This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json) Hash identifier: 7XLvJXvAXjeyL+cHzGdRmAa/U/Qbl/L7h4XIxTVfDh4= Subject key identifier: B7:0F:2E:13:F7:6E:98:15:8B:6D:46:47:F2:BF:09:22:E5:7E:3D:2E Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab Certificate serial: 019B45131F18EE6FE07CC2B693BBFE3AA3F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft Manifest number: 1431 Signing time: Mon 22 Dec 2025 08:00:39 +0000 Manifest this update: Mon 22 Dec 2025 08:00:39 +0000 Manifest next update: Tue 23 Dec 2025 08:00:39 +0000 Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: K2gBkQv3rqfTqAvTMhSSavu51Cph4UnXMBf/G16dvco=) 2: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (hash: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:1f:18:ee:6f:e0:7c:c2:b6:93:bb:fe:3a:a3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab Validity Not Before: Dec 22 08:00:39 2025 GMT Not After : Dec 23 08:00:39 2025 GMT Subject: CN=b70f2e13f76e98158b6d4647f2bf0922e57e3d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3f:12:22:d1:63:46:10:a0:94:b0:4b:54:0f: 10:a4:9c:86:38:98:15:73:9f:01:9b:c9:cc:17:d0: 00:07:a4:98:4a:2d:1f:2e:f7:67:fa:70:d0:8c:78: 6c:be:24:a9:01:29:1e:28:2d:5f:2c:40:ef:08:df: ce:89:b4:f5:02:53:61:3e:25:34:02:b6:1a:93:e0: 9d:8e:2a:33:70:08:38:de:a3:51:a5:97:43:e2:39: 79:03:17:09:fd:1b:a0:44:87:da:c1:11:03:78:fd: 48:2b:44:83:db:92:72:f0:c6:8c:a4:1a:b6:9d:23: 57:cf:9d:f2:0e:51:e3:6b:b1:42:10:9a:cd:35:7c: ca:26:c3:0d:8f:e4:c0:ab:5c:c8:45:6d:c4:31:c5: d7:af:46:7a:98:46:83:be:67:1a:dd:3d:7b:d4:69: b9:46:3a:d4:03:3b:d2:01:e8:13:7a:ff:e1:b2:5a: 07:34:09:65:cc:98:a7:a7:96:db:3b:b7:7e:9c:ed: fa:57:e3:c8:3e:51:e7:07:f3:c3:99:7e:01:08:2c: e7:b0:84:37:1f:04:d1:f3:38:a4:b2:31:6e:da:98: 8a:6c:1f:25:54:4e:e4:93:aa:da:44:b4:4f:95:e2: bc:e6:77:c6:25:a4:f0:52:01:33:5c:67:22:27:3d: 72:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0F:2E:13:F7:6E:98:15:8B:6D:46:47:F2:BF:09:22:E5:7E:3D:2E X509v3 Authority Key Identifier: keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:08:08:26:89:3d:55:b1:ad:57:58:a4:5a:44:97:ce:61:c0: a6:4b:36:f3:9a:1e:38:cb:f1:40:7c:03:c7:5e:79:1a:84:78: c6:de:b5:fe:53:66:fa:d9:01:91:88:17:88:12:88:dd:77:26: 47:69:e4:9f:9c:ef:db:b0:54:f5:82:f9:20:81:df:1e:f4:ae: 08:62:0e:3a:bb:18:69:36:8b:b7:ba:56:65:14:6b:45:f3:1a: 7d:7d:a3:2d:65:fd:51:c6:da:8e:6e:03:17:87:30:e6:21:6e: 67:43:ee:0f:9c:68:e9:63:aa:e7:f7:a5:33:31:c6:5e:fc:4d: 34:7b:53:01:96:f9:31:ce:42:ca:dd:86:21:8c:fa:38:9a:69: f2:22:c7:01:5d:47:ee:70:ab:30:1f:1d:a9:59:51:ec:03:32: 10:76:41:a1:8f:e1:ce:ed:2f:5c:06:a6:8f:03:6b:b6:94:25: aa:30:03:1f:77:20:10:f1:36:59:80:25:9b:62:5a:34:1e:b2: f1:df:44:8f:f5:77:34:87:ea:2b:3a:09:5b:01:1f:4e:c2:2b: 03:bb:7a:02:3d:94:26:75:5a:b2:0d:92:c3:5d:37:aa:f7:c3: ab:83:81:f5:56:36:6a:cd:ce:a4:ae:61:17:66:08:c9:4c:e7: 77:71:9b:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFEx8Y7m/gfMK2k7v+OqP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNTFjM2M1ZGRjNGZiNjEzODFjM2JlYTI0YzFiYTRmNzQ5 OThlYWIwHhcNMjUxMjIyMDgwMDM5WhcNMjUxMjIzMDgwMDM5WjAzMTEwLwYDVQQD EyhiNzBmMmUxM2Y3NmU5ODE1OGI2ZDQ2NDdmMmJmMDkyMmU1N2UzZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT8SItFjRhCglLBLVA8QpJyGOJgV c58Bm8nMF9AAB6SYSi0fLvdn+nDQjHhsviSpASkeKC1fLEDvCN/OibT1AlNhPiU0 ArYak+CdjiozcAg43qNRpZdD4jl5AxcJ/RugRIfawREDeP1IK0SD25Jy8MaMpBq2 nSNXz53yDlHja7FCEJrNNXzKJsMNj+TAq1zIRW3EMcXXr0Z6mEaDvmca3T171Gm5 RjrUAzvSAegTev/hsloHNAllzJinp5bbO7d+nO36V+PIPlHnB/PDmX4BCCznsIQ3 HwTR8ziksjFu2piKbB8lVE7kk6raRLRPleK85nfGJaTwUgEzXGciJz1ycwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcPLhP3bpgVi21GR/K/CSLlfj0uMB8GA1UdIwQY MBaAFN5Rw8XdxPthOBw76iTBuk90mY6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEt YTUzMjVkNDQxNzAyLzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEtYTUzMjVkNDQxNzAy LzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAgIJok9 VbGtV1ikWkSXzmHApks285oeOMvxQHwDx155GoR4xt61/lNm+tkBkYgXiBKI3Xcm R2nkn5zv27BU9YL5IIHfHvSuCGIOOrsYaTaLt7pWZRRrRfMafX2jLWX9Ucbajm4D F4cw5iFuZ0PuD5xo6WOq5/elMzHGXvxNNHtTAZb5Mc5Cyt2GIYz6OJpp8iLHAV1H 7nCrMB8dqVlR7AMyEHZBoY/hzu0vXAamjwNrtpQlqjADH3cgEPE2WYAlm2JaNB6y 8d9Ej/V3NIfqKzoJWwEfTsIrA7t6Aj2UJnVasg2Sw103qvfDq4OB9VY2as3OpK5h F2YIyUznd3GbbA== -----END CERTIFICATE-----Generated at Mon Dec 22 14:03:50 2025 by rpki-client