This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft File: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft (raw, json) Hash identifier: RRNoEKroVKPfhETrZ3dXYA50MdXNDZ3Uy7En4bzfUcQ= Subject key identifier: 3B:BB:25:6B:3E:3B:D4:F5:20:98:F6:CF:C9:2A:BA:80:45:CE:A8:32 Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6 Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6 Certificate serial: 019B3FED56EEBBD4EB4C91C61C517581A2C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft Manifest number: 0777 Signing time: Sun 21 Dec 2025 08:01:17 +0000 Manifest this update: Sun 21 Dec 2025 08:01:17 +0000 Manifest next update: Mon 22 Dec 2025 08:01:17 +0000 Files and hashes: 1: 3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl (hash: tOPPAzehKC5j6KlMkVBPLARIPwFocmxWqwzq8IDxE9o=) 2: t_S27jbE28k53wPb8BjCMYnQRo4.roa (hash: 6FIsv+jDOzfD9s49oJ3R+IPW0lckCRZ799Q4ILAZx8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:56:ee:bb:d4:eb:4c:91:c6:1c:51:75:81:a2:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6 Validity Not Before: Dec 21 08:01:17 2025 GMT Not After : Dec 22 08:01:17 2025 GMT Subject: CN=3bbb256b3e3bd4f52098f6cfc92aba8045cea832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:51:6e:ea:64:f1:c5:1d:7c:cc:d8:3d:cb:52: 19:7b:c8:54:e9:e6:2c:dc:3d:57:1f:c3:dc:08:3d: ed:dc:91:f9:ea:9d:87:4d:ad:91:26:b7:e9:f7:98: 9e:fb:c1:82:d3:ae:0b:f4:e2:94:6b:29:e1:76:48: 8a:8a:1d:76:c5:39:63:93:33:f8:e4:e0:d3:71:d5: c2:11:4a:92:78:7d:20:d6:ca:d2:df:99:e3:0f:7c: 22:50:3e:72:00:99:63:95:68:b9:b3:92:f2:af:c3: e9:95:8d:a0:af:8e:e7:ab:58:11:79:24:1f:a1:74: 85:05:10:f3:73:c0:ec:3a:af:d1:0d:f1:2f:55:ff: b8:b1:1c:7c:3f:e5:b7:39:8c:53:28:29:12:b7:b7: 34:bb:92:ac:f4:dd:c4:ae:b7:06:ac:a7:55:f2:45: 02:fd:b1:d3:5c:48:0f:32:6e:1d:97:0b:4f:f4:01: 25:de:2f:cc:a4:ee:06:8c:99:03:68:6b:62:85:3e: 7e:26:12:d6:b4:34:4b:e7:bc:ea:cd:00:d8:e4:c0: 6f:1d:a0:91:d1:8c:1b:5c:d2:0c:3b:05:0c:da:ce: f9:21:f7:0f:4b:41:06:32:f2:18:72:14:2c:68:05: e7:fe:fc:ed:cb:f5:90:c6:55:6e:5b:9d:19:68:cd: 24:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BB:25:6B:3E:3B:D4:F5:20:98:F6:CF:C9:2A:BA:80:45:CE:A8:32 X509v3 Authority Key Identifier: keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c3:d0:12:9b:cb:89:93:8c:7a:e2:81:20:6b:af:cd:96:0e: 51:76:4b:62:b8:68:bf:95:33:a1:7a:f5:72:1a:37:7a:78:d3: ce:dd:3a:2e:c0:9f:35:7d:8f:df:12:05:75:78:da:c2:80:4a: ab:b3:b2:bb:c2:58:a2:66:39:03:f5:70:d2:a0:97:24:44:f5: e5:dd:77:63:31:07:40:0e:f8:97:48:81:58:7a:e4:02:55:6c: 45:b0:5c:91:c1:32:0e:5c:1a:59:1f:20:9f:7e:ba:1d:e6:ae: c6:0e:69:71:1e:9e:f2:23:c1:9d:b7:ef:7a:de:58:2b:e4:72: 8c:c8:5a:3b:12:af:1f:cc:5a:fa:01:84:a8:84:a9:5f:99:ea: 63:3d:4f:c0:7b:b1:f8:54:55:cd:ee:0a:02:29:bf:e6:46:08: c1:f8:04:82:4c:86:dd:7e:65:b0:6f:5c:3e:12:e5:29:01:b3: ad:57:ec:7d:76:12:05:e1:5e:62:16:07:f5:30:b3:4e:f3:52: 3d:65:b3:ea:f6:5c:fc:e8:ba:ff:34:61:38:f4:4f:a5:5a:f9: 1c:da:e1:09:a2:44:6e:d6:ae:4e:33:7b:e6:1c:3f:3b:7b:82: 27:31:48:68:39:bd:c9:5e:4d:2a:b6:c6:c1:2f:83:75:16:18: 48:d6:c3:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7Vbuu9TrTJHGHFF1gaLBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjN2ZiZDY3NzQ0MWNiYjVjMGJkNDdiY2QyZjM4YmExOTJh MzM2YTYwHhcNMjUxMjIxMDgwMTE3WhcNMjUxMjIyMDgwMTE3WjAzMTEwLwYDVQQD EygzYmJiMjU2YjNlM2JkNGY1MjA5OGY2Y2ZjOTJhYmE4MDQ1Y2VhODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61Fu6mTxxR18zNg9y1IZe8hU6eYs 3D1XH8PcCD3t3JH56p2HTa2RJrfp95ie+8GC064L9OKUaynhdkiKih12xTljkzP4 5ODTcdXCEUqSeH0g1srS35njD3wiUD5yAJljlWi5s5Lyr8PplY2gr47nq1gReSQf oXSFBRDzc8DsOq/RDfEvVf+4sRx8P+W3OYxTKCkSt7c0u5Ks9N3ErrcGrKdV8kUC /bHTXEgPMm4dlwtP9AEl3i/MpO4GjJkDaGtihT5+JhLWtDRL57zqzQDY5MBvHaCR 0YwbXNIMOwUM2s75IfcPS0EGMvIYchQsaAXn/vzty/WQxlVuW50ZaM0kOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDu7JWs+O9T1IJj2z8kquoBFzqgyMB8GA1UdIwQY MBaAFNx/vWd0Qcu1wL1HvNLzi6GSozamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMt NzZkM2Q0ODBmYTY4LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iMjVjM2EtMGMwYi00ZDRlLTk4MTMtNzZkM2Q0ODBmYTY4 LzEvM0gtOVozUkJ5N1hBdlVlODB2T0xvWktqTnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8PQEpvL iZOMeuKBIGuvzZYOUXZLYrhov5UzoXr1cho3enjTzt06LsCfNX2P3xIFdXjawoBK q7Oyu8JYomY5A/Vw0qCXJET15d13YzEHQA74l0iBWHrkAlVsRbBckcEyDlwaWR8g n366Heauxg5pcR6e8iPBnbfvet5YK+RyjMhaOxKvH8xa+gGEqISpX5nqYz1PwHux +FRVze4KAim/5kYIwfgEgkyG3X5lsG9cPhLlKQGzrVfsfXYSBeFeYhYH9TCzTvNS PWWz6vZc/Oi6/zRhOPRPpVr5HNrhCaJEbtauTjN75hw/O3uCJzFIaDm9yV5NKrbG wS+DdRYYSNbD4g== -----END CERTIFICATE-----Generated at Sun Dec 21 13:53:16 2025 by rpki-client