This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json) Hash identifier: RLuiogi6IQztOeJKWzlR6m5bLS+uabtWM8B1WJYdPYs= Subject key identifier: EA:08:96:DC:F7:B9:DC:F2:C4:36:B0:8E:3A:93:86:E2:95:79:DC:95 Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4 Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4 Certificate serial: 019B3BD8EA01E0585BD5C50150F5C59CC803 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft Manifest number: 16E3 Signing time: Sat 20 Dec 2025 13:00:29 +0000 Manifest this update: Sat 20 Dec 2025 13:00:29 +0000 Manifest next update: Sun 21 Dec 2025 13:00:29 +0000 Files and hashes: 1: 1-7jWzqH7wT1n-L8XkfK1kEabKfA.roa (hash: qrQpcX8LTv3WT8M/1yXwPjm8/udCR9jmZNcZtjA7oMg=) 2: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: cReYkA4p5Qb4oO5ksUbBTzenbzhzjVcA83bPWGlV4Vo=) 3: kSKdo2q0O6OXBsJw6ZYyr7eJXbs.roa (hash: IDSSisdvZb6ZBfLMmbXOfW59dICKAwsuQknOYmnY4dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d8:ea:01:e0:58:5b:d5:c5:01:50:f5:c5:9c:c8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4 Validity Not Before: Dec 20 13:00:29 2025 GMT Not After : Dec 21 13:00:29 2025 GMT Subject: CN=ea0896dcf7b9dcf2c436b08e3a9386e29579dc95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9f:49:08:f9:91:00:4b:cb:f3:dc:a2:0d:66: 3d:2f:c5:62:ec:42:4e:4e:33:4a:55:f5:bb:1f:80: ad:28:43:ec:c4:dc:f4:e8:38:e7:77:6b:05:84:c2: 1b:f1:00:cf:67:f7:2f:12:88:d8:c1:bc:a9:e1:dd: c1:1a:c6:62:0e:4a:87:8f:8b:07:b6:65:a6:7c:93: 8f:cc:95:bc:02:5b:8b:c6:6a:d3:c7:90:45:3b:e7: f6:78:4f:bb:67:fe:ee:4e:43:fa:cc:d3:a5:20:91: 7c:5e:54:68:03:c3:e1:7b:e0:67:44:b2:77:f5:86: 13:5c:d4:78:78:3a:c8:51:57:f4:71:aa:8e:b9:75: 50:03:05:f9:5e:a7:ef:ad:50:e6:60:7e:1d:49:45: 02:2a:40:46:9a:31:18:e7:ac:15:e5:2b:6d:92:4e: 5d:44:71:10:ea:ea:e6:2a:7c:77:cc:2d:58:3a:a1: 02:03:fb:04:3a:34:0e:a5:bd:7a:3b:66:ef:31:ed: 05:fd:2c:c4:1e:25:0b:91:9d:f8:3b:55:2b:0a:45: e7:80:a4:08:e5:ac:7b:8d:19:dc:6c:b3:67:51:96: f9:f5:2d:bf:c5:d9:d5:cd:e6:bd:65:58:09:01:b8: 84:89:15:ca:c5:37:cd:8a:f5:cb:4a:7b:0c:dd:10: bd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:08:96:DC:F7:B9:DC:F2:C4:36:B0:8E:3A:93:86:E2:95:79:DC:95 X509v3 Authority Key Identifier: keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b5:cf:2e:89:f9:16:25:b7:4e:59:b5:ce:cd:05:d9:c2:b4: e0:f6:2b:47:20:2c:72:58:b4:ff:76:34:47:4e:54:2a:69:d8: e0:8c:44:78:a1:61:5e:61:a9:29:6d:e0:b5:d6:c4:e0:f5:13: 27:70:81:79:24:ca:99:97:40:0d:08:b3:28:81:a7:18:a5:c0: 44:09:93:5f:1d:8f:3c:b0:66:bd:32:a3:be:ca:93:a5:e5:9a: cd:e8:e6:ab:c3:de:b9:e9:aa:93:26:21:e7:17:42:bb:89:a6: d1:da:78:85:06:22:93:24:23:a5:97:ee:17:08:2e:a1:1c:f9: a0:d4:ff:a1:7b:d3:8b:56:e8:83:fb:d4:ec:69:7c:c3:a3:34: 50:6c:5c:b3:5f:6b:66:a5:14:ea:ad:f4:ee:7f:cf:af:0c:85: eb:60:50:20:23:fe:18:7c:d5:1e:9d:55:4e:8f:53:bb:29:41: 40:4a:e9:6e:75:23:6b:4c:27:3e:1b:6a:4e:ff:d9:1b:df:2d: 90:18:0a:87:dc:c3:61:55:98:75:c0:a4:14:4f:b1:00:63:3e: 57:bd:2e:5d:89:af:38:c4:ba:73:89:ea:a4:be:cf:87:2d:e5: d7:93:9c:af:0f:3f:06:de:d4:4d:89:b5:46:38:1a:bf:b5:28: cb:85:00:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72OoB4Fhb1cUBUPXFnMgDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYmNhYjQ4NTk1MzZjZjk5NjU5NmVmMTlkMmE2NDYxMWQw MzZmZTQwHhcNMjUxMjIwMTMwMDI5WhcNMjUxMjIxMTMwMDI5WjAzMTEwLwYDVQQD EyhlYTA4OTZkY2Y3YjlkY2YyYzQzNmIwOGUzYTkzODZlMjk1NzlkYzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J9JCPmRAEvL89yiDWY9L8Vi7EJO TjNKVfW7H4CtKEPsxNz06Djnd2sFhMIb8QDPZ/cvEojYwbyp4d3BGsZiDkqHj4sH tmWmfJOPzJW8AluLxmrTx5BFO+f2eE+7Z/7uTkP6zNOlIJF8XlRoA8Phe+BnRLJ3 9YYTXNR4eDrIUVf0caqOuXVQAwX5XqfvrVDmYH4dSUUCKkBGmjEY56wV5Sttkk5d RHEQ6urmKnx3zC1YOqECA/sEOjQOpb16O2bvMe0F/SzEHiULkZ34O1UrCkXngKQI 5ax7jRncbLNnUZb59S2/xdnVzea9ZVgJAbiEiRXKxTfNivXLSnsM3RC9QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoIltz3udzyxDawjjqThuKVedyVMB8GA1UdIwQY MBaAFNy8q0hZU2z5lllu8Z0qZGEdA2/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTIt MjY2ZmUyNzM3YjhmLzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTItMjY2ZmUyNzM3Yjhm LzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrXPLon5 FiW3Tlm1zs0F2cK04PYrRyAscli0/3Y0R05UKmnY4IxEeKFhXmGpKW3gtdbE4PUT J3CBeSTKmZdADQizKIGnGKXARAmTXx2PPLBmvTKjvsqTpeWazejmq8PeuemqkyYh 5xdCu4mm0dp4hQYikyQjpZfuFwguoRz5oNT/oXvTi1bog/vU7Gl8w6M0UGxcs19r ZqUU6q307n/PrwyF62BQICP+GHzVHp1VTo9TuylBQErpbnUja0wnPhtqTv/ZG98t kBgKh9zDYVWYdcCkFE+xAGM+V70uXYmvOMS6c4nqpL7Phy3l15Ocrw8/Bt7UTYm1 Rjgav7Uoy4UAnQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:35:59 2025 by rpki-client