This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft File: 3j4BZ79YLOzkjWxtApqCzeJyqdU.mft (raw, json) Hash identifier: mxxMPqVQP9Xxq7pf2+TJnANeXb+wQbxIZ0tf/422zEo= Subject key identifier: 4A:8C:78:62:71:43:BD:19:45:71:5E:C0:FC:C8:91:69:8A:A8:BB:9E Authority key identifier: DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5 Certificate issuer: /CN=de3e0167bf582cece48d6c6d029a82cde272a9d5 Certificate serial: 019B75FF6DD0DED3526C9A1B642A005356C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft Manifest number: 1739 Signing time: Wed 31 Dec 2025 20:00:32 +0000 Manifest this update: Wed 31 Dec 2025 20:00:32 +0000 Manifest next update: Thu 01 Jan 2026 20:00:32 +0000 Files and hashes: 1: 3j4BZ79YLOzkjWxtApqCzeJyqdU.crl (hash: G9LZQDBfQYrWyAq5M1oqonuyCe5tFTlr/KS8+RpXwnk=) 2: WK3H-x4lvtSz5PAYVzf83jx6Xhg.roa (hash: IHyV2nIBoBadJ+LZrUqe4zccqPuVek6+/UVCrBQ/9jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:ff:6d:d0:de:d3:52:6c:9a:1b:64:2a:00:53:56:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de3e0167bf582cece48d6c6d029a82cde272a9d5 Validity Not Before: Dec 31 20:00:32 2025 GMT Not After : Jan 1 20:00:32 2026 GMT Subject: CN=4a8c78627143bd1945715ec0fcc891698aa8bb9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:09:a8:74:ee:52:9a:db:01:ef:07:ab:18:55: 81:2d:8a:41:c5:a1:2e:f4:2f:55:43:9e:41:cc:11: 76:01:6c:b1:0d:2c:44:0d:6f:23:d5:dd:b9:f5:37: e2:3a:09:7c:67:cb:24:68:80:24:69:c4:ef:de:d6: f9:8b:be:7f:30:40:83:2a:66:bd:22:76:ae:54:ee: 5e:d2:e8:11:33:1d:40:6f:b4:3c:a8:5a:c0:9f:ac: ec:4f:b7:e2:76:c1:61:b6:c1:1d:1d:f9:5c:a4:46: 22:26:a1:dc:28:82:b2:f8:c2:0c:a3:34:c2:f6:16: 3f:87:99:33:69:f4:e6:31:52:4f:6b:38:c9:8f:ae: eb:36:12:10:67:e6:8d:eb:5e:bc:34:38:32:4f:47: f2:aa:23:46:dd:9e:09:24:e2:1c:01:ba:b5:36:ca: c8:ec:59:b4:86:b1:26:b8:44:dd:e3:58:4e:b5:e6: b5:d4:4b:45:37:29:85:4a:a2:8a:fa:e7:f6:7d:aa: 55:b5:a1:9a:1b:d0:96:15:c4:79:03:8e:7e:b9:be: ed:6e:0e:86:33:0e:70:44:47:7f:59:e3:ba:be:84: 3a:a0:4c:9a:5d:e9:c4:df:55:11:28:e0:7c:be:01: 5b:9b:27:0b:12:bb:cc:d8:ae:a6:7a:5d:e1:6b:22: ad:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8C:78:62:71:43:BD:19:45:71:5E:C0:FC:C8:91:69:8A:A8:BB:9E X509v3 Authority Key Identifier: keyid:DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:2b:d1:53:de:3f:19:48:ba:5b:ad:ce:39:4d:b3:fb:25:63: 2e:61:2f:46:a3:fb:47:52:4e:4d:43:f0:3c:86:ef:59:4c:cb: a3:6d:78:94:1c:d5:82:cb:8e:52:cb:2f:54:34:f9:e9:cf:bf: 5e:c4:e6:be:ed:2b:bf:af:44:3c:48:19:fe:b5:dd:f0:14:d5: 06:e8:5f:f4:f0:ec:79:98:06:ff:f7:53:33:03:78:54:e0:15: 5d:24:af:38:01:cd:6c:da:2a:6d:75:de:f1:9d:ff:5d:51:23: 46:f9:8a:a5:63:1a:0e:b4:d4:5d:5b:a2:03:5e:13:f6:f8:9c: 84:99:db:0a:7b:12:9e:3a:6d:29:b1:73:26:fa:e7:93:6a:3e: 1b:25:e6:b9:cb:30:94:2d:95:07:a6:b5:80:8c:13:72:34:ca: 44:5e:23:cc:d8:aa:59:94:40:02:3b:fc:2d:1b:72:91:43:97: a9:28:cc:de:4b:bb:a0:de:a2:17:46:64:b6:ba:90:b2:8f:9a: 11:dd:cd:57:54:03:5f:be:7b:4e:ed:6c:c7:18:2e:8d:c0:67: 7f:84:5f:77:8a:b2:9c:1d:13:ec:13:4e:82:fd:76:18:85:24: 17:fd:e7:c1:17:ee:78:4c:74:c9:4c:b1:d9:eb:ff:31:3f:37: f4:38:a0:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1/23Q3tNSbJobZCoAU1bDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlM2UwMTY3YmY1ODJjZWNlNDhkNmM2ZDAyOWE4MmNkZTI3 MmE5ZDUwHhcNMjUxMjMxMjAwMDMyWhcNMjYwMTAxMjAwMDMyWjAzMTEwLwYDVQQD Eyg0YThjNzg2MjcxNDNiZDE5NDU3MTVlYzBmY2M4OTE2OThhYThiYjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwmodO5SmtsB7werGFWBLYpBxaEu 9C9VQ55BzBF2AWyxDSxEDW8j1d259TfiOgl8Z8skaIAkacTv3tb5i75/MECDKma9 InauVO5e0ugRMx1Ab7Q8qFrAn6zsT7fidsFhtsEdHflcpEYiJqHcKIKy+MIMozTC 9hY/h5kzafTmMVJPazjJj67rNhIQZ+aN6168NDgyT0fyqiNG3Z4JJOIcAbq1NsrI 7Fm0hrEmuETd41hOtea11EtFNymFSqKK+uf2fapVtaGaG9CWFcR5A45+ub7tbg6G Mw5wREd/WeO6voQ6oEyaXenE31URKOB8vgFbmycLErvM2K6mel3hayKtHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqMeGJxQ70ZRXFewPzIkWmKqLueMB8GA1UdIwQY MBaAFN4+AWe/WCzs5I1sbQKags3icqnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9hNzE1Y2UtNDEwZC00MzkwLThlOGMt OGIyMzc5ZWJhMTNlLzEvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9hNzE1Y2UtNDEwZC00MzkwLThlOGMtOGIyMzc5ZWJhMTNl LzEvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISvRU94/ GUi6W63OOU2z+yVjLmEvRqP7R1JOTUPwPIbvWUzLo214lBzVgsuOUssvVDT56c+/ XsTmvu0rv69EPEgZ/rXd8BTVBuhf9PDseZgG//dTMwN4VOAVXSSvOAHNbNoqbXXe 8Z3/XVEjRvmKpWMaDrTUXVuiA14T9vichJnbCnsSnjptKbFzJvrnk2o+GyXmucsw lC2VB6a1gIwTcjTKRF4jzNiqWZRAAjv8LRtykUOXqSjM3ku7oN6iF0ZktrqQso+a Ed3NV1QDX757Tu1sxxgujcBnf4Rfd4qynB0T7BNOgv12GIUkF/3nwRfueEx0yUyx 2ev/MT839Dig6g== -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:16 2025 by rpki-client