This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json) Hash identifier: 67NcqUTGVI45SOZoo3pM2ktpc8KOI7SARQKmK831JTE= Subject key identifier: 9B:17:36:EE:D3:3F:8C:52:1C:5C:EB:2B:EB:8C:6F:8C:6F:47:EC:F6 Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5 Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5 Certificate serial: 019B397D4611871203F69AA81C45A93233CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft Manifest number: 069E Signing time: Sat 20 Dec 2025 02:01:09 +0000 Manifest this update: Sat 20 Dec 2025 02:01:09 +0000 Manifest next update: Sun 21 Dec 2025 02:01:09 +0000 Files and hashes: 1: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: GrKfY+aXjepJFagWZPoOqhYF1jgHnTUAqhhITgKvAmk=) 2: r0UegqSm-Osf5dt7xIToVoSc8i8.roa (hash: iiKp30ve0a7AciqqMBvmQPAjij1PEXVHVGDlOgok+18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:46:11:87:12:03:f6:9a:a8:1c:45:a9:32:33:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5 Validity Not Before: Dec 20 02:01:09 2025 GMT Not After : Dec 21 02:01:09 2025 GMT Subject: CN=9b1736eed33f8c521c5ceb2beb8c6f8c6f47ecf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:a8:78:45:bb:6f:6a:e1:b0:55:38:a3:cd: e4:dc:33:41:0a:fd:5c:6e:6a:fa:dc:d3:4a:e0:18: 34:68:10:d3:b4:f9:b2:df:d9:de:a5:47:0d:85:ee: d3:14:71:d6:4e:d8:ac:3c:b0:40:b0:75:4d:eb:66: 8e:83:5b:d2:2a:2e:1c:93:94:db:8a:6d:72:78:20: 65:97:04:f2:10:3f:47:1e:3d:16:f1:13:ec:15:eb: c2:25:c5:4a:ea:a6:eb:a2:87:bf:87:e0:4a:9f:92: 58:5c:cf:80:7a:33:82:e6:08:ca:70:d9:fb:22:f0: 02:fd:a7:b4:69:f5:f8:a7:1d:ee:68:95:52:06:cc: 67:cf:16:4c:cc:60:8b:6a:31:a9:5e:98:cd:dc:53: 59:7d:e6:f4:5b:6f:c7:2a:d2:82:b3:de:7f:fe:5d: 67:54:81:20:5c:68:08:4e:5d:b4:9f:10:ed:3e:ed: b0:69:db:db:47:fb:d1:d8:cf:f0:86:89:8b:94:63: 8e:25:f5:f6:04:23:45:75:8f:64:44:ea:cb:c1:4a: ab:99:c2:79:ea:be:8d:c9:42:cc:47:df:ef:d8:bb: 27:6a:88:b9:73:e6:1a:fe:36:fd:42:2c:95:38:87: 99:a2:78:05:a2:99:b0:3b:a5:7c:dc:2b:63:9e:40: d2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:17:36:EE:D3:3F:8C:52:1C:5C:EB:2B:EB:8C:6F:8C:6F:47:EC:F6 X509v3 Authority Key Identifier: keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9b:73:d3:89:2a:a3:9a:2a:ce:34:2a:37:91:cc:7f:e5:01: d2:fe:9a:8a:80:0f:94:ba:31:63:62:bf:1a:60:7e:f1:e9:aa: 7f:d6:46:18:56:f6:3a:2f:4a:88:92:1b:f9:c6:40:b2:66:12: 0d:8c:ce:71:e5:a2:c6:0b:f0:f7:4c:e0:6e:27:43:8c:56:40: 99:3c:e5:be:30:96:e9:94:c3:57:23:2d:e5:f6:27:64:38:c4: cc:f8:d7:9a:97:79:61:10:92:7c:20:29:16:db:95:bf:86:d7: c1:46:94:3e:fc:9c:27:02:1d:61:8d:00:3f:8e:06:35:f7:ba: c6:88:ea:27:72:33:56:03:4a:6d:ae:da:20:26:a3:07:1d:e2: 16:9b:aa:8a:74:bc:c4:9b:72:12:9b:82:94:0e:61:b8:fa:78: 5d:65:e6:ae:c6:5a:b7:e8:cd:1b:e6:eb:26:de:ba:e8:0c:40: 3a:04:d4:db:87:31:79:a1:de:bb:a5:5c:e6:71:f2:cb:2d:7b: 47:e2:5f:60:40:6a:37:67:ac:92:48:81:df:af:14:36:0a:92: 06:91:ef:a2:de:7c:b4:64:9b:75:de:79:5e:ea:d9:cc:54:27: 6e:21:3f:55:29:73:40:12:74:73:1e:83:53:96:50:6f:6c:8c: 98:76:42:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fUYRhxID9pqoHEWpMjPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOGFlNGQ5YWQ4NjNkZGExNDAxYjQ5MGMyOGNmZjgyZDk5 OGUzYjUwHhcNMjUxMjIwMDIwMTA5WhcNMjUxMjIxMDIwMTA5WjAzMTEwLwYDVQQD Eyg5YjE3MzZlZWQzM2Y4YzUyMWM1Y2ViMmJlYjhjNmY4YzZmNDdlY2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lSoeEW7b2rhsFU4o83k3DNBCv1c bmr63NNK4Bg0aBDTtPmy39nepUcNhe7TFHHWTtisPLBAsHVN62aOg1vSKi4ck5Tb im1yeCBllwTyED9HHj0W8RPsFevCJcVK6qbrooe/h+BKn5JYXM+AejOC5gjKcNn7 IvAC/ae0afX4px3uaJVSBsxnzxZMzGCLajGpXpjN3FNZfeb0W2/HKtKCs95//l1n VIEgXGgITl20nxDtPu2wadvbR/vR2M/whomLlGOOJfX2BCNFdY9kROrLwUqrmcJ5 6r6NyULMR9/v2Lsnaoi5c+Ya/jb9QiyVOIeZongFopmwO6V83CtjnkDS+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsXNu7TP4xSHFzrK+uMb4xvR+z2MB8GA1UdIwQY MBaAFN2K5Nmthj3aFAG0kMKM/4LZmOO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGIt NGRlOTM0NWM4M2JmLzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGItNGRlOTM0NWM4M2Jm LzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJtz04kq o5oqzjQqN5HMf+UB0v6aioAPlLoxY2K/GmB+8emqf9ZGGFb2Oi9KiJIb+cZAsmYS DYzOceWixgvw90zgbidDjFZAmTzlvjCW6ZTDVyMt5fYnZDjEzPjXmpd5YRCSfCAp FtuVv4bXwUaUPvycJwIdYY0AP44GNfe6xojqJ3IzVgNKba7aICajBx3iFpuqinS8 xJtyEpuClA5huPp4XWXmrsZat+jNG+brJt666AxAOgTU24cxeaHeu6Vc5nHyyy17 R+JfYEBqN2eskkiB368UNgqSBpHvot58tGSbdd55XurZzFQnbiE/VSlzQBJ0cx6D U5ZQb2yMmHZCtw== -----END CERTIFICATE-----Generated at Sat Dec 20 08:05:44 2025 by rpki-client