This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft File: 3-ytVuquEjX6eI5OrTkiwpbig6U.mft (raw, json) Hash identifier: ARbZs+2NASYk9pdEw5/6qNLakIL1u8OOfvohfguaqks= Subject key identifier: 7A:5E:C2:50:63:D0:17:95:0B:74:8A:E9:29:BA:C9:48:41:45:19:81 Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5 Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5 Certificate serial: 019B38D8187843A1ED32FBF161A9F5F9F93D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft Manifest number: 02BF Signing time: Fri 19 Dec 2025 23:00:44 +0000 Manifest this update: Fri 19 Dec 2025 23:00:44 +0000 Manifest next update: Sat 20 Dec 2025 23:00:44 +0000 Files and hashes: 1: 3-ytVuquEjX6eI5OrTkiwpbig6U.crl (hash: 5Xm7A0vd7toEE7nExg4TH4ydupxhIVHX2DmSuUQKZMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:18:78:43:a1:ed:32:fb:f1:61:a9:f5:f9:f9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5 Validity Not Before: Dec 19 23:00:44 2025 GMT Not After : Dec 20 23:00:44 2025 GMT Subject: CN=7a5ec25063d017950b748ae929bac94841451981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:75:00:2c:19:a0:ea:be:3d:8a:74:56:1a:ed: 1e:a0:9d:b3:df:d6:1e:64:4d:78:16:4a:d9:c0:c4: de:3e:ef:5f:c4:7c:d1:c1:ca:04:78:ef:fb:a4:4f: 19:aa:95:93:72:e1:0c:c8:06:80:37:6c:65:d0:5e: 9d:73:38:0d:d0:ad:1d:34:21:c6:49:cf:b8:dc:68: 6b:54:78:66:51:d6:1d:27:20:6b:2d:80:17:e7:c1: 6e:3d:f6:79:8b:d4:af:95:60:4c:15:67:5a:b6:73: 63:64:4b:1c:86:97:96:6d:ad:f7:15:b1:8a:38:e7: c6:2f:a0:94:e5:d9:ba:54:e9:11:c4:49:df:67:5c: 79:6e:d1:e9:1a:36:6f:1e:ba:0b:e2:e5:96:ee:d2: c4:5a:7a:02:47:01:f5:9b:44:de:45:c2:2a:81:e6: 3b:ca:b7:36:38:65:43:38:06:f2:02:c0:4f:d0:a1: 91:fd:b3:ed:1a:dd:81:2a:67:f9:45:10:a4:a7:dc: 6c:5e:3e:1f:9a:d1:27:09:f5:84:e8:72:35:b3:43: e4:2c:6a:1e:7d:1d:c7:8e:82:d1:eb:ab:e1:e5:7b: a7:9c:c2:8d:65:53:98:f0:94:08:bd:69:81:f1:26: 0c:16:b1:e0:26:ce:11:7e:84:1d:b9:73:5e:84:e0: 1f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5E:C2:50:63:D0:17:95:0B:74:8A:E9:29:BA:C9:48:41:45:19:81 X509v3 Authority Key Identifier: keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6a:e4:f4:17:bf:7b:36:33:31:c9:0c:24:b2:59:51:28:80: d9:94:dc:9a:86:5b:3b:f7:19:87:e9:88:7e:ab:fe:ca:9d:c7: c0:ab:dc:b0:ac:06:0a:2b:91:7f:19:24:96:41:6e:54:9a:99: 7b:c5:28:ad:5b:e7:23:99:1e:25:3e:bf:11:50:1b:be:62:f4: 43:57:17:4f:52:c5:e5:3a:94:39:27:16:53:db:dd:ed:2e:89: 4c:bd:04:76:a4:d1:c7:d1:7a:14:1a:cd:69:08:68:b7:b4:75: 7f:ee:bf:e8:9e:6d:7e:60:3b:42:c1:e9:6c:4b:4b:92:bb:e4: 49:8c:b4:c9:70:04:a2:12:9b:02:88:a2:52:cc:ee:4a:7e:d5: 98:dd:6e:eb:0a:97:2e:b6:b1:77:da:8e:85:3e:0f:bb:73:08: 8f:49:fd:9c:46:8b:42:41:f4:c8:46:ef:e6:7e:cf:74:e7:ee: c2:6c:fb:b3:14:59:fc:18:4d:be:55:fd:fe:00:0b:1d:79:03: 0e:9d:74:75:e8:31:34:2a:c9:cf:b3:81:a6:9d:1a:a0:a9:2a: ac:48:b8:70:f4:52:39:de:fb:7a:a5:d4:ac:3a:63:62:0b:ba: 36:92:64:45:1f:d2:5a:49:03:b7:a7:77:c0:13:d6:bd:46:31: 33:6d:75:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42Bh4Q6HtMvvxYan1+fk9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZWNhZDU2ZWFhZTEyMzVmYTc4OGU0ZWFkMzkyMmMyOTZl MjgzYTUwHhcNMjUxMjE5MjMwMDQ0WhcNMjUxMjIwMjMwMDQ0WjAzMTEwLwYDVQQD Eyg3YTVlYzI1MDYzZDAxNzk1MGI3NDhhZTkyOWJhYzk0ODQxNDUxOTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHUALBmg6r49inRWGu0eoJ2z39Ye ZE14FkrZwMTePu9fxHzRwcoEeO/7pE8ZqpWTcuEMyAaAN2xl0F6dczgN0K0dNCHG Sc+43GhrVHhmUdYdJyBrLYAX58FuPfZ5i9SvlWBMFWdatnNjZEschpeWba33FbGK OOfGL6CU5dm6VOkRxEnfZ1x5btHpGjZvHroL4uWW7tLEWnoCRwH1m0TeRcIqgeY7 yrc2OGVDOAbyAsBP0KGR/bPtGt2BKmf5RRCkp9xsXj4fmtEnCfWE6HI1s0PkLGoe fR3HjoLR66vh5XunnMKNZVOY8JQIvWmB8SYMFrHgJs4RfoQduXNehOAfRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpewlBj0BeVC3SK6Sm6yUhBRRmBMB8GA1UdIwQY MBaAFN/srVbqrhI1+niOTq05IsKW4oOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMy15dFZ1cXVFalg2ZUk1T3JUa2l3cGJpZzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kNjcwODctNzY1Yi00NmViLTgwOGMt Njc3YmFiNjEzYWZmLzEvMy15dFZ1cXVFalg2ZUk1T3JUa2l3cGJpZzZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9kNjcwODctNzY1Yi00NmViLTgwOGMtNjc3YmFiNjEzYWZm LzEvMy15dFZ1cXVFalg2ZUk1T3JUa2l3cGJpZzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGrk9Be/ ezYzMckMJLJZUSiA2ZTcmoZbO/cZh+mIfqv+yp3HwKvcsKwGCiuRfxkklkFuVJqZ e8UorVvnI5keJT6/EVAbvmL0Q1cXT1LF5TqUOScWU9vd7S6JTL0EdqTRx9F6FBrN aQhot7R1f+6/6J5tfmA7QsHpbEtLkrvkSYy0yXAEohKbAoiiUszuSn7VmN1u6wqX Lraxd9qOhT4Pu3MIj0n9nEaLQkH0yEbv5n7PdOfuwmz7sxRZ/BhNvlX9/gALHXkD Dp10degxNCrJz7OBpp0aoKkqrEi4cPRSOd77eqXUrDpjYgu6NpJkRR/SWkkDt6d3 wBPWvUYxM211ww== -----END CERTIFICATE-----Generated at Sat Dec 20 07:48:51 2025 by rpki-client