This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json) Hash identifier: NuobPIap7qu+7nhta0nlSahcy2gcdGcFdSDY0diG3wA= Subject key identifier: E7:4E:15:0A:7B:FA:34:42:BE:52:C4:D5:7D:27:38:06:0E:58:8C:C3 Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96 Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696 Certificate serial: 019B3B34752F3F7FEA134D6599267F0120CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft Manifest number: 066E Signing time: Sat 20 Dec 2025 10:00:52 +0000 Manifest this update: Sat 20 Dec 2025 10:00:52 +0000 Manifest next update: Sun 21 Dec 2025 10:00:52 +0000 Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: 0fUapXEEam6H5KTAbm8EJ8NjSyNyurRd2x4SPUVrnoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:75:2f:3f:7f:ea:13:4d:65:99:26:7f:01:20:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696 Validity Not Before: Dec 20 10:00:52 2025 GMT Not After : Dec 21 10:00:52 2025 GMT Subject: CN=e74e150a7bfa3442be52c4d57d2738060e588cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a4:04:e2:9e:39:c2:e3:93:67:0f:ab:a4:13: 6c:3b:e7:f4:7d:c1:54:77:94:f6:62:67:63:93:c3: b9:96:03:10:79:c1:2c:b3:42:18:e0:2f:15:8b:8d: 5b:5a:43:1a:35:ad:50:e8:d9:2d:74:ba:f7:5e:df: 91:89:41:c1:f8:75:38:1f:c8:2e:7e:e6:1d:03:ce: 55:5a:12:6a:1d:25:2b:6b:1b:08:04:9d:8d:2e:4f: 79:bf:a4:96:87:42:9a:e7:c1:76:ce:6d:40:d6:19: e0:e3:2c:96:3a:67:d0:56:10:3e:6b:3b:64:b1:df: 33:2a:aa:4a:d9:75:22:da:20:65:57:f3:95:93:50: 9b:83:3d:de:d7:eb:4e:61:01:fc:82:91:ab:16:73: 15:81:41:94:f0:02:aa:f3:a6:40:bf:52:d4:36:43: 83:71:ab:8a:d6:50:86:d5:3d:e1:35:60:fd:ba:a2: 24:d3:e3:19:86:f6:83:94:15:7b:37:4c:2a:84:3d: b2:db:9d:5e:f0:b0:55:b6:28:d8:df:cc:19:79:14: 8f:52:b7:39:35:6d:a9:c7:f0:75:ce:00:cf:39:2f: 0f:8a:9b:eb:85:00:61:64:18:65:cf:14:31:bf:46: 7d:91:a0:31:77:a1:95:e3:1e:52:84:39:4d:53:76: 63:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4E:15:0A:7B:FA:34:42:BE:52:C4:D5:7D:27:38:06:0E:58:8C:C3 X509v3 Authority Key Identifier: keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:41:5d:ca:f1:94:fa:d9:ab:1d:fa:e0:5f:81:51:a7:17:75: 44:8a:f9:89:a2:75:1c:a3:e6:33:61:86:76:d3:ba:f0:e5:b2: 1d:10:b5:a3:97:a4:5e:76:41:c7:5b:c9:36:fc:fa:dd:b1:b6: 9e:62:ca:08:5d:43:f8:e4:ac:20:61:54:c4:5d:38:5b:23:2f: a6:04:fe:5a:36:db:34:fc:59:e8:c1:19:72:2d:93:83:1d:8c: b6:21:b4:da:02:ba:8c:f3:d1:d2:31:0f:98:75:6e:fe:06:70: e6:53:d3:89:8e:be:cd:3c:02:a1:fb:59:e7:63:7a:97:26:7f: 20:4e:4b:99:d6:fc:b4:09:e0:f5:74:e2:5a:ae:c6:db:1c:c3: a5:8a:1c:28:ac:3e:91:34:28:51:13:74:d3:24:b6:4a:68:88: 05:ab:b3:f6:60:c3:21:85:3b:10:08:3e:38:96:92:90:dc:94: 6b:66:de:03:2a:25:cc:f0:13:94:b7:24:ae:16:23:24:78:bf: 8d:22:69:cd:5d:03:5f:3c:9e:72:7c:83:40:54:14:e0:53:91: 79:5a:f3:27:59:e6:4e:89:ac:bd:6a:ca:4a:ed:ee:1b:db:b2: dc:1a:d9:3f:a7:b0:73:dc:66:d9:50:e8:80:f0:18:30:25:ed: 12:cd:87:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NHUvP3/qE01lmSZ/ASDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNzQ3MTk2Y2I4YzlkYzY0MjMzN2FmZWJmMDRiMjA0ZGNk MTk2OTYwHhcNMjUxMjIwMTAwMDUyWhcNMjUxMjIxMTAwMDUyWjAzMTEwLwYDVQQD EyhlNzRlMTUwYTdiZmEzNDQyYmU1MmM0ZDU3ZDI3MzgwNjBlNTg4Y2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6QE4p45wuOTZw+rpBNsO+f0fcFU d5T2Ymdjk8O5lgMQecEss0IY4C8Vi41bWkMaNa1Q6NktdLr3Xt+RiUHB+HU4H8gu fuYdA85VWhJqHSUraxsIBJ2NLk95v6SWh0Ka58F2zm1A1hng4yyWOmfQVhA+aztk sd8zKqpK2XUi2iBlV/OVk1Cbgz3e1+tOYQH8gpGrFnMVgUGU8AKq86ZAv1LUNkOD cauK1lCG1T3hNWD9uqIk0+MZhvaDlBV7N0wqhD2y251e8LBVtijY38wZeRSPUrc5 NW2px/B1zgDPOS8PipvrhQBhZBhlzxQxv0Z9kaAxd6GV4x5ShDlNU3ZjXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdOFQp7+jRCvlLE1X0nOAYOWIzDMB8GA1UdIwQY MBaAFN50cZbLjJ3GQjN6/r8EsgTc0ZaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85NzFjMjQtNmIyYi00NmE1LWE3NTEt ZDNlOGE4Njg5ZGMzLzEvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85NzFjMjQtNmIyYi00NmE1LWE3NTEtZDNlOGE4Njg5ZGMz LzEvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUFdyvGU +tmrHfrgX4FRpxd1RIr5iaJ1HKPmM2GGdtO68OWyHRC1o5ekXnZBx1vJNvz63bG2 nmLKCF1D+OSsIGFUxF04WyMvpgT+WjbbNPxZ6MEZci2Tgx2MtiG02gK6jPPR0jEP mHVu/gZw5lPTiY6+zTwCoftZ52N6lyZ/IE5Lmdb8tAng9XTiWq7G2xzDpYocKKw+ kTQoURN00yS2SmiIBauz9mDDIYU7EAg+OJaSkNyUa2beAyolzPATlLckrhYjJHi/ jSJpzV0DXzyecnyDQFQU4FOReVrzJ1nmTomsvWrKSu3uG9uy3BrZP6ewc9xm2VDo gPAYMCXtEs2Hsg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:53:24 2025 by rpki-client