This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json) Hash identifier: brZSPlrvUlLAjJhKzGJ3I6XczgPj3L8Wd63kk6uM16Y= Subject key identifier: 9D:BF:CF:B2:82:98:7A:32:11:2A:A8:3A:8F:A7:24:C8:46:13:FD:D4 Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff Certificate serial: 019B3E6CA2044319B56EF0B6023A6E01901A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft Manifest number: 145F Signing time: Sun 21 Dec 2025 01:01:05 +0000 Manifest this update: Sun 21 Dec 2025 01:01:05 +0000 Manifest next update: Mon 22 Dec 2025 01:01:05 +0000 Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: bF6rWbLiN5VMjQis2hrcwzJrB1n/Gk+wiLGiFwBcvqQ=) 2: K668RnN8R9Zt_BhcvITxrQRhBNs.roa (hash: 8wo0Wz+L+phQUblwdU8c4kneYF4uQyTcefZ7CpD7SsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:a2:04:43:19:b5:6e:f0:b6:02:3a:6e:01:90:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff Validity Not Before: Dec 21 01:01:05 2025 GMT Not After : Dec 22 01:01:05 2025 GMT Subject: CN=9dbfcfb282987a32112aa83a8fa724c84613fdd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9f:21:a0:1f:64:3d:e1:9d:fe:83:fc:64:77: 79:4f:c1:b4:e9:7e:cd:c7:99:21:7a:a2:90:6d:24: 6f:01:5f:d8:ec:b1:9c:86:ea:df:8c:5e:e8:46:76: aa:d2:4f:cd:14:ea:ee:05:ca:db:ae:42:aa:58:cf: 79:57:30:7d:38:88:c7:c5:bb:3b:36:f2:82:d5:2c: bb:88:d6:a4:b7:a4:e9:c5:d4:36:04:8c:45:61:c3: e3:88:67:f8:a5:61:9c:74:4b:5c:7d:de:ed:b7:2a: 21:04:cf:8c:3d:83:4d:39:fa:1e:7a:36:35:b8:d3: b1:96:13:c3:93:61:d7:41:f8:7f:2f:96:e2:c3:8d: f3:6e:ff:46:d2:f7:e4:81:8e:20:7d:4d:aa:be:a3: f3:d5:03:26:ee:f7:52:c4:0c:a6:00:eb:a5:8a:46: 36:f7:d3:bc:43:53:d3:92:ff:03:16:06:6f:f7:07: 8d:dd:bd:98:5f:b0:f7:bb:4f:28:a2:68:9a:a4:d1: de:0f:60:81:bf:7b:3e:d5:2e:ea:9c:54:97:a5:bf: e4:72:21:f2:87:e9:1e:fa:80:58:18:3a:78:a4:b1: 29:67:0c:58:9c:f8:71:e9:51:93:c7:19:ca:9c:ae: 77:f2:77:b8:69:e6:e2:39:2f:c4:b0:4d:c6:2f:56: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BF:CF:B2:82:98:7A:32:11:2A:A8:3A:8F:A7:24:C8:46:13:FD:D4 X509v3 Authority Key Identifier: keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:65:f5:4a:93:e2:9c:52:cb:1c:da:a1:e1:6e:cd:61:2c:fd: db:fc:34:30:96:de:da:9f:95:3c:5d:a6:e7:d1:4d:ff:f7:0b: 2a:5f:38:8c:0d:35:70:e0:95:95:ca:fb:54:9d:98:d1:d4:12: bb:89:96:e3:f7:8b:7c:a2:e6:f3:e6:94:e9:3e:6e:f1:f9:de: d4:db:ef:c2:83:99:22:32:04:f0:1a:42:a3:52:a0:65:e2:5c: f6:4a:bd:6c:4d:ae:7e:1f:18:9f:60:06:2d:cd:7c:3e:42:7d: 70:7c:2c:7f:15:5c:be:96:a2:4c:93:1b:fd:fa:b5:c6:58:18: e0:f9:ab:e0:33:8e:55:95:8e:e7:3f:88:49:5f:0e:eb:54:e2: 16:74:e9:94:90:ba:41:75:61:17:11:83:b5:75:ff:35:fb:df: d7:97:67:cd:a1:ba:dc:cb:9c:4b:92:b6:85:6f:85:9a:0c:c2: 73:28:24:f7:db:4e:6e:10:0d:fc:c5:10:73:c5:e8:3f:b3:b2: 04:43:4c:f5:96:46:f9:eb:4c:47:28:5f:b8:65:4c:53:70:26: 7c:61:04:f9:0a:a0:5e:a7:0f:ba:7b:23:ea:9c:ab:3e:c8:be: 42:1c:fb:83:35:29:a9:f1:80:e7:6d:ef:94:eb:5b:c7:f8:47: 00:dc:53:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bKIEQxm1bvC2AjpuAZAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOWZmNjE5NTA5NmEwOThjMTkyODE1NDhlNDEwN2I4Njdj NzNhZmYwHhcNMjUxMjIxMDEwMTA1WhcNMjUxMjIyMDEwMTA1WjAzMTEwLwYDVQQD Eyg5ZGJmY2ZiMjgyOTg3YTMyMTEyYWE4M2E4ZmE3MjRjODQ2MTNmZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj58hoB9kPeGd/oP8ZHd5T8G06X7N x5kheqKQbSRvAV/Y7LGchurfjF7oRnaq0k/NFOruBcrbrkKqWM95VzB9OIjHxbs7 NvKC1Sy7iNakt6TpxdQ2BIxFYcPjiGf4pWGcdEtcfd7ttyohBM+MPYNNOfoeejY1 uNOxlhPDk2HXQfh/L5biw43zbv9G0vfkgY4gfU2qvqPz1QMm7vdSxAymAOulikY2 99O8Q1PTkv8DFgZv9weN3b2YX7D3u08oomiapNHeD2CBv3s+1S7qnFSXpb/kciHy h+ke+oBYGDp4pLEpZwxYnPhx6VGTxxnKnK538ne4aebiOS/EsE3GL1YAEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2/z7KCmHoyESqoOo+nJMhGE/3UMB8GA1UdIwQY MBaAFN6f9hlQlqCYwZKBVI5BB7hnxzr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83MzY3OWEtY2IwMS00M2NkLTkyNDUt YTI5YzZkYWUzNWMwLzEvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83MzY3OWEtY2IwMS00M2NkLTkyNDUtYTI5YzZkYWUzNWMw LzEvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2X1SpPi nFLLHNqh4W7NYSz92/w0MJbe2p+VPF2m59FN//cLKl84jA01cOCVlcr7VJ2Y0dQS u4mW4/eLfKLm8+aU6T5u8fne1NvvwoOZIjIE8BpCo1KgZeJc9kq9bE2ufh8Yn2AG Lc18PkJ9cHwsfxVcvpaiTJMb/fq1xlgY4Pmr4DOOVZWO5z+ISV8O61TiFnTplJC6 QXVhFxGDtXX/Nfvf15dnzaG63MucS5K2hW+FmgzCcygk99tObhAN/MUQc8XoP7Oy BENM9ZZG+etMRyhfuGVMU3AmfGEE+QqgXqcPunsj6pyrPsi+Qhz7gzUpqfGA523v lOtbx/hHANxTug== -----END CERTIFICATE-----Generated at Sun Dec 21 09:52:52 2025 by rpki-client