This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json) Hash identifier: 56v4coTv8eQ8fFzbG4KpHTyrsDrFbFOOU430bcmUoxM= Subject key identifier: 3C:61:E5:BA:92:AB:3B:D7:90:7C:57:FE:BA:B3:39:51:43:CE:1C:40 Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1 Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1 Certificate serial: 019B53ABEB74AE2E78DF1A4B8D74F6F8E589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 04:02:14 +0000 Manifest this update: Thu 25 Dec 2025 04:02:14 +0000 Manifest next update: Fri 26 Dec 2025 04:02:14 +0000 Files and hashes: 1: 1qgt4GAyW_3c-IECItJTlUngLgw.roa (hash: JMxnB6RQt5YXqrAyQkabjodjhDTimqSiK2ILClsZiRA=) 2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: ZQRgoxftTzKnx/3o216MJT93BecMdzgKm7AA2WEy/34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:eb:74:ae:2e:78:df:1a:4b:8d:74:f6:f8:e5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1 Validity Not Before: Dec 25 04:02:14 2025 GMT Not After : Dec 26 04:02:14 2025 GMT Subject: CN=3c61e5ba92ab3bd7907c57febab3395143ce1c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:ef:93:38:ea:c4:bd:cd:bb:97:ee:12:be: 4e:40:6a:ca:18:a5:73:82:df:15:5b:c5:b4:50:27: e8:4b:7f:af:b3:48:82:4a:10:2a:fd:10:92:0d:4a: 80:0e:67:9b:1e:6c:7d:77:f6:2e:d6:66:f6:c7:7c: 6e:3a:fb:5e:75:78:03:5d:fc:93:c7:a5:0f:85:2c: 54:cf:1d:32:ed:c5:f3:58:b3:d0:e0:58:1c:10:23: 9e:03:7b:d6:17:93:57:bc:0b:7d:c7:4a:e7:e5:22: fd:26:f3:46:bf:f1:55:4b:f1:83:de:f9:8c:04:be: 4e:0c:17:2c:fd:53:a3:28:6d:5b:52:21:58:26:b4: 60:86:eb:80:de:24:8f:8b:88:5d:bc:1f:53:7f:11: d7:66:25:78:e8:ed:e5:94:3e:c6:c8:a7:cd:31:68: d6:09:3e:74:b4:b7:50:b6:f2:40:c4:70:63:65:aa: d3:47:18:99:6c:f4:af:3b:2c:59:b3:7c:ac:d3:d2: 17:be:c7:ba:84:5f:dc:4b:24:5b:64:42:9c:fc:0e: ae:78:cf:fb:2c:dd:64:5c:8a:8d:5b:1c:1b:b5:b9: 27:be:8b:5f:f1:68:7f:79:37:54:22:f4:55:2f:d4: 77:ab:f2:28:70:e9:0d:b3:6d:7b:76:33:c7:56:fc: 22:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:61:E5:BA:92:AB:3B:D7:90:7C:57:FE:BA:B3:39:51:43:CE:1C:40 X509v3 Authority Key Identifier: keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d2:01:25:39:16:a4:de:7a:47:7f:c5:49:a5:43:30:c7:73: 80:f4:31:6c:87:de:9a:d2:4d:6c:15:e3:d3:68:d0:3c:e7:f9: a6:a0:44:29:75:9d:a1:66:2b:f0:a8:62:5e:d4:e2:3f:88:2b: 28:1a:68:66:7f:e3:24:df:36:a6:4e:2e:af:d8:33:e6:90:2e: 0e:b1:3a:b6:95:4d:4d:4d:73:ca:2b:22:e2:8b:94:34:ec:3d: 3b:ea:b0:11:92:cf:16:ce:c2:77:c1:09:40:5d:80:8f:15:53: 37:39:e6:3d:14:8e:f4:81:e1:a4:a6:b6:33:54:1c:fb:2e:45: ee:d0:a5:b4:5a:08:70:78:06:84:7a:fd:d2:c3:6f:81:e9:65: 30:e7:8b:98:13:12:38:51:fd:78:df:79:e3:55:73:5a:da:b8: cb:9e:58:d8:b3:6f:8d:75:14:9b:96:ad:1a:bb:ae:a6:c3:22: b7:fb:3a:dd:55:30:fa:aa:70:31:8c:24:af:bd:e5:f8:c6:e6: 84:db:ff:f0:60:51:6f:8d:16:d5:f1:73:c2:ce:d2:96:8d:6d: 6a:44:33:bf:2e:00:90:69:09:6a:74:f8:d5:21:24:2e:ac:f2: 19:b2:1d:42:f5:76:bb:62:30:05:c0:a7:b9:11:08:f7:a8:af: cf:42:19:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq+t0ri543xpLjXT2+OWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MGRjODE0NTc1NTEwMWFjYzA4ODhhYTAwYmIyOGI5OTVi OWM0ZjEwHhcNMjUxMjI1MDQwMjE0WhcNMjUxMjI2MDQwMjE0WjAzMTEwLwYDVQQD EygzYzYxZTViYTkyYWIzYmQ3OTA3YzU3ZmViYWIzMzk1MTQzY2UxYzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXLvkzjqxL3Nu5fuEr5OQGrKGKVz gt8VW8W0UCfoS3+vs0iCShAq/RCSDUqADmebHmx9d/Yu1mb2x3xuOvtedXgDXfyT x6UPhSxUzx0y7cXzWLPQ4FgcECOeA3vWF5NXvAt9x0rn5SL9JvNGv/FVS/GD3vmM BL5ODBcs/VOjKG1bUiFYJrRghuuA3iSPi4hdvB9TfxHXZiV46O3llD7GyKfNMWjW CT50tLdQtvJAxHBjZarTRxiZbPSvOyxZs3ys09IXvse6hF/cSyRbZEKc/A6ueM/7 LN1kXIqNWxwbtbknvotf8Wh/eTdUIvRVL9R3q/IocOkNs217djPHVvwi9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxh5bqSqzvXkHxX/rqzOVFDzhxAMB8GA1UdIwQY MBaAFHkNyBRXVRAazAiIqgC7KLmVucTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzQxMTAtZWFlZS00NDBiLTgyMGUt OTVjYWUwOWZmNTYzLzEvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8yYzQxMTAtZWFlZS00NDBiLTgyMGUtOTVjYWUwOWZmNTYz LzEvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdIBJTkW pN56R3/FSaVDMMdzgPQxbIfemtJNbBXj02jQPOf5pqBEKXWdoWYr8KhiXtTiP4gr KBpoZn/jJN82pk4ur9gz5pAuDrE6tpVNTU1zyisi4ouUNOw9O+qwEZLPFs7Cd8EJ QF2AjxVTNznmPRSO9IHhpKa2M1Qc+y5F7tCltFoIcHgGhHr90sNvgellMOeLmBMS OFH9eN9541VzWtq4y55Y2LNvjXUUm5atGruupsMit/s63VUw+qpwMYwkr73l+Mbm hNv/8GBRb40W1fFzws7Slo1takQzvy4AkGkJanT41SEkLqzyGbIdQvV2u2IwBcCn uREI96ivz0IZtQ== -----END CERTIFICATE-----Generated at Thu Dec 25 09:14:29 2025 by rpki-client