This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json) Hash identifier: S5vXENukJCeQFd/48aLDXAwOOTaU5ERF0IWoKHCgD0o= Subject key identifier: C3:B9:91:32:07:99:83:C6:88:04:41:4B:DD:70:3C:FA:D5:66:CF:24 Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71 Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71 Certificate serial: 019B5CE4EABE7FC63AC9FC295A526321EE72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft Manifest number: 17A2 Signing time: Fri 26 Dec 2025 23:01:04 +0000 Manifest this update: Fri 26 Dec 2025 23:01:04 +0000 Manifest next update: Sat 27 Dec 2025 23:01:04 +0000 Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: ByeLN6OMWdunqsY8F+Rzuhdz0w6eQOaDSLPJR0zo63E=) 2: CCRf4uRfN50mc9puWV81ppkreOw.roa (hash: LGl0z7K8wV8haQ1zz2k3H6t4IGmg2Wy0LO5aidZN86c=) 3: gscq1-4ndiJ65U4hoz3eyHbkbS4.roa (hash: 24Hqzy5xg+vDt6hLmdJILsfqCK0ST6pwEHLOwV8AwS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:ea:be:7f:c6:3a:c9:fc:29:5a:52:63:21:ee:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71 Validity Not Before: Dec 26 23:01:04 2025 GMT Not After : Dec 27 23:01:04 2025 GMT Subject: CN=c3b99132079983c68804414bdd703cfad566cf24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:99:10:6b:fe:04:44:9b:ed:d8:52:96:ce:31: 75:c1:c7:9b:b6:b8:7c:21:3c:65:df:13:bd:91:1c: 6c:0f:1b:f1:13:45:99:ad:9c:dc:06:f2:b3:23:6f: cc:d6:eb:85:ea:75:ee:c1:4f:75:02:3f:6c:9a:0d: ec:d7:a6:7b:b8:02:c9:b5:cc:32:3e:0d:28:1a:a6: 07:8c:2d:c9:94:21:f9:a8:b9:f0:f8:5f:0d:42:8f: b0:19:65:a0:30:93:28:c0:1e:e9:4f:d5:c2:9e:8d: 4e:74:a0:6b:70:ce:8c:10:8e:32:ca:6c:9f:87:bc: 24:3f:53:c9:bd:00:67:85:f4:0b:ab:1f:8e:9e:69: b0:e1:8c:57:c3:0c:06:2e:60:4d:80:c0:17:7c:1b: bc:c7:2b:bc:ac:71:3e:97:72:87:7b:c5:ca:19:fc: c1:e9:08:7d:3f:1d:a7:da:a5:36:40:e7:08:f3:67: 6f:83:9b:01:5d:55:94:09:07:d3:1f:92:1e:a8:cc: b3:03:ff:ce:93:b2:24:c5:ec:f0:d0:ea:83:38:5c: 44:92:ed:fb:f3:fd:7c:db:f7:79:a8:f1:92:c8:94: ed:66:05:58:f9:88:01:a8:b5:51:7a:30:df:92:99: 0c:57:8c:33:ae:c1:80:85:7b:12:04:c8:72:f6:9d: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B9:91:32:07:99:83:C6:88:04:41:4B:DD:70:3C:FA:D5:66:CF:24 X509v3 Authority Key Identifier: keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:5c:71:3c:86:89:55:3a:70:21:d1:37:01:d2:ac:92:cf:5b: e5:fa:a5:b0:83:49:1c:b3:d6:54:0f:6a:ab:a9:ab:b2:87:d0: 54:59:ef:5b:a0:85:f8:c0:c2:e6:2e:86:cb:93:c9:2c:45:d9: f1:a2:e2:fa:7f:4b:c6:00:25:af:22:c5:76:a4:6a:e8:14:e5: 8d:e0:be:91:6d:6c:22:c0:b1:a2:91:9b:dc:a7:46:93:b5:d5: 2f:bb:1a:ff:39:63:81:c8:50:cf:50:eb:61:e3:71:15:01:71: 71:5f:d1:3f:de:bf:2e:a7:96:93:29:2c:23:31:be:a7:8f:77: 7d:e1:9a:68:ae:12:c8:73:71:59:d2:ea:21:eb:0e:11:01:59: 25:b9:3e:f2:65:bf:c0:67:b6:a9:94:b9:46:6f:67:d6:c1:b0: 8f:a1:12:d6:c7:60:82:eb:ae:4f:11:84:6c:57:ed:65:e4:bc: c5:cf:87:fe:9a:d0:46:a9:d5:74:3d:b8:4f:2b:e9:a9:b5:b5: cc:0b:19:59:55:65:0f:77:6f:39:fc:2a:c4:48:eb:f2:b2:8a: 73:39:13:fe:f0:14:0f:8c:38:38:cb:4b:96:68:7d:64:f2:cc: c4:16:47:47:95:2c:fe:95:67:18:d6:31:fd:c7:54:14:77:64: ce:9d:a1:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5Oq+f8Y6yfwpWlJjIe5yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMjdiOTM5OTM0YTJjYzIwNmZmYmE2YmNlOWM5MGZkY2Jh MzljNzEwHhcNMjUxMjI2MjMwMTA0WhcNMjUxMjI3MjMwMTA0WjAzMTEwLwYDVQQD EyhjM2I5OTEzMjA3OTk4M2M2ODgwNDQxNGJkZDcwM2NmYWQ1NjZjZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpkQa/4ERJvt2FKWzjF1wcebtrh8 ITxl3xO9kRxsDxvxE0WZrZzcBvKzI2/M1uuF6nXuwU91Aj9smg3s16Z7uALJtcwy Pg0oGqYHjC3JlCH5qLnw+F8NQo+wGWWgMJMowB7pT9XCno1OdKBrcM6MEI4yymyf h7wkP1PJvQBnhfQLqx+Onmmw4YxXwwwGLmBNgMAXfBu8xyu8rHE+l3KHe8XKGfzB 6Qh9Px2n2qU2QOcI82dvg5sBXVWUCQfTH5IeqMyzA//Ok7Ikxezw0OqDOFxEku37 8/182/d5qPGSyJTtZgVY+YgBqLVRejDfkpkMV4wzrsGAhXsSBMhy9p0dUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMO5kTIHmYPGiARBS91wPPrVZs8kMB8GA1UdIwQY MBaAFN8nuTmTSizCBv+6a86ckP3Lo5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0Njgt NmVkNTRkM2ZlNGY0LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0NjgtNmVkNTRkM2ZlNGY0 LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1xxPIaJ VTpwIdE3AdKsks9b5fqlsINJHLPWVA9qq6mrsofQVFnvW6CF+MDC5i6Gy5PJLEXZ 8aLi+n9LxgAlryLFdqRq6BTljeC+kW1sIsCxopGb3KdGk7XVL7sa/zljgchQz1Dr YeNxFQFxcV/RP96/LqeWkyksIzG+p493feGaaK4SyHNxWdLqIesOEQFZJbk+8mW/ wGe2qZS5Rm9n1sGwj6ES1sdgguuuTxGEbFftZeS8xc+H/prQRqnVdD24TyvpqbW1 zAsZWVVlD3dvOfwqxEjr8rKKczkT/vAUD4w4OMtLlmh9ZPLMxBZHR5Us/pVnGNYx /cdUFHdkzp2hSw== -----END CERTIFICATE-----Generated at Sat Dec 27 02:34:43 2025 by rpki-client