This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json) Hash identifier: uyvhUH0g76+jU80EFPRWaHNVpLiiIi/BX8nHQfKsVDU= Subject key identifier: 69:E6:5C:D5:58:24:83:6B:48:15:88:A1:CF:72:32:31:56:F5:9B:76 Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c Certificate serial: 019B2D4228C4809E5DE5C209F38883C965F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft Manifest number: 16C1 Signing time: Wed 17 Dec 2025 17:01:08 +0000 Manifest this update: Wed 17 Dec 2025 17:01:08 +0000 Manifest next update: Thu 18 Dec 2025 17:01:08 +0000 Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: JnXexFyM0AF4xqquEke5kH0yC34nedtw9G3v0j5RrEA=) 2: i93FbkwGzwrRV5pk719Azh7mnco.roa (hash: FbLtCYorp5+hnW87pG1j3ZHIdaixJG9L/nchejMVUes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:42:28:c4:80:9e:5d:e5:c2:09:f3:88:83:c9:65:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c Validity Not Before: Dec 17 17:01:08 2025 GMT Not After : Dec 18 17:01:08 2025 GMT Subject: CN=69e65cd55824836b481588a1cf72323156f59b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:99:e2:bf:dc:b9:06:da:5c:50:3e:35:e3:0c: 8e:15:d0:45:e9:ec:7a:2e:ca:f3:2a:ed:96:fc:b9: 9d:eb:32:37:d6:eb:ab:ab:31:af:fa:0c:5e:db:5d: 7e:17:a0:41:b2:ac:06:ba:dc:99:1c:20:66:6f:39: b4:a4:c1:df:95:97:f2:88:38:4b:ee:a0:46:65:3a: ec:90:43:47:a0:45:31:50:1c:21:fb:a9:ce:4f:b7: 80:e6:77:17:e8:79:23:0e:41:bf:41:9b:3f:bc:30: a9:d8:0f:58:80:18:53:7e:c1:b3:85:27:7f:7c:24: 96:5a:d5:9c:d4:db:c4:1c:b9:56:bf:25:c3:90:21: 01:14:2c:b3:53:96:dd:e0:65:da:f9:ec:c1:ee:6c: 58:93:73:fa:a1:a5:a6:73:1a:aa:fe:73:06:18:e5: 2d:f4:c4:91:ff:71:8c:d9:8f:a7:83:60:d6:ce:0c: d0:23:0c:28:5e:24:6e:3f:12:21:4c:39:71:e2:d0: 7b:a8:13:66:99:d1:d0:b5:46:bc:d9:c5:02:c6:e8: 60:b0:21:6d:8a:b0:58:78:ec:28:a6:5d:3f:f9:52: 22:d8:bb:b1:86:7c:95:c4:4f:d0:ad:38:77:82:d6: 1f:50:df:df:b9:2d:74:e9:45:c1:14:cc:37:68:0c: 82:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E6:5C:D5:58:24:83:6B:48:15:88:A1:CF:72:32:31:56:F5:9B:76 X509v3 Authority Key Identifier: keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:24:d4:22:9f:f2:6c:3d:24:42:2f:18:6b:8c:7d:6d:f8:37: a7:3a:ed:24:68:2d:4b:1e:fa:e7:fe:b8:3a:09:13:44:c1:8d: 43:a2:d0:7c:87:0c:51:ed:00:17:01:5e:31:88:61:d1:1b:98: 76:ea:ab:36:e8:a6:11:c3:15:1d:e8:d7:4c:6c:40:b2:a9:40: 10:82:7e:63:cc:62:11:21:33:d7:86:af:7a:58:4c:70:95:62: 13:94:5f:d5:82:08:a9:ea:09:31:cd:14:07:a0:97:5a:4b:ff: e2:78:69:85:8c:d1:62:03:dd:45:dc:fa:66:c1:ad:11:2d:29: 65:b7:f9:ef:8f:50:23:8d:7e:4a:16:23:d3:fe:18:11:72:fe: a2:52:bb:13:e6:ef:e2:8c:5c:df:04:e6:59:cc:bc:5c:90:97: cb:0a:ef:90:fa:5d:ba:fd:49:ea:3f:63:e6:fd:68:89:b3:ce: df:40:7b:a1:28:ae:b2:62:5a:14:2b:3b:96:24:c9:56:77:b5: 38:c3:e4:d9:4a:ba:97:5f:6f:42:bd:04:6a:74:1c:ed:fb:b2: c4:c7:b9:6e:1d:c7:e0:e9:5a:2c:9d:d8:50:d5:31:78:b8:45: 50:9a:c4:e5:cf:2c:30:72:bc:c6:3f:37:9b:cf:01:e2:19:4d: 39:de:43:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQijEgJ5d5cIJ84iDyWXxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZmY4NWJiOGEzNzU5NTIzZTBjYzlmOGE5MWRiZGFmNDc0 ZDZiN2MwHhcNMjUxMjE3MTcwMTA4WhcNMjUxMjE4MTcwMTA4WjAzMTEwLwYDVQQD Eyg2OWU2NWNkNTU4MjQ4MzZiNDgxNTg4YTFjZjcyMzIzMTU2ZjU5Yjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zniv9y5BtpcUD414wyOFdBF6ex6 LsrzKu2W/Lmd6zI31uurqzGv+gxe211+F6BBsqwGutyZHCBmbzm0pMHflZfyiDhL 7qBGZTrskENHoEUxUBwh+6nOT7eA5ncX6HkjDkG/QZs/vDCp2A9YgBhTfsGzhSd/ fCSWWtWc1NvEHLlWvyXDkCEBFCyzU5bd4GXa+ezB7mxYk3P6oaWmcxqq/nMGGOUt 9MSR/3GM2Y+ng2DWzgzQIwwoXiRuPxIhTDlx4tB7qBNmmdHQtUa82cUCxuhgsCFt irBYeOwopl0/+VIi2LuxhnyVxE/QrTh3gtYfUN/fuS106UXBFMw3aAyCpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnmXNVYJINrSBWIoc9yMjFW9Zt2MB8GA1UdIwQY MBaAFNz/hbuKN1lSPgzJ+Kkdva9HTWt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYt NWJjMzAyYjRiNWZjLzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYtNWJjMzAyYjRiNWZj LzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSTUIp/y bD0kQi8Ya4x9bfg3pzrtJGgtSx765/64OgkTRMGNQ6LQfIcMUe0AFwFeMYhh0RuY duqrNuimEcMVHejXTGxAsqlAEIJ+Y8xiESEz14avelhMcJViE5Rf1YIIqeoJMc0U B6CXWkv/4nhphYzRYgPdRdz6ZsGtES0pZbf5749QI41+ShYj0/4YEXL+olK7E+bv 4oxc3wTmWcy8XJCXywrvkPpduv1J6j9j5v1oibPO30B7oSiusmJaFCs7liTJVne1 OMPk2Uq6l19vQr0EanQc7fuyxMe5bh3H4OlaLJ3YUNUxeLhFUJrE5c8sMHK8xj83 m88B4hlNOd5DXA== -----END CERTIFICATE-----Generated at Wed Dec 17 20:47:05 2025 by rpki-client