This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json) Hash identifier: sW3FGOwxlXEeRSeOQ0wcHBSac7QKB2dUwn7q8Hebmlw= Subject key identifier: AB:6C:14:B7:19:76:83:F5:BB:49:EB:01:6C:E1:4D:A5:60:4E:AC:D6 Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1 Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1 Certificate serial: 019B620B6D1F3DB0260413AF9892D31A92E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft Manifest number: 16F5 Signing time: Sat 27 Dec 2025 23:01:14 +0000 Manifest this update: Sat 27 Dec 2025 23:01:14 +0000 Manifest next update: Sun 28 Dec 2025 23:01:14 +0000 Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: M+lpfcuKz+CVeP8uX0lssKrAaU3Rwt+gGwfKY5Q2Vgg=) 2: bPbl9DKxYJUxR3ZUVzukhGWYurM.roa (hash: FAnYMWhXeH8TjI8m2ivn5nzVc0hLKvZ4QbjQQh/aekU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0b:6d:1f:3d:b0:26:04:13:af:98:92:d3:1a:92:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1 Validity Not Before: Dec 27 23:01:14 2025 GMT Not After : Dec 28 23:01:14 2025 GMT Subject: CN=ab6c14b7197683f5bb49eb016ce14da5604eacd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:68:c7:8e:83:9a:c6:17:5c:df:19:35:00: 29:86:c2:03:06:40:46:60:41:8c:00:80:3c:8e:1f: fe:62:9d:ba:30:7d:14:de:98:9b:e8:8b:29:44:47: 51:a5:d6:4a:15:76:e9:5b:26:92:d4:4d:eb:b6:79: 68:a9:8a:48:1c:8b:e5:67:b3:08:30:5d:40:ec:99: 4b:a8:d5:c8:69:21:c5:d1:c8:48:8d:33:c6:47:5a: b9:04:5b:cc:72:64:b1:ac:4b:cd:a1:a2:fa:d9:95: 1a:bd:72:2a:00:56:ab:51:9d:19:fe:0a:af:4d:fc: 37:21:d7:4b:b4:d7:22:10:e5:2c:e2:34:e4:da:d6: d6:4a:21:a1:bb:0a:6c:9a:c3:eb:a0:97:dc:51:b9: 9d:8a:97:09:36:4c:c4:c8:45:ee:62:88:19:b6:7d: 6b:8e:52:69:82:b6:5e:8f:93:0d:7c:fd:75:30:c3: 70:91:43:ab:aa:4b:5a:27:3b:70:5f:04:a5:b8:24: f8:fb:7a:c5:93:2b:34:b3:7d:db:db:3d:18:07:68: ae:54:7b:da:a5:c2:9f:f4:72:b3:ba:e5:42:db:69: ba:50:f4:98:5b:ac:a8:67:37:8e:2f:6b:75:9c:2f: 2f:07:28:ad:83:13:88:da:7f:c8:d9:5b:d9:29:99: d5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6C:14:B7:19:76:83:F5:BB:49:EB:01:6C:E1:4D:A5:60:4E:AC:D6 X509v3 Authority Key Identifier: keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e3:93:00:82:32:13:e5:74:30:7c:8f:c6:a5:91:41:2d:aa: 82:ea:0a:d8:9a:1e:4a:44:8e:2a:fb:9d:72:72:17:aa:53:e2: 90:b0:e4:0d:77:4a:ad:0d:e8:e0:16:97:06:89:84:fe:6d:f5: 10:0d:ae:46:88:d3:ff:be:ff:86:6b:a1:fc:4d:f4:d4:42:a0: f5:10:b0:09:72:7c:e4:70:52:61:9f:91:d4:16:2d:53:41:8d: 6b:3c:24:a5:53:da:90:a6:a8:45:41:1a:8e:eb:bd:0b:be:d8: 78:c4:22:56:a6:13:83:8d:5c:59:4d:5d:8d:8a:1e:8c:35:60: 46:8f:ca:18:59:51:28:a7:22:3b:c2:4a:98:79:54:a3:b6:74: 7f:8e:00:08:bb:08:f7:22:92:f3:dd:6e:25:ea:b0:94:a7:09: 3c:8f:85:3e:1e:b5:b4:a2:02:66:db:bd:e0:fd:2b:1c:f5:6e: 3d:96:63:51:7d:4c:79:22:19:f2:c1:38:98:42:aa:4b:57:da: 9f:4d:fd:70:22:49:6b:bd:90:53:9b:02:a9:d5:e5:7c:95:15: 62:de:e2:27:c9:f0:d0:d8:66:4f:04:6f:32:9f:b2:8e:b6:87: 3a:19:c5:15:1a:a3:4f:ab:4d:7a:e5:11:15:c5:f1:be:59:88: 6c:c4:d3:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiC20fPbAmBBOvmJLTGpLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDIyYzI0MTQ3ZWM3OWZhOTA2NDY0YWIxNDNmZDQ3ZTNi ZWIzYTEwHhcNMjUxMjI3MjMwMTE0WhcNMjUxMjI4MjMwMTE0WjAzMTEwLwYDVQQD EyhhYjZjMTRiNzE5NzY4M2Y1YmI0OWViMDE2Y2UxNGRhNTYwNGVhY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf5ox46DmsYXXN8ZNQAphsIDBkBG YEGMAIA8jh/+Yp26MH0U3pib6IspREdRpdZKFXbpWyaS1E3rtnloqYpIHIvlZ7MI MF1A7JlLqNXIaSHF0chIjTPGR1q5BFvMcmSxrEvNoaL62ZUavXIqAFarUZ0Z/gqv Tfw3IddLtNciEOUs4jTk2tbWSiGhuwpsmsProJfcUbmdipcJNkzEyEXuYogZtn1r jlJpgrZej5MNfP11MMNwkUOrqktaJztwXwSluCT4+3rFkys0s33b2z0YB2iuVHva pcKf9HKzuuVC22m6UPSYW6yoZzeOL2t1nC8vByitgxOI2n/I2VvZKZnVtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtsFLcZdoP1u0nrAWzhTaVgTqzWMB8GA1UdIwQY MBaAFNxCLCQUfsefqQZGSrFD/UfjvrOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMt MjE2NTEzNmM5ZDlhLzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMtMjE2NTEzNmM5ZDlh LzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuOTAIIy E+V0MHyPxqWRQS2qguoK2JoeSkSOKvudcnIXqlPikLDkDXdKrQ3o4BaXBomE/m31 EA2uRojT/77/hmuh/E301EKg9RCwCXJ85HBSYZ+R1BYtU0GNazwkpVPakKaoRUEa juu9C77YeMQiVqYTg41cWU1djYoejDVgRo/KGFlRKKciO8JKmHlUo7Z0f44ACLsI 9yKS891uJeqwlKcJPI+FPh61tKICZtu94P0rHPVuPZZjUX1MeSIZ8sE4mEKqS1fa n039cCJJa72QU5sCqdXlfJUVYt7iJ8nw0NhmTwRvMp+yjraHOhnFFRqjT6tNeuUR FcXxvlmIbMTTTw== -----END CERTIFICATE-----Generated at Sun Dec 28 06:40:13 2025 by rpki-client