This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json) Hash identifier: kSptWC/QfVM4LBfPADmuKQXAzeCw4R2X677vCfDnB+0= Subject key identifier: 93:AD:A3:B2:F2:12:59:97:7E:08:4A:F8:0D:F2:6B:16:E7:9B:75:1C Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30 Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730 Certificate serial: 019B3DFE704EDCC249B8571BE7892C87AF8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 23:00:43 +0000 Manifest this update: Sat 20 Dec 2025 23:00:43 +0000 Manifest next update: Sun 21 Dec 2025 23:00:43 +0000 Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: 5SrFH7Bn+LOCNjLpvgpmxyxfBnKNwvkhKzL3RWtfI2I=) 2: ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa (hash: km1a7hNobV+/Bq/2l3UQLOxoqTuuQQAxWKpbP+WCwQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:70:4e:dc:c2:49:b8:57:1b:e7:89:2c:87:af:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730 Validity Not Before: Dec 20 23:00:43 2025 GMT Not After : Dec 21 23:00:43 2025 GMT Subject: CN=93ada3b2f21259977e084af80df26b16e79b751c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:44:81:3a:46:cb:b2:ac:c1:33:d7:b4:bd:7c: a1:f1:ee:76:40:8a:4f:80:4d:14:91:83:46:73:51: b7:2c:00:ae:4f:e7:07:07:7a:d1:9d:ce:f5:3e:ec: 80:cb:33:67:1a:22:cc:20:80:39:e2:33:4d:47:fe: f7:dc:01:87:41:6e:ed:a9:d2:1b:87:3f:f8:23:f7: c2:9f:82:23:01:39:87:f8:db:3e:4a:a2:0f:bf:42: 51:fa:f6:5d:7d:39:17:20:7b:70:fa:7a:b8:64:ab: 1e:2e:86:5a:52:a3:93:7a:ee:5e:41:7d:f1:e3:99: 33:be:2e:5a:ac:67:0d:bf:70:27:28:05:98:72:0b: 21:ad:a7:08:c1:10:10:80:8d:93:9b:71:8f:06:4b: ac:bb:03:a2:40:b1:ff:64:91:1e:79:9d:54:0f:1e: b3:1e:d5:14:87:2f:f3:07:fe:6c:39:fb:63:89:7d: 51:d7:5a:f5:05:f0:1e:4a:85:08:21:34:59:84:12: 00:cb:54:d7:22:2d:b1:c3:e2:c1:aa:3b:f9:d9:4b: 2e:8f:7b:4a:8b:69:60:a5:d5:a3:4b:ef:ac:8a:45: bc:a8:69:7f:fd:e0:31:7d:2b:e7:b7:80:94:76:93: 72:f0:41:76:46:15:20:c8:4e:21:ac:3d:e1:d8:ef: 56:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AD:A3:B2:F2:12:59:97:7E:08:4A:F8:0D:F2:6B:16:E7:9B:75:1C X509v3 Authority Key Identifier: keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:6e:84:2e:d4:df:4a:eb:07:a5:0a:27:6a:81:4d:34:9c:97: c5:84:92:71:f9:14:92:f9:b6:3c:e9:a2:0f:88:ea:e8:b2:46: a4:bd:82:77:ec:f2:a0:95:52:28:8d:ea:35:85:0f:50:11:2c: 51:26:a3:6b:d7:6b:a3:cf:14:59:9d:f3:89:4c:cb:b5:e4:fd: 2c:ab:f4:45:80:7f:04:77:5f:17:04:99:2b:6c:f2:1a:d7:0a: 59:39:c0:24:6f:cf:5f:82:91:cd:29:25:c9:27:5a:f6:f9:1c: 05:da:57:23:41:d3:f8:7f:44:79:62:a0:17:a4:73:03:80:c7: 9d:62:6d:a6:ab:84:8a:5d:c1:1d:5e:de:dc:db:6e:7a:1d:01: 6d:7c:b4:d3:37:42:4c:82:14:cc:1b:93:58:39:36:66:ee:87: 86:6e:55:8b:1d:91:91:e5:a3:69:f8:ab:9f:90:a9:45:d4:5d: 39:96:69:30:88:ce:9d:d0:be:ac:79:a1:7d:ac:59:7b:e6:e2: cf:53:21:f3:b3:d8:4e:91:34:2d:0c:fe:7c:36:f7:8d:bb:0f: 7d:48:28:9e:1b:ca:3c:3a:6d:98:a1:b9:d4:19:b6:20:ea:4a: 96:42:0f:fd:8d:05:f0:70:ee:7e:50:76:bd:8d:ec:3d:7d:98: 3f:cc:37:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/nBO3MJJuFcb54ksh6+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGIyMDAzMDkwMWZmMmRmNGViZDFmNDllNDg5MWNiMjhm ZTA3MzAwHhcNMjUxMjIwMjMwMDQzWhcNMjUxMjIxMjMwMDQzWjAzMTEwLwYDVQQD Eyg5M2FkYTNiMmYyMTI1OTk3N2UwODRhZjgwZGYyNmIxNmU3OWI3NTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykSBOkbLsqzBM9e0vXyh8e52QIpP gE0UkYNGc1G3LACuT+cHB3rRnc71PuyAyzNnGiLMIIA54jNNR/733AGHQW7tqdIb hz/4I/fCn4IjATmH+Ns+SqIPv0JR+vZdfTkXIHtw+nq4ZKseLoZaUqOTeu5eQX3x 45kzvi5arGcNv3AnKAWYcgshracIwRAQgI2Tm3GPBkusuwOiQLH/ZJEeeZ1UDx6z HtUUhy/zB/5sOftjiX1R11r1BfAeSoUIITRZhBIAy1TXIi2xw+LBqjv52Usuj3tK i2lgpdWjS++sikW8qGl//eAxfSvnt4CUdpNy8EF2RhUgyE4hrD3h2O9WTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOto7LyElmXfghK+A3yaxbnm3UcMB8GA1UdIwQY MBaAFN7bIAMJAf8t9OvR9J5Ikcso/gcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Nzg5NjQtZDgwMi00OGY5LTk2ZjEt ZTNiZmE3MmQ3ZWY4LzEvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82Nzg5NjQtZDgwMi00OGY5LTk2ZjEtZTNiZmE3MmQ3ZWY4 LzEvM3RzZ0F3a0JfeTMwNjlIMG5raVJ5eWotQnpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACW6ELtTf SusHpQonaoFNNJyXxYSScfkUkvm2POmiD4jq6LJGpL2Cd+zyoJVSKI3qNYUPUBEs USaja9dro88UWZ3ziUzLteT9LKv0RYB/BHdfFwSZK2zyGtcKWTnAJG/PX4KRzSkl ySda9vkcBdpXI0HT+H9EeWKgF6RzA4DHnWJtpquEil3BHV7e3Ntueh0BbXy00zdC TIIUzBuTWDk2Zu6Hhm5Vix2RkeWjafirn5CpRdRdOZZpMIjOndC+rHmhfaxZe+bi z1Mh87PYTpE0LQz+fDb3jbsPfUgonhvKPDptmKG51Bm2IOpKlkIP/Y0F8HDuflB2 vY3sPX2YP8w3rA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:18:39 2025 by rpki-client