This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json) Hash identifier: FrdvUzLHOGfvWpGtZ5YXIModhOZoY3id4uGrXzGgDx0= Subject key identifier: 42:0F:1A:E8:FF:B4:1A:3A:17:25:73:BC:06:0A:92:27:22:BC:AA:02 Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee Certificate serial: 019B4E4D44322CACB44ADEED155D201F7B79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 03:00:45 +0000 Manifest this update: Wed 24 Dec 2025 03:00:45 +0000 Manifest next update: Thu 25 Dec 2025 03:00:45 +0000 Files and hashes: 1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: rRu0G2O2vfegqlFhaBLxoZMf3fI7nlQQ2MercGIncvw=) 2: JiXA3NEuZkH0QXN05zeuUA5jMwY.roa (hash: YFDd4vweHXAu3AFKCBPOWScIToP/BlFEZooHjiGGKLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:44:32:2c:ac:b4:4a:de:ed:15:5d:20:1f:7b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee Validity Not Before: Dec 24 03:00:45 2025 GMT Not After : Dec 25 03:00:45 2025 GMT Subject: CN=420f1ae8ffb41a3a172573bc060a922722bcaa02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:f0:42:28:b8:f5:22:f9:08:ba:25:6a:ea: 5e:52:6c:9b:4d:80:2f:2a:a4:6e:c2:90:b6:03:6b: bc:e7:7a:a4:27:c0:ae:25:f9:5a:1d:90:11:33:c8: f2:bd:cf:d7:82:86:2d:00:04:2b:62:0d:41:f6:16: fe:fa:27:15:7f:45:7a:ad:2e:6d:bc:1b:96:74:a7: b9:0e:5c:e1:a8:99:45:c2:75:46:42:51:cb:28:9b: 29:29:dc:16:55:ac:89:bf:6f:9e:20:45:4f:dc:d6: fa:1d:15:8f:6e:ee:80:10:c5:db:d9:97:fc:1b:ec: 59:e8:ba:54:c7:48:bf:b0:da:8d:dc:16:18:4f:a9: 5d:20:76:78:f9:a4:a9:5d:9b:04:d6:4b:50:ed:f4: 4b:a3:99:77:e7:ef:f4:4e:f9:d9:47:94:fe:52:00: 39:e7:bf:1d:63:4a:9b:7c:d7:37:52:67:6e:4e:82: b4:7f:60:c4:47:1c:9d:3f:be:68:3d:4f:6a:92:ef: 11:c1:d6:a6:39:74:e5:58:64:8d:aa:50:fd:77:37: 5f:e6:d1:82:fc:f8:ab:74:63:31:43:fb:8e:ea:a7: 15:2e:b3:68:4e:92:40:ca:73:55:01:8c:17:43:cd: 08:ee:9e:6a:31:7e:03:cd:1f:45:87:a5:a3:68:36: d5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0F:1A:E8:FF:B4:1A:3A:17:25:73:BC:06:0A:92:27:22:BC:AA:02 X509v3 Authority Key Identifier: keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:80:9f:8c:24:d8:26:c0:43:d2:3e:e8:3e:a0:04:c0:82:ad: 8a:40:d1:cd:04:69:6c:cc:40:7b:fd:19:3f:82:48:5b:48:fe: 72:94:f9:f3:82:01:80:4b:b8:10:49:a1:6e:fc:bd:0f:42:cc: 1e:b6:fa:30:fe:df:a9:32:10:2f:05:af:e7:9e:dc:99:36:1b: 0c:eb:94:af:a2:97:cc:72:74:f5:a2:e9:cd:61:fd:bf:49:f3: 37:30:28:8e:e3:51:bb:ea:8f:8c:df:55:35:d7:cc:4f:65:81: 29:d1:ed:fa:33:87:ea:6c:6b:23:e8:a7:d3:1a:37:cf:96:49: 50:6c:70:8a:56:d3:58:9c:c2:df:cc:ed:dd:59:f3:cd:af:91: 94:8e:b4:8c:d4:fd:91:e7:ed:6e:9e:08:d4:ca:90:32:bc:b8: 49:3a:de:b9:aa:0c:ae:52:00:97:03:59:de:93:4a:c8:f9:70: 0b:12:0e:1d:89:e0:b6:7d:7d:9b:c3:58:74:db:51:e6:00:95: c2:11:ad:15:bf:e4:b6:98:9b:e8:4c:78:f3:c2:0d:5e:7d:b6: 84:19:35:77:f8:e7:5a:e8:79:19:6c:35:65:ff:21:42:3d:a4: 6b:49:1a:9d:fc:26:76:a9:3e:52:62:60:de:94:03:85:ab:c8: 07:c7:cd:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTUQyLKy0St7tFV0gH3t5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNmEzNzQyZjBmMGZiMTIwOTIyYjMzOWVmMDFjZWNmODdm NGQxZWUwHhcNMjUxMjI0MDMwMDQ1WhcNMjUxMjI1MDMwMDQ1WjAzMTEwLwYDVQQD Eyg0MjBmMWFlOGZmYjQxYTNhMTcyNTczYmMwNjBhOTIyNzIyYmNhYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq93wQii49SL5CLolaupeUmybTYAv KqRuwpC2A2u853qkJ8CuJflaHZARM8jyvc/XgoYtAAQrYg1B9hb++icVf0V6rS5t vBuWdKe5DlzhqJlFwnVGQlHLKJspKdwWVayJv2+eIEVP3Nb6HRWPbu6AEMXb2Zf8 G+xZ6LpUx0i/sNqN3BYYT6ldIHZ4+aSpXZsE1ktQ7fRLo5l35+/0TvnZR5T+UgA5 578dY0qbfNc3UmduToK0f2DERxydP75oPU9qku8RwdamOXTlWGSNqlD9dzdf5tGC /PirdGMxQ/uO6qcVLrNoTpJAynNVAYwXQ80I7p5qMX4DzR9Fh6WjaDbVzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIPGuj/tBo6FyVzvAYKkicivKoCMB8GA1UdIwQY MBaAFNxqN0Lw8PsSCSKzOe8Bzs+H9NHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80N2M5NzMtMjA1Yi00MTk3LTg2OTgt Y2MxZDJjNWUxYjMxLzEvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80N2M5NzMtMjA1Yi00MTk3LTg2OTgtY2MxZDJjNWUxYjMx LzEvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYCfjCTY JsBD0j7oPqAEwIKtikDRzQRpbMxAe/0ZP4JIW0j+cpT584IBgEu4EEmhbvy9D0LM Hrb6MP7fqTIQLwWv557cmTYbDOuUr6KXzHJ09aLpzWH9v0nzNzAojuNRu+qPjN9V NdfMT2WBKdHt+jOH6mxrI+in0xo3z5ZJUGxwilbTWJzC38zt3Vnzza+RlI60jNT9 keftbp4I1MqQMry4STreuaoMrlIAlwNZ3pNKyPlwCxIOHYngtn19m8NYdNtR5gCV whGtFb/ktpib6Ex488INXn22hBk1d/jnWuh5GWw1Zf8hQj2ka0kanfwmdqk+UmJg 3pQDhavIB8fN2g== -----END CERTIFICATE-----Generated at Wed Dec 24 10:09:16 2025 by rpki-client