This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft File: 3gr32Dxe6w1DStdTxqX0dUlpizc.mft (raw, json) Hash identifier: 7RFRb8Jks+Ud+mVeBYATP4qeDg5cR6BQuhpjtwyxEgY= Subject key identifier: FD:28:49:93:F0:68:5A:09:41:42:B2:F8:17:4A:A2:8B:8F:31:84:1E Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37 Certificate issuer: /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37 Certificate serial: 019B2F2FF2AC599FDF3AD0AC6B3BE2237535 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft Manifest number: 1713 Signing time: Thu 18 Dec 2025 02:00:29 +0000 Manifest this update: Thu 18 Dec 2025 02:00:29 +0000 Manifest next update: Fri 19 Dec 2025 02:00:29 +0000 Files and hashes: 1: 3gr32Dxe6w1DStdTxqX0dUlpizc.crl (hash: xPg4Pay4RlQTsN7pNLkGMq/k0ICHhQ27w089jSmUY2g=) 2: Aqgmt-0kmHhTxI4TNwO6CqQUAvI.roa (hash: OT3qKlUhR0guc2qzeYETLZJZRi9SFdXOekAamRFDQh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:2f:f2:ac:59:9f:df:3a:d0:ac:6b:3b:e2:23:75:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37 Validity Not Before: Dec 18 02:00:29 2025 GMT Not After : Dec 19 02:00:29 2025 GMT Subject: CN=fd284993f0685a094142b2f8174aa28b8f31841e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:58:77:1d:74:37:e9:d5:3d:57:90:46:0f:0d: 0f:60:36:bd:5a:cd:72:9b:fb:a8:05:1f:47:dd:9e: 86:cc:32:c8:e8:6b:3d:d7:70:cc:96:9d:dc:f0:42: 6f:6c:aa:57:47:98:f8:24:b6:50:38:d9:ef:59:9e: f1:be:03:7b:a7:f6:f6:0d:f4:93:8f:da:3c:e9:43: 44:1a:20:cf:47:84:c5:59:26:48:6c:6f:c8:af:e5: 0a:d9:ad:18:b9:4f:6b:75:05:0b:d2:f0:82:69:d1: 9f:41:58:a3:44:4d:e3:e6:86:db:07:0b:8a:5a:2d: b5:ac:29:3f:b0:11:b7:da:68:48:a5:b1:25:aa:ce: fd:a0:98:cd:f8:3e:2e:40:42:f6:9d:17:80:11:e7: 7d:c2:71:6e:26:27:37:1f:e0:77:7a:ff:7c:5c:f3: 09:b5:6c:61:a4:8f:97:d0:19:87:ff:51:13:64:ac: 78:ae:36:b1:16:1c:56:09:6e:32:ef:28:a5:7e:08: 86:3d:d7:4b:2a:aa:44:e6:68:6f:69:a2:74:9a:85: fa:64:7d:69:e5:08:60:fc:05:cc:9f:a1:9a:9a:90: ae:80:2d:9f:40:29:f9:75:47:5d:73:ad:4d:0b:8a: f1:43:e9:cd:13:ed:c8:8b:71:80:03:61:48:0d:bb: 6b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:28:49:93:F0:68:5A:09:41:42:B2:F8:17:4A:A2:8B:8F:31:84:1E X509v3 Authority Key Identifier: keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fa:f4:5c:a3:37:72:b6:5e:52:33:2f:63:87:9c:1c:d3:ab: e4:4c:ae:f5:d2:df:a4:48:15:c8:ae:8f:a0:95:27:b7:29:63: 83:30:25:f9:04:f2:64:1e:53:18:b1:91:2b:46:51:a2:65:74: 13:f9:ec:f0:3a:fb:e1:04:e0:1a:f0:0e:a2:c3:dc:f5:00:e5: b6:27:9e:a9:57:94:09:8e:05:75:99:9e:10:fa:b6:6c:f0:f3: 39:8c:22:1a:91:af:ab:a4:5f:69:93:22:3d:45:b6:1c:d0:ef: 4e:38:27:70:a0:de:e9:ce:bc:da:00:84:16:ab:03:a9:71:7e: 68:c7:96:41:4e:ef:e5:89:fb:46:e8:e8:00:5f:8d:4b:ec:c3: 69:68:90:8e:f1:82:c0:1b:c2:0c:eb:3a:55:f5:f9:5e:b0:08: ce:4f:5b:e4:47:85:00:28:5b:f6:51:cd:0d:bf:80:38:2e:ab: 47:03:f9:ff:2f:b7:3d:47:2a:33:b7:31:18:b2:62:d8:85:5f: c3:9b:ed:22:24:00:2b:f6:2d:fd:10:75:28:d5:f3:84:57:b2: 16:b1:94:f3:ab:ca:65:0d:03:b4:c1:d5:e3:b1:94:43:61:99: 41:3d:aa:d8:1e:b9:df:ad:8a:9f:98:9b:b1:2b:37:bf:d7:fc: c6:64:9e:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvL/KsWZ/fOtCsazviI3U1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGFmN2Q4M2M1ZWViMGQ0MzRhZDc1M2M2YTVmNDc1NDk2 OThiMzcwHhcNMjUxMjE4MDIwMDI5WhcNMjUxMjE5MDIwMDI5WjAzMTEwLwYDVQQD EyhmZDI4NDk5M2YwNjg1YTA5NDE0MmIyZjgxNzRhYTI4YjhmMzE4NDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Fh3HXQ36dU9V5BGDw0PYDa9Ws1y m/uoBR9H3Z6GzDLI6Gs913DMlp3c8EJvbKpXR5j4JLZQONnvWZ7xvgN7p/b2DfST j9o86UNEGiDPR4TFWSZIbG/Ir+UK2a0YuU9rdQUL0vCCadGfQVijRE3j5obbBwuK Wi21rCk/sBG32mhIpbElqs79oJjN+D4uQEL2nReAEed9wnFuJic3H+B3ev98XPMJ tWxhpI+X0BmH/1ETZKx4rjaxFhxWCW4y7yilfgiGPddLKqpE5mhvaaJ0moX6ZH1p 5Qhg/AXMn6GampCugC2fQCn5dUddc61NC4rxQ+nNE+3Ii3GAA2FIDbtrCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0oSZPwaFoJQUKy+BdKoouPMYQeMB8GA1UdIwQY MBaAFN4K99g8XusNQ0rXU8al9HVJaYs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lN2E3NzItOGIzOS00MzBkLWIxOTIt YTFiOGJjNWIyY2Q3LzEvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lN2E3NzItOGIzOS00MzBkLWIxOTItYTFiOGJjNWIyY2Q3 LzEvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPr0XKM3 crZeUjMvY4ecHNOr5Eyu9dLfpEgVyK6PoJUntyljgzAl+QTyZB5TGLGRK0ZRomV0 E/ns8Dr74QTgGvAOosPc9QDltieeqVeUCY4FdZmeEPq2bPDzOYwiGpGvq6RfaZMi PUW2HNDvTjgncKDe6c682gCEFqsDqXF+aMeWQU7v5Yn7RujoAF+NS+zDaWiQjvGC wBvCDOs6VfX5XrAIzk9b5EeFAChb9lHNDb+AOC6rRwP5/y+3PUcqM7cxGLJi2IVf w5vtIiQAK/Yt/RB1KNXzhFeyFrGU86vKZQ0DtMHV47GUQ2GZQT2q2B65362Kn5ib sSs3v9f8xmSefg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:02:29 2025 by rpki-client