This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft File: 3j4BZ79YLOzkjWxtApqCzeJyqdU.mft (raw, json) Hash identifier: jLh6aFQ+3rNMVJPGKYB8eig/RLcaDVBwHcBLQ1L9lWQ= Subject key identifier: 58:8C:21:0B:8D:B4:16:85:74:52:1B:5B:B3:D4:9A:77:BF:A1:B8:4B Authority key identifier: DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5 Certificate issuer: /CN=de3e0167bf582cece48d6c6d029a82cde272a9d5 Certificate serial: 019B3FECC7D244A6DF2108C1C920345979A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft Manifest number: 171D Signing time: Sun 21 Dec 2025 08:00:40 +0000 Manifest this update: Sun 21 Dec 2025 08:00:40 +0000 Manifest next update: Mon 22 Dec 2025 08:00:40 +0000 Files and hashes: 1: 3j4BZ79YLOzkjWxtApqCzeJyqdU.crl (hash: JWdYTyXfiKJF+ZNlPaC/4A8O7HVF+FJKJfnT3d6KtIM=) 2: WK3H-x4lvtSz5PAYVzf83jx6Xhg.roa (hash: IHyV2nIBoBadJ+LZrUqe4zccqPuVek6+/UVCrBQ/9jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:c7:d2:44:a6:df:21:08:c1:c9:20:34:59:79:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de3e0167bf582cece48d6c6d029a82cde272a9d5 Validity Not Before: Dec 21 08:00:40 2025 GMT Not After : Dec 22 08:00:40 2025 GMT Subject: CN=588c210b8db4168574521b5bb3d49a77bfa1b84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ee:75:7b:31:e3:d5:0a:10:2b:3a:da:31:ec: c2:15:67:36:54:55:77:96:f6:07:0d:90:9a:0f:4a: 3d:6e:31:86:be:25:24:98:bd:95:1d:61:c0:70:12: 1d:2d:3c:9f:c9:98:86:98:67:30:02:92:bf:a0:fc: 67:7f:0c:e0:48:e2:bc:95:66:70:a7:54:10:cf:57: e3:d8:0b:4e:1d:67:55:2e:21:3c:cb:b6:29:3f:49: 55:91:c6:90:3e:c0:9f:e3:8b:a9:e7:42:f3:b6:ce: 2e:47:26:d7:ba:af:db:a9:4e:db:cd:ac:87:ca:71: 17:36:c1:3a:7d:94:62:9c:cb:3f:5b:0d:f6:54:1a: 1d:c7:89:80:00:6c:03:bf:92:bd:a7:3e:df:3a:6c: ce:81:f6:f1:e8:e9:b1:eb:9a:05:a7:f5:c4:ba:71: f4:a7:7e:cc:d0:d5:20:55:7e:ce:6b:03:67:13:da: 1b:94:90:37:95:5a:57:8c:35:86:dd:f0:89:b5:2a: a8:d0:59:dc:24:89:b0:aa:b9:19:60:3c:c4:c2:d0: 27:4c:6b:63:e2:96:96:4a:b6:86:c2:78:14:cd:03: 17:02:79:c5:5a:7d:ef:22:5a:c6:fa:40:90:94:50: 91:05:cb:ba:7e:f2:4b:bf:a2:c6:3e:3c:d9:42:a3: a9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8C:21:0B:8D:B4:16:85:74:52:1B:5B:B3:D4:9A:77:BF:A1:B8:4B X509v3 Authority Key Identifier: keyid:DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ea:97:8f:fa:f8:f2:87:df:09:dd:d7:40:6b:a9:92:ef:88: 7a:a9:f5:29:df:8d:4a:c8:60:ca:8b:fa:a6:b9:82:32:72:c2: a4:f7:3e:f4:e0:04:e9:92:e0:24:d2:9b:c5:99:74:d1:b8:a6: 9a:2f:48:8d:ec:b4:c7:e2:aa:d8:3e:73:56:9a:fe:9c:29:f0: 87:7d:28:6d:40:07:03:1f:dc:82:2f:cd:df:77:09:4e:77:4b: 17:ea:1c:25:9c:34:c5:0d:16:ed:96:8e:27:bf:7c:9c:fe:84: 7e:f4:4d:60:ac:e7:13:36:c5:ab:61:05:5e:53:20:e4:6b:d3: c6:57:7f:35:71:7a:2b:a6:40:1d:25:41:2c:d1:07:c5:f9:6e: 3a:a1:9a:69:9a:90:bf:1b:48:9f:7c:5d:c3:7a:66:86:f1:cc: 95:09:9d:6c:3e:59:9b:c8:60:d3:16:35:7a:41:d0:c8:00:82: fd:3c:67:cd:95:3d:a0:a1:e8:c4:9c:3b:16:8c:c7:22:bb:70: 61:e2:e6:e2:9b:40:81:a4:a9:2d:97:bb:6f:b2:1f:3f:69:97: b6:eb:8f:60:20:38:8a:76:2b:6b:54:69:3a:5c:53:2b:03:4a: c8:d8:c0:68:97:d7:81:bb:d7:b9:f2:bd:54:39:55:da:75:ac: 8f:30:e9:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7MfSRKbfIQjBySA0WXmkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlM2UwMTY3YmY1ODJjZWNlNDhkNmM2ZDAyOWE4MmNkZTI3 MmE5ZDUwHhcNMjUxMjIxMDgwMDQwWhcNMjUxMjIyMDgwMDQwWjAzMTEwLwYDVQQD Eyg1ODhjMjEwYjhkYjQxNjg1NzQ1MjFiNWJiM2Q0OWE3N2JmYTFiODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe51ezHj1QoQKzraMezCFWc2VFV3 lvYHDZCaD0o9bjGGviUkmL2VHWHAcBIdLTyfyZiGmGcwApK/oPxnfwzgSOK8lWZw p1QQz1fj2AtOHWdVLiE8y7YpP0lVkcaQPsCf44up50Lzts4uRybXuq/bqU7bzayH ynEXNsE6fZRinMs/Ww32VBodx4mAAGwDv5K9pz7fOmzOgfbx6Omx65oFp/XEunH0 p37M0NUgVX7OawNnE9oblJA3lVpXjDWG3fCJtSqo0FncJImwqrkZYDzEwtAnTGtj 4paWSraGwngUzQMXAnnFWn3vIlrG+kCQlFCRBcu6fvJLv6LGPjzZQqOpDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiMIQuNtBaFdFIbW7PUmne/obhLMB8GA1UdIwQY MBaAFN4+AWe/WCzs5I1sbQKags3icqnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9hNzE1Y2UtNDEwZC00MzkwLThlOGMt OGIyMzc5ZWJhMTNlLzEvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9hNzE1Y2UtNDEwZC00MzkwLThlOGMtOGIyMzc5ZWJhMTNl LzEvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOqXj/r4 8offCd3XQGupku+Ieqn1Kd+NSshgyov6prmCMnLCpPc+9OAE6ZLgJNKbxZl00bim mi9Ijey0x+Kq2D5zVpr+nCnwh30obUAHAx/cgi/N33cJTndLF+ocJZw0xQ0W7ZaO J798nP6EfvRNYKznEzbFq2EFXlMg5GvTxld/NXF6K6ZAHSVBLNEHxfluOqGaaZqQ vxtIn3xdw3pmhvHMlQmdbD5Zm8hg0xY1ekHQyACC/TxnzZU9oKHoxJw7FozHIrtw YeLm4ptAgaSpLZe7b7IfP2mXtuuPYCA4inYra1RpOlxTKwNKyNjAaJfXgbvXufK9 VDlV2nWsjzDpOw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:05:08 2025 by rpki-client