This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json) Hash identifier: +QL0vdaHhH5tIjkGCeACwxqhRVCVqZYpScmxcDx3UAo= Subject key identifier: 57:FA:C9:B1:01:0F:6E:48:77:8A:C8:4E:82:95:6F:A3:03:D4:37:80 Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52 Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52 Certificate serial: 019B3A905664D0E27B4408AAAD958DB289E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:01:36 +0000 Manifest this update: Sat 20 Dec 2025 07:01:36 +0000 Manifest next update: Sun 21 Dec 2025 07:01:36 +0000 Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: lU/gxh/Nf83p6dTnuRElYzjax/fGXhtirMFO/hWJ6J8=) 2: O3I8fzz4GA8viyeptOfjUJ2mnRw.roa (hash: MhSpfjBUjJxXqy4aU0rHbneKVULz0h6JWSZvHTRBN24=) 3: ovS3rx1XoRtGLlvdJ72CyzvNZcw.roa (hash: lov3tLPiy71ecc5+P9JXxH2Fu9PCJbxZNtxQg4EVWM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:56:64:d0:e2:7b:44:08:aa:ad:95:8d:b2:89:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52 Validity Not Before: Dec 20 07:01:36 2025 GMT Not After : Dec 21 07:01:36 2025 GMT Subject: CN=57fac9b1010f6e48778ac84e82956fa303d43780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:07:43:f7:b6:2c:d3:9f:94:5d:8c:44:15: 50:97:26:bb:7c:c3:c7:42:dd:11:aa:34:a8:ea:89: 0e:b0:fb:12:59:ad:55:d5:4c:52:ac:7e:a8:2a:55: b9:06:85:fe:1f:3d:54:08:3c:ee:c6:ba:82:22:c7: c2:b0:f3:d4:0a:dd:6f:a7:f4:4f:7e:43:17:01:12: fb:82:36:b9:ea:15:0a:b2:7d:6a:86:eb:e5:cf:a1: c4:85:26:b0:b1:7a:66:7c:77:f0:b0:02:59:c9:b6: dd:3e:3f:98:77:f9:ef:c4:37:af:63:62:bb:ef:5d: 10:0b:1f:3a:0c:54:d5:0b:e4:6a:00:51:ad:43:29: 1b:92:09:53:92:9e:09:57:d0:f0:34:68:41:bf:4b: 39:82:6c:3b:89:4f:87:85:72:82:cc:13:31:6a:bd: 12:f1:ab:e4:43:54:5a:cd:3d:ec:c8:46:8e:be:97: b6:15:0d:35:84:22:97:dd:cc:06:41:bc:d8:ab:0e: d2:70:64:35:0a:de:d0:b0:82:cf:ff:55:bd:0e:5f: b5:69:52:40:24:e1:04:96:4b:79:40:41:50:2b:a5: cf:fe:e2:0c:cd:d6:e8:b4:8b:14:b1:cd:64:70:5c: aa:84:9f:da:a7:e6:2b:75:4f:d6:7d:9f:4d:62:70: 7b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FA:C9:B1:01:0F:6E:48:77:8A:C8:4E:82:95:6F:A3:03:D4:37:80 X509v3 Authority Key Identifier: keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:bb:21:2c:1b:a4:a1:9f:1c:c6:89:43:94:15:cd:30:7c:c6: f6:d3:46:7a:9c:c7:d5:92:82:22:ba:af:b2:c6:15:06:5b:c1: 92:f7:ea:73:92:0d:8d:9a:a3:39:84:c3:9b:4e:60:56:08:f9: de:d5:30:0c:09:69:e6:30:9d:31:6f:66:6a:d9:f0:a4:5c:aa: 6e:d2:fa:05:e4:bd:82:f2:9e:d1:94:05:02:0f:bd:8d:f1:4a: cc:21:f0:04:99:c8:9c:36:7a:de:e5:84:51:5c:62:49:d8:9e: 8b:3b:c9:d2:c2:99:8e:12:6b:b3:1f:ea:29:37:ba:df:90:01: 3d:04:ea:dd:b1:f0:af:52:94:ed:8c:31:86:80:b5:13:26:6f: 97:e4:15:21:3f:4a:9e:7c:ee:ca:09:37:84:ed:e5:05:56:1f: 97:5f:8a:0d:52:e8:f2:06:dc:6c:25:5e:04:09:aa:51:ba:db: 06:71:c6:2e:8a:4a:4b:59:76:35:7f:a1:6f:f1:03:a7:e2:9c: d0:56:3e:3c:bc:b5:92:09:4a:f8:fd:ed:33:94:4a:8a:cf:c7: 88:d5:4e:b3:26:4a:3b:88:e9:ce:2a:2b:4f:83:9d:46:00:7f: d1:ee:db:e6:2c:a4:24:1b:94:e1:85:11:da:66:59:f4:ae:c4: 6b:21:dc:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kFZk0OJ7RAiqrZWNsonnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZGNiMDJiNjFlM2ExNWVhYzM3M2I5OTJlMGUxYTY1NDVm NjFlNTIwHhcNMjUxMjIwMDcwMTM2WhcNMjUxMjIxMDcwMTM2WjAzMTEwLwYDVQQD Eyg1N2ZhYzliMTAxMGY2ZTQ4Nzc4YWM4NGU4Mjk1NmZhMzAzZDQzNzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWAHQ/e2LNOflF2MRBVQlya7fMPH Qt0RqjSo6okOsPsSWa1V1UxSrH6oKlW5BoX+Hz1UCDzuxrqCIsfCsPPUCt1vp/RP fkMXARL7gja56hUKsn1qhuvlz6HEhSawsXpmfHfwsAJZybbdPj+Yd/nvxDevY2K7 710QCx86DFTVC+RqAFGtQykbkglTkp4JV9DwNGhBv0s5gmw7iU+HhXKCzBMxar0S 8avkQ1RazT3syEaOvpe2FQ01hCKX3cwGQbzYqw7ScGQ1Ct7QsILP/1W9Dl+1aVJA JOEElkt5QEFQK6XP/uIMzdbotIsUsc1kcFyqhJ/ap+YrdU/WfZ9NYnB7vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFf6ybEBD25Id4rIToKVb6MD1DeAMB8GA1UdIwQY MBaAFNzcsCth46FerDc7mS4OGmVF9h5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAt NjY3NTg0Nzk4NjNlLzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAtNjY3NTg0Nzk4NjNl LzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7shLBuk oZ8cxolDlBXNMHzG9tNGepzH1ZKCIrqvssYVBlvBkvfqc5INjZqjOYTDm05gVgj5 3tUwDAlp5jCdMW9matnwpFyqbtL6BeS9gvKe0ZQFAg+9jfFKzCHwBJnInDZ63uWE UVxiSdieizvJ0sKZjhJrsx/qKTe635ABPQTq3bHwr1KU7YwxhoC1EyZvl+QVIT9K nnzuygk3hO3lBVYfl1+KDVLo8gbcbCVeBAmqUbrbBnHGLopKS1l2NX+hb/EDp+Kc 0FY+PLy1kglK+P3tM5RKis/HiNVOsyZKO4jpziorT4OdRgB/0e7b5iykJBuU4YUR 2mZZ9K7EayHcZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:13:30 2025 by rpki-client