This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json) Hash identifier: ZPwRuBWJsZue/QPw5OCdp3NoHvlIUbnfgC94ra3sIQw= Subject key identifier: F3:A0:B3:66:93:88:D4:C6:E1:ED:CD:90:57:D8:EE:33:67:82:1A:DD Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e Certificate serial: 019B51BD4572DA846C7291BF74DB53C3558F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft Manifest number: 0A59 Signing time: Wed 24 Dec 2025 19:01:57 +0000 Manifest this update: Wed 24 Dec 2025 19:01:57 +0000 Manifest next update: Thu 25 Dec 2025 19:01:57 +0000 Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: PFdKWwTWR0E0mb27eL1CPbhl8cyyuiC+YgpG+bys6PQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:45:72:da:84:6c:72:91:bf:74:db:53:c3:55:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=737787cf2a870d91b11369f9d74591957602814e Validity Not Before: Dec 24 19:01:57 2025 GMT Not After : Dec 25 19:01:57 2025 GMT Subject: CN=f3a0b3669388d4c6e1edcd9057d8ee3367821add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:97:b9:23:18:d3:29:cd:d9:af:a0:c0:4d:20: 30:8e:20:01:34:b4:56:f5:ee:2a:73:63:3d:f3:06: ab:f2:a2:f3:21:93:eb:0e:fe:b7:51:74:63:78:94: b1:f5:58:fe:31:b1:c0:39:68:e2:95:f2:e7:a6:1e: 2a:aa:52:69:26:39:fa:f4:eb:15:c4:a7:2d:c1:d7: d7:1b:9d:33:74:f9:fe:3e:38:a5:a4:2b:69:f0:47: 4c:5d:29:5e:a9:e3:85:dc:29:a4:b8:38:94:c2:e6: ec:58:47:81:93:bf:a8:31:5a:a7:ac:79:13:44:89: 6b:d6:b3:0c:2c:d1:52:14:e4:c5:68:36:2a:7f:f9: 64:bb:60:69:97:4c:8c:e5:15:7b:a2:cc:54:e5:a2: 38:e3:06:48:83:c9:ba:b6:84:16:f6:e8:12:bf:c2: a2:b3:aa:d2:b4:c6:bd:9b:75:0c:ed:71:2b:97:2b: 4d:0f:bb:ba:7c:48:db:10:9e:be:34:72:f7:a5:04: 3f:4a:dc:5b:cb:d8:b6:16:29:74:67:28:36:3e:2e: 18:07:35:19:b4:16:c9:4c:88:67:27:22:5f:67:b7: 84:ad:7d:b2:35:46:c4:30:74:20:7f:1b:84:32:7b: d1:63:01:9b:cf:80:98:aa:16:26:fb:dd:6e:f0:3e: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A0:B3:66:93:88:D4:C6:E1:ED:CD:90:57:D8:EE:33:67:82:1A:DD X509v3 Authority Key Identifier: keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f6:b7:ed:8a:3f:32:05:62:21:dd:d7:0a:ff:2e:ed:76:7e: 2f:ee:b1:da:02:a8:a1:9d:ee:c0:91:20:d3:0a:9f:5d:45:86: 26:af:44:ac:c7:c4:11:35:e0:bb:c5:07:45:08:b4:c5:a0:f5: 02:fa:24:0d:34:39:3a:d9:ce:7c:de:84:98:8f:15:90:56:85: 71:c1:8d:ad:c2:c0:8f:9b:d0:30:c1:b1:e5:0b:c9:af:bf:96: 21:e6:f0:0a:7e:cf:78:d8:60:b9:e7:7d:91:37:92:52:85:c7: d4:4a:58:07:ef:17:58:8d:61:92:c3:db:c6:5c:b0:2e:0b:67: 53:d2:6c:a9:a3:09:58:f7:dc:8d:d4:77:f3:a5:94:69:e7:ea: c9:90:2e:bb:cb:bf:e7:2b:a9:35:1b:60:0e:f7:81:70:05:df: 14:7f:7d:b5:cd:37:53:56:76:04:c7:ae:57:b8:60:0e:19:e8: fa:28:5f:b4:ef:83:a7:71:ea:19:6b:85:31:7f:e5:5e:99:08: e8:18:83:56:7c:3c:3e:46:6b:9e:03:00:9d:da:ef:df:26:88: 74:87:75:f5:6a:b4:ee:2e:16:cc:d2:4d:a9:84:2b:f1:57:2f: 59:13:f5:32:78:94:09:38:32:6c:b5:86:79:36:f9:23:37:28: f0:78:8a:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvUVy2oRscpG/dNtTw1WPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNzc4N2NmMmE4NzBkOTFiMTEzNjlmOWQ3NDU5MTk1NzYw MjgxNGUwHhcNMjUxMjI0MTkwMTU3WhcNMjUxMjI1MTkwMTU3WjAzMTEwLwYDVQQD EyhmM2EwYjM2NjkzODhkNGM2ZTFlZGNkOTA1N2Q4ZWUzMzY3ODIxYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZe5IxjTKc3Zr6DATSAwjiABNLRW 9e4qc2M98war8qLzIZPrDv63UXRjeJSx9Vj+MbHAOWjilfLnph4qqlJpJjn69OsV xKctwdfXG50zdPn+PjilpCtp8EdMXSleqeOF3CmkuDiUwubsWEeBk7+oMVqnrHkT RIlr1rMMLNFSFOTFaDYqf/lku2Bpl0yM5RV7osxU5aI44wZIg8m6toQW9ugSv8Ki s6rStMa9m3UM7XErlytND7u6fEjbEJ6+NHL3pQQ/Stxby9i2Fil0Zyg2Pi4YBzUZ tBbJTIhnJyJfZ7eErX2yNUbEMHQgfxuEMnvRYwGbz4CYqhYm+91u8D5TgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOgs2aTiNTG4e3NkFfY7jNnghrdMB8GA1UdIwQY MBaAFHN3h88qhw2RsRNp+ddFkZV2AoFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEyNjQtZWEyOS00OTFmLWFjNGMt NjJjMDg1ODM0NGU4LzEvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85NGEyNjQtZWEyOS00OTFmLWFjNGMtNjJjMDg1ODM0NGU4 LzEvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeva37Yo/ MgViId3XCv8u7XZ+L+6x2gKooZ3uwJEg0wqfXUWGJq9ErMfEETXgu8UHRQi0xaD1 AvokDTQ5OtnOfN6EmI8VkFaFccGNrcLAj5vQMMGx5QvJr7+WIebwCn7PeNhgued9 kTeSUoXH1EpYB+8XWI1hksPbxlywLgtnU9JsqaMJWPfcjdR386WUaefqyZAuu8u/ 5yupNRtgDveBcAXfFH99tc03U1Z2BMeuV7hgDhno+ihftO+Dp3HqGWuFMX/lXpkI 6BiDVnw8PkZrngMAndrv3yaIdId19Wq07i4WzNJNqYQr8VcvWRP1MniUCTgybLWG eTb5Izco8HiK5Q== -----END CERTIFICATE-----Generated at Thu Dec 25 03:32:52 2025 by rpki-client