This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json) Hash identifier: DvAC6Rd9km71T2xKkq7voIBQzHAfch4M+Ox9lRWTygw= Subject key identifier: A6:B5:FE:D6:8B:B6:DE:73:C2:7E:3A:4D:DB:D9:7E:B3:77:75:2A:F4 Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3 Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3 Certificate serial: 019B61D3D64420875ADA31F4EEB1C45DC0B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft Manifest number: 1393 Signing time: Sat 27 Dec 2025 22:00:31 +0000 Manifest this update: Sat 27 Dec 2025 22:00:31 +0000 Manifest next update: Sun 28 Dec 2025 22:00:31 +0000 Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: QWV+46xPBY3y71TWtDSlQLNf0qGMZ8UKWY+gJlbWx3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:d3:d6:44:20:87:5a:da:31:f4:ee:b1:c4:5d:c0:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3 Validity Not Before: Dec 27 22:00:31 2025 GMT Not After : Dec 28 22:00:31 2025 GMT Subject: CN=a6b5fed68bb6de73c27e3a4ddbd97eb377752af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:d0:db:27:90:bf:2e:61:9a:95:22:bf:79: f9:2c:2d:98:77:94:ca:cb:18:37:79:95:39:ea:9b: 97:be:58:d3:73:a1:3b:0d:fd:4a:80:86:73:ba:5a: 07:36:73:68:73:84:a1:33:33:24:9f:3a:df:0a:e1: f2:b6:ef:36:97:c6:85:20:55:cf:69:33:0a:ad:bb: ac:4b:a9:1d:ed:08:bb:70:d4:3d:f4:8c:b1:13:e8: ba:26:4e:dd:1f:e2:37:cb:49:0c:47:d6:af:81:66: ea:49:9e:77:ea:43:d4:0f:12:23:8e:d8:11:52:79: 2c:7b:c0:6c:83:d9:97:1c:ff:6f:5e:77:40:05:39: 7b:d9:e7:4a:d1:d6:a3:f1:70:af:2a:43:f6:9f:0d: 5f:dd:a0:5e:26:bb:da:34:30:7b:83:c4:26:53:9e: ce:70:4d:f2:4e:99:da:0a:8a:78:5d:37:38:e2:7e: 9d:2b:7b:0e:db:92:37:ae:29:ee:e7:7d:ce:d5:57: b6:f8:fd:85:1c:e0:49:76:09:1d:85:26:23:c9:5b: 6d:63:58:75:33:11:26:c3:9e:b4:72:49:ed:6e:3e: 71:42:e5:dc:10:ab:b0:3e:f8:6d:60:b8:92:92:8f: 69:55:41:97:30:c9:ce:fa:98:6b:0e:91:54:20:14: cc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B5:FE:D6:8B:B6:DE:73:C2:7E:3A:4D:DB:D9:7E:B3:77:75:2A:F4 X509v3 Authority Key Identifier: keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d5:ed:47:00:06:12:85:2a:38:6d:b6:34:6b:e4:88:5d:a7: 24:c5:3e:76:32:30:7b:10:aa:1e:ab:c0:1f:84:9a:a8:30:d3: ed:cb:32:30:30:86:9f:fb:01:11:55:57:fb:fa:a1:4f:9b:09: b4:5b:3a:e8:00:a1:ae:fb:a1:21:b5:5f:ac:3c:6a:9f:c1:88: dc:28:34:16:38:35:92:30:1a:cc:66:4e:5f:5c:bb:1e:35:cc: 58:7c:38:73:d6:14:b2:13:18:7d:de:f6:94:41:bb:50:f1:61: 59:2d:91:11:f9:68:87:2d:1f:86:5b:35:85:76:44:77:23:04: 0d:b5:d0:51:b3:30:c7:45:08:25:4e:23:4e:fe:3e:05:9a:2b: 7c:db:0c:a5:60:4f:d8:5a:43:f3:9d:df:f1:1e:c4:b9:f0:29: df:ce:06:e7:20:ad:65:e6:bf:a0:66:a3:cb:b3:45:2e:9e:b7: 7c:bd:b8:af:f0:02:fe:7d:e2:4b:83:74:ff:7d:7d:5a:ab:c4: d7:19:e6:54:94:20:0d:cb:18:25:b2:19:c6:63:d0:56:1c:65: 33:f6:c9:d4:42:46:17:b4:2d:3b:36:37:c3:e3:a4:66:1c:41: 91:7f:2e:98:46:c8:f7:8d:87:1d:45:33:2e:10:1e:2e:1e:46: 2b:40:c4:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZth09ZEIIda2jH07rHEXcC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYzAxNjc0MDY0NDFlYTE2YzQ3NDA2ZDA1MjJiNWM2NjMw YWJjYjMwHhcNMjUxMjI3MjIwMDMxWhcNMjUxMjI4MjIwMDMxWjAzMTEwLwYDVQQD EyhhNmI1ZmVkNjhiYjZkZTczYzI3ZTNhNGRkYmQ5N2ViMzc3NzUyYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk7Q2yeQvy5hmpUiv3n5LC2Yd5TK yxg3eZU56puXvljTc6E7Df1KgIZzuloHNnNoc4ShMzMknzrfCuHytu82l8aFIFXP aTMKrbusS6kd7Qi7cNQ99IyxE+i6Jk7dH+I3y0kMR9avgWbqSZ536kPUDxIjjtgR Unkse8Bsg9mXHP9vXndABTl72edK0daj8XCvKkP2nw1f3aBeJrvaNDB7g8QmU57O cE3yTpnaCop4XTc44n6dK3sO25I3rinu533O1Ve2+P2FHOBJdgkdhSYjyVttY1h1 MxEmw560ckntbj5xQuXcEKuwPvhtYLiSko9pVUGXMMnO+phrDpFUIBTMMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKa1/taLtt5zwn46TdvZfrN3dSr0MB8GA1UdIwQY MBaAFN3AFnQGRB6hbEdAbQUitcZjCryzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNjA3YjctMTg3Yi00NTQ1LWI2MTQt M2Q5YWVkYWMyYjMzLzEvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jNjA3YjctMTg3Yi00NTQ1LWI2MTQtM2Q5YWVkYWMyYjMz LzEvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtXtRwAG EoUqOG22NGvkiF2nJMU+djIwexCqHqvAH4SaqDDT7csyMDCGn/sBEVVX+/qhT5sJ tFs66AChrvuhIbVfrDxqn8GI3Cg0Fjg1kjAazGZOX1y7HjXMWHw4c9YUshMYfd72 lEG7UPFhWS2REflohy0fhls1hXZEdyMEDbXQUbMwx0UIJU4jTv4+BZorfNsMpWBP 2FpD853f8R7EufAp384G5yCtZea/oGajy7NFLp63fL24r/AC/n3iS4N0/319WqvE 1xnmVJQgDcsYJbIZxmPQVhxlM/bJ1EJGF7QtOzY3w+OkZhxBkX8umEbI942HHUUz LhAeLh5GK0DEBA== -----END CERTIFICATE-----Generated at Sun Dec 28 06:22:09 2025 by rpki-client