This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json) Hash identifier: ywCITDVscq/KFdedA0x1aX5b5+oS5/4w0nQL8OORCV4= Subject key identifier: B1:CB:8E:9A:7B:BA:F2:49:89:A7:38:EA:8D:4B:AD:37:BF:B3:A2:BD Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83 Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983 Certificate serial: 019B619DEA2C1D448DDA2EF5BBE2D94A2C14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft Manifest number: 119E Signing time: Sat 27 Dec 2025 21:01:37 +0000 Manifest this update: Sat 27 Dec 2025 21:01:37 +0000 Manifest next update: Sun 28 Dec 2025 21:01:37 +0000 Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: lxWzMvbNZESsv5enyfwh1y5wbqCMisBh2GTovmfzxC8=) 2: CXuHSCaFxVaRaAru4-iFvdd0d-g.roa (hash: po3EKI/Ie4MxQDtGyWIOYbTAnH49FsuKgvn3GW+cz7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 21:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:ea:2c:1d:44:8d:da:2e:f5:bb:e2:d9:4a:2c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983 Validity Not Before: Dec 27 21:01:37 2025 GMT Not After : Dec 28 21:01:37 2025 GMT Subject: CN=b1cb8e9a7bbaf24989a738ea8d4bad37bfb3a2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cb:5b:78:3d:4e:f1:ab:5e:23:5f:4f:42:98: 4c:63:5d:f2:a2:5b:64:ba:76:bd:9d:a2:3d:a1:88: fd:9a:b8:40:67:74:48:91:9d:8b:45:45:65:16:5e: 2b:ed:d2:b9:16:40:2a:aa:a0:ba:9b:99:2e:38:98: 8e:c9:71:42:05:65:04:7e:fd:d8:f5:bf:3a:90:1c: 22:24:15:76:f1:14:26:57:89:40:c7:b1:9b:9b:c1: 18:23:89:7f:a9:99:af:94:40:e6:56:75:36:af:79: 3c:2d:0a:10:c7:43:24:60:87:bc:0b:63:0c:e7:6f: ae:f4:09:d0:77:e8:05:2a:94:d7:82:0b:9b:6e:24: 06:26:e7:76:a9:0a:89:1b:83:b7:f3:3f:53:65:1e: 26:dc:f1:74:d0:56:b7:9a:7a:ab:6f:64:76:c7:ed: f1:6f:23:c6:a1:4f:0d:ab:fb:ac:26:84:e3:1f:08: ed:2d:7c:a3:cc:98:b7:82:63:0b:f5:de:c9:46:aa: 21:8f:be:93:c1:07:3f:86:29:f4:59:e8:37:99:22: db:60:fb:98:f4:76:9e:f9:5d:29:da:4d:78:cd:14: 72:c6:18:8b:33:13:af:d4:5f:61:74:fc:e6:83:9a: d6:8f:0d:24:ae:ba:65:22:9d:5a:1c:10:87:59:17: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CB:8E:9A:7B:BA:F2:49:89:A7:38:EA:8D:4B:AD:37:BF:B3:A2:BD X509v3 Authority Key Identifier: keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:cc:22:9d:83:c9:c6:bc:09:bf:49:1b:27:47:ed:18:d6:0a: 73:9f:da:8c:b9:6b:5c:93:da:bf:65:fd:f2:ae:b7:21:89:35: e6:9a:4a:5d:ac:0a:9b:77:f2:89:90:82:34:d3:b1:82:b5:f6: 20:6c:3b:95:57:90:1e:81:bc:a8:6f:c1:a4:f1:5f:d8:52:29: 1a:81:5e:63:e3:db:82:12:c4:15:9b:7e:dd:5f:11:15:ca:30: ea:30:95:ff:cb:12:6b:78:67:bc:dd:77:91:b2:35:56:5c:99: 3f:eb:1b:cd:a3:78:d5:e5:58:e1:ec:08:13:74:e1:0b:24:ad: 58:b9:e2:24:33:ab:49:80:9c:6a:8f:c5:a3:de:c8:22:be:6c: 35:e2:c5:6d:04:fe:76:16:79:70:04:6e:2e:68:52:a0:7b:63: 37:f8:f4:50:2e:f9:73:a7:b7:b1:45:03:98:42:10:84:73:a0: a9:3e:b1:df:f4:4e:2f:cc:f4:be:d9:a3:b1:6f:16:37:e3:5c: 28:df:ee:97:6e:a1:1e:d6:48:77:98:ab:7c:91:e1:25:d4:7d: 62:4b:c6:dc:54:9a:0f:95:b7:69:85:93:75:8b:8c:55:73:9f: d2:a7:65:e5:74:49:4e:3b:9d:cf:ac:0c:16:54:8e:a0:54:9a: 71:22:bb:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthneosHUSN2i71u+LZSiwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNWUzNmYxNTlmNTc2OTg4ZmI0ZTUxZDQxMDFiYjg1ZDBk MGM5ODMwHhcNMjUxMjI3MjEwMTM3WhcNMjUxMjI4MjEwMTM3WjAzMTEwLwYDVQQD EyhiMWNiOGU5YTdiYmFmMjQ5ODlhNzM4ZWE4ZDRiYWQzN2JmYjNhMmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxstbeD1O8ateI19PQphMY13yoltk una9naI9oYj9mrhAZ3RIkZ2LRUVlFl4r7dK5FkAqqqC6m5kuOJiOyXFCBWUEfv3Y 9b86kBwiJBV28RQmV4lAx7Gbm8EYI4l/qZmvlEDmVnU2r3k8LQoQx0MkYIe8C2MM 52+u9AnQd+gFKpTXggubbiQGJud2qQqJG4O38z9TZR4m3PF00Fa3mnqrb2R2x+3x byPGoU8Nq/usJoTjHwjtLXyjzJi3gmML9d7JRqohj76TwQc/hin0Weg3mSLbYPuY 9Hae+V0p2k14zRRyxhiLMxOv1F9hdPzmg5rWjw0krrplIp1aHBCHWRcS+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHLjpp7uvJJiac46o1LrTe/s6K9MB8GA1UdIwQY MBaAFN5eNvFZ9XaYj7TlHUEBu4XQ0MmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAt ZWJiYmI0NDQyODZlLzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAtZWJiYmI0NDQyODZl LzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncwinYPJ xrwJv0kbJ0ftGNYKc5/ajLlrXJPav2X98q63IYk15ppKXawKm3fyiZCCNNOxgrX2 IGw7lVeQHoG8qG/BpPFf2FIpGoFeY+PbghLEFZt+3V8RFcow6jCV/8sSa3hnvN13 kbI1VlyZP+sbzaN41eVY4ewIE3ThCyStWLniJDOrSYCcao/Fo97IIr5sNeLFbQT+ dhZ5cARuLmhSoHtjN/j0UC75c6e3sUUDmEIQhHOgqT6x3/ROL8z0vtmjsW8WN+Nc KN/ul26hHtZId5irfJHhJdR9YkvG3FSaD5W3aYWTdYuMVXOf0qdl5XRJTjudz6wM FlSOoFSacSK7iQ== -----END CERTIFICATE-----Generated at Sun Dec 28 06:21:01 2025 by rpki-client