This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json) Hash identifier: k5K/Z8rpc/LOfkobrfUIT7h0/aD4AJKD8ZxmLS+pmmI= Subject key identifier: 8A:69:FB:F4:1A:0C:51:EB:F8:C1:34:F4:D1:EC:98:3A:00:42:D4:C2 Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70 Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370 Certificate serial: 019B40C965D1222CA99275865C27C2D792F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft Manifest number: 1796 Signing time: Sun 21 Dec 2025 12:01:38 +0000 Manifest this update: Sun 21 Dec 2025 12:01:38 +0000 Manifest next update: Mon 22 Dec 2025 12:01:38 +0000 Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: XapYR6uWFfxHbH3mZcZtJW2PbOITaHjRKDUiPXw8GXM=) 2: mrfRDaiKMwuO0e_yVpeGak1wsx8.roa (hash: PAF6iPVsRLbh23Q2SPC9mq243Z3PJUwXufedOLJEEqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:65:d1:22:2c:a9:92:75:86:5c:27:c2:d7:92:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370 Validity Not Before: Dec 21 12:01:38 2025 GMT Not After : Dec 22 12:01:38 2025 GMT Subject: CN=8a69fbf41a0c51ebf8c134f4d1ec983a0042d4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0d:64:fa:ed:76:22:46:e7:be:75:1c:83:3a: a6:dd:3e:f7:03:96:3b:7e:47:8d:ea:ff:df:b7:93: 23:cc:3d:47:70:53:9e:9b:a1:c2:86:88:36:34:c1: 74:ba:87:f6:54:9c:a9:98:ec:a6:8c:7f:74:15:89: e3:7a:8c:f1:13:a5:fb:c0:3d:95:7c:66:b8:eb:86: 43:61:f7:35:cd:6e:e4:18:25:84:85:af:9b:74:b0: 49:1b:fc:6a:46:63:b2:41:99:98:3d:8e:ff:38:60: 2f:9c:90:4b:14:a5:74:c5:3e:e8:ef:ff:6d:e4:33: ec:61:0a:27:e1:89:f3:ed:84:0c:31:f4:5a:8d:92: 7b:56:21:ad:7c:a9:80:e7:73:17:b4:3c:9d:6f:30: 80:87:05:4b:61:6f:68:72:d8:1f:84:50:95:c6:cf: 24:ae:c5:f2:8c:ba:cb:fc:5f:15:79:4e:cc:f8:45: 56:f5:55:be:f4:6f:d8:b8:03:5e:16:ec:33:15:04: 5e:f8:7a:41:76:62:f2:a9:24:a8:0d:61:44:ac:0a: e0:3d:d1:06:d7:27:8a:36:e8:2e:da:5a:fe:5d:bd: 65:3b:f8:c2:cc:9e:a4:0a:12:8b:0e:e5:65:95:c3: 51:e2:df:da:8a:ff:3a:2a:ef:87:34:f4:b9:95:10: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:69:FB:F4:1A:0C:51:EB:F8:C1:34:F4:D1:EC:98:3A:00:42:D4:C2 X509v3 Authority Key Identifier: keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a8:9e:a3:c3:19:9b:e1:62:8c:27:1a:8a:16:41:fc:8a:79: 07:25:fb:25:92:b6:37:0a:6a:51:51:4a:34:b5:43:c8:4a:32: 84:0d:e3:47:c5:f4:ed:97:b4:85:f9:f2:45:08:65:8a:da:15: 5d:67:22:aa:8b:48:3d:7b:7a:41:70:01:3b:b3:f3:c9:0e:f3: b8:d1:4a:da:2c:81:b7:be:25:a3:b9:83:e4:2b:17:8f:01:82: 21:f8:c5:f8:f0:2b:65:bc:3d:11:95:ad:91:4f:99:fd:40:53: 04:9e:a6:46:57:3a:33:10:46:d6:1b:6a:43:f3:41:09:68:17: cc:31:63:f6:61:3d:cd:12:ad:9c:ec:db:0e:f9:ec:41:91:18: 86:0f:be:23:06:a6:6c:ab:a0:52:1a:35:44:d3:0a:8d:82:a7: 03:72:03:ae:95:f5:b5:a3:69:ed:57:3b:03:0c:7d:80:2c:a5: bd:29:12:ee:02:04:27:e0:53:1e:59:32:93:04:2f:37:c8:36: a0:90:0e:c3:1f:74:f4:38:1e:d8:7c:55:13:ba:ba:c0:e0:fd: a7:dd:dd:5f:fb:63:b1:f1:27:03:f4:a3:29:61:49:27:16:54: 1e:2b:36:61:59:0c:59:54:e8:09:d2:7f:42:f6:ab:32:3e:73: 1b:5b:d1:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyWXRIiypknWGXCfC15L2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYTQ2YjFmY2Q5MmI0N2Y0ZjU1ZmFkMDM4Yzk1ODEzNDBh OWQzNzAwHhcNMjUxMjIxMTIwMTM4WhcNMjUxMjIyMTIwMTM4WjAzMTEwLwYDVQQD Eyg4YTY5ZmJmNDFhMGM1MWViZjhjMTM0ZjRkMWVjOTgzYTAwNDJkNGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q1k+u12IkbnvnUcgzqm3T73A5Y7 fkeN6v/ft5MjzD1HcFOem6HChog2NMF0uof2VJypmOymjH90FYnjeozxE6X7wD2V fGa464ZDYfc1zW7kGCWEha+bdLBJG/xqRmOyQZmYPY7/OGAvnJBLFKV0xT7o7/9t 5DPsYQon4Ynz7YQMMfRajZJ7ViGtfKmA53MXtDydbzCAhwVLYW9octgfhFCVxs8k rsXyjLrL/F8VeU7M+EVW9VW+9G/YuANeFuwzFQRe+HpBdmLyqSSoDWFErArgPdEG 1yeKNugu2lr+Xb1lO/jCzJ6kChKLDuVllcNR4t/aiv86Ku+HNPS5lRDr9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpp+/QaDFHr+ME09NHsmDoAQtTCMB8GA1UdIwQY MBaAFNykax/NkrR/T1X60DjJWBNAqdNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmIt YzZkMmI4ZDFmNTY2LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmItYzZkMmI4ZDFmNTY2 LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKieo8MZ m+FijCcaihZB/Ip5ByX7JZK2NwpqUVFKNLVDyEoyhA3jR8X07Ze0hfnyRQhlitoV XWciqotIPXt6QXABO7PzyQ7zuNFK2iyBt74lo7mD5CsXjwGCIfjF+PArZbw9EZWt kU+Z/UBTBJ6mRlc6MxBG1htqQ/NBCWgXzDFj9mE9zRKtnOzbDvnsQZEYhg++Iwam bKugUho1RNMKjYKnA3IDrpX1taNp7Vc7Awx9gCylvSkS7gIEJ+BTHlkykwQvN8g2 oJAOwx909Dge2HxVE7q6wOD9p93dX/tjsfEnA/SjKWFJJxZUHis2YVkMWVToCdJ/ QvarMj5zG1vRWw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:58:05 2025 by rpki-client