This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json) Hash identifier: KvTI/5Gc5fc0HABkE4iThcDcR7OfvyfPnQ/NSGHJsqY= Subject key identifier: C7:8E:0E:E4:F6:B5:E6:80:BB:0B:3B:2B:89:6B:B4:3C:9D:78:25:7F Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89 Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89 Certificate serial: 019B541877006EF94C3614BB88156BE69E11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft Manifest number: 129B Signing time: Thu 25 Dec 2025 06:00:48 +0000 Manifest this update: Thu 25 Dec 2025 06:00:48 +0000 Manifest next update: Fri 26 Dec 2025 06:00:48 +0000 Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: HRPAu4paxFFVn9aETzLHvTt7fJTkjCh5dhXbxjLaFuI=) 2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:77:00:6e:f9:4c:36:14:bb:88:15:6b:e6:9e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89 Validity Not Before: Dec 25 06:00:48 2025 GMT Not After : Dec 26 06:00:48 2025 GMT Subject: CN=c78e0ee4f6b5e680bb0b3b2b896bb43c9d78257f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e9:72:12:3e:a4:ef:72:e9:80:10:64:a9:f5: 06:be:8a:45:e0:98:c6:a9:61:ba:38:78:02:d6:89: 2e:7f:98:80:11:61:27:e1:ec:1d:91:9a:42:f3:ba: a9:13:c9:47:a6:93:64:7d:70:be:c8:2f:1a:7d:56: a9:90:07:4b:62:9f:d6:22:64:0a:86:2f:18:48:f2: 0b:2b:a6:2d:e4:43:ae:db:1c:f0:73:43:b1:38:ed: 2a:68:78:89:b4:96:c7:b2:b3:d2:bc:06:1e:38:40: c5:83:a9:35:c8:2c:82:81:62:7a:2f:10:96:16:c6: cc:06:d8:7d:ac:bd:f3:f0:32:fb:b4:c2:fb:64:3f: 32:57:c7:9d:ef:38:a7:e0:4b:5d:f1:7d:3c:7a:7b: 1b:b5:b8:d3:6f:78:f6:d5:be:bf:4e:e4:dc:9c:fa: a2:e4:81:c0:02:d3:5d:8d:49:22:37:f6:45:a7:61: d2:42:b3:4a:c5:fa:10:8f:5b:2e:8e:b1:b5:c7:da: 19:23:1c:d5:35:30:17:45:22:06:49:66:a1:c9:c7: be:41:f7:d0:0f:e0:67:08:f1:03:a9:33:59:fc:65: 96:c0:79:1a:86:51:e5:8a:68:6b:7d:01:c8:f1:c3: a8:48:2e:39:4c:ee:c6:65:39:36:20:72:f3:e9:80: d8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8E:0E:E4:F6:B5:E6:80:BB:0B:3B:2B:89:6B:B4:3C:9D:78:25:7F X509v3 Authority Key Identifier: keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:82:e6:81:6b:2e:29:b4:ad:59:47:72:b8:37:51:85:09:fc: 1a:73:6d:51:10:b2:ba:a5:19:d1:dd:b6:08:e6:a9:b0:51:a2: 39:94:27:1c:00:97:60:74:ed:81:7b:96:b7:f2:56:3f:bf:a2: 77:16:a0:f3:60:2f:18:3e:86:29:c5:1e:dc:23:8a:c5:86:21: 50:f6:3a:11:6d:26:3d:2d:cc:66:b5:0c:a4:e0:d9:37:64:31: 10:2b:0b:c1:f8:62:c7:c2:4b:71:47:d3:8b:fb:c6:b3:7b:a5: 01:0d:e4:39:c4:18:e9:bb:cb:17:74:30:32:e3:a2:86:ee:8f: 92:1f:98:ff:fe:de:40:64:50:c6:76:25:38:66:91:8e:8b:5e: 4d:8a:75:d2:68:45:65:e9:41:8e:da:bf:57:1e:38:6b:5c:7c: 89:e4:56:14:00:16:57:ec:34:f1:b3:6d:42:39:9a:0b:77:f6: a6:1a:85:e3:43:dd:a3:cd:72:cc:21:78:22:56:ac:36:59:92: 49:be:e8:c3:04:67:1b:21:66:e1:db:32:74:76:8b:d7:56:11: ae:c9:ec:00:fc:41:69:f4:ba:6d:4c:a8:ca:ce:44:c5:df:07: db:1a:0d:f1:18:87:e3:79:f2:b6:63:f6:f5:77:b0:25:d7:ef: 06:c8:96:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGHcAbvlMNhS7iBVr5p4RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMjk2Y2Y3MDQzODM2ZWJlMTc0OWM1YzE0NTQ3Yzc5ODQx ZTFiODkwHhcNMjUxMjI1MDYwMDQ4WhcNMjUxMjI2MDYwMDQ4WjAzMTEwLwYDVQQD EyhjNzhlMGVlNGY2YjVlNjgwYmIwYjNiMmI4OTZiYjQzYzlkNzgyNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+lyEj6k73LpgBBkqfUGvopF4JjG qWG6OHgC1okuf5iAEWEn4ewdkZpC87qpE8lHppNkfXC+yC8afVapkAdLYp/WImQK hi8YSPILK6Yt5EOu2xzwc0OxOO0qaHiJtJbHsrPSvAYeOEDFg6k1yCyCgWJ6LxCW FsbMBth9rL3z8DL7tML7ZD8yV8ed7zin4Etd8X08ensbtbjTb3j21b6/TuTcnPqi 5IHAAtNdjUkiN/ZFp2HSQrNKxfoQj1sujrG1x9oZIxzVNTAXRSIGSWahyce+QffQ D+BnCPEDqTNZ/GWWwHkahlHlimhrfQHI8cOoSC45TO7GZTk2IHLz6YDYqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeODuT2teaAuws7K4lrtDydeCV/MB8GA1UdIwQY MBaAFNwpbPcEODbr4XScXBRUfHmEHhuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMt NjhhYmU1MmQzMDM0LzEvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMtNjhhYmU1MmQzMDM0 LzEvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACILmgWsu KbStWUdyuDdRhQn8GnNtURCyuqUZ0d22COapsFGiOZQnHACXYHTtgXuWt/JWP7+i dxag82AvGD6GKcUe3COKxYYhUPY6EW0mPS3MZrUMpODZN2QxECsLwfhix8JLcUfT i/vGs3ulAQ3kOcQY6bvLF3QwMuOihu6Pkh+Y//7eQGRQxnYlOGaRjoteTYp10mhF ZelBjtq/Vx44a1x8ieRWFAAWV+w08bNtQjmaC3f2phqF40Pdo81yzCF4IlasNlmS Sb7owwRnGyFm4dsydHaL11YRrsnsAPxBafS6bUyoys5Exd8H2xoN8RiH43nytmP2 9XewJdfvBsiWig== -----END CERTIFICATE-----Generated at Thu Dec 25 11:16:22 2025 by rpki-client