This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json) Hash identifier: 5aPqLGd2jQNbNlRJW3GFr535sHEdq2eleFikGBeUKu0= Subject key identifier: 02:9B:EA:F8:2F:75:81:4B:21:48:85:E8:4F:D1:47:68:A7:B0:A3:7F Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39 Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239 Certificate serial: 019B300C6341F513329EE4B828AF5B8FED10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft Manifest number: 04DA Signing time: Thu 18 Dec 2025 06:01:16 +0000 Manifest this update: Thu 18 Dec 2025 06:01:16 +0000 Manifest next update: Fri 19 Dec 2025 06:01:16 +0000 Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: NxtISS4vu6p/qN2yvttujK8owgAwyJbNei71DzUYziw=) 2: b4tFKCMFhyngaw1LlIGrAjikYiE.roa (hash: zlYQxGhdtm2zm501rwjVL8YUyfYWJBRUvSyMolHaDtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:63:41:f5:13:32:9e:e4:b8:28:af:5b:8f:ed:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239 Validity Not Before: Dec 18 06:01:16 2025 GMT Not After : Dec 19 06:01:16 2025 GMT Subject: CN=029beaf82f75814b214885e84fd14768a7b0a37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:5d:1e:9a:47:da:38:14:d1:76:07:08:a8: 44:69:4c:1e:a6:5d:2b:32:d0:67:4d:71:0f:83:e3: 40:cb:b5:98:f1:36:46:9a:38:55:fc:a6:f9:fc:d6: 88:67:5d:60:20:99:90:10:6a:bc:f9:10:d4:43:f0: 48:65:97:3a:4b:6e:1f:37:76:43:42:7e:aa:1f:bd: 05:da:f6:d1:d2:fb:0f:7d:8c:4f:70:a1:30:46:e6: ce:88:73:bc:21:21:85:52:78:2f:a9:97:af:26:c1: 25:07:5c:5d:7e:ab:77:4d:2a:93:e0:f6:75:e7:2d: 55:ce:01:7a:c4:97:20:f7:c0:f5:6f:bc:43:89:b9: 15:11:e2:11:4a:82:78:76:c9:d2:eb:b9:93:76:5e: 60:cb:62:f1:76:00:c8:0f:80:38:cc:61:52:e2:b3: df:f5:19:1c:1e:ad:d4:4e:4b:2f:15:6c:67:a4:d1: fc:81:88:60:80:be:c9:e8:dd:3c:f0:5f:79:1b:40: dc:4c:2c:bf:1d:5b:ab:86:e1:d8:c3:62:df:d5:03: e3:1d:a9:3c:9f:7a:aa:47:c6:55:17:76:79:8a:cf: bd:57:ee:5b:8d:6b:d1:29:4b:0a:40:06:79:b6:94: da:fe:a3:f4:28:cb:24:33:c7:c8:24:a7:ff:8c:2c: 5a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9B:EA:F8:2F:75:81:4B:21:48:85:E8:4F:D1:47:68:A7:B0:A3:7F X509v3 Authority Key Identifier: keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a7:29:b4:63:78:17:34:77:4c:56:29:5c:8f:ae:89:97:50: 92:69:06:ab:3a:94:ce:5e:e9:2f:b4:05:d7:25:b0:c9:5e:08: 89:3f:90:74:99:8d:c4:72:7a:56:e3:94:af:c0:ac:17:73:6e: 88:5a:cd:58:f5:d2:64:8c:a7:3a:93:25:46:c2:ea:1b:09:1f: ed:bc:6b:ed:5f:33:8b:74:f9:d4:86:1d:1b:3c:2c:0b:ad:5f: bd:a2:a8:7d:9f:ce:df:b0:08:df:1a:b0:d1:08:0e:c4:fc:fb: a2:6d:6c:f6:be:44:9e:41:85:97:f6:13:d8:2d:51:91:38:6a: f4:83:a8:2c:2a:86:56:5f:f5:86:88:b1:48:f8:80:5d:9d:1f: de:d2:77:0a:e7:25:03:f2:d3:ef:63:0b:9d:5c:67:4e:bb:1d: 3c:29:61:89:f7:17:6e:94:22:5f:8a:b9:83:80:ce:12:e4:7e: 82:3c:46:eb:64:02:72:97:45:53:3f:b4:da:db:df:79:48:2d: 70:47:6b:b1:b4:2b:28:6d:e3:db:ef:9a:84:b9:f4:05:5f:b4: 1a:87:9e:d5:69:39:ec:29:83:df:39:f3:54:2d:aa:23:b2:b4: 69:37:9f:a7:59:a2:0c:6b:53:70:3e:6b:33:d3:bf:cb:76:18: d3:a5:e6:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDGNB9RMynuS4KK9bj+0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMWIyYjBlMWNlNzgzZWI3YTJlMzkzZmZkZDEyOGM2YTlj MDIyMzkwHhcNMjUxMjE4MDYwMTE2WhcNMjUxMjE5MDYwMTE2WjAzMTEwLwYDVQQD EygwMjliZWFmODJmNzU4MTRiMjE0ODg1ZTg0ZmQxNDc2OGE3YjBhMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUJdHppH2jgU0XYHCKhEaUwepl0r MtBnTXEPg+NAy7WY8TZGmjhV/Kb5/NaIZ11gIJmQEGq8+RDUQ/BIZZc6S24fN3ZD Qn6qH70F2vbR0vsPfYxPcKEwRubOiHO8ISGFUngvqZevJsElB1xdfqt3TSqT4PZ1 5y1VzgF6xJcg98D1b7xDibkVEeIRSoJ4dsnS67mTdl5gy2LxdgDID4A4zGFS4rPf 9RkcHq3UTksvFWxnpNH8gYhggL7J6N088F95G0DcTCy/HVurhuHYw2Lf1QPjHak8 n3qqR8ZVF3Z5is+9V+5bjWvRKUsKQAZ5tpTa/qP0KMskM8fIJKf/jCxaTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKb6vgvdYFLIUiF6E/RR2insKN/MB8GA1UdIwQY MBaAFNwbKw4c54Prei45P/3RKMapwCI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUt YWRmZTdlNzNkZmVlLzEvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUtYWRmZTdlNzNkZmVl LzEvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqcptGN4 FzR3TFYpXI+uiZdQkmkGqzqUzl7pL7QF1yWwyV4IiT+QdJmNxHJ6VuOUr8CsF3Nu iFrNWPXSZIynOpMlRsLqGwkf7bxr7V8zi3T51IYdGzwsC61fvaKofZ/O37AI3xqw 0QgOxPz7om1s9r5EnkGFl/YT2C1RkThq9IOoLCqGVl/1hoixSPiAXZ0f3tJ3Cucl A/LT72MLnVxnTrsdPClhifcXbpQiX4q5g4DOEuR+gjxG62QCcpdFUz+02tvfeUgt cEdrsbQrKG3j2++ahLn0BV+0Goee1Wk57CmD3znzVC2qI7K0aTefp1miDGtTcD5r M9O/y3YY06XmTA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:05:35 2025 by rpki-client