d:99:e7:66:37:75:ad:fd:0c:7f:7e:21:1b:a2:db:89:c3: ff:e9:85:0d:27:82:2a:d3:e1:49:19:83:b2:88:e0:04:af:bd: 02:46:ee:7a:3f:fb:60:8f:35:90:be:ad:00:83:b4:ff:2b:06: cd:5a:c3:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SA993srFqWq4ZA/I3t7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NzBiZjIzNzVkNTliYTgxYTk5NTVjMDdhMmYwYTIzMjY0 YjYxYTgwHhcNMjUxMjIxMDUwMDQ1WhcNMjUxMjIyMDUwMDQ1WjAzMTEwLwYDVQQD Eyg1ODI4MjQ1ZWE1ODZiNDg2YjhiY2FkOWJjOWE1MzlkMDc2MmYzMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Dfzkt95hFdIphyJlNAzCpkbtne/ SY5VBGtaBuCwdT2Pca8Qq7wVYVCr+J6/J+V10ixPEsBG+2k0cOd1Dvj0IkM2UPdu YuUD6xycBVrjb+dgO97LA0BAJGT7YJKBixXTVMNg7m+dStoD1w/PBxdkwhtAlzgD LyHU9rtRsLHNTuZYKuoxqegvrfUiK0cHRzSvNR/GvaFo0hHiTRGaJkJVB31Mycth NkIs37l/wqXrXuMTuWN+0Ykxh3Q24O4v5GYgzB9zLKy6IDMD4P9c0Q1OwHzhHmqp kHoQJU5pl7WvWRw61mZj3BjQxj0qZI0B89bErYuIQnA+AsPixirdmPpdjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgoJF6lhrSGuLytm8mlOdB2LzATMB8GA1UdIwQY MBaAFJdwvyN11ZuoGplVwHovCiMmS2GoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWIt OGQzNGY1NTc4MjJhLzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWItOGQzNGY1NTc4MjJh LzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABD7qgqe7 0wk/gk5zPoAI+9qlzawfNUO0MKbLsde5cPFdFTXl9M3NB+3+a1zjIqCcfLYwuevn b9RLMLHE9SFrrk47O6/5MF90/ywUp96Smj/dKzQOEiZl49VMDyluXQfNDIuSc03Z xzx1/Zr0QkVgLSSSK7B0NMU2pB+7gRDTCT5EP/DXXIgDJ86nKN0cYRULZh3FliBF KMhp7WDCqgGKjtTwqwdMbkpuhIak5iQSoTv5rbM0ivPlPhnwApTMUh72gPF9OZjo oU2Z52Y3da39DH9+IRui24nD/+mFDSeCKtPhSRmDsojgBK+9Akbuej/7YI81kL6t AIO0/ysGzVrDcw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:30:46 2025 by rpki-client