This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft File: 3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json) Hash identifier: 2U486uWxMSuX2sBtd40U9ry2dQQNCto+NfbDAtLqI08= Subject key identifier: 5C:A7:02:5D:49:77:B7:FB:6E:A0:84:C2:7D:6B:A6:B8:F3:C5:1C:A8 Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a Certificate serial: 019B37C572234F0E10684900BD2A5E098DDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft Manifest number: 0BF1 Signing time: Fri 19 Dec 2025 18:00:45 +0000 Manifest this update: Fri 19 Dec 2025 18:00:45 +0000 Manifest next update: Sat 20 Dec 2025 18:00:45 +0000 Files and hashes: 1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: uMJD35k0O3yzoronsfpdR2cXhn9y4zRfKYZDlWOcnUQ=) 2: PMD1GlDLGk7gMbwF-9_w1YlsV4M.roa (hash: yxn0bsBf+yoGp2ebzQpXlOvhqAaQoPdbhmTGHyH8IaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:72:23:4f:0e:10:68:49:00:bd:2a:5e:09:8d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a Validity Not Before: Dec 19 18:00:45 2025 GMT Not After : Dec 20 18:00:45 2025 GMT Subject: CN=5ca7025d4977b7fb6ea084c27d6ba6b8f3c51ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:02:1e:e6:b9:9b:e3:2f:fa:c9:3e:e8:07:74: 19:b5:38:94:47:60:bd:18:7a:2f:46:ce:4b:1c:cb: d2:2e:88:15:5e:94:bf:22:ed:ec:1b:32:f2:0f:b5: 4f:70:5e:f6:d0:1e:29:2b:7a:bd:71:11:7b:51:e7: ad:92:6e:0e:fd:ca:df:7d:da:5e:6d:68:13:0a:8a: 1c:69:9b:63:9f:30:1e:fa:80:21:b6:f9:42:9c:fe: db:eb:d0:b0:8f:33:80:86:43:ea:e7:da:c9:7b:ba: ca:4a:e1:ae:da:88:dc:da:be:53:9d:38:28:37:3a: 6a:68:7a:86:b4:70:b7:3d:55:1e:64:35:8b:a8:2e: a9:94:92:e5:c4:30:7b:a9:fb:06:a6:0b:2b:d8:91: c2:2a:d1:2a:7f:17:2c:58:b7:c6:1a:1d:8f:45:0c: a0:73:ad:ab:38:fd:cc:83:62:85:28:44:6f:25:28: 55:b5:41:0d:17:9b:a4:40:db:6c:48:68:01:d4:33: 61:18:34:7f:fe:5a:8f:66:1c:1a:c7:e6:11:91:bb: c3:ad:e2:2b:85:5e:75:dc:8e:5b:b0:6a:a8:e7:9c: 6d:ea:b3:af:67:77:d6:32:54:81:40:83:e9:04:f1: 24:e4:1b:94:b6:bf:b9:21:e0:bf:5b:ba:53:f9:cc: b1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A7:02:5D:49:77:B7:FB:6E:A0:84:C2:7D:6B:A6:B8:F3:C5:1C:A8 X509v3 Authority Key Identifier: keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:6a:8f:9d:15:71:8b:49:76:a0:58:7f:42:73:92:95:5f:53: 3a:2e:52:c4:fe:eb:6e:22:12:8e:90:a3:c8:cc:b0:e6:26:32: 9b:43:5e:8e:c3:f4:75:a2:3d:ad:b4:8d:db:3f:3d:34:0c:26: 79:04:f3:6b:3a:12:de:9b:09:fe:46:4c:74:f9:3d:6a:e2:90: 3b:d8:98:ca:70:94:98:7b:e6:5d:c6:dd:71:ba:47:ce:cd:f1: 1d:55:9c:7f:a9:34:c4:8c:00:b8:d4:3e:e2:9c:a2:7b:83:07: c3:41:9d:10:d8:55:ff:05:54:f0:00:d5:7d:4e:be:79:7b:26: 87:cd:99:6c:15:03:f4:c6:9d:fc:4e:18:53:52:cf:01:b6:48: 12:14:36:4f:19:21:7a:84:d6:8b:5e:e6:8c:f5:3d:91:f9:60: 75:0f:00:5b:99:d5:76:7b:49:fb:89:72:54:07:e8:6d:81:cf: 4b:ff:f4:bb:2d:00:cc:2d:d5:34:3e:33:e8:ae:8c:ca:45:79: f2:d8:76:f9:de:c1:a1:f1:aa:9a:12:ec:30:28:8a:ef:00:7e: d0:2d:8c:18:69:ed:9d:30:39:5b:99:90:72:19:33:85:f6:c0: ed:05:37:ce:6a:25:95:c4:bf:93:aa:9f:61:24:cf:06:d0:b0: a4:93:0b:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xXIjTw4QaEkAvSpeCY3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMmJhMjlhYTAxMTNmYWZkMzcwZDg2NWZiNDQ0NDk4N2I0 NzMwOGEwHhcNMjUxMjE5MTgwMDQ1WhcNMjUxMjIwMTgwMDQ1WjAzMTEwLwYDVQQD Eyg1Y2E3MDI1ZDQ5NzdiN2ZiNmVhMDg0YzI3ZDZiYTZiOGYzYzUxY2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwIe5rmb4y/6yT7oB3QZtTiUR2C9 GHovRs5LHMvSLogVXpS/Iu3sGzLyD7VPcF720B4pK3q9cRF7Ueetkm4O/crffdpe bWgTCoocaZtjnzAe+oAhtvlCnP7b69CwjzOAhkPq59rJe7rKSuGu2ojc2r5TnTgo NzpqaHqGtHC3PVUeZDWLqC6plJLlxDB7qfsGpgsr2JHCKtEqfxcsWLfGGh2PRQyg c62rOP3Mg2KFKERvJShVtUENF5ukQNtsSGgB1DNhGDR//lqPZhwax+YRkbvDreIr hV513I5bsGqo55xt6rOvZ3fWMlSBQIPpBPEk5BuUtr+5IeC/W7pT+cyxmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFynAl1Jd7f7bqCEwn1rprjzxRyoMB8GA1UdIwQY MBaAFN4ropqgET+v03DYZftERJh7RzCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85NzAwNGItYjY3MS00ZjNkLThkNTAt ZDFhNGE0NWZhZmJjLzEvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85NzAwNGItYjY3MS00ZjNkLThkNTAtZDFhNGE0NWZhZmJj LzEvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWqPnRVx i0l2oFh/QnOSlV9TOi5SxP7rbiISjpCjyMyw5iYym0NejsP0daI9rbSN2z89NAwm eQTzazoS3psJ/kZMdPk9auKQO9iYynCUmHvmXcbdcbpHzs3xHVWcf6k0xIwAuNQ+ 4pyie4MHw0GdENhV/wVU8ADVfU6+eXsmh82ZbBUD9Mad/E4YU1LPAbZIEhQ2Txkh eoTWi17mjPU9kflgdQ8AW5nVdntJ+4lyVAfobYHPS//0uy0AzC3VND4z6K6MykV5 8th2+d7BofGqmhLsMCiK7wB+0C2MGGntnTA5W5mQchkzhfbA7QU3zmollcS/k6qf YSTPBtCwpJMLMA== -----END CERTIFICATE-----Generated at Fri Dec 19 22:07:30 2025 by rpki-client