This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json) Hash identifier: LnxQaUUR3W3ag7qeZYOuz4+GRn1mCbOB9oWh3WSL/5U= Subject key identifier: A8:82:E2:82:6B:DD:13:53:6A:37:51:F7:93:2D:3B:7F:98:BF:47:50 Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2 Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2 Certificate serial: 019B30E79950B9A3590A72E00D7A2AAFD96C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft Manifest number: 07FA Signing time: Thu 18 Dec 2025 10:00:42 +0000 Manifest this update: Thu 18 Dec 2025 10:00:42 +0000 Manifest next update: Fri 19 Dec 2025 10:00:42 +0000 Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: DI3BflxRQp+11WWRKaNkR/aCcmtLef2mDUMMmW6+pbs=) 2: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (hash: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e7:99:50:b9:a3:59:0a:72:e0:0d:7a:2a:af:d9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2 Validity Not Before: Dec 18 10:00:42 2025 GMT Not After : Dec 19 10:00:42 2025 GMT Subject: CN=a882e2826bdd13536a3751f7932d3b7f98bf4750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6b:aa:04:83:66:8f:8c:e6:1f:92:e3:10:ed: c0:b7:c0:0f:17:7b:f3:71:45:0e:e6:ee:f6:6a:b8: 48:83:df:f8:66:68:b9:4f:50:11:01:ad:53:36:9f: fe:dc:4a:1e:19:e2:09:a8:aa:d9:17:65:fb:e2:00: 53:28:d2:cd:c6:d9:b1:5b:f5:73:d9:6e:23:a9:1b: f4:5b:63:c3:54:9a:4c:c0:00:9c:21:c6:a1:0b:fc: e4:73:17:73:78:6a:c6:ef:87:f2:2c:d9:b7:72:61: 7b:1e:54:ac:1e:a3:8d:1c:cc:b9:6e:2d:58:86:6d: 66:b7:1f:3b:22:f8:b1:d2:17:bd:cb:59:89:4d:21: 99:82:5e:1f:d2:b0:f9:20:fb:88:f1:8b:ff:79:28: 02:13:b5:1c:62:ca:7b:e4:06:bc:d3:00:ea:44:39: 7a:b9:fc:a8:2f:37:40:87:4a:88:1c:c8:ba:65:1f: 4b:54:bc:8d:43:01:4e:ef:13:4e:60:b9:d0:71:19: 81:ca:d5:cd:51:90:49:b1:3a:f9:78:64:f7:ce:77: 0e:13:71:c1:86:4a:71:78:df:a6:b2:d4:97:13:8e: d6:51:f1:ca:e9:3b:76:23:0b:04:f2:13:b0:88:a4: 6c:31:7f:64:64:5c:53:2c:23:69:fa:c4:2f:92:aa: 28:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:82:E2:82:6B:DD:13:53:6A:37:51:F7:93:2D:3B:7F:98:BF:47:50 X509v3 Authority Key Identifier: keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e8:6a:44:7c:b4:e7:1b:7c:67:c7:6f:f5:99:05:0c:b2:d7: 7f:93:69:38:2c:c1:67:52:8d:cd:e5:af:c6:f3:91:36:c3:96: 5f:16:18:21:86:08:43:e0:73:aa:0c:46:e4:ae:48:80:6c:38: 75:d4:12:d5:ac:9a:d3:ce:49:b6:3e:b3:0c:b1:bd:61:a2:1d: 57:db:eb:05:9b:6b:ed:a2:07:56:4c:49:24:cd:52:5d:6c:e1: 08:43:53:4c:9f:e3:fb:74:8e:c5:70:f7:6f:be:80:57:a6:38: b2:a6:4d:99:98:03:d1:e8:7d:63:76:14:a3:ce:c3:f0:df:1e: cd:c0:42:5e:b6:f7:7d:09:bc:8f:c9:98:b6:f2:ae:5e:5e:7d: e6:24:4b:59:85:50:63:e8:14:fc:66:44:53:61:ae:a3:34:84: e8:64:87:b0:d2:c0:23:ca:54:94:da:8a:55:79:04:20:d2:3f: af:ec:32:25:c4:ba:cc:56:d1:63:17:57:01:58:e1:3c:31:8f: 16:e6:68:61:50:d9:04:5f:b6:35:7d:e0:a2:cf:f9:61:ab:1f: 2b:83:b8:3e:a5:bb:9e:cd:4e:41:7f:9a:80:8c:bb:f6:75:a4: 9b:70:63:74:7a:a7:c4:c2:62:1d:2d:9e:75:2a:31:63:6c:f5: 4e:7e:d7:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw55lQuaNZCnLgDXoqr9lsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDNlYTJjZDA3OTk3ZWNkZmUxNzE4ODg3MjcwODY1MmUx NzJkZjIwHhcNMjUxMjE4MTAwMDQyWhcNMjUxMjE5MTAwMDQyWjAzMTEwLwYDVQQD EyhhODgyZTI4MjZiZGQxMzUzNmEzNzUxZjc5MzJkM2I3Zjk4YmY0NzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGuqBINmj4zmH5LjEO3At8APF3vz cUUO5u72arhIg9/4Zmi5T1ARAa1TNp/+3EoeGeIJqKrZF2X74gBTKNLNxtmxW/Vz 2W4jqRv0W2PDVJpMwACcIcahC/zkcxdzeGrG74fyLNm3cmF7HlSsHqONHMy5bi1Y hm1mtx87Ivix0he9y1mJTSGZgl4f0rD5IPuI8Yv/eSgCE7UcYsp75Aa80wDqRDl6 ufyoLzdAh0qIHMi6ZR9LVLyNQwFO7xNOYLnQcRmBytXNUZBJsTr5eGT3zncOE3HB hkpxeN+mstSXE47WUfHK6Tt2IwsE8hOwiKRsMX9kZFxTLCNp+sQvkqoodwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiC4oJr3RNTajdR95MtO3+Yv0dQMB8GA1UdIwQY MBaAFNxD6izQeZfs3+FxiIcnCGUuFy3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2Yt NDQ2NDRkZDVlZDQ0LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2YtNDQ2NDRkZDVlZDQ0 LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeehqRHy0 5xt8Z8dv9ZkFDLLXf5NpOCzBZ1KNzeWvxvORNsOWXxYYIYYIQ+BzqgxG5K5IgGw4 ddQS1aya085Jtj6zDLG9YaIdV9vrBZtr7aIHVkxJJM1SXWzhCENTTJ/j+3SOxXD3 b76AV6Y4sqZNmZgD0eh9Y3YUo87D8N8ezcBCXrb3fQm8j8mYtvKuXl595iRLWYVQ Y+gU/GZEU2GuozSE6GSHsNLAI8pUlNqKVXkEINI/r+wyJcS6zFbRYxdXAVjhPDGP FuZoYVDZBF+2NX3gos/5YasfK4O4PqW7ns1OQX+agIy79nWkm3BjdHqnxMJiHS2e dSoxY2z1Tn7XCg== -----END CERTIFICATE-----Generated at Thu Dec 18 12:44:11 2025 by rpki-client