This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft File: 3frtS0AyNuLKi-twkcug4GpUPQo.mft (raw, json) Hash identifier: ZLXYCCoPHvm5rPDOMlrKT2ET0+lsWdyDfMogWik5ZLQ= Subject key identifier: 6B:C9:7A:C2:39:14:1F:12:EA:97:54:2F:C3:84:65:1C:53:7B:09:8A Authority key identifier: DD:FA:ED:4B:40:32:36:E2:CA:8B:EB:70:91:CB:A0:E0:6A:54:3D:0A Certificate issuer: /CN=ddfaed4b403236e2ca8beb7091cba0e06a543d0a Certificate serial: 019B747F4D8E087C704705385C63F967B985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft Manifest number: 02E8 Signing time: Wed 31 Dec 2025 13:00:58 +0000 Manifest this update: Wed 31 Dec 2025 13:00:58 +0000 Manifest next update: Thu 01 Jan 2026 13:00:58 +0000 Files and hashes: 1: 3frtS0AyNuLKi-twkcug4GpUPQo.crl (hash: jDlogW0gJpE5hVo0a6vJVcRGh9AaIoDDs1+yZg9mW0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:7f:4d:8e:08:7c:70:47:05:38:5c:63:f9:67:b9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddfaed4b403236e2ca8beb7091cba0e06a543d0a Validity Not Before: Dec 31 13:00:58 2025 GMT Not After : Jan 1 13:00:58 2026 GMT Subject: CN=6bc97ac239141f12ea97542fc384651c537b098a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:ce:bb:0e:99:1f:ed:b1:ed:b3:36:49:2c: cd:a3:c0:b5:87:84:83:ec:0e:36:e2:6b:cf:08:67: 63:ec:37:df:1d:40:43:9c:f6:ee:f8:d7:e0:75:48: cb:c1:0e:3a:86:1f:0c:78:bc:53:ef:a0:64:92:23: f0:39:00:74:51:2d:ca:3d:e0:47:48:3f:17:ae:f0: 72:92:80:a7:18:2d:a2:c5:a2:56:68:40:96:f3:3d: 2c:0d:04:1d:91:19:dc:13:3c:7a:4a:b5:4b:ad:5d: f9:df:b2:ed:1b:a8:48:26:c1:c5:9d:cc:24:b5:e9: 5d:82:da:ac:2c:f4:8d:05:6b:ce:fb:38:cc:63:09: b2:40:84:8f:1e:44:8a:27:6c:45:b7:3c:38:b6:7f: b9:25:8a:45:4f:fb:56:e5:14:84:87:4e:73:50:d6: 4b:26:c8:31:4a:75:90:8f:90:b4:61:0e:1f:df:52: 0f:c1:77:5b:13:c2:0e:5d:99:91:97:54:1b:ae:87: 4d:af:15:42:c3:a0:12:cb:6e:13:f1:43:26:7c:d0: a6:d7:7d:1f:32:73:90:eb:88:0a:c2:a8:4c:47:57: 16:1c:46:48:dc:43:86:3d:f7:3f:3e:a2:3e:19:c9: f6:c6:e3:1f:08:de:4f:75:ee:2f:a7:c3:b7:a4:18: 01:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C9:7A:C2:39:14:1F:12:EA:97:54:2F:C3:84:65:1C:53:7B:09:8A X509v3 Authority Key Identifier: keyid:DD:FA:ED:4B:40:32:36:E2:CA:8B:EB:70:91:CB:A0:E0:6A:54:3D:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:84:8c:b7:5b:18:27:82:4c:c2:e5:ea:e8:10:0e:07:4e:4c: 17:63:b0:42:43:3e:bb:25:a5:f0:9b:21:ad:b7:da:80:63:05: 9e:36:4b:3b:1a:3d:c9:ee:d0:47:09:6b:ba:7e:cf:e1:eb:6f: bb:0c:7f:d6:ab:5e:9d:23:ed:60:1a:cd:f5:86:c8:12:b8:32: a6:1d:02:ce:20:ba:ef:cf:1d:92:be:ff:78:fd:bd:81:6b:97: 04:b9:f9:01:be:29:b6:a9:73:69:f3:03:c8:aa:b1:c1:61:38: 3b:b2:49:25:a7:e3:3b:f3:5f:8e:02:87:01:db:bb:49:19:46: 1f:cf:90:8c:ca:ae:79:a6:83:20:fc:f7:7d:ee:1f:d5:6a:92: cb:2b:34:ac:3b:96:1c:72:97:f8:13:cc:87:0d:36:38:8e:95: 99:a1:c0:16:d2:92:29:49:ba:6e:41:f5:82:e1:48:a6:df:53: 1a:42:56:ed:84:aa:bd:6c:07:d9:93:d7:7c:1e:32:83:34:71: 30:94:b9:db:5f:0d:c0:d5:90:bc:58:8e:01:e7:87:95:dc:42: 6f:00:e1:56:49:55:64:17:c9:2d:22:62:a4:4b:3d:a3:cf:8f: 3c:53:24:c2:4e:bd:0d:85:de:48:f1:62:77:ad:32:ce:3b:43: a2:eb:88:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0f02OCHxwRwU4XGP5Z7mFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZmFlZDRiNDAzMjM2ZTJjYThiZWI3MDkxY2JhMGUwNmE1 NDNkMGEwHhcNMjUxMjMxMTMwMDU4WhcNMjYwMTAxMTMwMDU4WjAzMTEwLwYDVQQD Eyg2YmM5N2FjMjM5MTQxZjEyZWE5NzU0MmZjMzg0NjUxYzUzN2IwOThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD7Ouw6ZH+2x7bM2SSzNo8C1h4SD 7A424mvPCGdj7DffHUBDnPbu+NfgdUjLwQ46hh8MeLxT76BkkiPwOQB0US3KPeBH SD8XrvBykoCnGC2ixaJWaECW8z0sDQQdkRncEzx6SrVLrV3537LtG6hIJsHFncwk teldgtqsLPSNBWvO+zjMYwmyQISPHkSKJ2xFtzw4tn+5JYpFT/tW5RSEh05zUNZL JsgxSnWQj5C0YQ4f31IPwXdbE8IOXZmRl1QbrodNrxVCw6ASy24T8UMmfNCm130f MnOQ64gKwqhMR1cWHEZI3EOGPfc/PqI+Gcn2xuMfCN5Pde4vp8O3pBgBwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvJesI5FB8S6pdUL8OEZRxTewmKMB8GA1UdIwQY MBaAFN367UtAMjbiyovrcJHLoOBqVD0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZydFMwQXlOdUxLaS10d2tjdWc0R3BVUFFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jNTY5MTctMmNjMy00MDY3LTg1MGEt YjkzN2QxMjA1YWIxLzEvM2ZydFMwQXlOdUxLaS10d2tjdWc0R3BVUFFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9jNTY5MTctMmNjMy00MDY3LTg1MGEtYjkzN2QxMjA1YWIx LzEvM2ZydFMwQXlOdUxLaS10d2tjdWc0R3BVUFFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAloSMt1sY J4JMwuXq6BAOB05MF2OwQkM+uyWl8JshrbfagGMFnjZLOxo9ye7QRwlrun7P4etv uwx/1qtenSPtYBrN9YbIErgyph0CziC6788dkr7/eP29gWuXBLn5Ab4ptqlzafMD yKqxwWE4O7JJJafjO/NfjgKHAdu7SRlGH8+QjMqueaaDIPz3fe4f1WqSyys0rDuW HHKX+BPMhw02OI6VmaHAFtKSKUm6bkH1guFIpt9TGkJW7YSqvWwH2ZPXfB4ygzRx MJS5218NwNWQvFiOAeeHldxCbwDhVklVZBfJLSJipEs9o8+PPFMkwk69DYXeSPFi d60yzjtDouuIGA== -----END CERTIFICATE-----Generated at Wed Dec 31 21:05:56 2025 by rpki-client