This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json) Hash identifier: yeRMlr18LdDxi/+2ORuHIPeypFHouO6GbYjqgUJGCqk= Subject key identifier: F1:AF:80:52:98:C4:E2:B2:E6:B8:FF:B9:93:FE:E7:0A:CE:BD:8A:82 Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1 Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1 Certificate serial: 019B3BD9670B23C0E3263F10BB983218FD7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 13:01:01 +0000 Manifest this update: Sat 20 Dec 2025 13:01:01 +0000 Manifest next update: Sun 21 Dec 2025 13:01:01 +0000 Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: sV32tOG18QX+CxWrZMTjammuSmpQYuRlvLELFlZ0/Gk=) 2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=) 3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:67:0b:23:c0:e3:26:3f:10:bb:98:32:18:fd:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1 Validity Not Before: Dec 20 13:01:01 2025 GMT Not After : Dec 21 13:01:01 2025 GMT Subject: CN=f1af805298c4e2b2e6b8ffb993fee70acebd8a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:44:07:e6:18:7b:14:05:5b:5b:d5:8a:3f:08: ae:bd:cc:43:14:b7:ac:8b:3e:80:89:e5:e1:e2:a9: cb:ca:93:09:1a:b8:9b:0c:da:b9:a0:fd:95:ce:9a: 76:70:e4:ce:5d:3b:3d:3b:ad:44:50:0c:5a:23:8e: 73:fb:b8:d9:25:c7:4b:e5:55:44:f0:83:0a:ff:85: 26:43:12:4f:9a:4d:cb:ba:b4:c7:c3:af:d2:c2:30: c9:b4:1f:66:d6:d7:df:89:cb:1e:23:6e:aa:ef:04: 94:f9:3f:52:3c:6e:3b:b5:4d:df:81:de:c5:5a:b2: b0:91:1e:4e:88:31:76:ae:2c:f2:99:c5:72:c0:9f: ee:72:cb:41:6b:14:91:37:f1:03:2d:15:1b:9b:32: 6e:bb:34:1c:2b:b8:60:4c:fd:0c:fe:30:5d:d2:42: 1f:16:c4:7d:cd:fb:a9:f3:c8:63:f2:7d:6e:21:d5: 0b:f0:4f:ec:56:10:f4:07:2b:69:88:32:c3:bc:24: 2d:b5:c5:11:5a:d6:ff:c4:3b:b9:d5:65:0a:28:b5: b3:09:7c:ca:1e:ca:9e:f0:6c:ea:14:b5:a9:88:28: 45:74:32:41:24:09:b4:00:2b:64:51:d4:cb:18:3f: 85:af:f7:ad:44:c4:4a:69:09:e4:6a:9e:fd:53:6f: 8f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AF:80:52:98:C4:E2:B2:E6:B8:FF:B9:93:FE:E7:0A:CE:BD:8A:82 X509v3 Authority Key Identifier: keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:31:d7:98:aa:28:48:c9:82:2e:ed:11:72:09:a7:a5:e5:7a: 73:5c:4d:a8:e7:85:4a:b4:c5:e4:ab:82:ce:f2:b1:de:47:c7: 1b:c1:be:11:1b:d1:c3:f7:46:9b:58:01:51:b0:b6:63:64:f9: df:3a:41:cf:ce:81:b3:d8:83:9e:7f:65:5c:81:c3:da:90:1b: f7:ce:02:19:36:f6:20:bb:7c:1a:9d:95:55:c4:02:c3:fd:18: 47:9e:7b:05:90:6e:89:07:3d:0c:54:9c:7c:90:40:18:6c:29: e5:e0:86:29:e0:47:f6:63:8e:5b:b0:3e:2c:cf:0e:b4:8f:11: 96:9d:27:52:71:09:22:7e:ee:aa:e4:d5:ac:7a:b1:ed:cd:5e: 24:3b:ec:eb:ea:1e:de:7a:b5:74:02:b8:68:99:7c:4d:88:93: fa:00:c3:96:69:e8:59:7b:57:3d:a6:32:2a:c5:98:eb:6a:08: 7a:4c:2a:7c:be:d0:82:a5:97:6e:61:0a:95:eb:38:59:b8:60: d7:66:ff:03:67:67:3d:e1:c8:ee:bf:76:56:b6:99:5b:a6:e5: d8:88:74:8d:12:c0:9e:f3:ee:d6:14:37:ba:0a:c2:17:be:3f: f6:30:64:01:c6:ec:71:13:f9:b1:72:c3:1b:32:28:5d:96:31: 0f:52:87:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72WcLI8DjJj8Qu5gyGP18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYTQ2ZWFhZTdhZWYyZjQ0ZmU2NjAxNjJiYjlkYzcwZDY1 MjVhZjEwHhcNMjUxMjIwMTMwMTAxWhcNMjUxMjIxMTMwMTAxWjAzMTEwLwYDVQQD EyhmMWFmODA1Mjk4YzRlMmIyZTZiOGZmYjk5M2ZlZTcwYWNlYmQ4YTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0QH5hh7FAVbW9WKPwiuvcxDFLes iz6AieXh4qnLypMJGribDNq5oP2Vzpp2cOTOXTs9O61EUAxaI45z+7jZJcdL5VVE 8IMK/4UmQxJPmk3LurTHw6/SwjDJtB9m1tfficseI26q7wSU+T9SPG47tU3fgd7F WrKwkR5OiDF2rizymcVywJ/ucstBaxSRN/EDLRUbmzJuuzQcK7hgTP0M/jBd0kIf FsR9zfup88hj8n1uIdUL8E/sVhD0BytpiDLDvCQttcURWtb/xDu51WUKKLWzCXzK Hsqe8GzqFLWpiChFdDJBJAm0ACtkUdTLGD+Fr/etRMRKaQnkap79U2+PxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGvgFKYxOKy5rj/uZP+5wrOvYqCMB8GA1UdIwQY MBaAFN6kbqrnrvL0T+ZgFiu53HDWUlrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEt MWZhOWFjNTgwYjhlLzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEtMWZhOWFjNTgwYjhl LzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjHXmKoo SMmCLu0RcgmnpeV6c1xNqOeFSrTF5KuCzvKx3kfHG8G+ERvRw/dGm1gBUbC2Y2T5 3zpBz86Bs9iDnn9lXIHD2pAb984CGTb2ILt8Gp2VVcQCw/0YR557BZBuiQc9DFSc fJBAGGwp5eCGKeBH9mOOW7A+LM8OtI8Rlp0nUnEJIn7uquTVrHqx7c1eJDvs6+oe 3nq1dAK4aJl8TYiT+gDDlmnoWXtXPaYyKsWY62oIekwqfL7QgqWXbmEKles4Wbhg 12b/A2dnPeHI7r92VraZW6bl2Ih0jRLAnvPu1hQ3ugrCF74/9jBkAcbscRP5sXLD GzIoXZYxD1KHDQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:24 2025 by rpki-client