This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json) Hash identifier: blIkUwqqTAQ5zR/hulEC8KEu5L8MmYTg4K2YOq+Uthw= Subject key identifier: 76:57:E1:B3:F0:89:67:C4:0F:01:61:CF:C8:63:0B:43:64:76:DF:DF Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d Certificate serial: 019B3A8F8F79D27A9C5D4752AE6AF56AE188 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft Manifest number: 119D Signing time: Sat 20 Dec 2025 07:00:45 +0000 Manifest this update: Sat 20 Dec 2025 07:00:45 +0000 Manifest next update: Sun 21 Dec 2025 07:00:45 +0000 Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: IZ4XhP5sJhnNcIIzSSWOXCSBJr/yel6IA4GVou3j4gY=) 2: 9yOwmAU645k5B-2q5IOc7M05GTo.roa (hash: E7bgo02yf2p1Xr2S53fCsY3j/+dXZDb8jPxeB97qfpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:8f:79:d2:7a:9c:5d:47:52:ae:6a:f5:6a:e1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d Validity Not Before: Dec 20 07:00:45 2025 GMT Not After : Dec 21 07:00:45 2025 GMT Subject: CN=7657e1b3f08967c40f0161cfc8630b436476dfdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:78:b4:20:a4:9e:fa:fd:62:72:1a:e9:34:25: 59:77:57:d9:1f:77:48:7f:19:46:6e:1a:c7:43:4d: f3:52:7f:4f:db:24:6e:2d:e3:79:7d:19:26:62:f7: 50:32:11:89:b0:72:89:87:53:80:39:fc:f8:2c:ff: c2:b6:78:5c:9b:57:43:ce:b6:21:19:50:03:4a:66: d0:ee:7a:8e:9d:fe:5a:40:fd:07:d9:00:aa:62:63: e6:a1:3a:c4:6d:5a:41:75:81:8e:de:7f:18:dd:8f: 21:88:13:af:1b:d4:4d:0e:5f:f7:b3:d8:e7:4e:4a: e9:1a:aa:47:cd:a8:80:14:a7:1a:31:31:3e:2f:fe: 79:fe:f5:78:1a:38:26:1f:62:e7:17:d0:44:3e:ce: 8f:3f:17:eb:b2:71:c2:88:01:be:87:01:73:1c:3e: 0d:92:43:0e:d3:88:33:d7:ce:b7:5b:89:86:73:25: 9f:1b:41:be:de:b6:6f:ad:9b:54:72:62:60:c8:3e: 87:b0:40:ca:83:b7:a5:5e:c5:06:e7:88:5b:2c:fe: 88:32:9b:81:d5:66:31:4e:d4:08:0d:e3:a8:c3:9b: 79:5e:65:0d:17:54:83:5f:3d:24:ac:a6:dc:99:54: 39:c8:3b:f8:2a:78:77:fa:46:a8:04:d9:06:ad:ba: 9c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:57:E1:B3:F0:89:67:C4:0F:01:61:CF:C8:63:0B:43:64:76:DF:DF X509v3 Authority Key Identifier: keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:9e:c1:8a:cc:9c:ac:1d:7d:92:22:5f:0b:3c:0d:37:8e:8d: b7:8d:c9:bb:c8:31:f1:43:24:cc:45:cd:ee:bd:4c:1c:37:0f: dd:84:f0:0e:02:5e:7a:27:5d:09:cd:e4:6b:44:e2:59:5a:12: a4:df:40:7c:8e:ce:d3:ad:a6:23:57:a4:18:e0:8c:a0:9b:92: d8:4a:4f:aa:bd:0d:c7:1b:37:84:92:48:7d:5f:3d:7f:c2:0a: c8:07:9f:c8:fe:48:86:17:58:bf:1e:5f:55:99:e0:bb:02:33: c1:86:8e:c6:44:27:b1:f9:38:fe:0e:0c:20:60:c8:8c:ba:8c: fa:ff:ad:3f:25:4f:49:d9:b2:6f:8b:2b:23:ad:4a:5f:3e:10: 80:9d:e3:ff:b2:3c:93:4f:ff:27:d1:72:30:24:1c:ca:41:9a: 7b:7b:6f:1a:fc:f5:b9:80:b2:c9:d3:26:73:51:84:df:88:e4: e0:c5:c0:a8:59:23:40:cf:f5:b1:eb:12:d1:02:0a:17:9c:a8: 88:21:2b:4a:24:d5:0f:23:7c:8e:01:b8:ef:f3:64:e5:47:16: 3c:ad:c7:b1:91:2c:3c:ff:c1:a2:ae:9a:86:e7:b6:c2:84:5c: 34:6e:3d:bc:13:31:9b:5b:ba:06:de:27:15:02:30:b0:da:24: 52:99:dd:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j4950nqcXUdSrmr1auGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkM2Q0MDExMTc1ZTVkZjdhM2Y1N2QzOGU3ODE1MGEyYzA1 ZmRkMWQwHhcNMjUxMjIwMDcwMDQ1WhcNMjUxMjIxMDcwMDQ1WjAzMTEwLwYDVQQD Eyg3NjU3ZTFiM2YwODk2N2M0MGYwMTYxY2ZjODYzMGI0MzY0NzZkZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXi0IKSe+v1ichrpNCVZd1fZH3dI fxlGbhrHQ03zUn9P2yRuLeN5fRkmYvdQMhGJsHKJh1OAOfz4LP/Ctnhcm1dDzrYh GVADSmbQ7nqOnf5aQP0H2QCqYmPmoTrEbVpBdYGO3n8Y3Y8hiBOvG9RNDl/3s9jn TkrpGqpHzaiAFKcaMTE+L/55/vV4GjgmH2LnF9BEPs6PPxfrsnHCiAG+hwFzHD4N kkMO04gz1863W4mGcyWfG0G+3rZvrZtUcmJgyD6HsEDKg7elXsUG54hbLP6IMpuB 1WYxTtQIDeOow5t5XmUNF1SDXz0krKbcmVQ5yDv4Knh3+kaoBNkGrbqcJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZX4bPwiWfEDwFhz8hjC0Nkdt/fMB8GA1UdIwQY MBaAFN09QBEXXl33o/V9OOeBUKLAX90dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQt MmQwYTc4YmU4OTJkLzEvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQtMmQwYTc4YmU4OTJk LzEvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArZ7Bisyc rB19kiJfCzwNN46Nt43Ju8gx8UMkzEXN7r1MHDcP3YTwDgJeeiddCc3ka0TiWVoS pN9AfI7O062mI1ekGOCMoJuS2EpPqr0Nxxs3hJJIfV89f8IKyAefyP5IhhdYvx5f VZnguwIzwYaOxkQnsfk4/g4MIGDIjLqM+v+tPyVPSdmyb4srI61KXz4QgJ3j/7I8 k0//J9FyMCQcykGae3tvGvz1uYCyydMmc1GE34jk4MXAqFkjQM/1sesS0QIKF5yo iCErSiTVDyN8jgG47/Nk5UcWPK3HsZEsPP/Boq6ahue2woRcNG49vBMxm1u6Bt4n FQIwsNokUpndZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:52 2025 by rpki-client