This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft File: 3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json) Hash identifier: QTnEocA3jN36nV9cHHBjvK3oHIKY3nn0SIbbOhlaPgA= Subject key identifier: 02:8E:0B:3A:1F:E4:48:02:76:D1:32:83:F9:4A:ED:1F:58:82:23:9F Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a Certificate serial: 019B454A40BD974C0A3B05B3AE522916DE30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft Manifest number: 0BF8 Signing time: Mon 22 Dec 2025 09:00:52 +0000 Manifest this update: Mon 22 Dec 2025 09:00:52 +0000 Manifest next update: Tue 23 Dec 2025 09:00:52 +0000 Files and hashes: 1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: krmHFt8RVzR222f/Kh75yQhNL5LtQ2grTA7sPqWk+t4=) 2: PMD1GlDLGk7gMbwF-9_w1YlsV4M.roa (hash: yxn0bsBf+yoGp2ebzQpXlOvhqAaQoPdbhmTGHyH8IaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:40:bd:97:4c:0a:3b:05:b3:ae:52:29:16:de:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a Validity Not Before: Dec 22 09:00:52 2025 GMT Not After : Dec 23 09:00:52 2025 GMT Subject: CN=028e0b3a1fe4480276d13283f94aed1f5882239f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:98:dd:fd:cc:7e:4b:ba:07:fc:30:3c:9d:b1: 7e:53:76:87:40:85:a3:fb:a7:d7:7b:8f:3f:a5:1a: 97:ac:24:c3:3d:cc:54:7b:89:f6:43:8a:49:2f:f1: c9:96:d1:5d:a2:92:5a:bb:02:b4:d5:60:9d:3a:36: 06:5b:78:63:57:d8:ad:8e:55:78:f2:7a:4c:b9:cb: 37:c5:1c:31:65:10:74:29:04:b1:ec:94:81:e9:7a: b5:93:ba:f9:58:1c:a2:fa:86:c2:ba:6e:b8:27:6c: d8:58:5f:25:d6:6f:56:12:2d:f9:ec:cc:c1:73:01: 04:ce:74:6a:88:8e:8e:e4:d6:3f:0f:8b:05:15:5e: f7:84:5f:df:6a:44:8a:39:d1:3e:58:63:13:64:f9: 45:8b:52:98:1f:0c:3c:35:f2:ac:c6:bf:27:45:09: 2d:6c:71:41:ed:82:f0:c3:49:6b:68:47:84:61:33: 69:e0:50:2f:d3:a1:12:b6:b4:4e:9d:d0:a0:0d:c0: d9:8f:be:d4:b1:61:d4:39:6a:94:4a:27:e3:17:33: 36:92:43:c5:27:36:e1:95:4c:ec:f5:e0:b0:b9:32: 71:42:c1:18:31:5f:7c:80:4c:b5:e5:94:03:a0:ec: 61:fe:38:54:64:13:a5:50:c5:9c:5e:b2:2f:4f:4f: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8E:0B:3A:1F:E4:48:02:76:D1:32:83:F9:4A:ED:1F:58:82:23:9F X509v3 Authority Key Identifier: keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:6d:c5:a5:37:c1:ff:fb:70:d2:0a:11:b7:c1:a9:ea:9d:52: 2b:ea:e9:38:69:8c:c3:43:fa:dc:db:49:c6:46:d8:47:e9:ad: e2:6f:d7:c6:1e:72:f1:fc:eb:8f:27:3e:c7:02:a7:3e:ab:31: b8:2d:7f:84:6f:c0:4a:e7:ce:bd:70:2c:fc:da:d3:fe:d5:91: 57:66:9f:c6:0a:ce:36:0e:40:a9:21:67:a6:ce:3d:17:10:1b: 28:f2:38:4f:87:4e:00:e6:8e:35:5a:6d:be:a8:79:bd:ec:7d: 7b:e6:8f:cf:62:3d:4b:9d:30:ba:49:df:30:d0:fe:eb:ef:07: 29:9e:22:0b:bd:2f:1b:db:2f:a8:b6:ba:16:5e:89:9a:11:f6: a5:ad:3c:b0:bd:48:76:61:7f:5e:e7:ca:06:68:09:fb:a5:8e: b7:c0:9b:f6:1e:32:f9:fd:44:ef:fe:ca:08:05:de:7d:c9:be: 93:bd:58:bc:83:d6:63:39:fb:ad:ec:0b:5a:5b:b4:07:27:3d: 05:38:ce:2d:c3:73:9e:51:43:dc:f1:87:aa:ac:33:de:92:cc: 50:51:ee:2e:01:4b:5c:c7:e2:94:2b:ef:2c:0a:96:fe:85:cb: e3:f8:db:48:38:2c:93:40:8f:41:9f:db:d4:ad:f7:94:ed:e9: 3c:0b:07:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSkC9l0wKOwWzrlIpFt4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMmJhMjlhYTAxMTNmYWZkMzcwZDg2NWZiNDQ0NDk4N2I0 NzMwOGEwHhcNMjUxMjIyMDkwMDUyWhcNMjUxMjIzMDkwMDUyWjAzMTEwLwYDVQQD EygwMjhlMGIzYTFmZTQ0ODAyNzZkMTMyODNmOTRhZWQxZjU4ODIyMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5jd/cx+S7oH/DA8nbF+U3aHQIWj +6fXe48/pRqXrCTDPcxUe4n2Q4pJL/HJltFdopJauwK01WCdOjYGW3hjV9itjlV4 8npMucs3xRwxZRB0KQSx7JSB6Xq1k7r5WByi+obCum64J2zYWF8l1m9WEi357MzB cwEEznRqiI6O5NY/D4sFFV73hF/fakSKOdE+WGMTZPlFi1KYHww8NfKsxr8nRQkt bHFB7YLww0lraEeEYTNp4FAv06EStrROndCgDcDZj77UsWHUOWqUSifjFzM2kkPF JzbhlUzs9eCwuTJxQsEYMV98gEy15ZQDoOxh/jhUZBOlUMWcXrIvT08MlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKOCzof5EgCdtEyg/lK7R9YgiOfMB8GA1UdIwQY MBaAFN4ropqgET+v03DYZftERJh7RzCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85NzAwNGItYjY3MS00ZjNkLThkNTAt ZDFhNGE0NWZhZmJjLzEvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85NzAwNGItYjY3MS00ZjNkLThkNTAtZDFhNGE0NWZhZmJj LzEvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABm3FpTfB //tw0goRt8Gp6p1SK+rpOGmMw0P63NtJxkbYR+mt4m/Xxh5y8fzrjyc+xwKnPqsx uC1/hG/ASufOvXAs/NrT/tWRV2afxgrONg5AqSFnps49FxAbKPI4T4dOAOaONVpt vqh5vex9e+aPz2I9S50wuknfMND+6+8HKZ4iC70vG9svqLa6Fl6JmhH2pa08sL1I dmF/XufKBmgJ+6WOt8Cb9h4y+f1E7/7KCAXefcm+k71YvIPWYzn7rewLWlu0Byc9 BTjOLcNznlFD3PGHqqwz3pLMUFHuLgFLXMfilCvvLAqW/oXL4/jbSDgsk0CPQZ/b 1K33lO3pPAsHBw== -----END CERTIFICATE-----Generated at Mon Dec 22 17:20:37 2025 by rpki-client