This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json) Hash identifier: rSl+gi38jk+rqwnWV5j8X0TTAYIqt3gei/K2FlRgWPU= Subject key identifier: 06:58:0B:45:56:75:E9:74:CD:08:CE:C2:63:53:69:B5:74:71:3B:F0 Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28 Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528 Certificate serial: 019B345683C3D81FA2AEBE5EBAB53FB9AC9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 02:00:43 +0000 Manifest this update: Fri 19 Dec 2025 02:00:43 +0000 Manifest next update: Sat 20 Dec 2025 02:00:43 +0000 Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: DFn0NMhELxkFkO69qwWdWJmtWuOvSxO5uU5169Rq1WU=) 2: urKpUlRihT17e4-sYhWpyMcE8Ac.roa (hash: OKr8BwUnDAnQRh/fja/ALDyKIeKec2Yi0x2apcZhAec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:83:c3:d8:1f:a2:ae:be:5e:ba:b5:3f:b9:ac:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528 Validity Not Before: Dec 19 02:00:43 2025 GMT Not After : Dec 20 02:00:43 2025 GMT Subject: CN=06580b455675e974cd08cec2635369b574713bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:b9:d9:57:1f:68:1d:4a:2a:7e:e0:c4:cb: 23:d8:59:5e:bd:3d:c2:4e:75:7f:bd:2a:ca:37:08: 51:cf:1c:5d:82:9e:f9:09:28:5d:5a:09:c7:44:3e: 90:2e:35:c3:4a:a8:ff:bc:0d:77:80:4e:8c:5e:b5: 05:ac:3c:51:34:d5:ab:09:c0:85:e1:cb:2c:a8:8b: 81:ef:8e:73:6c:ff:66:92:37:b2:8a:5d:ce:8d:4a: 36:d6:bc:d1:74:cd:35:63:fd:81:58:3c:dd:c2:ee: 6b:49:43:5c:e0:c0:df:56:04:50:e2:92:5a:f4:ad: 9d:bf:ad:95:82:5a:b5:52:6f:52:9d:42:d7:bb:b0: 7e:a1:fe:19:c2:5c:4c:3f:5e:83:16:7e:17:c1:6c: ef:99:fe:78:ad:ed:c2:70:c7:4a:50:cc:37:21:66: 2a:e0:53:e5:1e:ee:15:18:05:eb:e4:59:60:be:94: ff:e0:7b:a9:b8:d0:14:45:9d:57:58:aa:97:04:43: 2c:fc:d2:d9:18:d5:68:67:52:31:9c:7f:8a:b4:91: 52:c1:a1:72:e5:4b:08:71:30:e1:c9:bd:6a:03:ae: dc:96:62:a2:5e:39:74:db:ea:ed:1c:db:a3:70:c1: 9c:5b:20:bc:55:b9:5a:76:f1:b0:7a:ea:76:88:b4: 1f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:58:0B:45:56:75:E9:74:CD:08:CE:C2:63:53:69:B5:74:71:3B:F0 X509v3 Authority Key Identifier: keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:4d:02:03:9a:27:b2:97:80:68:ea:f5:f3:0d:d8:4a:b7:3b: 73:03:1e:1f:ae:80:eb:c6:58:20:51:35:de:2f:94:58:11:51: 4f:83:5f:38:36:c2:40:b0:49:87:20:4f:e2:18:e2:be:17:37: 1a:13:26:b9:09:77:86:75:46:d2:a1:af:e7:af:b3:d6:f2:2a: a8:1a:3e:9d:b6:78:6e:aa:af:5b:e8:0a:1d:2f:d7:7b:96:19: 54:69:07:74:f5:76:31:40:5a:6f:dc:b5:a2:43:12:66:e1:ef: 31:25:85:af:b7:12:4f:e2:2e:70:9f:a9:2b:4d:b8:34:87:7c: de:9e:7f:ae:76:ca:0d:0a:05:73:59:57:28:1a:0c:e5:0a:0e: e1:51:aa:f6:64:2f:86:2f:e6:89:81:da:f4:5e:48:46:e7:35: 17:95:60:d3:75:92:fb:77:cd:d0:8c:c5:26:69:ce:3e:dd:b4: ac:77:16:65:e5:7c:c8:03:b5:83:d8:8f:70:d1:2b:3a:a3:d5: ae:2e:1e:80:b5:c9:bd:e7:98:2a:5b:49:a7:27:80:a9:7e:ca: 14:b7:87:f3:05:69:6a:b9:5f:25:08:4c:40:f6:61:2c:34:ee: 00:2e:67:8b:b5:06:ed:8e:39:0c:ce:cb:fa:b0:ab:52:61:98: 94:25:b1:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VoPD2B+irr5eurU/uayeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOWYyYTkyNzM3OGJkMTQ1NWRhOGJkZjg1YmIxYWI4Njdl MWY1MjgwHhcNMjUxMjE5MDIwMDQzWhcNMjUxMjIwMDIwMDQzWjAzMTEwLwYDVQQD EygwNjU4MGI0NTU2NzVlOTc0Y2QwOGNlYzI2MzUzNjliNTc0NzEzYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVW52VcfaB1KKn7gxMsj2FlevT3C TnV/vSrKNwhRzxxdgp75CShdWgnHRD6QLjXDSqj/vA13gE6MXrUFrDxRNNWrCcCF 4cssqIuB745zbP9mkjeyil3OjUo21rzRdM01Y/2BWDzdwu5rSUNc4MDfVgRQ4pJa 9K2dv62Vglq1Um9SnULXu7B+of4ZwlxMP16DFn4XwWzvmf54re3CcMdKUMw3IWYq 4FPlHu4VGAXr5FlgvpT/4HupuNAURZ1XWKqXBEMs/NLZGNVoZ1IxnH+KtJFSwaFy 5UsIcTDhyb1qA67clmKiXjl02+rtHNujcMGcWyC8VbladvGweup2iLQfMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZYC0VWdel0zQjOwmNTabV0cTvwMB8GA1UdIwQY MBaAFN6fKpJzeL0UVdqL34W7Grhn4fUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQt NmRiMDkwMjE0MDM1LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQtNmRiMDkwMjE0MDM1 LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWU0CA5on speAaOr18w3YSrc7cwMeH66A68ZYIFE13i+UWBFRT4NfODbCQLBJhyBP4hjivhc3 GhMmuQl3hnVG0qGv56+z1vIqqBo+nbZ4bqqvW+gKHS/Xe5YZVGkHdPV2MUBab9y1 okMSZuHvMSWFr7cST+IucJ+pK024NId83p5/rnbKDQoFc1lXKBoM5QoO4VGq9mQv hi/miYHa9F5IRuc1F5Vg03WS+3fN0IzFJmnOPt20rHcWZeV8yAO1g9iPcNErOqPV ri4egLXJveeYKltJpyeAqX7KFLeH8wVparlfJQhMQPZhLDTuAC5ni7UG7Y45DM7L +rCrUmGYlCWxwA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:53:42 2025 by rpki-client