This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: 1hQQOrIGA7wj/DQoAlO2iHj/XqNA3KgZSbu8m4wkUyM= Subject key identifier: 35:51:0F:5B:A7:BB:45:E0:42:18:C8:33:D9:4C:62:6E:95:D6:AE:89 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019B3C103B49EC3D139E10F79FE63989D9B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 01C7 Signing time: Sat 20 Dec 2025 14:00:54 +0000 Manifest this update: Sat 20 Dec 2025 14:00:54 +0000 Manifest next update: Sun 21 Dec 2025 14:00:54 +0000 Files and hashes: 1: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: V/7YTGjzWmGlWCp6b0Jx2R8GXluRa9dcAwXPPpbypAs=) 2: CN_bapZXIkvKBuYkpK0A9Fhg1yE.roa (hash: ql+OkdfFafxxT0hXtF/ZDCWRkBrIRJfL/o6QiI+ud4Y=) 3: KRbV-MNWRxAjm7Ctjhzy8C1XgVQ.roa (hash: C/hBs+kMg4joqqgJdT9WQAAShLEFg3fI49RXJ2R8ftg=) 4: NUqvibQu6dWh6Eo5e0WkTVgiAOs.roa (hash: rpCYWQAUZby9hvUsdkbZ1E+JsPoOrGo+9DJrYWN/+/Y=) 5: OgHzARzUsqLR0u5JpwfqHPUJH3c.roa (hash: vk6noktjCviYMLCwPzDd3UOjf8ckGdWUy0fkk3R9+9M=) 6: QAjbbxJkwWP6mtvrf816lbgaTpE.roa (hash: BE3I5u9iuuHjxCqTUslvbILWdwNCS8MnbabYgEyaLMg=) 7: elNM6G6dpmEHLuSUHCZ2S_uUwRw.roa (hash: ty6P7Tg9xGsXu6Rck5+usg5S6KFjiIRCpar611wI2Uk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:3b:49:ec:3d:13:9e:10:f7:9f:e6:39:89:d9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Dec 20 14:00:54 2025 GMT Not After : Dec 21 14:00:54 2025 GMT Subject: CN=35510f5ba7bb45e04218c833d94c626e95d6ae89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:75:6f:ac:af:ca:df:ec:f9:a4:85:bc:fc: 70:36:22:62:a4:ce:7c:32:b2:b0:cd:cb:75:b3:c7: f5:0b:a7:ec:43:78:d8:a9:ce:12:9c:c6:05:49:77: 12:47:1c:2a:1e:76:3c:1f:db:8b:30:79:07:2c:5c: 3a:36:33:ed:6e:c8:87:7d:5d:48:e1:1f:0a:d0:6d: b8:50:0f:8e:82:f1:db:78:d2:09:5d:a9:d6:d0:09: 13:fa:c9:a1:3a:73:6d:4e:43:9b:9e:59:a3:5e:ff: f3:ff:c1:fe:79:9b:16:ac:6a:37:20:d3:1b:61:02: d6:70:11:07:a3:71:53:99:a6:54:29:80:00:2e:de: 4a:4e:11:e2:cf:42:24:13:46:36:67:b2:ca:68:3f: 55:30:c2:c7:cd:fe:54:58:21:6a:4e:4a:db:4d:21: 06:28:f7:a9:46:d3:bb:1e:da:6e:77:0c:3f:eb:d7: 30:40:e6:38:61:14:e9:67:dc:a3:2c:ff:87:a7:d7: c5:87:57:1a:db:68:64:45:bf:c7:c0:77:5b:f8:39: 48:e7:44:12:3a:27:54:47:cd:47:ae:1e:06:79:4e: 80:57:27:b2:56:60:40:14:a4:e3:9a:80:0e:91:ae: ce:c7:19:72:4d:ea:ee:93:b4:9b:18:84:23:ac:f7: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:51:0F:5B:A7:BB:45:E0:42:18:C8:33:D9:4C:62:6E:95:D6:AE:89 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:fd:6f:85:0f:de:31:bd:10:93:51:66:c1:d7:28:79:58:1c: 72:d8:b2:90:44:a9:eb:d8:23:72:3f:12:b0:24:76:de:87:ca: da:c3:d8:f6:42:e4:c0:60:e7:40:d6:b6:85:d7:ac:68:c8:83: 72:b1:14:d8:2e:57:f6:1c:b6:83:7f:c0:e0:b8:f8:c0:c8:0f: 5e:78:57:90:cd:1a:7e:c0:32:ea:c6:46:19:47:52:99:aa:91: 97:73:35:4d:79:a3:bc:2b:ef:09:b2:0e:d6:17:57:23:09:a0: 5f:1e:0d:a3:57:f2:72:a6:ac:0c:4b:c4:25:8f:7c:3d:02:d5: 4b:89:af:dd:b3:96:0e:61:6f:de:ac:ca:3e:03:26:1b:84:59: 48:8a:91:3d:d4:53:ad:98:67:ef:cc:bd:21:62:d3:d0:35:22: 47:53:c2:44:08:12:c0:8c:9e:54:d4:11:72:0d:36:b7:35:16: 63:09:14:36:2a:5a:5f:e5:95:1f:6f:4a:97:64:4d:d9:24:a9: c7:c9:8a:8e:c4:ee:7a:45:92:67:b1:a7:54:8e:9c:64:01:b7: 8b:2a:e5:de:e8:19:49:1b:28:38:4d:e4:27:ed:c0:19:92:b9: 4a:1f:d3:93:82:6c:d0:b6:df:e6:e9:42:0c:03:d1:07:41:d4: 4e:95:f4:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EDtJ7D0TnhD3n+Y5idmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjUxMjIwMTQwMDU0WhcNMjUxMjIxMTQwMDU0WjAzMTEwLwYDVQQD EygzNTUxMGY1YmE3YmI0NWUwNDIxOGM4MzNkOTRjNjI2ZTk1ZDZhZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2B1b6yvyt/s+aSFvPxwNiJipM58 MrKwzct1s8f1C6fsQ3jYqc4SnMYFSXcSRxwqHnY8H9uLMHkHLFw6NjPtbsiHfV1I 4R8K0G24UA+OgvHbeNIJXanW0AkT+smhOnNtTkObnlmjXv/z/8H+eZsWrGo3INMb YQLWcBEHo3FTmaZUKYAALt5KThHiz0IkE0Y2Z7LKaD9VMMLHzf5UWCFqTkrbTSEG KPepRtO7Htpudww/69cwQOY4YRTpZ9yjLP+Hp9fFh1ca22hkRb/HwHdb+DlI50QS OidUR81Hrh4GeU6AVyeyVmBAFKTjmoAOka7OxxlyTeruk7SbGIQjrPdyDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVRD1unu0XgQhjIM9lMYm6V1q6JMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAof1vhQ/e Mb0Qk1FmwdcoeVgcctiykESp69gjcj8SsCR23ofK2sPY9kLkwGDnQNa2hdesaMiD crEU2C5X9hy2g3/A4Lj4wMgPXnhXkM0afsAy6sZGGUdSmaqRl3M1TXmjvCvvCbIO 1hdXIwmgXx4No1fycqasDEvEJY98PQLVS4mv3bOWDmFv3qzKPgMmG4RZSIqRPdRT rZhn78y9IWLT0DUiR1PCRAgSwIyeVNQRcg02tzUWYwkUNipaX+WVH29Kl2RN2SSp x8mKjsTuekWSZ7GnVI6cZAG3iyrl3ugZSRsoOE3kJ+3AGZK5Sh/Tk4Js0Lbf5ulC DAPRB0HUTpX0SQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:26:03 2025 by rpki-client