This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft File: MT3NGHEiZlBFhpdnM8ofkvYmH14.mft (raw, json) Hash identifier: qKZpGMIAKjbtoy+pSfh524jQO4Yt7IVD0XVS6CIIj3U= Subject key identifier: 84:95:DD:40:8A:AC:C6:32:FC:E2:6D:B7:E1:BA:90:6B:F2:CC:78:20 Authority key identifier: 31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E Certificate issuer: /CN=313dcd18712266504586976733ca1f92f6261f5e Certificate serial: 019B72905EEDE65E865011CE5216E1DAD951 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft Manifest number: 15CF Signing time: Wed 31 Dec 2025 04:00:22 +0000 Manifest this update: Wed 31 Dec 2025 04:00:22 +0000 Manifest next update: Thu 01 Jan 2026 04:00:22 +0000 Files and hashes: 1: MT3NGHEiZlBFhpdnM8ofkvYmH14.crl (hash: qIjy8GDuNwosoaplKcT66qBpeb0pVzQU5wVi4WvMSME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.crl rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:90:5e:ed:e6:5e:86:50:11:ce:52:16:e1:da:d9:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=313dcd18712266504586976733ca1f92f6261f5e Validity Not Before: Dec 31 04:00:22 2025 GMT Not After : Jan 1 04:00:22 2026 GMT Subject: CN=8495dd408aacc632fce26db7e1ba906bf2cc7820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:0e:88:f0:21:d8:9e:5b:c5:2a:18:d4:b2: ae:3e:11:7c:44:c1:57:fe:39:75:66:fe:6f:f2:29: 8b:5c:9a:bb:1d:5c:20:d3:31:5f:cb:85:0e:d3:bd: d9:f5:be:86:3e:ef:13:20:e0:39:f5:7c:60:db:25: a9:10:f6:ad:91:88:83:b7:7e:1a:25:f4:8a:df:6f: b6:a9:5b:11:20:17:13:2c:b5:64:61:94:a0:83:7b: 00:ce:d2:89:2b:fd:e9:3e:0b:29:35:55:56:9c:e2: 26:0a:03:d3:12:47:07:eb:46:7b:90:6f:77:64:d6: d3:2b:76:34:e1:ed:98:0f:77:eb:0b:c6:d4:15:65: 31:cb:f1:11:dd:7f:23:6b:6b:58:4c:68:7b:27:25: bd:b5:24:6c:c4:c4:f6:5e:a1:e6:7c:a6:00:77:ec: 05:89:87:0f:bf:31:e3:cc:42:43:c3:4c:2a:84:43: 65:5f:56:b6:07:3b:59:cd:f1:41:74:ad:5b:54:2b: e7:7e:10:aa:2c:fd:1c:1c:6a:2b:61:54:24:9a:82: ec:80:9d:79:15:44:fd:9b:5c:95:0a:f8:b7:3f:18: 89:3b:de:23:1f:32:5b:a6:26:8a:63:ef:97:e4:4f: 4d:70:c2:c5:76:89:d2:cf:b8:3e:4f:c3:da:81:2a: 7e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:95:DD:40:8A:AC:C6:32:FC:E2:6D:B7:E1:BA:90:6B:F2:CC:78:20 X509v3 Authority Key Identifier: keyid:31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d1:37:57:ad:60:f4:57:b8:25:6b:a8:d5:37:25:63:78:2f: 24:f3:f2:f8:29:51:43:a9:47:5c:75:a4:a3:aa:3d:c6:e7:b9: 89:82:cb:54:7b:97:87:06:06:2a:e0:1e:5b:59:b2:1b:c2:e0: cc:fd:1b:11:6e:af:05:42:1f:c9:42:f9:4c:11:98:fe:e8:26: fb:88:cb:c5:02:2f:c3:a9:a1:37:84:5a:d0:7d:34:54:20:c8: 44:43:f8:45:46:09:6d:df:f9:a1:cf:b5:f4:68:36:7c:ad:5c: 38:f9:e9:d5:20:b6:41:71:0b:71:b9:47:72:ae:90:c4:bd:25: f8:85:68:34:79:1e:55:fa:73:ea:42:a2:18:f8:c6:4a:6b:1f: 93:8e:d0:31:19:27:66:f0:54:9e:11:74:02:41:e7:9a:ea:48: c4:2a:29:ba:bf:ca:f9:0a:8c:26:19:17:33:41:e0:1f:67:df: 9d:21:44:e5:5f:61:17:de:c3:12:87:36:cd:cb:47:65:e8:93: 95:f6:e3:f3:96:5e:3d:a9:a5:18:3f:7c:b0:99:ed:1f:d9:7f: 17:a1:63:c2:bf:5f:56:71:1e:dc:5a:48:90:c8:ef:5e:b3:1d: 8a:d9:4e:4e:a7:de:73:e0:11:0d:70:c4:38:01:89:f0:b3:ec: fa:75:f1:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykF7t5l6GUBHOUhbh2tlRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxM2RjZDE4NzEyMjY2NTA0NTg2OTc2NzMzY2ExZjkyZjYy NjFmNWUwHhcNMjUxMjMxMDQwMDIyWhcNMjYwMTAxMDQwMDIyWjAzMTEwLwYDVQQD Eyg4NDk1ZGQ0MDhhYWNjNjMyZmNlMjZkYjdlMWJhOTA2YmYyY2M3ODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN8OiPAh2J5bxSoY1LKuPhF8RMFX /jl1Zv5v8imLXJq7HVwg0zFfy4UO073Z9b6GPu8TIOA59Xxg2yWpEPatkYiDt34a JfSK32+2qVsRIBcTLLVkYZSgg3sAztKJK/3pPgspNVVWnOImCgPTEkcH60Z7kG93 ZNbTK3Y04e2YD3frC8bUFWUxy/ER3X8ja2tYTGh7JyW9tSRsxMT2XqHmfKYAd+wF iYcPvzHjzEJDw0wqhENlX1a2BztZzfFBdK1bVCvnfhCqLP0cHGorYVQkmoLsgJ15 FUT9m1yVCvi3PxiJO94jHzJbpiaKY++X5E9NcMLFdonSz7g+T8PagSp++wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISV3UCKrMYy/OJtt+G6kGvyzHggMB8GA1UdIwQY MBaAFDE9zRhxImZQRYaXZzPKH5L2Jh9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9iOWVjZjktM2JhOC00N2U0LTg5NTQt YzQxNWE2OGFmMGRkLzEvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9iOWVjZjktM2JhOC00N2U0LTg5NTQtYzQxNWE2OGFmMGRk LzEvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9E3V61g 9Fe4JWuo1TclY3gvJPPy+ClRQ6lHXHWko6o9xue5iYLLVHuXhwYGKuAeW1myG8Lg zP0bEW6vBUIfyUL5TBGY/ugm+4jLxQIvw6mhN4Ra0H00VCDIREP4RUYJbd/5oc+1 9Gg2fK1cOPnp1SC2QXELcblHcq6QxL0l+IVoNHkeVfpz6kKiGPjGSmsfk47QMRkn ZvBUnhF0AkHnmupIxCopur/K+QqMJhkXM0HgH2ffnSFE5V9hF97DEoc2zctHZeiT lfbj85ZePamlGD98sJntH9l/F6Fjwr9fVnEe3FpIkMjvXrMditlOTqfec+ARDXDE OAGJ8LPs+nXx3g== -----END CERTIFICATE-----Generated at Wed Dec 31 09:02:34 2025 by rpki-client