This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json) Hash identifier: mdbe3I2pAYo95pI0N7CZL8tbp2E/LvEzYftjiAru21o= Subject key identifier: D7:C1:EB:61:6F:37:86:FA:C7:C3:DE:90:66:39:E3:13:25:CB:28:FC Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9 Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9 Certificate serial: 019B6FFD5B87A2E35386F0CB7F3965398F36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft Manifest number: 115E Signing time: Tue 30 Dec 2025 16:00:33 +0000 Manifest this update: Tue 30 Dec 2025 16:00:33 +0000 Manifest next update: Wed 31 Dec 2025 16:00:33 +0000 Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: fJpnUd4WYKopoG5db/ZVv9M4tUohk2zgsC1NdmoR06k=) 2: 6f05f7w22zRcUpz28tjM6XCdsYk.roa (hash: kl4KaLs8etslFAKNgVQw6su1C8PWL6O+HJhYp1T4Tak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:5b:87:a2:e3:53:86:f0:cb:7f:39:65:39:8f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9 Validity Not Before: Dec 30 16:00:33 2025 GMT Not After : Dec 31 16:00:33 2025 GMT Subject: CN=d7c1eb616f3786fac7c3de906639e31325cb28fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:f3:b9:ef:9b:d6:77:ea:48:1c:69:57:e4: 76:a7:28:e2:33:58:d3:d4:59:73:25:28:95:e5:8e: 32:3f:26:a9:99:d1:52:23:60:62:80:c8:82:d9:87: 17:30:88:25:c8:b7:50:e2:aa:9f:08:fd:cb:6a:4a: f0:41:3f:81:10:e3:f8:41:e6:4e:4b:46:51:09:68: 64:a6:f4:a1:7f:47:45:4e:ff:3b:c3:56:7e:9e:85: 61:45:a4:d7:d3:10:7d:f5:80:98:fb:4b:60:23:3c: bb:bb:a3:49:13:cb:e3:ab:c1:a2:4c:ff:23:7d:af: 0e:67:44:3a:6c:f9:38:b2:46:8c:f1:c9:53:86:ab: 12:ac:d6:68:88:16:3c:66:b7:5c:6c:00:cf:4d:d9: db:24:91:4d:9a:41:9b:94:99:20:50:9e:06:ba:9b: e5:70:79:17:8f:dd:6f:c2:6d:de:76:01:fd:57:b2: 83:5d:72:bd:a6:b4:85:66:de:42:ef:16:5b:6a:ed: 22:9e:39:bb:9a:ac:bc:89:33:c0:11:38:58:12:0c: 79:b4:0a:bb:5e:25:40:6c:f3:ce:9e:4a:0b:2d:82: 58:a6:7e:45:0e:2f:7b:76:1e:4b:89:a7:8a:f8:58: ab:f4:98:ad:dd:da:7d:34:41:17:b7:3e:33:e3:41: 35:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C1:EB:61:6F:37:86:FA:C7:C3:DE:90:66:39:E3:13:25:CB:28:FC X509v3 Authority Key Identifier: keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:27:29:da:79:36:d0:a1:d6:00:27:c5:2f:73:bd:c4:1a:40: 4b:2b:83:cc:58:7c:2a:f9:41:eb:b4:a6:37:d3:55:05:38:46: 2b:bb:56:42:f8:93:9f:f0:53:e1:7f:88:e4:ff:14:9d:6f:a7: 75:af:68:e6:89:77:11:82:d4:cd:af:ae:60:f0:f9:64:1a:87: 35:16:4b:a3:42:19:4e:9a:7a:7a:7c:c0:be:7a:de:ba:5e:60: d9:74:9e:ed:5c:06:65:4f:6c:4c:dd:88:68:f9:89:3b:c4:9c: 36:ac:e4:62:e9:2f:a3:99:0b:06:0a:ab:3a:16:f6:23:83:4b: 64:71:8b:ab:f8:b7:5b:7c:63:09:dc:7d:7c:44:8b:18:8c:3b: 56:5e:72:7e:27:0c:36:bb:c7:10:ff:08:41:05:bb:30:75:9c: c1:8c:87:1a:6b:d0:2e:0f:6f:37:1d:09:aa:42:2d:1d:5a:c6: 42:9f:60:35:54:2d:a0:d2:93:47:6d:de:1c:8d:9b:c3:ca:35: f1:73:49:d5:7e:71:c7:b0:62:0b:82:9f:25:b1:bb:45:86:8e: 5c:27:f4:a6:9e:2b:8f:a8:e6:92:0b:c9:48:22:90:b5:38:6e: dc:d5:c4:c0:32:ee:64:72:0f:40:70:69:e6:06:24:58:82:c3: b7:a5:8b:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/VuHouNThvDLfzllOY82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjY2E1MjIxOTZmZDA5YmFlNzM5YjZiZDIzMjJlNWViOTBk YTRmYjkwHhcNMjUxMjMwMTYwMDMzWhcNMjUxMjMxMTYwMDMzWjAzMTEwLwYDVQQD EyhkN2MxZWI2MTZmMzc4NmZhYzdjM2RlOTA2NjM5ZTMxMzI1Y2IyOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstvzue+b1nfqSBxpV+R2pyjiM1jT 1FlzJSiV5Y4yPyapmdFSI2BigMiC2YcXMIglyLdQ4qqfCP3LakrwQT+BEOP4QeZO S0ZRCWhkpvShf0dFTv87w1Z+noVhRaTX0xB99YCY+0tgIzy7u6NJE8vjq8GiTP8j fa8OZ0Q6bPk4skaM8clThqsSrNZoiBY8ZrdcbADPTdnbJJFNmkGblJkgUJ4Gupvl cHkXj91vwm3edgH9V7KDXXK9prSFZt5C7xZbau0injm7mqy8iTPAEThYEgx5tAq7 XiVAbPPOnkoLLYJYpn5FDi97dh5LiaeK+Fir9Jit3dp9NEEXtz4z40E1lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfB62FvN4b6x8PekGY54xMlyyj8MB8GA1UdIwQY MBaAFNzKUiGW/Qm65zm2vSMi5euQ2k+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMt M2IyNTBhZTE4OTM2LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMtM2IyNTBhZTE4OTM2 LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGycp2nk2 0KHWACfFL3O9xBpASyuDzFh8KvlB67SmN9NVBThGK7tWQviTn/BT4X+I5P8UnW+n da9o5ol3EYLUza+uYPD5ZBqHNRZLo0IZTpp6enzAvnreul5g2XSe7VwGZU9sTN2I aPmJO8ScNqzkYukvo5kLBgqrOhb2I4NLZHGLq/i3W3xjCdx9fESLGIw7Vl5yficM NrvHEP8IQQW7MHWcwYyHGmvQLg9vNx0JqkItHVrGQp9gNVQtoNKTR23eHI2bw8o1 8XNJ1X5xx7BiC4KfJbG7RYaOXCf0pp4rj6jmkgvJSCKQtThu3NXEwDLuZHIPQHBp 5gYkWILDt6WLyg== -----END CERTIFICATE-----Generated at Tue Dec 30 21:59:49 2025 by rpki-client