This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json) Hash identifier: Pk1jTK2kB9IKW3FLvuhUJfuBtt/G0ytJ2sB+qj0urSs= Subject key identifier: 3D:F4:C6:D8:5A:9F:2B:BB:4E:EC:BB:7B:81:77:2A:13:A5:2C:DD:5C Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4 Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4 Certificate serial: 019B390FF3E99DE46F5B206ADDB28AFFBA2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft Manifest number: 0F67 Signing time: Sat 20 Dec 2025 00:01:45 +0000 Manifest this update: Sat 20 Dec 2025 00:01:45 +0000 Manifest next update: Sun 21 Dec 2025 00:01:45 +0000 Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: 6JWZmDGGObGswNeJg1/jAJ5gOWNONQJEV9Bq9Wq15NQ=) 2: C9mugrtzW_-CpWlbrAzn7HLndJs.roa (hash: us/IF6tfe4s5IdJAAyc5z0B0e23waKBVaik+zvz/TyQ=) 3: yll503ISaq2wNzfEAk_Qb_MtGbg.roa (hash: LYtS+Gvc0u0aK5E+MP2oP4ZNnIbSc6rSwiTMseFfpYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:f3:e9:9d:e4:6f:5b:20:6a:dd:b2:8a:ff:ba:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4 Validity Not Before: Dec 20 00:01:45 2025 GMT Not After : Dec 21 00:01:45 2025 GMT Subject: CN=3df4c6d85a9f2bbb4eecbb7b81772a13a52cdd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:57:8d:c1:e2:09:c2:87:df:7c:40:97:72:3b: 69:99:b9:f0:61:af:47:84:36:2c:20:36:3b:ae:0f: 45:de:60:c1:2f:19:d9:9c:a0:ae:1c:5e:03:1b:28: 59:7c:21:1a:64:75:92:4c:d5:d7:00:fa:a1:ad:a6: 8e:6e:19:7e:10:33:d1:fc:63:a9:3f:08:45:48:5b: 04:00:28:3f:90:10:32:82:12:fc:51:49:e9:69:25: 03:5b:e6:23:41:b3:ae:f4:ca:03:ad:20:86:72:59: a2:86:da:7b:13:95:08:9e:e5:5c:07:bc:a3:58:19: 73:6b:22:26:3a:41:d2:6d:2a:4c:61:be:19:c7:3d: d7:80:e3:6b:00:22:fc:e1:17:7b:9a:56:27:38:eb: ac:80:04:5f:31:fa:53:ff:47:0e:26:a4:23:c6:d9: 5c:c0:a2:0d:68:45:c2:2e:75:a9:94:46:bf:4b:dd: 2b:ba:b2:b8:66:cf:69:a2:ec:8b:f5:f9:fb:52:aa: fa:b5:c6:22:0a:12:4b:8d:ee:0e:b9:8f:7d:10:1f: 8c:d5:35:42:2c:cc:10:d4:fa:d6:c2:81:f0:a8:e6: f4:bd:bb:8a:d2:34:01:0d:bb:19:85:2a:00:18:a5: 47:da:68:8f:82:ce:37:53:12:b5:a9:84:88:70:ea: 1c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F4:C6:D8:5A:9F:2B:BB:4E:EC:BB:7B:81:77:2A:13:A5:2C:DD:5C X509v3 Authority Key Identifier: keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:47:12:91:16:88:c7:67:4d:2a:d7:1b:02:fc:51:d3:75:d4: de:fd:95:4c:d1:36:eb:1a:12:13:8c:9b:a0:5d:56:2d:fb:e6: e9:64:b8:b8:f8:1a:d0:8c:83:cf:7c:0c:b5:59:14:ef:4e:01: f4:a8:f0:5e:e5:ce:e6:47:f4:f4:b9:94:49:23:1c:95:be:86: 1a:fd:6a:23:93:83:ab:1b:77:16:9d:c6:42:c8:6a:09:ea:cc: 93:56:3d:94:10:0c:c2:0c:02:66:35:da:7f:da:ec:a3:ed:7e: e0:67:77:65:0f:75:06:18:8b:e8:51:f9:dd:ff:44:2d:47:fc: 03:ee:95:34:66:2b:99:ac:2f:53:99:a3:43:0f:83:4d:69:96: 20:5a:61:8b:95:74:62:0b:12:58:b9:3b:60:7f:68:56:24:9b: 74:87:d2:7c:16:fb:52:f1:5a:0e:70:cc:f0:78:df:09:ab:3e: 0c:cd:ab:3a:07:9b:1d:94:e9:ac:69:ad:7f:f2:16:e1:f7:b9: 50:fc:45:70:56:91:98:de:b3:6c:c8:0c:45:37:4b:c7:df:2c: 60:cd:05:32:8e:95:5c:41:fe:82:a9:f9:b8:ad:8d:09:61:7f: 31:71:5a:c5:7e:e9:8c:63:cb:91:20:17:9a:0c:11:64:40:5b: 05:f9:6d:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D/PpneRvWyBq3bKK/7oqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNjkxNzY0NWQ5ZDIyMDQzNWY5MWM3ZTQ2YzgxMTBjZjg5 YWNiZTQwHhcNMjUxMjIwMDAwMTQ1WhcNMjUxMjIxMDAwMTQ1WjAzMTEwLwYDVQQD EygzZGY0YzZkODVhOWYyYmJiNGVlY2JiN2I4MTc3MmExM2E1MmNkZDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyleNweIJwofffECXcjtpmbnwYa9H hDYsIDY7rg9F3mDBLxnZnKCuHF4DGyhZfCEaZHWSTNXXAPqhraaObhl+EDPR/GOp PwhFSFsEACg/kBAyghL8UUnpaSUDW+YjQbOu9MoDrSCGclmihtp7E5UInuVcB7yj WBlzayImOkHSbSpMYb4Zxz3XgONrACL84Rd7mlYnOOusgARfMfpT/0cOJqQjxtlc wKINaEXCLnWplEa/S90rurK4Zs9pouyL9fn7Uqr6tcYiChJLje4OuY99EB+M1TVC LMwQ1PrWwoHwqOb0vbuK0jQBDbsZhSoAGKVH2miPgs43UxK1qYSIcOocnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD30xthanyu7Tuy7e4F3KhOlLN1cMB8GA1UdIwQY MBaAFNxpF2RdnSIENfkcfkbIEQz4msvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2Et NDI4YmU5MDA4ZmJhLzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2EtNDI4YmU5MDA4ZmJh LzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0cSkRaI x2dNKtcbAvxR03XU3v2VTNE26xoSE4yboF1WLfvm6WS4uPga0IyDz3wMtVkU704B 9KjwXuXO5kf09LmUSSMclb6GGv1qI5ODqxt3Fp3GQshqCerMk1Y9lBAMwgwCZjXa f9rso+1+4Gd3ZQ91BhiL6FH53f9ELUf8A+6VNGYrmawvU5mjQw+DTWmWIFphi5V0 YgsSWLk7YH9oViSbdIfSfBb7UvFaDnDM8HjfCas+DM2rOgebHZTprGmtf/IW4fe5 UPxFcFaRmN6zbMgMRTdLx98sYM0FMo6VXEH+gqn5uK2NCWF/MXFaxX7pjGPLkSAX mgwRZEBbBflt5g== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:39 2025 by rpki-client