This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json) Hash identifier: pwlZB4teZwj71s0CW0rR9lbOxL2FHumN7maj/N5abhk= Subject key identifier: 05:63:52:42:B7:17:05:40:87:D5:51:CC:ED:9F:7B:0B:8F:2A:5B:B5 Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47 Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847 Certificate serial: 019B3CEC26B8B209BE94CFEA593110A37935 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft Manifest number: 171C Signing time: Sat 20 Dec 2025 18:01:07 +0000 Manifest this update: Sat 20 Dec 2025 18:01:07 +0000 Manifest next update: Sun 21 Dec 2025 18:01:07 +0000 Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: K6tTn9G/zOLBWXuhGtylNnk6IcJevwiP2mefYhuauz8=) 2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:26:b8:b2:09:be:94:cf:ea:59:31:10:a3:79:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847 Validity Not Before: Dec 20 18:01:07 2025 GMT Not After : Dec 21 18:01:07 2025 GMT Subject: CN=05635242b717054087d551cced9f7b0b8f2a5bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:88:02:64:0a:0d:14:cc:7e:39:09:a0:76:52: c4:0c:7c:bd:0b:66:4c:7a:39:64:ce:16:4b:24:77: 9f:8a:36:cb:be:97:a0:82:9b:84:1c:15:63:34:65: 50:b2:a3:fb:2c:b3:ca:fa:96:f5:92:eb:61:08:bb: 4f:f2:82:21:84:8f:65:02:83:f3:4d:cf:5c:29:f0: 09:dc:a4:74:55:64:3c:10:cd:8d:75:92:34:f0:2f: 7e:87:84:d7:85:9d:07:a2:6e:8c:94:a8:18:31:85: fe:c7:dd:3f:27:b9:e5:55:3f:db:a2:13:aa:49:cf: e4:5c:25:f8:30:16:a0:20:2d:02:07:43:b4:32:b8: 8b:1d:25:74:64:91:41:0f:a9:00:ae:d4:ee:0d:b6: 16:90:2d:12:84:34:d0:26:87:d0:36:27:ba:e6:e3: 36:8c:2d:c4:c8:40:32:62:91:b9:53:31:b0:e7:25: 47:e7:da:fa:03:52:47:88:07:26:37:5e:64:23:ca: b3:8d:4d:d6:69:c8:23:6c:75:06:1c:89:bc:c8:5a: 8e:ef:ea:52:72:16:8c:77:49:91:57:8f:11:49:f8: 81:9d:75:31:7c:ee:b6:fc:10:4b:34:b3:04:3b:5e: 4b:37:2b:e6:a1:17:f4:be:5e:2c:92:a3:f4:ba:89: 8a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:63:52:42:B7:17:05:40:87:D5:51:CC:ED:9F:7B:0B:8F:2A:5B:B5 X509v3 Authority Key Identifier: keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:4f:3f:f5:25:f6:d7:b7:f6:ca:f4:13:f9:c0:0d:2d:5b:cd: 9c:1d:7a:e1:9b:70:d5:7b:02:0c:40:ad:69:35:0b:b2:ac:23: 17:7d:60:71:78:71:fc:19:d3:b8:6c:fd:42:3b:36:20:3d:97: 42:61:f8:cd:3e:9b:b6:d8:43:d1:7b:cb:fa:6a:21:73:43:69: e9:4b:38:10:cb:8c:4f:61:1a:8c:28:b9:70:41:0c:81:82:0c: 21:49:c9:20:f4:06:c3:35:e0:ff:52:4e:b4:47:3a:c2:f3:ac: c1:90:eb:1a:14:d3:97:c7:f9:24:ee:e0:a9:e6:03:7a:45:a1: 64:fc:45:89:e5:7d:d9:c8:3b:be:42:31:ea:77:ad:9d:08:bc: 8b:7c:d4:11:1c:f1:31:e4:54:30:ca:71:aa:84:03:8b:d9:30: f4:85:08:b4:e1:f5:69:02:76:52:7c:22:cb:9b:c4:24:ea:fd: f6:e7:bf:0f:19:5e:57:e9:83:49:bf:94:0d:c7:84:cb:ab:06: e9:8f:cf:5a:ef:36:eb:54:8a:2a:c1:7a:0e:dd:48:04:8b:b1: ee:af:da:13:c6:1f:ac:6b:6f:6c:50:25:4b:ef:6f:83:cb:cf: 20:b5:e1:82:68:dc:df:9f:95:77:e4:48:72:8c:5e:1d:c8:06: 03:cc:aa:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Ca4sgm+lM/qWTEQo3k1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGRlYTRlYTI1NDZkN2EwMTlhNGVmODI0M2I1ZWI2MzU2 NWM4NDcwHhcNMjUxMjIwMTgwMTA3WhcNMjUxMjIxMTgwMTA3WjAzMTEwLwYDVQQD EygwNTYzNTI0MmI3MTcwNTQwODdkNTUxY2NlZDlmN2IwYjhmMmE1YmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4gCZAoNFMx+OQmgdlLEDHy9C2ZM ejlkzhZLJHefijbLvpeggpuEHBVjNGVQsqP7LLPK+pb1kuthCLtP8oIhhI9lAoPz Tc9cKfAJ3KR0VWQ8EM2NdZI08C9+h4TXhZ0Hom6MlKgYMYX+x90/J7nlVT/bohOq Sc/kXCX4MBagIC0CB0O0MriLHSV0ZJFBD6kArtTuDbYWkC0ShDTQJofQNie65uM2 jC3EyEAyYpG5UzGw5yVH59r6A1JHiAcmN15kI8qzjU3WacgjbHUGHIm8yFqO7+pS chaMd0mRV48RSfiBnXUxfO62/BBLNLMEO15LNyvmoRf0vl4skqP0uomK/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVjUkK3FwVAh9VRzO2fewuPKlu1MB8GA1UdIwQY MBaAFNwN6k6iVG16AZpO+CQ7XrY1ZchHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMt M2Q0YjI4M2YzMjJkLzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMtM2Q0YjI4M2YzMjJk LzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJE8/9SX2 17f2yvQT+cANLVvNnB164Ztw1XsCDECtaTULsqwjF31gcXhx/BnTuGz9Qjs2ID2X QmH4zT6btthD0XvL+mohc0Np6Us4EMuMT2EajCi5cEEMgYIMIUnJIPQGwzXg/1JO tEc6wvOswZDrGhTTl8f5JO7gqeYDekWhZPxFieV92cg7vkIx6netnQi8i3zUERzx MeRUMMpxqoQDi9kw9IUItOH1aQJ2Unwiy5vEJOr99ue/DxleV+mDSb+UDceEy6sG 6Y/PWu8261SKKsF6Dt1IBIux7q/aE8YfrGtvbFAlS+9vg8vPILXhgmjc35+Vd+RI coxeHcgGA8yq8A== -----END CERTIFICATE-----Generated at Sat Dec 20 21:30:20 2025 by rpki-client