This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft File: 3XF0IQf16FBis-CuZa-kuuZw4Es.mft (raw, json) Hash identifier: MMtNgknDiyd/xiOZepUz60h0yoZpa3qqvpgSv/6HgBY= Subject key identifier: 1A:FC:34:4A:4C:2F:19:4B:1F:EC:FB:A6:91:F7:0B:26:CB:E5:05:A0 Authority key identifier: DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B Certificate issuer: /CN=dd71742107f5e85062b3e0ae65afa4bae670e04b Certificate serial: 019B37FCD722DFD4166C5E957CD29F03AB11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft Manifest number: 0606 Signing time: Fri 19 Dec 2025 19:01:15 +0000 Manifest this update: Fri 19 Dec 2025 19:01:15 +0000 Manifest next update: Sat 20 Dec 2025 19:01:15 +0000 Files and hashes: 1: 3XF0IQf16FBis-CuZa-kuuZw4Es.crl (hash: Hrd04Ab39BzjvmQnk3KgkhvHkhKdgeUVT0NBSh2QsvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:d7:22:df:d4:16:6c:5e:95:7c:d2:9f:03:ab:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd71742107f5e85062b3e0ae65afa4bae670e04b Validity Not Before: Dec 19 19:01:15 2025 GMT Not After : Dec 20 19:01:15 2025 GMT Subject: CN=1afc344a4c2f194b1fecfba691f70b26cbe505a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:ee:d8:8f:20:b8:d4:65:09:15:c6:ba:ac: c9:f1:23:5d:c1:12:40:48:c8:f7:bd:38:6a:0b:04: d1:0e:10:d3:7b:16:46:f7:8d:61:98:d9:b3:f2:f3: 89:84:67:1a:65:61:8a:b7:65:59:6f:1e:aa:13:aa: fc:ef:f1:84:15:91:2a:8b:74:77:1c:f3:49:c6:da: 5c:09:22:97:73:48:c0:85:6e:fa:c0:53:fa:2f:4d: 83:e0:a9:2e:a9:b5:0e:ab:63:85:ff:50:98:04:b9: 77:38:d1:55:16:14:e1:07:94:56:91:26:24:cf:5a: 38:9d:ed:1b:1c:86:4b:cb:ba:b6:9e:7f:5e:66:f8: f4:d3:20:b1:80:4b:74:8a:e8:54:30:a1:e5:3b:32: c7:dd:cd:b7:a3:c1:97:a8:47:11:6d:cd:14:fb:d7: cb:b4:38:a7:33:8b:77:8a:11:13:ca:94:1b:01:30: 56:86:dd:3f:a8:c1:06:4c:f7:e9:6b:9f:03:30:63: 64:ce:59:3b:94:56:dc:dd:11:5a:c6:07:1e:3c:4b: 8b:47:15:2e:4f:1e:5e:62:3d:24:ed:00:97:cd:6f: 77:35:2a:67:f2:ef:30:66:83:55:e8:a1:ad:97:b5: 63:9b:bb:a8:ef:fc:e1:a4:f8:ff:47:36:c2:79:3f: 4b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FC:34:4A:4C:2F:19:4B:1F:EC:FB:A6:91:F7:0B:26:CB:E5:05:A0 X509v3 Authority Key Identifier: keyid:DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:03:39:2f:af:d2:b1:62:c8:80:0b:ba:d6:cc:bc:4a:a7:8c: 04:08:08:95:06:b3:07:f4:da:9e:25:8b:f0:64:99:f3:15:cb: c2:07:94:0f:68:65:82:f7:63:8f:3f:86:b3:57:ac:94:78:73: 65:1c:48:6f:cf:68:3a:36:e6:e5:e0:fc:84:a1:40:af:32:50: e2:4a:b9:0e:3e:aa:34:3e:12:3a:9f:9a:c9:58:1f:b8:c9:c8: 1e:cd:79:ef:97:cc:0f:2c:40:21:81:00:93:c3:09:cb:d6:33: ab:33:d5:ca:1b:bb:d6:d1:6e:72:4b:f5:9a:01:1a:46:1b:d6: 8d:5e:1f:03:22:e0:58:ad:bb:60:37:cc:1f:ee:fd:eb:02:0b: 79:98:27:94:f0:ac:9d:bb:3a:a1:6f:bf:8c:4a:58:7f:3e:90: a3:32:ba:f9:96:06:d0:4f:10:b3:db:6b:f6:98:10:80:75:83: 83:58:55:36:7a:66:f6:c0:26:af:67:27:a3:9d:43:6d:99:60: 5b:90:65:aa:c6:a0:3a:11:03:d2:15:31:a5:a0:f2:c6:79:58: 42:47:9c:e7:e1:78:59:47:24:e3:50:3e:11:3c:8c:f6:4e:f2: 86:60:77:40:b6:3b:d0:f6:ec:86:9e:2b:d2:8b:a1:7b:cf:ad: e1:d6:77:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/Nci39QWbF6VfNKfA6sRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNzE3NDIxMDdmNWU4NTA2MmIzZTBhZTY1YWZhNGJhZTY3 MGUwNGIwHhcNMjUxMjE5MTkwMTE1WhcNMjUxMjIwMTkwMTE1WjAzMTEwLwYDVQQD EygxYWZjMzQ0YTRjMmYxOTRiMWZlY2ZiYTY5MWY3MGIyNmNiZTUwNWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhju2I8guNRlCRXGuqzJ8SNdwRJA SMj3vThqCwTRDhDTexZG941hmNmz8vOJhGcaZWGKt2VZbx6qE6r87/GEFZEqi3R3 HPNJxtpcCSKXc0jAhW76wFP6L02D4KkuqbUOq2OF/1CYBLl3ONFVFhThB5RWkSYk z1o4ne0bHIZLy7q2nn9eZvj00yCxgEt0iuhUMKHlOzLH3c23o8GXqEcRbc0U+9fL tDinM4t3ihETypQbATBWht0/qMEGTPfpa58DMGNkzlk7lFbc3RFaxgcePEuLRxUu Tx5eYj0k7QCXzW93NSpn8u8wZoNV6KGtl7Vjm7uo7/zhpPj/RzbCeT9L9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBr8NEpMLxlLH+z7ppH3CybL5QWgMB8GA1UdIwQY MBaAFN1xdCEH9ehQYrPgrmWvpLrmcOBLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1hGMElRZjE2RkJpcy1DdVphLWt1dVp3NEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZGU0YTktNjU4Yy00MDZiLThlZTct YTc3MDZiYTMwODg5LzEvM1hGMElRZjE2RkJpcy1DdVphLWt1dVp3NEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8yZGU0YTktNjU4Yy00MDZiLThlZTctYTc3MDZiYTMwODg5 LzEvM1hGMElRZjE2RkJpcy1DdVphLWt1dVp3NEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQM5L6/S sWLIgAu61sy8SqeMBAgIlQazB/TaniWL8GSZ8xXLwgeUD2hlgvdjjz+Gs1eslHhz ZRxIb89oOjbm5eD8hKFArzJQ4kq5Dj6qND4SOp+ayVgfuMnIHs1575fMDyxAIYEA k8MJy9YzqzPVyhu71tFuckv1mgEaRhvWjV4fAyLgWK27YDfMH+796wILeZgnlPCs nbs6oW+/jEpYfz6QozK6+ZYG0E8Qs9tr9pgQgHWDg1hVNnpm9sAmr2cno51DbZlg W5BlqsagOhED0hUxpaDyxnlYQkec5+F4WUck41A+ETyM9k7yhmB3QLY70Pbshp4r 0ouhe8+t4dZ3AA== -----END CERTIFICATE-----Generated at Sat Dec 20 00:22:22 2025 by rpki-client