This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json) Hash identifier: bKRXMeJ0cWusPjV+L5EoafQ7l95F3wRWYhSqLpVcvYw= Subject key identifier: 9E:78:93:1D:87:DB:A7:6B:A5:AB:5A:BD:B8:21:21:09:22:3D:B2:10 Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6 Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6 Certificate serial: 019B4BF1B52766D7D2F4EE6F1D85C6D4407A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft Manifest number: 0E9F Signing time: Tue 23 Dec 2025 16:01:30 +0000 Manifest this update: Tue 23 Dec 2025 16:01:30 +0000 Manifest next update: Wed 24 Dec 2025 16:01:30 +0000 Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: fSK3CPACmJhgtgF0AbcsWMZHaeMwa9n001fnLcZ0by8=) 2: G0H1NZGAbtsyoA2e--eIMeks25w.asa (hash: hXpme5X4li6UsZQl1l4A/uCi4ohrlAjpSmRIc/a8sgw=) 3: vmqKHuLzrPkqklGr2oHlX4A5H1s.roa (hash: HWx6FXZlLIKlHVfqDThyZuNv2Ccv+hNVkaueWiNq1XE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:b5:27:66:d7:d2:f4:ee:6f:1d:85:c6:d4:40:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6 Validity Not Before: Dec 23 16:01:30 2025 GMT Not After : Dec 24 16:01:30 2025 GMT Subject: CN=9e78931d87dba76ba5ab5abdb8212109223db210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:98:18:cf:bb:ea:90:9c:14:a6:0e:18:ce:d3: 8b:f8:fe:7d:83:28:0a:60:49:f0:a8:22:eb:97:56: bc:68:d6:e8:32:ac:3a:24:ed:5f:de:28:f5:60:df: b7:b8:bf:d6:2a:ac:db:c2:57:9a:b7:78:89:e5:53: b5:d7:13:80:d5:fe:de:36:4d:c4:c0:a2:fb:2b:8a: 8a:2a:b0:4d:47:d0:7f:53:ac:a9:9c:72:40:67:4a: 1e:f2:1c:f5:52:5f:a2:c7:09:22:32:1d:09:96:59: f4:c7:ea:04:a4:d4:db:3c:ed:67:69:df:19:6d:5f: e5:23:f2:36:bc:9d:63:93:b0:75:90:47:77:9f:aa: b9:67:88:e5:61:8a:9f:71:2b:16:d0:e2:33:63:13: 43:77:a6:fc:0b:72:7f:00:83:01:b8:38:4e:96:f1: 6b:91:f3:51:bb:00:20:c4:57:70:9f:ef:09:ae:ad: df:3c:15:30:38:70:92:c9:0a:35:a0:7c:93:8f:f0: 4c:08:d3:f8:2b:d5:8b:b9:31:de:fc:91:2e:36:34: 2c:24:a7:6d:45:f2:94:77:02:9f:18:21:19:de:65: ea:f2:2d:be:38:01:c5:9d:54:8d:77:e7:2c:08:f9: 03:85:23:2e:28:fa:e1:e5:14:9d:f5:09:f4:86:e3: cc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:78:93:1D:87:DB:A7:6B:A5:AB:5A:BD:B8:21:21:09:22:3D:B2:10 X509v3 Authority Key Identifier: keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:30:e1:6c:f9:6a:1e:50:50:7b:67:18:21:03:c6:a3:61:dc: 36:8c:84:fd:56:91:1c:a8:6c:ea:48:9e:54:ca:ea:c4:c3:7f: a4:5b:16:e8:ca:f7:19:4d:48:a1:1a:34:e6:40:64:04:91:e7: b9:ca:31:70:f6:19:b0:35:65:3f:39:99:e4:f6:04:d5:a3:b6: 59:ba:85:3b:83:6c:ac:d5:0a:49:97:bd:8c:b5:0b:86:3d:78: 0e:66:06:1c:08:ab:61:df:cd:da:7e:2c:74:f8:c3:f0:ec:c5: 18:80:b7:e4:48:98:2a:0a:13:d9:25:9a:d1:47:4f:b5:61:02: 8d:ba:51:45:0d:09:1e:fa:38:74:d7:3e:43:0c:f8:03:f2:79: d2:ee:57:b2:3a:9c:91:07:c6:f2:ec:67:61:3f:57:c0:1c:e4: 60:fa:c8:5a:03:34:b3:dd:0b:08:f5:c2:e5:ab:47:07:01:0b: 7c:a2:65:2f:85:71:a8:d0:3a:53:dd:a7:99:3f:09:8b:b0:72: 55:98:2f:63:bd:b8:70:72:26:51:b3:2e:10:91:f0:14:b7:ee: af:33:5a:59:f3:05:4a:7a:3e:ab:b5:13:09:ad:09:d9:86:7e: a3:9e:f9:62:3b:cb:49:d5:b1:ab:cb:d9:88:92:4d:0a:67:a5: 23:ad:28:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8bUnZtfS9O5vHYXG1EB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNWU2YzIzMzA5MTFiYzFkYzhjODNkNDExZWY2YjEyMDhi M2JiZDYwHhcNMjUxMjIzMTYwMTMwWhcNMjUxMjI0MTYwMTMwWjAzMTEwLwYDVQQD Eyg5ZTc4OTMxZDg3ZGJhNzZiYTVhYjVhYmRiODIxMjEwOTIyM2RiMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZgYz7vqkJwUpg4YztOL+P59gygK YEnwqCLrl1a8aNboMqw6JO1f3ij1YN+3uL/WKqzbwleat3iJ5VO11xOA1f7eNk3E wKL7K4qKKrBNR9B/U6ypnHJAZ0oe8hz1Ul+ixwkiMh0Jlln0x+oEpNTbPO1nad8Z bV/lI/I2vJ1jk7B1kEd3n6q5Z4jlYYqfcSsW0OIzYxNDd6b8C3J/AIMBuDhOlvFr kfNRuwAgxFdwn+8Jrq3fPBUwOHCSyQo1oHyTj/BMCNP4K9WLuTHe/JEuNjQsJKdt RfKUdwKfGCEZ3mXq8i2+OAHFnVSNd+csCPkDhSMuKPrh5RSd9Qn0huPMWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ54kx2H26drpatavbghIQkiPbIQMB8GA1UdIwQY MBaAFN5ebCMwkRvB3IyD1BHvaxIIs7vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2Et ZGU0YmE3ODZmODcyLzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2EtZGU0YmE3ODZmODcy LzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDDhbPlq HlBQe2cYIQPGo2HcNoyE/VaRHKhs6kieVMrqxMN/pFsW6Mr3GU1IoRo05kBkBJHn ucoxcPYZsDVlPzmZ5PYE1aO2WbqFO4NsrNUKSZe9jLULhj14DmYGHAirYd/N2n4s dPjD8OzFGIC35EiYKgoT2SWa0UdPtWECjbpRRQ0JHvo4dNc+Qwz4A/J50u5Xsjqc kQfG8uxnYT9XwBzkYPrIWgM0s90LCPXC5atHBwELfKJlL4VxqNA6U92nmT8Ji7By VZgvY724cHImUbMuEJHwFLfurzNaWfMFSno+q7UTCa0J2YZ+o575YjvLSdWxq8vZ iJJNCmelI60oBg== -----END CERTIFICATE-----Generated at Tue Dec 23 20:19:12 2025 by rpki-client