This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json) Hash identifier: w+uw6EKAjBi2/q+MlAV1egjkVaYCNzqnjLwUWDhWuFA= Subject key identifier: 39:0A:72:15:63:41:99:03:DC:8A:57:B7:78:7E:F7:5A:1D:17:AE:0E Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89 Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89 Certificate serial: 019B330D2671AB4E4139A20A3B2FD63F65CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 20:00:58 +0000 Manifest this update: Thu 18 Dec 2025 20:00:58 +0000 Manifest next update: Fri 19 Dec 2025 20:00:58 +0000 Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: FyljPbhL4V6BsYrrg/Egr2KPN2yZ+3Rv8JtQMJ8O5VI=) 2: 3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa (hash: k3QEknU5rjZnXpONxqfvLO581xpn3+pyaYB6EDwI7ck=) 3: 7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa (hash: LAvqsJ06fMyPoV983D+eGZunyZuIfO7UCXuYbTjEljc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:26:71:ab:4e:41:39:a2:0a:3b:2f:d6:3f:65:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89 Validity Not Before: Dec 18 20:00:58 2025 GMT Not After : Dec 19 20:00:58 2025 GMT Subject: CN=390a721563419903dc8a57b7787ef75a1d17ae0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:da:09:e4:f0:24:03:15:4f:c9:10:9d:49: 1f:cf:c5:05:2b:cc:d3:7d:fe:bc:7b:d5:e7:cc:e2: b0:08:cd:e2:07:f8:05:11:a7:34:a9:d7:44:3f:74: b1:bd:f5:63:1d:ac:b1:20:48:6a:0e:10:a6:7e:b2: 9a:43:46:13:6d:e3:fd:b7:70:71:2a:ee:41:30:14: 69:b2:e6:7b:97:8a:51:d7:aa:83:e2:c7:93:47:d0: 63:ca:f6:f5:6e:7f:ac:a7:46:55:0d:6e:b1:d5:1c: ec:cb:1e:a4:d5:a1:be:1a:a6:02:ea:6d:72:ac:53: 78:a4:63:a2:05:ef:d2:1c:68:3f:6f:3c:b4:5c:db: e4:ed:45:20:10:87:fd:4e:15:e5:6d:0f:2c:13:00: 73:0e:22:a7:67:6c:8d:f8:58:2a:4b:62:60:95:79: d6:42:19:45:c6:0a:2c:0a:43:d9:96:e7:c7:3a:37: 65:18:e4:78:5c:c7:8e:5c:a1:2a:0e:aa:73:3a:61: dd:d0:39:93:fb:5a:c1:7c:d9:29:89:ac:71:12:ff: 14:b3:4a:9b:67:89:ca:0f:e9:58:46:db:f3:99:7f: 08:77:08:08:73:0e:01:ba:09:f9:8f:44:96:a6:cc: 05:98:28:d3:e8:bf:bf:41:eb:d4:85:aa:77:e5:62: f7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0A:72:15:63:41:99:03:DC:8A:57:B7:78:7E:F7:5A:1D:17:AE:0E X509v3 Authority Key Identifier: keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:89:0e:3d:7b:89:4e:03:00:d4:fc:ca:ae:d3:71:0c:0b:ad: 33:46:ac:43:c6:d8:7a:22:46:6c:88:81:65:5a:37:b0:55:d1: cf:d8:97:a7:74:4c:7d:73:9b:2b:ed:8f:f2:6a:b7:74:6c:f7: 99:03:39:51:63:50:36:45:74:c1:16:ec:e3:bc:6a:d7:8f:eb: c7:e3:e9:a7:75:31:26:c8:0f:7f:ad:a9:ad:08:d6:c4:02:09: 1e:b8:1e:02:35:0f:a3:7e:c3:16:4e:cd:92:8d:3d:a2:e6:38: 18:00:8b:76:88:10:1a:5c:8b:eb:0d:79:07:75:7b:8a:ad:19: f0:37:c2:cc:e1:29:76:97:b5:6b:37:1b:15:2f:ae:3d:4f:ab: 24:6f:71:7e:1f:09:93:e4:1e:b4:5a:33:5c:d1:bf:04:f7:ea: bf:eb:ad:76:6f:36:35:c5:73:76:da:57:4d:fd:59:89:14:9e: 6f:97:58:e9:41:00:98:bd:f7:fb:c7:59:25:cb:79:ca:4b:12: 88:70:a6:9e:06:64:8f:f5:73:67:fd:1e:69:ea:3f:43:fe:fb: 6a:fe:da:33:5a:7b:b1:ae:1c:be:86:1a:c4:19:2e:5c:39:41: 7b:55:7c:43:1e:d7:f8:fa:e2:71:00:41:69:24:40:b4:31:d3: 3f:61:8b:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDSZxq05BOaIKOy/WP2XOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZmM0OTE5NWE0MzlkNWI5ZDcxMTJiMzM2MDE1ZWVlMmM5 NDRkODkwHhcNMjUxMjE4MjAwMDU4WhcNMjUxMjE5MjAwMDU4WjAzMTEwLwYDVQQD EygzOTBhNzIxNTYzNDE5OTAzZGM4YTU3Yjc3ODdlZjc1YTFkMTdhZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVPaCeTwJAMVT8kQnUkfz8UFK8zT ff68e9XnzOKwCM3iB/gFEac0qddEP3SxvfVjHayxIEhqDhCmfrKaQ0YTbeP9t3Bx Ku5BMBRpsuZ7l4pR16qD4seTR9Bjyvb1bn+sp0ZVDW6x1Rzsyx6k1aG+GqYC6m1y rFN4pGOiBe/SHGg/bzy0XNvk7UUgEIf9ThXlbQ8sEwBzDiKnZ2yN+FgqS2JglXnW QhlFxgosCkPZlufHOjdlGOR4XMeOXKEqDqpzOmHd0DmT+1rBfNkpiaxxEv8Us0qb Z4nKD+lYRtvzmX8IdwgIcw4Bugn5j0SWpswFmCjT6L+/QevUhap35WL3IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkKchVjQZkD3IpXt3h+91odF64OMB8GA1UdIwQY MBaAFN/8SRlaQ51bnXESszYBXu4slE2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iMjhkODktYjg5Yi00NjgyLWI4Yzct N2ViYjZiOWUzNjlkLzEvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9iMjhkODktYjg5Yi00NjgyLWI4YzctN2ViYjZiOWUzNjlk LzEvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4kOPXuJ TgMA1PzKrtNxDAutM0asQ8bYeiJGbIiBZVo3sFXRz9iXp3RMfXObK+2P8mq3dGz3 mQM5UWNQNkV0wRbs47xq14/rx+Ppp3UxJsgPf62prQjWxAIJHrgeAjUPo37DFk7N ko09ouY4GACLdogQGlyL6w15B3V7iq0Z8DfCzOEpdpe1azcbFS+uPU+rJG9xfh8J k+QetFozXNG/BPfqv+utdm82NcVzdtpXTf1ZiRSeb5dY6UEAmL33+8dZJct5yksS iHCmngZkj/VzZ/0eaeo/Q/77av7aM1p7sa4cvoYaxBkuXDlBe1V8Qx7X+PricQBB aSRAtDHTP2GLuA== -----END CERTIFICATE-----Generated at Fri Dec 19 05:51:32 2025 by rpki-client