This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json) Hash identifier: lMHC9sir4wWkYppgLiWlHsPfI3IJttN8m0waHhz4+wY= Subject key identifier: C7:E4:5F:B1:B3:D7:ED:32:BA:92:E3:74:EC:0F:F4:2F:20:60:28:E6 Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e Certificate serial: 019B42800E3C82DB4F745C5161D8EE35FE69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft Manifest number: 0AA9 Signing time: Sun 21 Dec 2025 20:00:47 +0000 Manifest this update: Sun 21 Dec 2025 20:00:47 +0000 Manifest next update: Mon 22 Dec 2025 20:00:47 +0000 Files and hashes: 1: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: KifRF34OQ9WritklIFpzK1XfOd9YublubHIgqQO/O5s=) 2: vrZbrmq-YLZHy_jTQFADJGPxi-I.roa (hash: SoRxaIEIcm9lF/KB/PtX621zexUgH5AtUpObYQIQZW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:0e:3c:82:db:4f:74:5c:51:61:d8:ee:35:fe:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e Validity Not Before: Dec 21 20:00:47 2025 GMT Not After : Dec 22 20:00:47 2025 GMT Subject: CN=c7e45fb1b3d7ed32ba92e374ec0ff42f206028e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f7:46:bd:cb:f3:b2:67:e4:d5:8f:cc:94:f2: bd:78:a4:53:2a:fd:0a:8d:3c:47:f3:0a:13:2a:95: 75:f0:a0:51:dd:1a:a2:44:46:47:6e:74:f9:70:6e: cd:22:2d:56:2f:61:e9:4c:54:9a:19:fd:e9:96:73: 2f:36:6b:18:05:88:c0:64:10:c9:40:48:c3:e0:df: d1:56:33:8a:86:fe:87:e0:eb:57:9b:1d:b6:ff:8e: 11:41:1c:22:51:8e:e2:0e:87:04:9a:04:fb:09:c3: 75:2f:cf:fa:7c:40:16:b1:c9:20:73:5f:b1:92:83: 03:c7:90:74:41:46:12:ec:54:80:82:af:96:50:73: db:79:4b:12:09:73:13:f7:93:1d:dd:6a:23:69:34: 21:12:e4:80:ca:57:c7:23:bd:b7:e2:26:b2:60:21: bd:cc:3f:a7:2f:06:bb:91:0d:9c:29:d9:42:21:ad: 8d:75:ef:c5:48:ce:ca:d8:df:f9:14:87:6e:7f:24: 30:61:e1:67:51:6a:3d:d5:1e:0a:f3:82:b5:4a:c8: 7a:d0:fc:3c:ad:14:b4:d3:67:82:43:46:4e:70:07: 67:ec:a6:86:8d:92:d5:16:21:23:2c:00:76:ed:ce: 39:50:73:10:54:f2:3a:85:22:fb:fd:48:88:4b:bc: 40:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E4:5F:B1:B3:D7:ED:32:BA:92:E3:74:EC:0F:F4:2F:20:60:28:E6 X509v3 Authority Key Identifier: keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:07:b2:5e:32:ab:db:c6:e3:08:44:95:fa:12:26:a1:3a:a2: 92:b3:ed:32:4a:b6:10:a4:96:a9:50:ee:a9:8d:6d:3c:67:c4: ff:80:a1:59:d7:71:1a:9c:7e:75:4b:1d:64:4f:c8:b2:cb:87: dd:f5:e7:80:25:90:26:9c:8f:b5:61:0b:2e:0c:04:16:37:e6: 43:3b:2d:e4:97:fe:e2:bd:6e:c0:61:eb:aa:a7:f8:00:e6:73: c6:20:1e:ba:79:04:ef:dc:25:de:0f:ba:02:42:9d:56:f5:76: ed:5f:5b:a2:8a:a3:91:45:b3:e8:07:e2:d1:67:c5:13:4b:64: 41:d8:df:13:f3:dd:4d:70:be:ec:e9:cc:53:d2:fe:4c:9e:17: cb:ee:7f:d3:9d:72:0b:b1:94:e4:51:24:98:b3:a6:4b:09:f4: 78:af:b2:ed:f6:96:97:de:5c:ec:e9:cc:76:9d:b9:a5:02:ae: c0:4f:ff:88:81:c4:f6:94:00:0d:c9:fd:dd:f4:7c:f7:f0:0c: 6c:6c:d9:98:66:31:9c:ea:92:03:b5:6c:d3:8d:6e:c0:47:3d: fe:46:60:80:d2:9b:ae:dd:4d:0a:d6:7c:3a:4a:4c:9f:eb:50: e9:15:54:0d:74:3f:af:f4:b3:06:cb:3f:f5:a7:fa:e1:38:28: e1:a8:e8:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgA48gttPdFxRYdjuNf5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjIwYTA2ODViNmZlOTc1NGNhMjI0ODY3NzViMmQ4YTdl OWMxMWUwHhcNMjUxMjIxMjAwMDQ3WhcNMjUxMjIyMjAwMDQ3WjAzMTEwLwYDVQQD EyhjN2U0NWZiMWIzZDdlZDMyYmE5MmUzNzRlYzBmZjQyZjIwNjAyOGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovdGvcvzsmfk1Y/MlPK9eKRTKv0K jTxH8woTKpV18KBR3RqiREZHbnT5cG7NIi1WL2HpTFSaGf3plnMvNmsYBYjAZBDJ QEjD4N/RVjOKhv6H4OtXmx22/44RQRwiUY7iDocEmgT7CcN1L8/6fEAWsckgc1+x koMDx5B0QUYS7FSAgq+WUHPbeUsSCXMT95Md3WojaTQhEuSAylfHI7234iayYCG9 zD+nLwa7kQ2cKdlCIa2Nde/FSM7K2N/5FIdufyQwYeFnUWo91R4K84K1Ssh60Pw8 rRS002eCQ0ZOcAdn7KaGjZLVFiEjLAB27c45UHMQVPI6hSL7/UiIS7xAYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfkX7Gz1+0yupLjdOwP9C8gYCjmMB8GA1UdIwQY MBaAFN3yCgaFtv6XVMoiSGd1stin6cEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTRjNzgtNGJkMC00M2Q4LTgxNGYt NTgzNDlmNzQwZTk2LzEvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81OTRjNzgtNGJkMC00M2Q4LTgxNGYtNTgzNDlmNzQwZTk2 LzEvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAeyXjKr 28bjCESV+hImoTqikrPtMkq2EKSWqVDuqY1tPGfE/4ChWddxGpx+dUsdZE/IssuH 3fXngCWQJpyPtWELLgwEFjfmQzst5Jf+4r1uwGHrqqf4AOZzxiAeunkE79wl3g+6 AkKdVvV27V9booqjkUWz6Afi0WfFE0tkQdjfE/PdTXC+7OnMU9L+TJ4Xy+5/051y C7GU5FEkmLOmSwn0eK+y7faWl95c7OnMdp25pQKuwE//iIHE9pQADcn93fR89/AM bGzZmGYxnOqSA7Vs041uwEc9/kZggNKbrt1NCtZ8OkpMn+tQ6RVUDXQ/r/SzBss/ 9af64Tgo4ajoxw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:56:28 2025 by rpki-client