This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft File: 3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json) Hash identifier: QecE1d9ipN+DoHXVD24jxgMsnpwcJZT87wnaHqmIDP8= Subject key identifier: E0:93:1A:58:5A:BB:69:6E:5D:B5:6D:2C:63:2A:40:A7:D8:13:21:E1 Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22 Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322 Certificate serial: 019B3DC75576DB7CC139C735EEDE9ACD9FD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft Manifest number: 122A Signing time: Sat 20 Dec 2025 22:00:32 +0000 Manifest this update: Sat 20 Dec 2025 22:00:32 +0000 Manifest next update: Sun 21 Dec 2025 22:00:32 +0000 Files and hashes: 1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: 8qLlkDYNDI9WQRRyu8RJ7JAJGGSfDCKpcoIp5mW/nA8=) 2: To63YyOS4m4xGKG36WLK52zQE8c.roa (hash: tp9xM1hLtDqI8FvsSwdqSoCI37g77m4oJd7PdWAciIs=) 3: nCbygDSQqVJActb3a9ygHH55YMo.roa (hash: q7RNrOka1+1oTdyfp9kvm4i2FWeBDfQoN31cSGJUoVg=) 4: rNJomldCeu_xMB-3_GrfVy4SpuA.roa (hash: 0qwCuh+Crxi2V764XIv8ArKA6g54Zdfi93Itg0+iAvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:55:76:db:7c:c1:39:c7:35:ee:de:9a:cd:9f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322 Validity Not Before: Dec 20 22:00:32 2025 GMT Not After : Dec 21 22:00:32 2025 GMT Subject: CN=e0931a585abb696e5db56d2c632a40a7d81321e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:cc:13:fb:d4:6e:4b:61:92:66:1d:22:a2: 27:75:4f:4c:4a:e0:ab:e7:65:97:f0:c5:39:ff:98: ff:fb:c8:27:54:66:b0:98:8a:c3:d1:6a:e2:74:05: 33:8f:46:a2:48:83:5d:8f:34:8e:2a:77:73:86:0c: fe:ca:8c:98:86:3f:c4:cc:0d:f6:a5:05:ca:69:35: c6:f4:36:32:c6:23:c7:87:52:2e:fa:43:70:02:a1: 73:26:f8:85:ad:8b:03:b3:04:93:3d:85:6a:5a:66: 8b:88:ce:ec:17:11:23:78:04:a5:5a:e2:0d:8a:6a: 73:c2:81:81:fa:8f:57:81:68:88:44:ff:33:c6:60: c6:89:7b:c7:d9:62:da:d1:56:c6:51:df:af:d3:dd: 4a:80:71:13:a6:a8:bb:cf:5e:76:e8:5b:aa:7a:61: c6:a1:64:73:f1:95:39:e1:b9:ee:df:84:b2:97:0a: 67:1e:f9:21:a5:f8:48:c2:35:4a:d2:63:2d:c1:4b: d2:2c:52:c0:4e:81:28:a9:e6:8f:20:76:fe:27:e5: a7:8a:4c:91:bf:89:95:7d:dc:00:8b:87:6f:6b:f2: 5a:6d:e7:07:60:35:f9:db:95:6d:b0:b4:ad:40:ea: c0:c9:61:1b:07:68:e0:26:3f:00:b1:d2:f7:06:d3: 2b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:93:1A:58:5A:BB:69:6E:5D:B5:6D:2C:63:2A:40:A7:D8:13:21:E1 X509v3 Authority Key Identifier: keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:7b:70:63:9b:ab:4c:2f:5e:6b:f4:94:88:5a:5f:e9:33:18: 9d:aa:8c:9f:9a:bf:5d:40:0c:8b:07:19:38:ca:9a:a5:3b:fc: 60:02:b0:22:13:f4:75:35:2c:73:c9:81:a5:2b:4e:71:5e:3f: 57:43:3f:56:7b:80:72:c5:0a:93:f7:21:b7:e1:8c:23:6c:b9: ad:57:6a:ae:d7:e4:0f:a0:bd:04:01:cd:ba:4b:2a:c5:4b:6b: 8e:82:6e:7c:b7:2e:d1:58:e7:3c:d4:2c:0d:c8:9c:d0:2f:d5: d7:41:82:6c:d4:a4:f7:66:42:31:56:d6:93:1b:f8:92:69:6e: 4b:cc:a3:7c:33:a2:ed:49:48:53:d8:4a:fa:bd:3a:9b:e7:2d: 4d:63:e1:c3:a2:c6:38:c2:88:f2:94:9a:c4:cd:ca:f8:97:7f: 14:b3:95:bd:dd:e5:9b:c6:0d:de:50:1c:f9:7e:4e:e1:b3:6e: c7:1f:72:a1:f1:d9:fd:ff:03:d8:6a:f0:0b:70:aa:70:27:ec: 52:f9:9e:ae:11:ae:f3:29:85:29:8f:0a:b8:52:e8:c6:9c:c4: 5d:f2:4e:d6:77:bd:29:3b:a6:0b:4b:d3:9a:cf:3d:de:93:d8: 0a:74:02:59:95:63:d3:a4:45:3f:a8:be:ad:07:bc:ac:66:e4: 26:df:5a:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x1V223zBOcc17t6azZ/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTQ2MWMyMTFiZjM1NTFjNTUwN2M5MzBiNDIwNGM2ZWM0 M2IzMjIwHhcNMjUxMjIwMjIwMDMyWhcNMjUxMjIxMjIwMDMyWjAzMTEwLwYDVQQD EyhlMDkzMWE1ODVhYmI2OTZlNWRiNTZkMmM2MzJhNDBhN2Q4MTMyMWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydPME/vUbkthkmYdIqIndU9MSuCr 52WX8MU5/5j/+8gnVGawmIrD0WridAUzj0aiSINdjzSOKndzhgz+yoyYhj/EzA32 pQXKaTXG9DYyxiPHh1Iu+kNwAqFzJviFrYsDswSTPYVqWmaLiM7sFxEjeASlWuIN impzwoGB+o9XgWiIRP8zxmDGiXvH2WLa0VbGUd+v091KgHETpqi7z1526FuqemHG oWRz8ZU54bnu34SylwpnHvkhpfhIwjVK0mMtwUvSLFLAToEoqeaPIHb+J+WnikyR v4mVfdwAi4dva/JabecHYDX525VtsLStQOrAyWEbB2jgJj8AsdL3BtMrmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCTGlhau2luXbVtLGMqQKfYEyHhMB8GA1UdIwQY MBaAFN6UYcIRvzVRxVB8kwtCBMbsQ7MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2Zjct ODIwMmE0NjdkNzUzLzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2ZjctODIwMmE0NjdkNzUz LzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHtwY5ur TC9ea/SUiFpf6TMYnaqMn5q/XUAMiwcZOMqapTv8YAKwIhP0dTUsc8mBpStOcV4/ V0M/VnuAcsUKk/cht+GMI2y5rVdqrtfkD6C9BAHNuksqxUtrjoJufLcu0VjnPNQs Dcic0C/V10GCbNSk92ZCMVbWkxv4kmluS8yjfDOi7UlIU9hK+r06m+ctTWPhw6LG OMKI8pSaxM3K+Jd/FLOVvd3lm8YN3lAc+X5O4bNuxx9yofHZ/f8D2GrwC3CqcCfs UvmerhGu8ymFKY8KuFLoxpzEXfJO1ne9KTumC0vTms893pPYCnQCWZVj06RFP6i+ rQe8rGbkJt9akQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:05:23 2025 by rpki-client