This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json) Hash identifier: 5flwcpTJbOs+eMqyJxM6a81rWZ44PkYwwh9KJqeQzxY= Subject key identifier: 7F:19:FF:B4:C6:B0:EA:D4:B1:E7:33:A8:85:06:6F:CB:45:80:6E:9E Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41 Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741 Certificate serial: 019B3C101F5599F7F6B659CB3B88E769AFF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 14:00:48 +0000 Manifest this update: Sat 20 Dec 2025 14:00:48 +0000 Manifest next update: Sun 21 Dec 2025 14:00:48 +0000 Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: TeueFCkDPkV2YvDA5lXzNGmLh8UPWm8U3abXYaDgADQ=) 2: L9b4ducPYyR6qc5uaeOni9YJQHA.roa (hash: vaOymUj3eUPmbh7xiKllx8KgzftTh5qvMK+aeen3RXg=) 3: kpbrBAbvkEz7iwjj9qvNJnx2KAI.roa (hash: EaUeR1cKI29E16jF0XdNnwUwftG+vurlmN50dR3srjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:1f:55:99:f7:f6:b6:59:cb:3b:88:e7:69:af:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de63eb6319ba454d397645945ce5439576fac741 Validity Not Before: Dec 20 14:00:48 2025 GMT Not After : Dec 21 14:00:48 2025 GMT Subject: CN=7f19ffb4c6b0ead4b1e733a885066fcb45806e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:55:4a:81:01:cd:7b:70:14:71:81:da:bf:3c: c0:54:03:e6:f3:f0:0b:fb:07:d2:e5:24:89:78:fa: da:97:6c:75:98:f5:ce:6d:b5:bb:09:4e:56:7f:c7: 2b:b0:92:15:6c:23:42:5e:7d:2c:ef:63:8f:61:dc: fd:e4:9a:b4:cb:fa:af:ac:79:24:11:ef:1e:68:9e: 05:21:c9:01:de:e6:52:6d:32:58:61:ed:e0:e7:d1: 7e:4e:f8:f4:7f:bb:b9:00:67:4c:7f:c5:5e:48:96: a8:93:ab:ce:66:ca:ab:e2:5b:a9:ba:cd:8f:4c:eb: 82:06:9b:1a:7e:a9:ea:51:ee:70:52:42:f0:81:21: 40:e1:f8:54:91:2f:9d:f9:d3:bf:84:18:47:d1:a8: 19:de:b5:15:f6:13:b9:04:b2:3f:2a:2d:91:f2:6c: 63:b3:50:63:a2:9b:8d:fc:a9:2c:43:37:98:54:6a: 29:9d:9a:94:eb:0a:82:ef:26:51:5e:62:f9:a7:ac: cc:b9:9f:9a:c9:f2:b9:53:51:8f:3f:89:3a:b3:4e: bd:be:2c:98:48:ad:8b:5d:c5:ab:e9:62:6e:ef:4f: 44:fb:fb:bb:21:d2:7d:b6:eb:2d:e7:88:8f:0d:36: 75:bf:e7:70:fe:38:f1:f6:ce:55:f6:0e:6a:01:e6: 2b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:19:FF:B4:C6:B0:EA:D4:B1:E7:33:A8:85:06:6F:CB:45:80:6E:9E X509v3 Authority Key Identifier: keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b2:fb:bd:68:ff:a1:2d:f5:5b:35:50:85:5b:70:4c:f8:83: c7:2d:78:8f:ca:0e:dc:e3:72:1d:4e:5b:05:8e:e7:67:e2:01: 9c:d0:de:cf:80:7d:3b:0d:40:fe:3a:bd:f5:ad:87:60:4e:2f: bd:66:d1:77:b5:2a:35:0a:d8:71:69:3f:ae:9f:cf:c9:b6:f1: ff:d5:62:09:6b:f1:8f:9d:bc:ad:7d:c7:82:95:f4:c6:77:30: 68:22:dd:cf:b0:3b:81:04:ba:0c:79:55:97:64:8a:34:c9:d1: 94:ac:99:0e:0e:91:51:ca:9b:64:9f:dc:b1:87:c9:b5:c5:28: b3:d1:c8:d5:9d:62:b5:ca:07:ac:b2:a2:5b:0f:90:28:ed:42: 1c:ff:9f:df:84:1f:a1:b9:6f:38:c3:31:c7:c0:9d:45:f2:b8: 55:64:5e:61:5d:21:96:a2:93:a2:94:a9:7c:94:80:7a:21:9b: a0:bd:61:69:a9:02:10:4d:f5:b2:af:17:16:71:27:8a:bd:72: 5f:4a:2f:4f:58:86:ef:55:ad:c3:f3:25:78:ab:2f:09:d6:68: fc:ce:4b:c0:27:80:89:7d:b0:a9:bb:be:36:f0:03:a7:b6:52: 51:0d:7b:a9:be:74:bc:21:18:ff:12:35:19:da:22:05:4d:91: 88:7c:de:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EB9Vmff2tlnLO4jnaa/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNjNlYjYzMTliYTQ1NGQzOTc2NDU5NDVjZTU0Mzk1NzZm YWM3NDEwHhcNMjUxMjIwMTQwMDQ4WhcNMjUxMjIxMTQwMDQ4WjAzMTEwLwYDVQQD Eyg3ZjE5ZmZiNGM2YjBlYWQ0YjFlNzMzYTg4NTA2NmZjYjQ1ODA2ZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FVKgQHNe3AUcYHavzzAVAPm8/AL +wfS5SSJePral2x1mPXObbW7CU5Wf8crsJIVbCNCXn0s72OPYdz95Jq0y/qvrHkk Ee8eaJ4FIckB3uZSbTJYYe3g59F+Tvj0f7u5AGdMf8VeSJaok6vOZsqr4lupus2P TOuCBpsafqnqUe5wUkLwgSFA4fhUkS+d+dO/hBhH0agZ3rUV9hO5BLI/Ki2R8mxj s1BjopuN/KksQzeYVGopnZqU6wqC7yZRXmL5p6zMuZ+ayfK5U1GPP4k6s069viyY SK2LXcWr6WJu709E+/u7IdJ9tust54iPDTZ1v+dw/jjx9s5V9g5qAeYrFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8Z/7TGsOrUseczqIUGb8tFgG6eMB8GA1UdIwQY MBaAFN5j62MZukVNOXZFlFzlQ5V2+sdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMt MWUxOGY1YjQ5MDVkLzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMtMWUxOGY1YjQ5MDVk LzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLL7vWj/ oS31WzVQhVtwTPiDxy14j8oO3ONyHU5bBY7nZ+IBnNDez4B9Ow1A/jq99a2HYE4v vWbRd7UqNQrYcWk/rp/Pybbx/9ViCWvxj528rX3HgpX0xncwaCLdz7A7gQS6DHlV l2SKNMnRlKyZDg6RUcqbZJ/csYfJtcUos9HI1Z1itcoHrLKiWw+QKO1CHP+f34Qf oblvOMMxx8CdRfK4VWReYV0hlqKTopSpfJSAeiGboL1haakCEE31sq8XFnEnir1y X0ovT1iG71Wtw/MleKsvCdZo/M5LwCeAiX2wqbu+NvADp7ZSUQ17qb50vCEY/xI1 GdoiBU2RiHze+w== -----END CERTIFICATE-----Generated at Sat Dec 20 20:26:54 2025 by rpki-client