This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json) Hash identifier: EYGcADWRIZOugp3HG28tPuXA/CedsHfs9L9wPTmQlbM= Subject key identifier: 4C:35:B0:B1:35:4B:7F:6E:31:77:55:95:04:10:6C:E9:AF:F7:00:32 Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a Certificate serial: 019B42EEB0CF73D94B8F11548A27039A0849 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft Manifest number: 171D Signing time: Sun 21 Dec 2025 22:01:37 +0000 Manifest this update: Sun 21 Dec 2025 22:01:37 +0000 Manifest next update: Mon 22 Dec 2025 22:01:37 +0000 Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: fV24ign6/t4ffxrExTSWTkRHUln2LGE0kbr10lkgx5c=) 2: QYQzorGK1cakLmK4R7aZ_z5BtRk.roa (hash: K/JfnEYnWlRvZUne2cydti381OQHnxSabuUVM9ge064=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:b0:cf:73:d9:4b:8f:11:54:8a:27:03:9a:08:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a Validity Not Before: Dec 21 22:01:37 2025 GMT Not After : Dec 22 22:01:37 2025 GMT Subject: CN=4c35b0b1354b7f6e3177559504106ce9aff70032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e5:93:14:de:a8:6e:bb:e6:6a:ab:b8:d4:68: fc:7d:01:8c:a6:89:b5:9e:4f:ce:04:80:95:89:53: d5:2b:9b:e8:26:d1:1c:de:78:cc:99:85:72:f8:b2: eb:ab:1c:9d:e5:17:5c:d6:5b:07:18:a6:1d:01:7c: ab:db:34:80:0b:2d:60:d6:85:51:be:c0:b3:06:21: aa:48:7e:f5:0b:29:dd:3f:b5:50:ff:96:94:12:49: a0:60:c8:0c:c6:c2:fb:84:87:9c:41:8d:8e:a4:ec: bb:10:e5:e5:3d:cf:eb:6c:bb:a5:da:90:91:b0:3b: 08:4c:d4:9f:70:d8:f1:97:e5:34:f4:97:1d:16:80: 99:b4:5f:32:be:e6:38:4a:a8:ec:a4:74:0e:a3:95: d5:81:28:2e:f4:d0:1d:13:cc:28:f6:b4:12:e4:a6: 6c:18:72:a7:f6:5c:54:65:7e:45:5e:5f:6f:ee:81: f9:90:e3:d2:f0:e9:94:7c:46:e0:6b:23:e0:da:de: 02:c0:4e:5a:b3:80:83:c8:ea:18:b2:b2:ac:25:2d: c3:4a:21:cd:eb:02:4c:56:d0:28:90:7a:b0:ce:ea: a3:b2:51:0d:c7:77:41:46:e1:b5:a9:18:26:7d:3d: b6:2f:00:70:62:8e:e5:ac:19:7c:bc:8c:e6:6a:3d: c3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:35:B0:B1:35:4B:7F:6E:31:77:55:95:04:10:6C:E9:AF:F7:00:32 X509v3 Authority Key Identifier: keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:98:a9:9d:54:4f:ec:ae:0b:57:c0:dd:62:4f:69:19:44:fe: 54:eb:21:3e:85:69:37:4e:9b:50:e1:3a:9d:79:f2:93:02:61: 32:33:ad:83:3c:d0:8f:7b:28:c1:e1:fb:de:6b:a0:c1:19:db: 0f:a0:97:2b:65:01:cb:4c:15:2b:9d:56:13:e2:b9:d5:72:01: 25:c6:9e:79:81:3b:ac:32:ed:32:58:09:91:6b:2a:4e:79:8c: 24:5f:3f:4c:72:ba:38:cb:ad:8f:bb:ff:9e:f0:bc:9b:2e:cf: ec:1e:11:3a:f9:a7:1a:8b:bf:89:cd:13:55:12:d3:e0:90:2f: 8c:bd:a4:c9:f6:24:37:0d:cd:26:c0:93:88:e9:ce:22:7a:40: 0f:60:8a:b0:b1:02:19:14:b5:e5:ef:4e:de:d9:b7:64:80:12: ae:6d:b9:f9:21:1b:be:b8:26:11:27:71:ca:1d:fb:49:af:91: 36:31:13:10:79:54:07:dd:e8:dc:e4:eb:a0:fb:29:1f:28:2e: 65:b3:bd:9f:e4:8e:a0:77:db:56:b7:12:d5:df:0c:19:5c:dd: ad:56:7e:95:ab:9d:4d:27:31:2a:6f:5e:04:ec:3b:6a:2e:36: 36:e0:3b:da:d3:81:eb:6a:bf:41:34:fe:64:a0:e2:4f:b1:7e: ad:df:9d:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7rDPc9lLjxFUiicDmghJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNTVlYzE3NWY2ZWU3YTFmYzFmODlhZGY3NTRiYjJhMDg2 MjU3OGEwHhcNMjUxMjIxMjIwMTM3WhcNMjUxMjIyMjIwMTM3WjAzMTEwLwYDVQQD Eyg0YzM1YjBiMTM1NGI3ZjZlMzE3NzU1OTUwNDEwNmNlOWFmZjcwMDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeWTFN6obrvmaqu41Gj8fQGMpom1 nk/OBICViVPVK5voJtEc3njMmYVy+LLrqxyd5Rdc1lsHGKYdAXyr2zSACy1g1oVR vsCzBiGqSH71CyndP7VQ/5aUEkmgYMgMxsL7hIecQY2OpOy7EOXlPc/rbLul2pCR sDsITNSfcNjxl+U09JcdFoCZtF8yvuY4SqjspHQOo5XVgSgu9NAdE8wo9rQS5KZs GHKn9lxUZX5FXl9v7oH5kOPS8OmUfEbgayPg2t4CwE5as4CDyOoYsrKsJS3DSiHN 6wJMVtAokHqwzuqjslENx3dBRuG1qRgmfT22LwBwYo7lrBl8vIzmaj3DbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEw1sLE1S39uMXdVlQQQbOmv9wAyMB8GA1UdIwQY MBaAFN1V7Bdfbueh/B+JrfdUuyoIYleKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80MGQ0MDctMWVhYy00MzgxLThmYTYt NDZjMmNjMjgwMmYxLzEvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy80MGQ0MDctMWVhYy00MzgxLThmYTYtNDZjMmNjMjgwMmYx LzEvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJipnVRP 7K4LV8DdYk9pGUT+VOshPoVpN06bUOE6nXnykwJhMjOtgzzQj3soweH73mugwRnb D6CXK2UBy0wVK51WE+K51XIBJcaeeYE7rDLtMlgJkWsqTnmMJF8/THK6OMutj7v/ nvC8my7P7B4ROvmnGou/ic0TVRLT4JAvjL2kyfYkNw3NJsCTiOnOInpAD2CKsLEC GRS15e9O3tm3ZIASrm25+SEbvrgmESdxyh37Sa+RNjETEHlUB93o3OTroPspHygu ZbO9n+SOoHfbVrcS1d8MGVzdrVZ+laudTScxKm9eBOw7ai42NuA72tOB62q/QTT+ ZKDiT7F+rd+dmQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:02:17 2025 by rpki-client