This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json) Hash identifier: SQhpTXCHGc5FTrwBougqu9OA+BvuIY5u6NaBGgsfRE4= Subject key identifier: 04:CE:E4:2E:29:99:13:50:9E:61:AE:4A:33:06:51:25:45:EF:83:D5 Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec Certificate serial: 019B3BD97435FF7AF4BE0298A94906923AC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 13:01:05 +0000 Manifest this update: Sat 20 Dec 2025 13:01:05 +0000 Manifest next update: Sun 21 Dec 2025 13:01:05 +0000 Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: ZNzmIUcj1MzDWGzvFYnh7h9yp7mzNzrqTGINjmxnqiA=) 2: MAicR0R3ncVMTkKV0oZy3oBwEck.roa (hash: WaK4eGmwJjqB7bEEMx1lPorCW+4yf4wVwlYB8uvjgfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:74:35:ff:7a:f4:be:02:98:a9:49:06:92:3a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec Validity Not Before: Dec 20 13:01:05 2025 GMT Not After : Dec 21 13:01:05 2025 GMT Subject: CN=04cee42e299913509e61ae4a3306512545ef83d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b4:0a:8c:da:b7:b9:6f:91:c7:60:94:41:58: 7e:6e:3c:99:78:ee:09:b2:db:29:f4:70:4b:87:a8: f8:1e:1f:4e:49:33:59:dc:6d:8e:a3:6f:0a:9a:80: d7:f5:77:64:70:38:3d:91:3f:a0:72:21:87:ba:e0: c6:95:19:93:d0:25:d4:c5:80:3a:98:cc:3b:07:7b: cb:5b:79:b8:db:9d:85:7b:8b:2e:5b:19:82:31:5d: ee:20:a0:cc:2a:33:03:d0:c2:42:78:37:fd:81:23: bb:a6:86:d8:fa:25:84:fc:5b:45:42:42:10:90:74: 96:ef:54:22:3c:cb:75:c3:7b:2e:8c:0e:83:8b:e0: e1:81:3a:9e:5e:69:d9:c7:5a:ef:0a:b6:93:a5:0e: fa:31:d5:e6:e8:68:c1:4a:da:d2:37:89:48:48:a8: 0a:bf:42:a4:d8:48:02:2e:7f:7c:e5:82:ec:2a:4a: 1c:95:9e:19:8e:f8:a6:e9:29:02:5e:e4:d9:48:7a: 54:ea:02:ae:17:1a:53:04:1d:b7:61:b7:80:03:20: dd:59:c3:1e:c3:3c:6f:f0:bc:bc:ba:d0:9b:74:36: f7:a5:61:7b:d0:02:19:9e:53:fc:cd:b8:30:16:02: 10:38:bf:22:04:a5:19:38:4e:7c:01:cc:3e:2b:8a: c1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CE:E4:2E:29:99:13:50:9E:61:AE:4A:33:06:51:25:45:EF:83:D5 X509v3 Authority Key Identifier: keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1d:96:8c:1f:c0:cb:d0:bb:22:c8:28:c0:c0:f3:dc:78:e4: f2:74:79:17:52:0e:51:8f:ef:34:97:e4:16:2c:92:4e:a6:2f: 47:a9:3c:8e:8c:01:01:91:da:b6:7c:44:f3:3e:9f:7c:c1:c0: af:07:59:c0:9a:aa:4e:ab:08:2e:13:5f:d4:97:e9:32:2c:fb: 56:bf:dc:84:eb:01:c7:25:6e:d0:62:17:50:b1:bf:bb:a9:3d: 5a:9f:0f:ac:80:67:16:5d:28:ac:3a:ce:fa:d7:f3:b4:21:37: b5:b4:cf:3c:1e:be:09:e6:0b:53:27:ff:cb:16:4b:78:91:65: a0:42:d5:41:58:8e:a8:03:b9:b0:64:2f:54:f8:14:8e:9e:8a: 37:e5:93:5a:1d:f0:24:68:76:5a:71:d9:5b:77:8b:db:ba:8f: 27:e9:e7:42:80:91:c6:2e:68:f6:16:7e:b5:4a:19:db:d6:45: 72:b3:4c:e1:25:a7:90:7a:cc:77:cb:58:e5:f3:31:d1:26:0f: 85:c4:6e:8e:94:57:f1:43:a3:4a:62:0b:47:88:b2:c4:9e:fe: be:34:6b:1c:28:1a:c6:ed:fd:47:48:99:a4:fb:15:69:dc:11: 72:94:5a:29:e7:6c:da:54:3a:e4:58:9c:76:20:30:6e:c7:7c: 8d:56:06:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72XQ1/3r0vgKYqUkGkjrBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYzBmMTRmYWM4ZGRiMzQ4MDM3MjgwMDc2Y2MzNjYxNGRh MzA1ZWMwHhcNMjUxMjIwMTMwMTA1WhcNMjUxMjIxMTMwMTA1WjAzMTEwLwYDVQQD EygwNGNlZTQyZTI5OTkxMzUwOWU2MWFlNGEzMzA2NTEyNTQ1ZWY4M2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LQKjNq3uW+Rx2CUQVh+bjyZeO4J stsp9HBLh6j4Hh9OSTNZ3G2Oo28KmoDX9XdkcDg9kT+gciGHuuDGlRmT0CXUxYA6 mMw7B3vLW3m4252Fe4suWxmCMV3uIKDMKjMD0MJCeDf9gSO7pobY+iWE/FtFQkIQ kHSW71QiPMt1w3sujA6Di+DhgTqeXmnZx1rvCraTpQ76MdXm6GjBStrSN4lISKgK v0Kk2EgCLn985YLsKkoclZ4Zjvim6SkCXuTZSHpU6gKuFxpTBB23YbeAAyDdWcMe wzxv8Ly8utCbdDb3pWF70AIZnlP8zbgwFgIQOL8iBKUZOE58Acw+K4rBgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATO5C4pmRNQnmGuSjMGUSVF74PVMB8GA1UdIwQY MBaAFN7A8U+sjds0gDcoAHbMNmFNowXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMGE5ZjktMTRhMS00Yzk2LTgyMjMt ZWViNmZkMzJlOTJmLzEvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wMGE5ZjktMTRhMS00Yzk2LTgyMjMtZWViNmZkMzJlOTJm LzEvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbB2WjB/A y9C7IsgowMDz3Hjk8nR5F1IOUY/vNJfkFiySTqYvR6k8jowBAZHatnxE8z6ffMHA rwdZwJqqTqsILhNf1JfpMiz7Vr/chOsBxyVu0GIXULG/u6k9Wp8PrIBnFl0orDrO +tfztCE3tbTPPB6+CeYLUyf/yxZLeJFloELVQViOqAO5sGQvVPgUjp6KN+WTWh3w JGh2WnHZW3eL27qPJ+nnQoCRxi5o9hZ+tUoZ29ZFcrNM4SWnkHrMd8tY5fMx0SYP hcRujpRX8UOjSmILR4iyxJ7+vjRrHCgaxu39R0iZpPsVadwRcpRaKeds2lQ65Fic diAwbsd8jVYG0w== -----END CERTIFICATE-----Generated at Sat Dec 20 22:04:27 2025 by rpki-client