This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json) Hash identifier: FMcoYAcWNrQA4YUz5T4qjBUYIzqaAJrF+OzQJXmTEyM= Subject key identifier: D1:F4:62:B3:8A:52:51:C9:72:79:63:CE:F3:60:EA:66:CE:0B:E9:78 Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab Certificate serial: 019B4136B9EA8C223512E640F57A4435A1BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft Manifest number: 142F Signing time: Sun 21 Dec 2025 14:01:04 +0000 Manifest this update: Sun 21 Dec 2025 14:01:04 +0000 Manifest next update: Mon 22 Dec 2025 14:01:04 +0000 Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: 3z0h6SwntvHh7G8mUAXSfKHXf3K5I/Pr0kyTCoy+ZAs=) 2: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (hash: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:b9:ea:8c:22:35:12:e6:40:f5:7a:44:35:a1:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab Validity Not Before: Dec 21 14:01:04 2025 GMT Not After : Dec 22 14:01:04 2025 GMT Subject: CN=d1f462b38a5251c9727963cef360ea66ce0be978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:49:ae:24:ba:79:b3:fc:e2:9c:51:fe:6d: 81:6c:61:da:23:8b:5d:09:c7:67:ca:0e:7a:c4:70: d0:3e:30:fd:77:4f:30:f0:4a:7b:07:35:23:38:0e: a9:c4:45:a4:9c:83:c9:e0:1c:4c:0c:a8:1d:2a:e5: 57:26:3f:ae:71:fb:2e:69:25:0b:0d:2c:82:bf:44: c1:29:52:53:9e:16:4f:59:b0:e6:91:64:f4:e3:82: 67:83:10:6c:f5:5a:cd:46:ee:d0:5b:72:ca:df:bc: 82:7a:54:2e:81:82:3d:4b:88:db:c6:2e:10:7c:c0: cc:06:91:79:f7:8b:83:60:ef:30:80:2d:ed:56:97: 33:e1:83:a0:f6:66:02:88:9b:ed:fe:ab:fa:e8:7b: 76:72:90:58:f8:70:82:7e:bf:02:f5:4e:73:a6:7a: 0b:d4:15:eb:ac:3f:23:5b:dc:fc:3f:ca:47:d8:d0: b9:49:8f:2a:e1:7e:8a:91:87:aa:8c:9f:bf:9c:e3: 37:64:99:f5:2d:c5:c2:ad:53:1e:63:26:c0:ce:22: 99:63:a0:ee:57:58:e4:c6:80:34:59:eb:df:03:13: 9b:3a:b9:b4:c5:4c:25:16:6a:61:0b:9e:f9:6c:76: 71:7f:7c:ff:74:51:ea:d1:23:d0:ae:55:18:07:10: 36:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F4:62:B3:8A:52:51:C9:72:79:63:CE:F3:60:EA:66:CE:0B:E9:78 X509v3 Authority Key Identifier: keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:cf:12:d7:c6:1f:13:2f:3c:e7:53:c2:4e:50:63:ef:e7:38: 9a:f2:1d:e2:6e:d1:a0:65:07:f9:a4:71:21:05:96:9a:5b:a6: 23:57:e6:9e:0a:a4:33:dd:21:41:bb:f5:41:a8:f2:d7:26:db: fb:75:f7:89:96:5c:80:6f:7f:1a:c6:b6:fb:5f:4e:a5:43:45: 89:a6:b8:6e:cb:59:24:74:fc:97:6e:28:99:ff:2e:1f:25:9f: 8c:ff:f8:08:8e:f5:65:f9:e5:24:44:4c:41:4f:58:c4:04:db: 75:3f:56:ee:0e:3e:04:01:73:35:f8:f1:51:bd:04:8d:af:19: 17:70:6e:41:0b:40:83:c4:ab:95:e2:49:fe:0b:f0:39:ef:c2: 2f:92:ee:9b:06:f7:98:0d:05:c1:88:d2:a3:25:0f:8b:cc:27: 4f:65:a8:dd:63:b3:1e:55:55:63:be:87:01:97:16:bd:fb:fd: f2:1d:57:c7:50:57:ea:b3:71:c5:3e:35:bf:ca:d5:8f:be:ca: 7c:79:e9:15:b2:7f:1e:37:04:94:de:49:66:0a:3d:e3:48:18: 59:8d:18:f7:87:28:f9:6c:10:5b:b3:72:b3:ad:67:14:f3:72: b9:f7:94:f6:3e:c0:38:2d:5c:75:7d:6b:cc:eb:fc:69:19:e5: 35:a1:ff:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNrnqjCI1EuZA9XpENaG/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNTFjM2M1ZGRjNGZiNjEzODFjM2JlYTI0YzFiYTRmNzQ5 OThlYWIwHhcNMjUxMjIxMTQwMTA0WhcNMjUxMjIyMTQwMTA0WjAzMTEwLwYDVQQD EyhkMWY0NjJiMzhhNTI1MWM5NzI3OTYzY2VmMzYwZWE2NmNlMGJlOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgJJriS6ebP84pxR/m2BbGHaI4td Ccdnyg56xHDQPjD9d08w8Ep7BzUjOA6pxEWknIPJ4BxMDKgdKuVXJj+ucfsuaSUL DSyCv0TBKVJTnhZPWbDmkWT044JngxBs9VrNRu7QW3LK37yCelQugYI9S4jbxi4Q fMDMBpF594uDYO8wgC3tVpcz4YOg9mYCiJvt/qv66Ht2cpBY+HCCfr8C9U5zpnoL 1BXrrD8jW9z8P8pH2NC5SY8q4X6KkYeqjJ+/nOM3ZJn1LcXCrVMeYybAziKZY6Du V1jkxoA0WevfAxObOrm0xUwlFmphC575bHZxf3z/dFHq0SPQrlUYBxA2BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNH0YrOKUlHJcnljzvNg6mbOC+l4MB8GA1UdIwQY MBaAFN5Rw8XdxPthOBw76iTBuk90mY6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEt YTUzMjVkNDQxNzAyLzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEtYTUzMjVkNDQxNzAy LzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw88S18Yf Ey8851PCTlBj7+c4mvId4m7RoGUH+aRxIQWWmlumI1fmngqkM90hQbv1Qajy1ybb +3X3iZZcgG9/Gsa2+19OpUNFiaa4bstZJHT8l24omf8uHyWfjP/4CI71ZfnlJERM QU9YxATbdT9W7g4+BAFzNfjxUb0Eja8ZF3BuQQtAg8SrleJJ/gvwOe/CL5Lumwb3 mA0FwYjSoyUPi8wnT2Wo3WOzHlVVY76HAZcWvfv98h1Xx1BX6rNxxT41v8rVj77K fHnpFbJ/HjcElN5JZgo940gYWY0Y94co+WwQW7Nys61nFPNyufeU9j7AOC1cdX1r zOv8aRnlNaH/Uw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:25:16 2025 by rpki-client