This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft File: 3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json) Hash identifier: y3+ljiFZiIY99jysREiwnxi6E4pu5Gzs4WwBTB35gnE= Subject key identifier: C3:B7:FD:89:AB:34:50:27:9E:2F:71:46:5D:A2:29:81:3C:28:46:BF Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67 Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067 Certificate serial: 019B42496E00BDE8F2C87F237314D511049D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft Manifest number: 17A4 Signing time: Sun 21 Dec 2025 19:01:07 +0000 Manifest this update: Sun 21 Dec 2025 19:01:07 +0000 Manifest next update: Mon 22 Dec 2025 19:01:07 +0000 Files and hashes: 1: 0xa4mU5yRo1nzTt0AhMREexXLR4.roa (hash: V8/58Ec+nJB6D8SUXkgg5RfVldJgcq7giFR6HQKgRBM=) 2: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: E+fic1yN9nsTygdloKW8pVMAEFpHTUWG1mdIAJf0kWI=) 3: VwaG3F-L6xL12XPSU_UWu2Bd58g.roa (hash: /URPWuVnWdS2o9I0omCNTV0BM2l7vJwm+zKrLTezQaI=) 4: kNjxTs2znVvLY08E4W9HAeORpIc.roa (hash: iCvB3dIqghJ54VOy8M3fVHjOeELiRaWYAGP93zCiWmc=) 5: lin8JZNkawhqPQLq4l5oDz7p9_Q.roa (hash: BVUXkfHTFAe9GN10E46L1MHHgXHBoub4CNAdGpuz0fk=) 6: mytf20wX2aBV2FUaQnt3tXEi67s.roa (hash: FaOUPn+Qyashzwjxkz567M7mihch3bci9gHJEHkVovg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:6e:00:bd:e8:f2:c8:7f:23:73:14:d5:11:04:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067 Validity Not Before: Dec 21 19:01:07 2025 GMT Not After : Dec 22 19:01:07 2025 GMT Subject: CN=c3b7fd89ab3450279e2f71465da229813c2846bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6b:d6:a3:47:2d:43:23:97:01:d8:16:1c:64: 99:ed:5d:68:cd:0e:6c:da:49:36:98:88:e3:ce:43: 85:60:62:77:9c:d9:7c:9f:b6:6d:7d:9a:13:9a:5f: a9:0d:8d:7c:83:0a:b3:a6:18:16:5e:e2:76:61:63: c2:da:0d:2f:83:05:b4:36:05:74:a6:10:e9:23:c7: df:cc:b7:95:51:e4:4e:6a:7a:2e:a2:68:c7:25:13: 53:67:0e:a5:52:9c:50:11:5c:53:ff:9f:56:15:85: 47:b5:55:17:d8:84:3f:a0:d3:00:cb:95:52:09:12: d1:aa:e2:d3:20:2c:af:dd:7b:c9:52:67:fc:d1:eb: 8b:76:6d:ce:3f:b2:85:70:e2:8f:62:1b:b4:9e:fc: 4e:a7:ae:1e:10:eb:be:45:3f:aa:9b:0a:ea:e8:b0: 9c:a7:85:58:2a:ae:a5:a6:d0:b3:fe:b7:41:1f:59: 1b:dd:45:2c:02:1a:7b:54:3f:09:f2:ba:96:6c:85: ca:95:d8:02:3a:23:71:45:8f:bf:00:d3:7d:8f:69: bd:6c:37:57:86:b2:98:15:49:2f:7f:a2:5f:d1:40: 67:96:20:a2:12:59:09:89:49:ae:ae:9e:e1:7a:6a: 9a:0a:06:5d:88:7a:5e:57:13:1e:c5:46:4a:4f:e5: 93:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B7:FD:89:AB:34:50:27:9E:2F:71:46:5D:A2:29:81:3C:28:46:BF X509v3 Authority Key Identifier: keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fe:1d:a3:ef:00:9a:a7:38:51:33:60:3a:59:ed:32:eb:da: 71:d9:94:c7:3f:74:46:75:3c:4d:2c:47:e4:e7:a5:7d:0e:75: cf:e6:03:02:45:80:76:f7:f8:ea:1b:ff:07:ca:71:0c:65:31: e5:62:13:7f:8e:95:85:8e:e6:77:8f:07:05:a4:fe:1b:5a:59: 39:6c:4e:cb:42:e9:d2:11:26:18:81:7e:92:af:ee:5f:71:2f: c7:8a:a5:8c:52:8c:03:68:5b:30:93:c3:9e:a1:28:dc:7c:ea: 1f:2a:ab:d9:33:4a:5e:84:02:d1:20:63:f2:dc:13:86:b3:c5: 03:e2:3d:70:0a:9c:88:68:73:4a:f0:37:42:f2:b0:c4:b7:0f: 17:83:84:ec:2f:42:0b:e9:c6:4a:f0:f8:00:0a:73:81:c5:61: dd:9d:6e:10:64:bf:87:6e:a3:76:85:6c:f0:b5:4c:42:25:d1: 91:fe:a7:91:f3:92:de:8d:27:c7:9b:2d:65:dd:dd:6f:37:07: 73:a3:3c:5e:39:8b:a9:ac:00:cd:30:58:98:65:2f:cd:f6:1c: 1f:50:f2:5a:1c:84:04:5a:c6:0e:8c:26:a6:15:04:e1:ae:6c: 8a:3d:f3:db:02:28:d5:77:01:f1:53:fd:37:96:17:01:49:ec: 54:c2:bb:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSW4AvejyyH8jcxTVEQSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGU0NTNhZmZlODk1YjY0NTJiODQwMjc0MzdjNWMwMGZk MzcwNjcwHhcNMjUxMjIxMTkwMTA3WhcNMjUxMjIyMTkwMTA3WjAzMTEwLwYDVQQD EyhjM2I3ZmQ4OWFiMzQ1MDI3OWUyZjcxNDY1ZGEyMjk4MTNjMjg0NmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimvWo0ctQyOXAdgWHGSZ7V1ozQ5s 2kk2mIjjzkOFYGJ3nNl8n7ZtfZoTml+pDY18gwqzphgWXuJ2YWPC2g0vgwW0NgV0 phDpI8ffzLeVUeROanouomjHJRNTZw6lUpxQEVxT/59WFYVHtVUX2IQ/oNMAy5VS CRLRquLTICyv3XvJUmf80euLdm3OP7KFcOKPYhu0nvxOp64eEOu+RT+qmwrq6LCc p4VYKq6lptCz/rdBH1kb3UUsAhp7VD8J8rqWbIXKldgCOiNxRY+/ANN9j2m9bDdX hrKYFUkvf6Jf0UBnliCiElkJiUmurp7hemqaCgZdiHpeVxMexUZKT+WTNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMO3/YmrNFAnni9xRl2iKYE8KEa/MB8GA1UdIwQY MBaAFNxORTr/6JW2RSuEAnQ3xcAP03BnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt MTgyMjg2N2UxNTk2LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2 LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGv4do+8A mqc4UTNgOlntMuvacdmUxz90RnU8TSxH5OelfQ51z+YDAkWAdvf46hv/B8pxDGUx 5WITf46VhY7md48HBaT+G1pZOWxOy0Lp0hEmGIF+kq/uX3Evx4qljFKMA2hbMJPD nqEo3HzqHyqr2TNKXoQC0SBj8twThrPFA+I9cAqciGhzSvA3QvKwxLcPF4OE7C9C C+nGSvD4AApzgcVh3Z1uEGS/h26jdoVs8LVMQiXRkf6nkfOS3o0nx5stZd3dbzcH c6M8XjmLqawAzTBYmGUvzfYcH1DyWhyEBFrGDowmphUE4a5sij3z2wIo1XcB8VP9 N5YXAUnsVMK7tQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:00:47 2025 by rpki-client