This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json) Hash identifier: kGs2RRKLtXLHxIRxC64MADG25LZEAYySwUlNKboBY7Q= Subject key identifier: 50:0D:5A:8B:75:65:A8:3E:7D:7A:BF:17:7D:90:80:BB:59:96:65:5B Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3 Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3 Certificate serial: 019B5260DCF54B8D1B715FCC75AD18ADD6DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft Manifest number: 138B Signing time: Wed 24 Dec 2025 22:00:38 +0000 Manifest this update: Wed 24 Dec 2025 22:00:38 +0000 Manifest next update: Thu 25 Dec 2025 22:00:38 +0000 Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: qbYp/Rs8GXjctMFdwCmURtmyCU7jYv7Luc5MawkRtnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:60:dc:f5:4b:8d:1b:71:5f:cc:75:ad:18:ad:d6:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3 Validity Not Before: Dec 24 22:00:38 2025 GMT Not After : Dec 25 22:00:38 2025 GMT Subject: CN=500d5a8b7565a83e7d7abf177d9080bb5996655b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:4c:6a:77:5f:22:25:b5:d3:03:ec:f5:ad: 5a:34:12:a0:d9:6d:3a:e1:a3:55:8f:df:e9:40:d8: f9:cb:5c:3a:aa:b3:d5:50:59:0e:73:52:cd:e6:42: 46:21:44:55:0d:53:fe:9b:47:3a:b2:41:14:e2:0e: 76:12:e2:4f:cb:5e:19:3e:9d:9f:8c:4c:a1:6c:03: 99:1c:d1:aa:ec:ac:f5:00:61:41:38:1f:d8:fd:43: 87:a0:56:88:96:e3:4f:e5:3e:1c:61:0f:ad:56:a5: 93:73:26:93:e0:81:2f:4d:c7:1c:40:4b:5f:0a:9d: 2a:44:a6:2f:7b:c7:5d:d0:50:46:a3:b7:ed:99:89: f2:f3:c1:56:d3:6d:3d:f1:6a:67:78:a8:97:59:19: e5:53:78:5e:9d:8c:1c:fc:9d:d6:ce:80:8d:65:6c: 85:c7:d7:da:68:10:42:a8:c6:34:c2:13:93:6d:6b: 91:ed:88:38:88:68:9c:de:f4:ba:6e:07:9a:8b:ac: e6:25:22:85:2e:7d:1a:22:f0:33:61:77:75:20:1f: f6:28:d8:fa:6b:aa:60:06:74:5f:38:75:dc:06:2a: 21:2c:bc:d0:bd:59:e9:17:a8:17:70:a6:df:12:37: ec:fa:23:a6:8a:21:5f:a0:1f:b0:b6:cb:bc:5e:dd: e7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0D:5A:8B:75:65:A8:3E:7D:7A:BF:17:7D:90:80:BB:59:96:65:5B X509v3 Authority Key Identifier: keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:46:7e:7e:8c:86:cc:c3:75:f8:05:6e:74:ef:da:63:48:03: 03:67:9c:cb:ad:7c:7d:57:59:50:01:f1:35:bf:14:09:99:dd: 8d:09:24:e0:1a:00:43:84:f1:9b:e3:0a:9b:aa:4c:11:81:c9: b1:0e:3b:cd:e1:51:d9:06:c0:d5:0b:3c:5b:35:b4:b3:3c:fa: c1:90:19:e4:4b:7c:58:ee:d7:80:4b:87:c2:1e:0a:e8:29:90: 22:e9:94:ad:16:ce:fa:50:8f:6c:d4:90:7e:02:e4:dc:80:9e: 60:68:04:2b:7a:af:11:94:e4:b8:b9:73:32:f4:00:7e:21:46: aa:49:02:c9:f6:e7:6b:33:6d:6a:da:e8:68:dd:71:ae:54:92: 1b:ff:e6:1d:66:59:8b:58:1f:e9:65:2a:f0:b8:71:09:3b:ce: 11:91:2c:82:72:98:a2:db:90:7c:3e:12:ce:6a:14:c1:33:ee: 70:9c:4e:64:d4:e1:bd:cb:19:9b:f0:0c:ca:8a:4a:67:d2:58: f3:44:71:43:b9:2b:24:f8:2f:c0:a5:22:c8:28:90:d1:f9:02: bb:18:3e:2c:a8:48:6d:d3:29:2a:6e:8e:c6:7f:a4:af:9d:1d: d4:e3:cf:c5:08:5a:17:c6:4e:27:c8:fb:f6:18:ab:20:b4:5c: fb:ee:21:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYNz1S40bcV/Mda0YrdbdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYzAxNjc0MDY0NDFlYTE2YzQ3NDA2ZDA1MjJiNWM2NjMw YWJjYjMwHhcNMjUxMjI0MjIwMDM4WhcNMjUxMjI1MjIwMDM4WjAzMTEwLwYDVQQD Eyg1MDBkNWE4Yjc1NjVhODNlN2Q3YWJmMTc3ZDkwODBiYjU5OTY2NTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4hMandfIiW10wPs9a1aNBKg2W06 4aNVj9/pQNj5y1w6qrPVUFkOc1LN5kJGIURVDVP+m0c6skEU4g52EuJPy14ZPp2f jEyhbAOZHNGq7Kz1AGFBOB/Y/UOHoFaIluNP5T4cYQ+tVqWTcyaT4IEvTcccQEtf Cp0qRKYve8dd0FBGo7ftmYny88FW02098WpneKiXWRnlU3henYwc/J3WzoCNZWyF x9faaBBCqMY0whOTbWuR7Yg4iGic3vS6bgeai6zmJSKFLn0aIvAzYXd1IB/2KNj6 a6pgBnRfOHXcBiohLLzQvVnpF6gXcKbfEjfs+iOmiiFfoB+wtsu8Xt3nmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFANWot1Zag+fXq/F32QgLtZlmVbMB8GA1UdIwQY MBaAFN3AFnQGRB6hbEdAbQUitcZjCryzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNjA3YjctMTg3Yi00NTQ1LWI2MTQt M2Q5YWVkYWMyYjMzLzEvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jNjA3YjctMTg3Yi00NTQ1LWI2MTQtM2Q5YWVkYWMyYjMz LzEvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUZ+foyG zMN1+AVudO/aY0gDA2ecy618fVdZUAHxNb8UCZndjQkk4BoAQ4Txm+MKm6pMEYHJ sQ47zeFR2QbA1Qs8WzW0szz6wZAZ5Et8WO7XgEuHwh4K6CmQIumUrRbO+lCPbNSQ fgLk3ICeYGgEK3qvEZTkuLlzMvQAfiFGqkkCyfbnazNtatroaN1xrlSSG//mHWZZ i1gf6WUq8LhxCTvOEZEsgnKYotuQfD4SzmoUwTPucJxOZNThvcsZm/AMyopKZ9JY 80RxQ7krJPgvwKUiyCiQ0fkCuxg+LKhIbdMpKm6Oxn+kr50d1OPPxQhaF8ZOJ8j7 9hirILRc++4hyw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:22:23 2025 by rpki-client