This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json) Hash identifier: CRdYqDdz/ot2f+oyJSUK7tPNMDGpBIVHtEJTFZX+hEw= Subject key identifier: DA:3E:06:C4:9B:85:59:07:39:D5:A0:4C:A0:6D:DD:E3:FF:0C:2C:06 Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c Certificate serial: 019B27E49D86CDC17747EA4728F8F495BB17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft Manifest number: 128F Signing time: Tue 16 Dec 2025 16:00:52 +0000 Manifest this update: Tue 16 Dec 2025 16:00:52 +0000 Manifest next update: Wed 17 Dec 2025 16:00:52 +0000 Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: vGgtJBqZlORIxt4LM/sL9YIJeuQTVtTHZXZ6fEDoeXc=) 2: ruyaJPOfuuheWzXgHxMIwRIiRmI.roa (hash: dOziRNC4DuCftQxbewVCKgY2HoDJCSSxS8NFyfVWRc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:9d:86:cd:c1:77:47:ea:47:28:f8:f4:95:bb:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c Validity Not Before: Dec 16 16:00:52 2025 GMT Not After : Dec 17 16:00:52 2025 GMT Subject: CN=da3e06c49b85590739d5a04ca06ddde3ff0c2c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:43:e5:3c:0d:0e:58:ea:79:2a:0d:e1:b1: fa:54:98:4a:3e:2a:7a:9c:c8:83:33:83:a9:a1:2d: b4:14:61:28:1f:47:55:f7:14:57:99:70:43:f8:a1: a1:25:91:f2:07:fb:d4:84:3a:cc:9b:ad:55:5c:c1: e6:91:f2:a4:6b:ad:17:4a:5f:4d:4b:15:6f:e4:89: d4:26:fd:bc:6e:16:43:33:8e:77:53:5d:89:10:9e: 27:78:9f:6c:d2:c2:59:f4:c8:c0:1d:df:15:bd:cb: d7:9c:24:62:7c:39:0f:39:21:b9:ed:3c:40:60:5c: e9:7c:ab:5f:14:84:8f:77:b3:99:74:27:e5:07:23: 94:ec:2c:e1:34:b3:78:dc:b7:44:19:94:23:7f:16: ff:14:4d:0d:34:da:a9:d9:83:46:d9:73:52:c3:14: 3e:c8:09:aa:87:b3:c1:b7:61:bf:14:c9:4b:0a:f0: e2:0b:55:e8:8a:6d:d2:7a:4e:d0:99:1f:0a:e2:74: 1b:a5:2d:49:d0:d9:22:be:fd:fc:25:4d:fa:64:05: 88:5b:ec:e3:d7:45:a9:f3:fd:9b:d5:4f:a9:ad:49: ad:6d:78:a5:3d:c1:ab:3f:23:2b:c2:0c:91:89:1a: a1:29:bf:53:66:16:e3:e8:94:06:af:ef:4a:1e:79: ab:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3E:06:C4:9B:85:59:07:39:D5:A0:4C:A0:6D:DD:E3:FF:0C:2C:06 X509v3 Authority Key Identifier: keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f8:78:0f:47:1d:2d:a4:53:3c:ae:bc:b5:21:79:41:01:be: 15:7f:87:a3:6e:1b:fa:db:f8:4e:55:d3:78:ef:53:ce:96:2b: 88:b5:9c:33:fa:87:6c:81:76:6f:22:c6:18:cf:5e:ed:e1:fc: 2e:70:f8:17:58:1b:e7:f0:c7:72:c6:db:dd:98:1c:f5:7f:5a: 6c:93:cd:ea:7c:11:0c:58:84:35:d1:1e:11:73:a1:88:6f:bc: 17:a7:28:ec:0d:af:7a:23:61:5f:ce:78:a5:6e:1c:92:ab:2a: 3a:eb:c7:c0:d4:5d:52:03:c8:0b:f6:9b:55:39:b8:d0:ff:a5: 18:1e:17:5a:bc:31:c6:ca:da:be:5f:41:c6:68:74:da:fa:76: 2d:42:1c:d5:31:ac:64:ed:a4:f2:bd:ec:6a:2c:c3:27:0f:d8: 5b:b1:17:f8:ce:13:1b:d2:a6:a3:71:a9:9f:f8:41:be:85:96: 5b:7d:2a:5d:1f:61:6e:53:ee:b3:ec:e0:b2:e0:c9:8c:6e:05: d3:f4:cc:c4:63:6e:bc:25:d2:8d:c9:f6:18:84:01:ad:18:37: d0:a0:04:9d:8d:67:34:71:e6:39:62:c2:4a:a3:db:07:ab:6d: 34:88:ba:83:3c:e2:c3:a7:1b:11:ab:a4:90:5a:07:0c:e8:c8: 2b:b0:4e:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5J2GzcF3R+pHKPj0lbsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGUxYjkwZDUxMmNjMzQwMmY3NjE0MTQwNjI5Nzk1ZTRk NGFjNGMwHhcNMjUxMjE2MTYwMDUyWhcNMjUxMjE3MTYwMDUyWjAzMTEwLwYDVQQD EyhkYTNlMDZjNDliODU1OTA3MzlkNWEwNGNhMDZkZGRlM2ZmMGMyYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXtD5TwNDljqeSoN4bH6VJhKPip6 nMiDM4OpoS20FGEoH0dV9xRXmXBD+KGhJZHyB/vUhDrMm61VXMHmkfKka60XSl9N SxVv5InUJv28bhZDM453U12JEJ4neJ9s0sJZ9MjAHd8VvcvXnCRifDkPOSG57TxA YFzpfKtfFISPd7OZdCflByOU7CzhNLN43LdEGZQjfxb/FE0NNNqp2YNG2XNSwxQ+ yAmqh7PBt2G/FMlLCvDiC1Xoim3Sek7QmR8K4nQbpS1J0Nkivv38JU36ZAWIW+zj 10Wp8/2b1U+prUmtbXilPcGrPyMrwgyRiRqhKb9TZhbj6JQGr+9KHnmrWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNo+BsSbhVkHOdWgTKBt3eP/DCwGMB8GA1UdIwQY MBaAFNwOG5DVEsw0AvdhQUBil5Xk1KxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYt MTZmNTJjZWE0ZWIxLzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYtMTZmNTJjZWE0ZWIx LzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/h4D0cd LaRTPK68tSF5QQG+FX+Ho24b+tv4TlXTeO9TzpYriLWcM/qHbIF2byLGGM9e7eH8 LnD4F1gb5/DHcsbb3Zgc9X9abJPN6nwRDFiENdEeEXOhiG+8F6co7A2veiNhX854 pW4ckqsqOuvHwNRdUgPIC/abVTm40P+lGB4XWrwxxsravl9Bxmh02vp2LUIc1TGs ZO2k8r3saizDJw/YW7EX+M4TG9Kmo3Gpn/hBvoWWW30qXR9hblPus+zgsuDJjG4F 0/TMxGNuvCXSjcn2GIQBrRg30KAEnY1nNHHmOWLCSqPbB6ttNIi6gzziw6cbEauk kFoHDOjIK7BOsw== -----END CERTIFICATE-----Generated at Tue Dec 16 22:34:29 2025 by rpki-client