This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json) Hash identifier: vEqua0EFjYQEDlzzLSq6hg9Kq7tQ47pGKiQ9Y893GTI= Subject key identifier: BA:DA:DD:1F:BA:51:7B:31:2F:13:B8:31:9B:09:94:A0:97:CE:C8:05 Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e Certificate serial: 019B4E16C96E09BC3BAA865F86F2AB4896B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 02:01:14 +0000 Manifest this update: Wed 24 Dec 2025 02:01:14 +0000 Manifest next update: Thu 25 Dec 2025 02:01:14 +0000 Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: 4E7Ome8r+zfQcbiuTq9QN627Ffod04rRc21SPpxkie4=) 2: aUaxmc4yn8DWQgssucohLW2GTOs.roa (hash: SOdn4BM+lJeHsX2EdSBfNJjI/S1sYp7gdR+GcCunEpg=) 3: v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa (hash: 0sTmm1OvDNHW8cfRGw9gOppSFK5VfYqSrXVw8T0yJBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:c9:6e:09:bc:3b:aa:86:5f:86:f2:ab:48:96:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e Validity Not Before: Dec 24 02:01:14 2025 GMT Not After : Dec 25 02:01:14 2025 GMT Subject: CN=badadd1fba517b312f13b8319b0994a097cec805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:14:fc:7b:25:91:a3:af:aa:73:44:90:af: 09:b9:05:d0:9d:0e:33:10:4f:00:ed:ec:6b:fe:6d: 49:e2:34:8b:a0:d0:08:2d:ba:af:cb:20:d6:00:d5: 4e:84:87:6d:ca:49:28:9f:a5:56:26:ee:72:57:45: b3:66:7d:ed:9a:81:29:f6:7c:f3:98:ec:0d:29:fb: 2e:d4:14:1c:70:e7:1b:bf:b1:9f:fe:5f:f0:f7:38: 12:e7:ac:5e:7e:c8:58:ed:0b:3c:b9:48:80:86:dd: b4:3e:8b:50:52:75:c6:d1:8e:72:84:2d:61:be:bb: 32:06:0a:e1:9b:83:70:ec:bc:fa:3c:81:20:12:19: c1:96:56:65:6b:ef:05:67:12:4e:02:f3:6a:f8:3c: 02:28:15:c6:c3:26:c9:bf:62:ea:b2:da:e7:74:be: a5:fa:7c:c9:8d:f5:27:90:de:ca:6a:b6:72:ff:7c: 89:0e:75:e5:ca:9a:57:ac:43:00:cb:fb:75:e0:64: af:6a:38:a8:a8:9c:5e:13:74:ec:ee:50:4b:8c:c3: 24:4b:da:78:8d:2b:a0:70:40:d2:73:63:f5:aa:5c: 63:92:7a:ef:c8:dd:1b:31:d3:9a:f3:f3:5b:d3:79: 7f:c1:f5:5b:84:e2:bc:41:84:df:78:99:7f:84:cf: dd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DA:DD:1F:BA:51:7B:31:2F:13:B8:31:9B:09:94:A0:97:CE:C8:05 X509v3 Authority Key Identifier: keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a3:4f:97:ad:32:32:1f:87:e2:b4:1a:2a:87:f8:df:ea:2b: 02:bf:03:34:41:3d:db:12:76:28:f0:52:3c:02:85:d4:a4:7d: ae:80:11:dc:fa:1f:1a:14:37:b5:6c:a3:53:e3:73:e6:2c:5d: 02:1e:90:21:7d:40:dc:c6:a2:75:7f:72:5d:19:1f:e7:81:10: 7e:06:89:33:9a:d4:6a:55:d3:fa:28:40:2c:1c:cd:50:6d:38: a4:9b:70:b9:54:0d:8a:a8:76:8c:69:92:9d:74:71:82:ed:b3: dd:53:a2:d1:6e:67:fd:00:f6:c3:0c:8a:a9:15:27:6f:ea:e8: e2:e3:8e:90:21:4a:36:73:ff:ae:8e:76:79:fd:d7:78:c1:69: 32:0f:f0:56:47:24:38:60:04:f4:14:b5:2c:5f:a7:c5:c0:aa: ab:9f:94:16:99:04:aa:67:c0:f8:36:16:03:d5:38:c6:31:15: 39:e8:cd:0e:47:7b:f0:43:2a:8c:98:1e:e8:cf:1f:8f:37:f2: c2:9a:08:7c:fc:11:f8:ca:85:4e:9b:8d:9b:40:7a:d8:7c:40: 4c:00:9f:fa:15:49:53:0b:c4:6b:e4:0b:58:48:8a:65:61:31: c4:d4:28:71:5d:16:9b:84:84:0c:fd:a8:24:2c:96:8f:96:6a: be:f2:fe:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFsluCbw7qoZfhvKrSJa4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNTFkYTMyNzYyYTZmOWMxMjZkNjNiYTcwNWQ2MmMwNTBi ODQ4NGUwHhcNMjUxMjI0MDIwMTE0WhcNMjUxMjI1MDIwMTE0WjAzMTEwLwYDVQQD EyhiYWRhZGQxZmJhNTE3YjMxMmYxM2I4MzE5YjA5OTRhMDk3Y2VjODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuYU/HslkaOvqnNEkK8JuQXQnQ4z EE8A7exr/m1J4jSLoNAILbqvyyDWANVOhIdtykkon6VWJu5yV0WzZn3tmoEp9nzz mOwNKfsu1BQccOcbv7Gf/l/w9zgS56xefshY7Qs8uUiAht20PotQUnXG0Y5yhC1h vrsyBgrhm4Nw7Lz6PIEgEhnBllZla+8FZxJOAvNq+DwCKBXGwybJv2LqstrndL6l +nzJjfUnkN7KarZy/3yJDnXlyppXrEMAy/t14GSvajioqJxeE3Ts7lBLjMMkS9p4 jSugcEDSc2P1qlxjknrvyN0bMdOa8/Nb03l/wfVbhOK8QYTfeJl/hM/dfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLra3R+6UXsxLxO4MZsJlKCXzsgFMB8GA1UdIwQY MBaAFN5R2jJ2Km+cEm1junBdYsBQuEhOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTkt Y2RmYTYwMTIyNjkwLzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTktY2RmYTYwMTIyNjkw LzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKNPl60y Mh+H4rQaKof43+orAr8DNEE92xJ2KPBSPAKF1KR9roAR3PofGhQ3tWyjU+Nz5ixd Ah6QIX1A3MaidX9yXRkf54EQfgaJM5rUalXT+ihALBzNUG04pJtwuVQNiqh2jGmS nXRxgu2z3VOi0W5n/QD2wwyKqRUnb+ro4uOOkCFKNnP/ro52ef3XeMFpMg/wVkck OGAE9BS1LF+nxcCqq5+UFpkEqmfA+DYWA9U4xjEVOejNDkd78EMqjJge6M8fjzfy wpoIfPwR+MqFTpuNm0B62HxATACf+hVJUwvEa+QLWEiKZWExxNQocV0Wm4SEDP2o JCyWj5ZqvvL+cA== -----END CERTIFICATE-----Generated at Wed Dec 24 09:19:06 2025 by rpki-client