This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json) Hash identifier: TOtnqRfmTLM+s7mEdwm/qiYwYz1xSK3ZA0OE0/xB4tw= Subject key identifier: 47:B7:0C:FC:32:6F:0C:42:10:7A:76:2D:20:D7:36:21:EB:71:F7:B7 Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4 Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4 Certificate serial: 019B50AA1589646140B5E4AAF635F7785EF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft Manifest number: 1614 Signing time: Wed 24 Dec 2025 14:01:22 +0000 Manifest this update: Wed 24 Dec 2025 14:01:22 +0000 Manifest next update: Thu 25 Dec 2025 14:01:22 +0000 Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: PjycoyvV+LCXUWfNLS+WJsqC99sb5atqthjeoeSohCs=) 2: KgwBKHljj7pwEemei4izTFatz2I.roa (hash: eVDUYtbHqOXwc5M3emIOpC/IOXEvGmty2120RNJjtQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:aa:15:89:64:61:40:b5:e4:aa:f6:35:f7:78:5e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4 Validity Not Before: Dec 24 14:01:22 2025 GMT Not After : Dec 25 14:01:22 2025 GMT Subject: CN=47b70cfc326f0c42107a762d20d73621eb71f7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:5d:f6:07:5e:e6:fc:a5:54:31:59:32:3f: 13:f3:c4:e9:93:67:d5:a6:84:32:ed:1f:93:b8:59: 20:69:5b:3c:2b:e4:d3:82:17:1e:be:29:b3:26:e4: 51:a7:bd:c3:c3:0f:13:50:85:23:6c:81:47:b6:f6: 7e:87:cc:03:a8:8e:0c:d0:f5:77:47:9e:70:d7:36: 20:b3:a5:ad:bc:87:78:21:51:8f:20:a6:58:9a:3d: 42:26:94:1d:2a:2c:9c:6a:fb:e5:36:f1:6a:59:88: 72:d4:c4:58:ec:6d:dc:ba:7e:b3:c1:4a:f0:db:5d: 45:3a:0f:69:57:be:c3:34:f1:61:24:1a:2f:39:76: 12:7e:4a:79:8a:06:14:61:88:5e:72:cf:72:90:6c: b1:18:e8:20:43:27:74:82:cf:44:b8:66:5a:19:72: 4f:97:e0:29:0f:b9:ea:78:13:ea:8d:d8:e5:10:e7: 95:35:c6:39:8f:1c:43:04:d5:9b:78:bf:b7:60:0c: 9a:78:a5:c6:e3:b1:2f:4a:f8:c7:a3:b4:4d:15:d2: cc:22:f3:8f:e5:c9:82:aa:a7:45:30:ed:68:91:ee: 6f:b0:ec:e0:1e:c2:5a:9f:7a:78:a8:3d:ab:5c:5b: ee:98:e9:15:29:75:d8:ec:e9:96:a8:3a:18:5f:d1: f6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B7:0C:FC:32:6F:0C:42:10:7A:76:2D:20:D7:36:21:EB:71:F7:B7 X509v3 Authority Key Identifier: keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:e3:eb:78:83:db:90:ff:77:a6:a5:a3:5c:37:cd:b0:c9:83: fc:07:7e:73:f4:65:0f:bc:5b:8c:79:fd:09:38:19:cf:c2:4a: 89:e4:ba:fa:2c:d5:f7:0b:c9:fa:dc:1b:43:12:a0:b0:8b:27: d4:d8:b7:13:04:e6:fe:44:21:fc:eb:c7:3e:e5:8e:cb:f7:9f: 36:61:9b:45:86:2f:2e:df:b1:8a:1e:4e:63:01:8d:34:69:83: cb:d0:a8:e2:72:99:8f:46:0c:d7:d7:3e:4d:df:80:9c:28:f1: 0e:e0:14:29:e5:75:42:8c:5d:51:c5:f0:bf:01:ce:eb:b9:02: a4:57:59:96:3e:9d:ee:14:88:74:43:69:11:69:5b:ec:d3:f4: 7c:a7:23:c6:ee:4d:e3:91:66:5c:6d:16:a5:c8:bf:7e:3f:0e: 1d:d3:37:bd:73:4c:c8:15:a9:c2:dd:dc:f0:1c:f0:3d:42:1d: ae:c4:20:35:17:33:8f:1d:99:5c:0a:c9:4f:0c:e7:79:e3:4b: 9c:53:c2:e2:6b:57:a6:df:f5:25:48:fe:04:5a:b8:c2:fc:86: b3:e7:19:77:cf:68:16:96:78:52:9d:3a:69:cd:8e:c2:4e:e7: b0:d9:86:47:1b:cc:8a:27:67:77:4d:b6:bc:31:c5:ea:a6:c1: 7d:e6:2a:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqhWJZGFAteSq9jX3eF70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMjljMzcwNDYwYmVjNzUzMDEwZmM3ZTY4MzY1YzU3NzBi ZjQ1ZTQwHhcNMjUxMjI0MTQwMTIyWhcNMjUxMjI1MTQwMTIyWjAzMTEwLwYDVQQD Eyg0N2I3MGNmYzMyNmYwYzQyMTA3YTc2MmQyMGQ3MzYyMWViNzFmN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnld9gde5vylVDFZMj8T88Tpk2fV poQy7R+TuFkgaVs8K+TTghcevimzJuRRp73Dww8TUIUjbIFHtvZ+h8wDqI4M0PV3 R55w1zYgs6WtvId4IVGPIKZYmj1CJpQdKiycavvlNvFqWYhy1MRY7G3cun6zwUrw 211FOg9pV77DNPFhJBovOXYSfkp5igYUYYhecs9ykGyxGOggQyd0gs9EuGZaGXJP l+ApD7nqeBPqjdjlEOeVNcY5jxxDBNWbeL+3YAyaeKXG47EvSvjHo7RNFdLMIvOP 5cmCqqdFMO1oke5vsOzgHsJan3p4qD2rXFvumOkVKXXY7OmWqDoYX9H21wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEe3DPwybwxCEHp2LSDXNiHrcfe3MB8GA1UdIwQY MBaAFN0pw3BGC+x1MBD8fmg2XFdwv0XkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iMzAxOWMtNjZjZi00Zjk4LWE4NTYt MTM0YzQ3Yjk0OTEzLzEvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iMzAxOWMtNjZjZi00Zjk4LWE4NTYtMTM0YzQ3Yjk0OTEz LzEvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwePreIPb kP93pqWjXDfNsMmD/Ad+c/RlD7xbjHn9CTgZz8JKieS6+izV9wvJ+twbQxKgsIsn 1Ni3EwTm/kQh/OvHPuWOy/efNmGbRYYvLt+xih5OYwGNNGmDy9Co4nKZj0YM19c+ Td+AnCjxDuAUKeV1QoxdUcXwvwHO67kCpFdZlj6d7hSIdENpEWlb7NP0fKcjxu5N 45FmXG0Wpci/fj8OHdM3vXNMyBWpwt3c8BzwPUIdrsQgNRczjx2ZXArJTwzneeNL nFPC4mtXpt/1JUj+BFq4wvyGs+cZd89oFpZ4Up06ac2Owk7nsNmGRxvMiidnd022 vDHF6qbBfeYqDQ== -----END CERTIFICATE-----Generated at Wed Dec 24 23:52:32 2025 by rpki-client