This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft File: 3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json) Hash identifier: p312mmbFxu++reis3yf5CI6PydpocgbO2roOj9UETog= Subject key identifier: B9:25:52:7F:AA:F2:CB:D5:BB:E5:EF:E9:95:B3:8F:50:F9:C3:AC:83 Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE Certificate issuer: /CN=def838503cfbc05283fdeadd4644a47bfd783fce Certificate serial: 019B5E9C197A3443D1EB50AB100A686B68A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft Manifest number: 09C3 Signing time: Sat 27 Dec 2025 07:00:46 +0000 Manifest this update: Sat 27 Dec 2025 07:00:46 +0000 Manifest next update: Sun 28 Dec 2025 07:00:46 +0000 Files and hashes: 1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: Adfw1CeQDWTPxgNMKvaQevt/CDHx81N5gRAKO4lR5Xs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9c:19:7a:34:43:d1:eb:50:ab:10:0a:68:6b:68:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce Validity Not Before: Dec 27 07:00:46 2025 GMT Not After : Dec 28 07:00:46 2025 GMT Subject: CN=b925527faaf2cbd5bbe5efe995b38f50f9c3ac83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:75:ef:ea:be:09:49:32:83:0b:69:c7:89:bd: 3a:29:c0:ce:1d:6e:eb:8b:44:d9:84:f1:1c:93:d3: 75:0f:6a:8b:12:a9:ac:6f:37:f2:78:8b:14:1f:05: 78:5a:42:56:ea:0b:3f:de:67:6e:d2:ae:7d:bf:17: 82:85:58:07:2f:fd:82:88:54:59:8d:37:c9:6c:fb: ab:e6:57:c1:57:e2:14:1f:32:a7:a5:09:71:67:b3: 2e:27:30:f0:6d:ae:7a:38:30:bd:85:eb:58:5c:27: 7b:3c:f1:57:ff:3b:39:da:4b:14:c1:31:81:56:e3: 05:50:e2:8e:5d:6d:25:f6:10:16:b5:f1:e9:7a:f1: ad:8a:c9:2e:ff:c1:41:e7:b6:32:18:46:b4:2b:b4: 20:00:ae:6e:84:52:1e:63:32:74:2e:65:00:d5:90: 32:a6:e2:3c:25:2d:b7:02:3f:b6:6c:9b:72:9c:02: 7e:28:59:8d:c7:40:25:d9:bd:6e:9a:4b:34:b7:ce: b3:4d:aa:54:ba:a2:f9:a0:0a:4f:e0:39:2a:18:e3: 1b:a6:15:04:fd:73:f3:ca:e9:78:ed:0d:2f:61:a6: ba:7c:48:3d:df:ab:70:e3:42:12:e9:f9:8a:d3:81: 05:5e:17:8c:b8:88:7f:09:74:f0:b0:95:77:e0:9f: d9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:25:52:7F:AA:F2:CB:D5:BB:E5:EF:E9:95:B3:8F:50:F9:C3:AC:83 X509v3 Authority Key Identifier: keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:2e:45:41:2d:8d:4c:b0:72:64:33:78:97:53:cb:9b:f6:5f: 51:4f:61:a2:84:b2:c5:81:81:0c:b9:83:7b:98:ff:1b:79:f6: 74:71:1c:2c:9b:49:d6:ed:39:a3:fd:3d:cf:3c:d8:be:ca:dd: f7:71:da:05:1b:a8:e1:ff:0d:e7:e2:c1:7a:4a:a7:53:bf:c6: 7a:65:c8:5e:34:60:33:ba:13:80:62:89:68:36:a8:4e:7b:13: 90:d0:dc:b8:a0:13:89:c0:68:4c:f6:b9:d9:80:4c:38:04:7a: ed:c9:32:96:8c:5e:40:35:30:d9:e5:97:dc:cf:88:0e:98:24: ba:63:fd:5e:f6:01:fb:c9:58:8f:a1:0a:11:d7:53:f1:77:50: a4:c4:94:8b:2e:59:69:3c:47:02:23:b7:98:40:2b:e3:a8:9e: 2b:ef:d9:d3:a5:e0:cf:be:fc:f9:c3:16:5d:6c:f9:db:f8:d6: b9:1d:9e:29:ef:2b:bd:db:29:97:61:8a:52:4f:8d:3d:99:49: b0:cc:e1:c1:67:28:9b:b3:71:a6:c8:7b:a9:59:95:4c:13:58: 46:bf:94:a4:2a:75:10:1b:0d:03:65:5f:dd:84:37:a1:62:0e: 0f:25:c6:6a:dd:f6:29:e1:ad:83:c7:dc:38:70:58:4b:61:58: 01:95:13:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtenBl6NEPR61CrEApoa2igMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZjgzODUwM2NmYmMwNTI4M2ZkZWFkZDQ2NDRhNDdiZmQ3 ODNmY2UwHhcNMjUxMjI3MDcwMDQ2WhcNMjUxMjI4MDcwMDQ2WjAzMTEwLwYDVQQD EyhiOTI1NTI3ZmFhZjJjYmQ1YmJlNWVmZTk5NWIzOGY1MGY5YzNhYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynXv6r4JSTKDC2nHib06KcDOHW7r i0TZhPEck9N1D2qLEqmsbzfyeIsUHwV4WkJW6gs/3mdu0q59vxeChVgHL/2CiFRZ jTfJbPur5lfBV+IUHzKnpQlxZ7MuJzDwba56ODC9hetYXCd7PPFX/zs52ksUwTGB VuMFUOKOXW0l9hAWtfHpevGtisku/8FB57YyGEa0K7QgAK5uhFIeYzJ0LmUA1ZAy puI8JS23Aj+2bJtynAJ+KFmNx0Al2b1umks0t86zTapUuqL5oApP4DkqGOMbphUE /XPzyul47Q0vYaa6fEg936tw40IS6fmK04EFXheMuIh/CXTwsJV34J/ZlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLklUn+q8svVu+Xv6ZWzj1D5w6yDMB8GA1UdIwQY MBaAFN74OFA8+8BSg/3q3UZEpHv9eD/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3ZnNFVEejd3RktEX2VyZFJrU2tlXzE0UDg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNzg1NTEtMDBlNS00NzdjLWI3MTIt OTcxYmI0YTUyYjNmLzEvM3ZnNFVEejd3RktEX2VyZFJrU2tlXzE0UDg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hNzg1NTEtMDBlNS00NzdjLWI3MTItOTcxYmI0YTUyYjNm LzEvM3ZnNFVEejd3RktEX2VyZFJrU2tlXzE0UDg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASS5FQS2N TLByZDN4l1PLm/ZfUU9hooSyxYGBDLmDe5j/G3n2dHEcLJtJ1u05o/09zzzYvsrd 93HaBRuo4f8N5+LBekqnU7/GemXIXjRgM7oTgGKJaDaoTnsTkNDcuKATicBoTPa5 2YBMOAR67ckyloxeQDUw2eWX3M+IDpgkumP9XvYB+8lYj6EKEddT8XdQpMSUiy5Z aTxHAiO3mEAr46ieK+/Z06Xgz778+cMWXWz52/jWuR2eKe8rvdspl2GKUk+NPZlJ sMzhwWcom7Nxpsh7qVmVTBNYRr+UpCp1EBsNA2Vf3YQ3oWIODyXGat32KeGtg8fc OHBYS2FYAZUT2Q== -----END CERTIFICATE-----Generated at Sat Dec 27 15:57:31 2025 by rpki-client