This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft File: 3ofTW9yrEjr_wakdFzaGeWlwmiM.mft (raw, json) Hash identifier: 48eVypBAijMotaQE37TFzey+SKonS1RO+AorxYw3m+g= Subject key identifier: 8C:7E:CD:F0:CF:40:BF:BB:65:CA:6C:3A:D9:88:ED:D2:E1:3A:67:50 Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23 Certificate issuer: /CN=de87d35bdcab123affc1a91d1736867969709a23 Certificate serial: 019B4437F5E9C79BA51269619817C24DA0A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft Manifest number: 0ED8 Signing time: Mon 22 Dec 2025 04:01:16 +0000 Manifest this update: Mon 22 Dec 2025 04:01:16 +0000 Manifest next update: Tue 23 Dec 2025 04:01:16 +0000 Files and hashes: 1: 3ofTW9yrEjr_wakdFzaGeWlwmiM.crl (hash: +24f8lHrobSroMtb1fD5vk6M8mdnl9KVdci9fDbdZcc=) 2: 6QLt8gn6308YVRHTv77skONgyv0.roa (hash: WOVtEt3WWdPmMOLnSpBdtQecprDqkDjMDowLpoTrLSs=) 3: BlrozZPONvKYEp2UEAlnW_YzHI4.roa (hash: L9GHrxzoIcunUF/HHDD1IUg78PGRjvbme0vJn+zzCvE=) 4: CyRu--zwDhYd5zhamEbAkFcQBvQ.roa (hash: sO2VoYkxgTRufknOOSGAsTFVUrBvzkN0qo3ZnwDHlpE=) 5: m2FaQjqwdirKnIXjWYvZqBXz6X8.roa (hash: T2eJCXBDxAgsoT/g2qbdU7r93yFYU14KBtRd6n9GR68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:f5:e9:c7:9b:a5:12:69:61:98:17:c2:4d:a0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23 Validity Not Before: Dec 22 04:01:16 2025 GMT Not After : Dec 23 04:01:16 2025 GMT Subject: CN=8c7ecdf0cf40bfbb65ca6c3ad988edd2e13a6750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:47:33:36:74:71:17:76:0d:52:c7:31:09:bc: ce:8d:57:f6:45:ed:21:2e:17:47:fd:34:fd:4e:b1: 56:f0:1c:4e:7d:99:70:9d:6d:f3:47:16:8a:3e:de: 3e:a9:0c:10:bd:aa:7e:ef:fe:0b:f5:eb:12:78:ca: 1c:93:2f:21:1a:77:7b:5f:61:ae:6f:fb:56:34:30: 5c:85:78:44:b8:80:5b:bd:5f:1c:e6:8d:65:8d:47: c3:d0:45:41:0e:88:54:d9:02:2f:68:72:11:08:15: 71:f4:87:b9:4a:cd:ef:f7:73:be:bf:aa:5a:6c:37: d9:e9:7b:3a:3a:81:92:14:19:5e:0b:06:6c:72:18: c1:d8:75:3e:45:c5:cf:43:b8:1a:73:29:49:69:91: f3:49:6f:8d:c5:d7:0d:24:58:e3:64:ef:b9:64:81: bd:69:0a:be:47:b2:5b:ca:51:09:e5:6a:39:ac:0b: 2d:10:4c:96:e0:0e:96:fa:6a:16:62:3e:ae:0b:7e: 24:b1:09:c7:8f:7b:3d:4b:46:0a:1e:ce:06:bf:3b: 9f:38:9c:6f:5d:7c:f4:66:a2:f0:6f:00:7c:74:b8: f6:48:78:8f:fb:16:4a:b2:fa:b9:4d:02:4a:a6:b3: 16:66:3b:8f:1d:e9:fe:90:9b:b5:f0:1e:f1:8d:78: 28:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7E:CD:F0:CF:40:BF:BB:65:CA:6C:3A:D9:88:ED:D2:E1:3A:67:50 X509v3 Authority Key Identifier: keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b2:b5:1e:d5:84:89:eb:21:df:ea:39:cb:ac:f1:71:59:24: d9:4a:b0:4c:a5:f1:2d:9c:9c:09:e1:9e:c5:9b:48:8f:79:59: f6:b5:78:36:b1:fc:01:8e:c6:28:f5:07:63:8c:5b:ad:4a:e2: c7:e1:91:50:95:4c:7f:d9:d6:d9:3b:47:53:ae:2f:3e:28:6a: 80:9f:59:83:a8:c8:4b:1e:41:31:17:1f:24:82:17:73:6f:af: bb:bd:69:9b:d5:89:7d:2c:ed:17:3a:51:b0:53:95:b6:58:6f: 3d:34:13:27:84:0f:9c:4d:55:48:5e:9a:28:93:e7:23:99:2a: f7:ca:f5:d3:e5:cf:e2:48:59:1d:96:f1:c1:a8:4b:50:e9:d6: b0:00:29:67:28:bd:6c:6e:13:19:7b:ab:44:1c:f8:51:6b:cb: af:a5:12:51:6d:62:8a:52:b3:31:00:b7:6a:ea:c0:5b:54:5a: 4d:f2:e0:8a:20:4f:f4:30:58:d2:35:46:19:83:a0:85:1a:88: 77:0a:76:56:48:df:9a:49:a5:f8:3e:f3:80:b2:f9:84:3b:c5: ac:da:c5:23:36:df:98:3d:7f:8b:4b:7a:4d:8e:a5:b5:e8:3e: 32:1f:7b:05:1f:f6:fa:0a:a8:ce:27:0c:07:de:12:6b:55:cd: e1:49:2c:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN/Xpx5ulEmlhmBfCTaClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlODdkMzViZGNhYjEyM2FmZmMxYTkxZDE3MzY4Njc5Njk3 MDlhMjMwHhcNMjUxMjIyMDQwMTE2WhcNMjUxMjIzMDQwMTE2WjAzMTEwLwYDVQQD Eyg4YzdlY2RmMGNmNDBiZmJiNjVjYTZjM2FkOTg4ZWRkMmUxM2E2NzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0czNnRxF3YNUscxCbzOjVf2Re0h LhdH/TT9TrFW8BxOfZlwnW3zRxaKPt4+qQwQvap+7/4L9esSeMocky8hGnd7X2Gu b/tWNDBchXhEuIBbvV8c5o1ljUfD0EVBDohU2QIvaHIRCBVx9Ie5Ss3v93O+v6pa bDfZ6Xs6OoGSFBleCwZschjB2HU+RcXPQ7gacylJaZHzSW+NxdcNJFjjZO+5ZIG9 aQq+R7JbylEJ5Wo5rAstEEyW4A6W+moWYj6uC34ksQnHj3s9S0YKHs4GvzufOJxv XXz0ZqLwbwB8dLj2SHiP+xZKsvq5TQJKprMWZjuPHen+kJu18B7xjXgoVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIx+zfDPQL+7ZcpsOtmI7dLhOmdQMB8GA1UdIwQY MBaAFN6H01vcqxI6/8GpHRc2hnlpcJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM29mVFc5eXJFanJfd2FrZEZ6YUdlV2x3bWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MTA3MTYtZjI2Ni00N2YwLTliYWQt YzIyMzkwZThkOWE2LzEvM29mVFc5eXJFanJfd2FrZEZ6YUdlV2x3bWlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85MTA3MTYtZjI2Ni00N2YwLTliYWQtYzIyMzkwZThkOWE2 LzEvM29mVFc5eXJFanJfd2FrZEZ6YUdlV2x3bWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLK1HtWE iesh3+o5y6zxcVkk2UqwTKXxLZycCeGexZtIj3lZ9rV4NrH8AY7GKPUHY4xbrUri x+GRUJVMf9nW2TtHU64vPihqgJ9Zg6jISx5BMRcfJIIXc2+vu71pm9WJfSztFzpR sFOVtlhvPTQTJ4QPnE1VSF6aKJPnI5kq98r10+XP4khZHZbxwahLUOnWsAApZyi9 bG4TGXurRBz4UWvLr6USUW1iilKzMQC3aurAW1RaTfLgiiBP9DBY0jVGGYOghRqI dwp2Vkjfmkml+D7zgLL5hDvFrNrFIzbfmD1/i0t6TY6lteg+Mh97BR/2+gqozicM B94Sa1XN4Ukscg== -----END CERTIFICATE-----Generated at Mon Dec 22 05:16:29 2025 by rpki-client