This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft File: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json) Hash identifier: e7Xb7IZQE4tFvEYJnNXOHt8nWItOvuarqQXjO3IcmMU= Subject key identifier: B0:A1:09:AB:C6:8F:50:36:23:6F:08:6F:39:61:0D:E5:CD:9B:ED:7F Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3 Certificate issuer: /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3 Certificate serial: 019B3E6CA82A6262DDDD6FF9A0ECF68A4116 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 01:01:06 +0000 Manifest this update: Sun 21 Dec 2025 01:01:06 +0000 Manifest next update: Mon 22 Dec 2025 01:01:06 +0000 Files and hashes: 1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: jvZnS3CMyDqwezpPMt42fBSLsvtDIcOpbjjG+MIBb5U=) 2: XQd1c0isqEth9h07f_gdrmhW6kM.roa (hash: WoVAodjsDqf5sS0K6LPcCANkMFHDsRKs5Hf+/9kb228=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:a8:2a:62:62:dd:dd:6f:f9:a0:ec:f6:8a:41:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3 Validity Not Before: Dec 21 01:01:06 2025 GMT Not After : Dec 22 01:01:06 2025 GMT Subject: CN=b0a109abc68f5036236f086f39610de5cd9bed7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:08:16:13:bb:6d:5f:d9:5d:1f:a3:a0:26: 4f:3c:0c:13:23:7a:89:2f:18:89:32:45:20:fe:dd: 2c:34:d5:5d:86:d5:54:a5:08:18:2b:6f:7e:be:af: 97:e7:43:c6:e6:36:95:36:b4:58:95:80:a2:43:a9: 38:15:b3:da:b8:aa:bd:ae:18:19:98:3d:52:c4:66: 06:dd:af:54:86:aa:f6:5d:a8:8f:05:99:d6:09:49: 81:f6:a3:11:a4:36:78:28:17:2d:13:a3:84:7b:16: 69:cb:2d:1c:9b:93:d7:f2:4c:33:40:42:0d:ad:11: 93:ab:5f:6f:bf:ad:5f:cd:41:f2:2e:53:00:84:e5: 58:32:1d:c6:7f:b7:3c:91:8a:c0:99:45:15:f0:af: 07:dc:13:0c:d1:5d:0b:d4:8e:e8:ba:49:5c:3a:70: 89:71:50:09:11:a2:84:8a:d9:85:29:26:94:15:29: 0b:33:46:a1:51:36:23:88:9e:34:43:e8:5f:be:9d: 1b:77:02:37:aa:f6:26:42:f5:c8:09:18:93:42:8c: 7f:ea:13:b9:05:14:45:6d:56:6e:ca:d6:d2:bb:ab: 5e:bd:a2:b1:a5:9a:37:17:33:4e:42:56:df:c0:5c: 7f:0f:2e:ac:37:cd:0a:c1:cb:b5:26:61:aa:d4:d8: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A1:09:AB:C6:8F:50:36:23:6F:08:6F:39:61:0D:E5:CD:9B:ED:7F X509v3 Authority Key Identifier: keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ae:0c:fa:f2:43:00:9c:92:97:5f:07:72:40:e6:d9:be:26: 08:35:e5:4c:0f:12:1f:d3:9f:4c:f9:c5:23:2b:df:f4:4a:16: 2c:90:ce:61:c9:76:16:1c:f8:07:ae:ad:42:5a:27:a3:d9:44: c5:7e:cc:ce:74:bc:a1:fb:0f:e7:9b:fb:1a:f0:60:d1:63:82: 1a:6b:8c:fc:f4:8c:6c:b2:67:bf:ea:54:f5:82:30:82:7b:02: 92:9e:5a:36:17:2b:ed:a8:79:2f:76:ba:4c:4d:b4:77:dc:b9: bf:31:8b:3c:60:f1:6b:c3:09:18:3e:f5:55:50:59:c0:66:86: 1e:65:ac:ba:f8:d0:b1:b1:cb:1b:d6:3d:32:1f:8b:63:43:c3: f2:d1:cf:7f:b6:ec:f4:29:36:63:b7:01:b0:2c:a6:a4:db:fb: b3:66:b9:5b:3d:7f:08:28:d5:cd:01:89:0f:dd:f3:f8:2a:b1: 79:23:0d:08:35:d1:24:32:7e:1b:51:8c:29:ad:83:e0:2d:66: a4:5b:74:01:18:6a:80:88:bb:75:35:6e:0c:ca:86:9b:23:66: 66:c6:a8:2b:ba:fc:d5:7b:02:d2:44:10:54:be:47:bc:c7:fd: 08:c6:c2:ab:22:6d:d3:20:52:9f:11:5a:89:9c:a7:8a:79:12: ea:c1:04:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bKgqYmLd3W/5oOz2ikEWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMzc4MTJiZDQ1MjczZWEzYjJhNTNkOWU5NmY2ZGJhMjE1 ODI2ZjMwHhcNMjUxMjIxMDEwMTA2WhcNMjUxMjIyMDEwMTA2WjAzMTEwLwYDVQQD EyhiMGExMDlhYmM2OGY1MDM2MjM2ZjA4NmYzOTYxMGRlNWNkOWJlZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ0IFhO7bV/ZXR+joCZPPAwTI3qJ LxiJMkUg/t0sNNVdhtVUpQgYK29+vq+X50PG5jaVNrRYlYCiQ6k4FbPauKq9rhgZ mD1SxGYG3a9Uhqr2XaiPBZnWCUmB9qMRpDZ4KBctE6OEexZpyy0cm5PX8kwzQEIN rRGTq19vv61fzUHyLlMAhOVYMh3Gf7c8kYrAmUUV8K8H3BMM0V0L1I7ouklcOnCJ cVAJEaKEitmFKSaUFSkLM0ahUTYjiJ40Q+hfvp0bdwI3qvYmQvXICRiTQox/6hO5 BRRFbVZuytbSu6tevaKxpZo3FzNOQlbfwFx/Dy6sN80Kwcu1JmGq1NjGkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLChCavGj1A2I28IbzlhDeXNm+1/MB8GA1UdIwQY MBaAFN43gSvUUnPqOypT2elvbbohWCbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2plQks5UlNjLW83S2xQWjZXOXR1aUZZSnZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iMjZjNDQtOWQxNi00YzNkLTlmMWQt YWY2NDZjOGY0YWY2LzEvM2plQks5UlNjLW83S2xQWjZXOXR1aUZZSnZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iMjZjNDQtOWQxNi00YzNkLTlmMWQtYWY2NDZjOGY0YWY2 LzEvM2plQks5UlNjLW83S2xQWjZXOXR1aUZZSnZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAea4M+vJD AJySl18HckDm2b4mCDXlTA8SH9OfTPnFIyvf9EoWLJDOYcl2Fhz4B66tQlono9lE xX7MznS8ofsP55v7GvBg0WOCGmuM/PSMbLJnv+pU9YIwgnsCkp5aNhcr7ah5L3a6 TE20d9y5vzGLPGDxa8MJGD71VVBZwGaGHmWsuvjQsbHLG9Y9Mh+LY0PD8tHPf7bs 9Ck2Y7cBsCympNv7s2a5Wz1/CCjVzQGJD93z+CqxeSMNCDXRJDJ+G1GMKa2D4C1m pFt0ARhqgIi7dTVuDMqGmyNmZsaoK7r81XsC0kQQVL5HvMf9CMbCqyJt0yBSnxFa iZyninkS6sEE3Q== -----END CERTIFICATE-----Generated at Sun Dec 21 02:59:20 2025 by rpki-client