This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft File: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json) Hash identifier: BQuSrXFuX0jG0Msdb6puQyw8UBGLLwfY1TkK9D3rR/A= Subject key identifier: CF:99:C8:75:A1:BA:9E:9C:95:43:0C:8D:E5:AE:FE:FD:E8:40:4F:2A Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08 Certificate issuer: /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08 Certificate serial: 019B2A783C0665E6C16A6C0CE33BAA015605 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft Manifest number: 0EB2 Signing time: Wed 17 Dec 2025 04:01:21 +0000 Manifest this update: Wed 17 Dec 2025 04:01:21 +0000 Manifest next update: Thu 18 Dec 2025 04:01:21 +0000 Files and hashes: 1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: g2hyJMNC+uiDxlwDpLDgpK2HiRO4AOCDs1KxFwifoY8=) 2: 9o3lcP-4u3MnLvx0kAlBujW4rP8.roa (hash: dshKKlZMjXCloMnE9oVR3HuOAnY6dIKys+Z7e0GPVnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:78:3c:06:65:e6:c1:6a:6c:0c:e3:3b:aa:01:56:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08 Validity Not Before: Dec 17 04:01:21 2025 GMT Not After : Dec 18 04:01:21 2025 GMT Subject: CN=cf99c875a1ba9e9c95430c8de5aefefde8404f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dc:c8:ae:6c:c2:90:8c:80:a3:89:05:b2:ec: fe:39:90:5a:ce:c1:2c:66:12:3d:b6:64:68:b1:73: 85:04:7b:c2:74:b0:c3:28:3c:01:20:4e:61:b8:7e: 86:9f:41:d0:29:6a:13:5e:5e:1a:c7:c8:07:0a:b0: 20:45:56:cd:59:7d:a4:1b:18:47:d7:d4:ba:3c:31: 4d:c7:57:77:71:01:ac:75:e4:b9:29:98:eb:f7:9d: f6:d0:da:1b:eb:2f:e9:63:1e:8d:84:8a:d0:b0:ff: 39:ca:46:d3:f6:39:d1:ec:2d:ee:25:af:d5:97:71: 59:89:f1:96:f3:ac:ac:da:bf:bb:4f:b2:7c:ab:22: 4e:75:a3:b4:fb:27:ef:96:e1:c5:45:de:cf:14:1b: 77:6c:23:59:5d:10:46:59:dd:44:f2:93:1e:bc:ea: 69:7d:01:c1:f7:2a:5e:2b:1a:d6:82:64:26:a0:a0: 2f:dd:b2:b1:ad:72:88:ee:2f:2a:7b:b7:d9:c7:53: 9e:64:21:74:54:84:00:49:8a:44:75:80:eb:f7:a9: 40:9a:ec:c6:05:d8:93:51:1c:43:28:e0:d6:5c:6d: 1f:b6:bd:ab:0b:a1:94:39:31:0a:3b:54:b2:46:dd: 52:de:4d:71:55:54:50:b7:78:d1:17:59:a1:4e:3e: b8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:99:C8:75:A1:BA:9E:9C:95:43:0C:8D:E5:AE:FE:FD:E8:40:4F:2A X509v3 Authority Key Identifier: keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:2b:a2:ee:eb:05:c9:2f:fb:92:8d:df:da:f7:63:da:3b:13: 0e:b4:17:e4:a7:01:95:8a:4f:0d:f9:5e:ba:90:11:3d:46:b1: ca:04:4e:78:91:f1:a7:95:30:f6:14:1e:c1:78:1b:eb:a4:6d: ae:70:ef:11:4a:21:5b:de:da:82:57:d8:45:34:26:c5:b4:c3: 4c:85:9a:34:f6:cc:e8:7e:2b:2e:c5:fd:13:8d:87:42:d5:ca: dc:26:9a:4f:a6:81:97:18:52:21:c7:d9:33:78:f6:8e:24:36: d3:af:b5:88:b3:5e:42:84:45:a5:b0:28:ab:61:85:54:dd:d5: f2:a5:c4:58:93:d6:f6:f0:59:9e:8f:bd:2a:f0:d5:c5:87:cc: 36:9c:29:b9:a4:2f:b0:b0:f9:ed:56:1e:b2:3d:38:c0:5d:31: 80:49:06:92:55:97:ed:99:53:c9:6c:09:a2:a9:d8:70:12:76: 02:9e:c1:38:9a:9e:e1:e8:e2:bc:cb:85:78:e4:f7:14:8e:a6: be:a6:15:03:43:7f:c0:33:5c:74:99:57:cf:6c:1a:f6:23:cc: d1:a3:5c:3f:37:f3:e0:3b:c9:93:4c:9f:c6:e6:db:47:44:c0: fa:de:3d:7a:0f:e9:f7:02:1e:d0:83:ec:06:86:ab:ab:8b:ee: 04:5d:2d:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqeDwGZebBamwM4zuqAVYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNTJmZWU5NTQyZDYzYTY4ZTQ5YjJjOGVkNzgzOGY4YTAz NDZiMDgwHhcNMjUxMjE3MDQwMTIxWhcNMjUxMjE4MDQwMTIxWjAzMTEwLwYDVQQD EyhjZjk5Yzg3NWExYmE5ZTljOTU0MzBjOGRlNWFlZmVmZGU4NDA0ZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tzIrmzCkIyAo4kFsuz+OZBazsEs ZhI9tmRosXOFBHvCdLDDKDwBIE5huH6Gn0HQKWoTXl4ax8gHCrAgRVbNWX2kGxhH 19S6PDFNx1d3cQGsdeS5KZjr95320Nob6y/pYx6NhIrQsP85ykbT9jnR7C3uJa/V l3FZifGW86ys2r+7T7J8qyJOdaO0+yfvluHFRd7PFBt3bCNZXRBGWd1E8pMevOpp fQHB9ypeKxrWgmQmoKAv3bKxrXKI7i8qe7fZx1OeZCF0VIQASYpEdYDr96lAmuzG BdiTURxDKODWXG0ftr2rC6GUOTEKO1SyRt1S3k1xVVRQt3jRF1mhTj64dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+ZyHWhup6clUMMjeWu/v3oQE8qMB8GA1UdIwQY MBaAFN5S/ulULWOmjkmyyO14OPigNGsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmUzYjMtYWI1NS00YWM5LWJiMjgt YTRmMzMzNjU0Y2M5LzEvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC83NmUzYjMtYWI1NS00YWM5LWJiMjgtYTRmMzMzNjU0Y2M5 LzEvM2xMLTZWUXRZNmFPU2JMSTdYZzQtS0EwYXdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuCui7usF yS/7ko3f2vdj2jsTDrQX5KcBlYpPDfleupARPUaxygROeJHxp5Uw9hQewXgb66Rt rnDvEUohW97aglfYRTQmxbTDTIWaNPbM6H4rLsX9E42HQtXK3CaaT6aBlxhSIcfZ M3j2jiQ206+1iLNeQoRFpbAoq2GFVN3V8qXEWJPW9vBZno+9KvDVxYfMNpwpuaQv sLD57VYesj04wF0xgEkGklWX7ZlTyWwJoqnYcBJ2Ap7BOJqe4ejivMuFeOT3FI6m vqYVA0N/wDNcdJlXz2wa9iPM0aNcPzfz4DvJk0yfxubbR0TA+t49eg/p9wIe0IPs Boarq4vuBF0tpw== -----END CERTIFICATE-----Generated at Wed Dec 17 09:45:39 2025 by rpki-client