This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json) Hash identifier: V+k2FVaZ0DZkc/aniBzf8q4Gztkinn0tCUD2YCKExNs= Subject key identifier: 47:C6:5D:3D:4E:66:72:69:04:65:0E:41:8D:DF:07:35:8C:EC:50:56 Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03 Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203 Certificate serial: 019B43929D13BE143AC571C7867C838238A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft Manifest number: 055C Signing time: Mon 22 Dec 2025 01:00:40 +0000 Manifest this update: Mon 22 Dec 2025 01:00:40 +0000 Manifest next update: Tue 23 Dec 2025 01:00:40 +0000 Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: OULYTbcLvsVBsWnWyzJ+TmpyIKgLopJKo3aFehqKkqE=) 2: Opp8U8aeHzNwIE0mPBiUqooeCJQ.roa (hash: V/D3sQNgSw6lGL7igciFA6sJiWbs7FF9hEBFUMCcvFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:9d:13:be:14:3a:c5:71:c7:86:7c:83:82:38:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203 Validity Not Before: Dec 22 01:00:40 2025 GMT Not After : Dec 23 01:00:40 2025 GMT Subject: CN=47c65d3d4e66726904650e418ddf07358cec5056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:3e:8a:b0:a1:97:d6:c1:33:71:e1:a8:a8: 9c:b9:08:dc:7a:b9:27:07:44:b4:14:58:6d:26:9e: 15:09:59:79:05:07:32:a5:00:e8:7b:f5:5b:cc:1f: dc:cc:b1:38:35:ad:8f:0b:02:eb:15:5b:5d:e0:7c: fa:b8:fd:60:40:65:84:00:5e:08:79:2a:93:0e:3f: 73:2b:53:09:3e:13:75:b2:53:56:18:7b:b8:cd:e5: f9:9f:b7:96:ef:fb:86:51:0b:13:de:9b:05:93:a9: dc:aa:d4:24:e9:3f:30:91:b2:6f:20:82:0e:c2:11: f8:ef:ad:b9:fe:90:e5:02:c4:04:50:38:c7:4f:54: 2c:20:44:95:3b:72:46:5f:76:54:2e:8c:8b:e2:49: 40:4b:d4:01:f0:7f:2a:05:4f:e3:a0:b9:57:72:67: ea:7a:68:1b:35:83:44:e8:66:84:2c:ff:55:6f:e1: da:f5:e2:61:77:d0:53:7c:cf:1e:a7:68:c5:2c:f2: 85:87:0c:4d:f0:63:53:92:42:ab:1f:24:e9:c0:f8: 16:bd:8f:84:5e:64:8a:13:c9:aa:ce:5c:f7:75:10: 3b:3d:c4:11:bb:4c:28:f0:31:8a:42:1a:1f:c7:40: 45:ce:9a:75:4b:17:1a:97:fc:10:57:ae:41:c8:e2: e8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C6:5D:3D:4E:66:72:69:04:65:0E:41:8D:DF:07:35:8C:EC:50:56 X509v3 Authority Key Identifier: keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:da:7f:05:7f:67:30:12:d0:f9:e8:2f:01:42:e6:1e:d4:0a: a8:c1:a4:d9:25:d7:9c:5e:77:10:56:09:da:c0:81:15:96:a9: cb:63:a4:78:65:bf:58:6a:74:40:d1:79:b6:fa:af:38:78:e6: 15:0d:86:95:48:e4:04:e0:70:5d:05:e2:24:ff:ef:1f:cc:1d: e6:56:99:d7:9a:05:7d:b8:23:f5:18:53:8a:b4:88:76:53:19: 79:f3:3d:76:53:83:71:98:1e:81:9e:98:7f:89:eb:f5:68:e7: 39:49:68:5d:0d:5f:2e:dd:75:d8:66:a5:21:91:27:f6:45:8c: ae:00:ad:73:99:91:3d:f3:b4:7b:76:8f:4b:48:c8:18:55:aa: 3b:dd:6f:13:e3:97:6b:c6:b9:a8:01:1c:f4:56:36:91:bf:04: c0:95:4f:2f:24:f8:52:6d:b8:b3:b7:67:f8:1f:7c:d0:3a:3b: 17:05:73:55:3a:52:f9:6a:8e:f1:6c:55:17:8c:54:76:69:c9: 5f:fb:c1:d7:96:bc:82:f3:a1:25:c1:cd:f9:b9:15:69:67:39: 75:96:90:b1:68:a6:d4:de:e0:8c:ae:88:5a:08:0a:61:f5:5f: 46:cb:f1:6b:ce:d2:1e:81:b7:93:e3:4e:9e:52:4e:0f:cf:05: 82:5e:4e:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkp0TvhQ6xXHHhnyDgjigMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZGVkM2VhM2JhNjczYTgwOGNmNWU2YWRjYjUxZWE3ZjMz ZjQyMDMwHhcNMjUxMjIyMDEwMDQwWhcNMjUxMjIzMDEwMDQwWjAzMTEwLwYDVQQD Eyg0N2M2NWQzZDRlNjY3MjY5MDQ2NTBlNDE4ZGRmMDczNThjZWM1MDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRg+irChl9bBM3HhqKicuQjcerkn B0S0FFhtJp4VCVl5BQcypQDoe/VbzB/czLE4Na2PCwLrFVtd4Hz6uP1gQGWEAF4I eSqTDj9zK1MJPhN1slNWGHu4zeX5n7eW7/uGUQsT3psFk6ncqtQk6T8wkbJvIIIO whH47625/pDlAsQEUDjHT1QsIESVO3JGX3ZULoyL4klAS9QB8H8qBU/joLlXcmfq emgbNYNE6GaELP9Vb+Ha9eJhd9BTfM8ep2jFLPKFhwxN8GNTkkKrHyTpwPgWvY+E XmSKE8mqzlz3dRA7PcQRu0wo8DGKQhofx0BFzpp1Sxcal/wQV65ByOLoBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfGXT1OZnJpBGUOQY3fBzWM7FBWMB8GA1UdIwQY MBaAFNze0+o7pnOoCM9eaty1HqfzP0IDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMt MTU3MzBlMjQ2YmE2LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMtMTU3MzBlMjQ2YmE2 LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltp/BX9n MBLQ+egvAULmHtQKqMGk2SXXnF53EFYJ2sCBFZapy2OkeGW/WGp0QNF5tvqvOHjm FQ2GlUjkBOBwXQXiJP/vH8wd5laZ15oFfbgj9RhTirSIdlMZefM9dlODcZgegZ6Y f4nr9WjnOUloXQ1fLt112GalIZEn9kWMrgCtc5mRPfO0e3aPS0jIGFWqO91vE+OX a8a5qAEc9FY2kb8EwJVPLyT4Um24s7dn+B980Do7FwVzVTpS+WqO8WxVF4xUdmnJ X/vB15a8gvOhJcHN+bkVaWc5dZaQsWim1N7gjK6IWggKYfVfRsvxa87SHoG3k+NO nlJOD88Fgl5OsQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:20:30 2025 by rpki-client