This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json) Hash identifier: F8xq0sO0gWQVwriOlZNBVPULyW5LBxCdDuqx6NP2BW4= Subject key identifier: DB:28:16:AF:A8:3F:E8:3D:05:59:33:B6:28:2E:37:31:64:99:1B:E5 Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93 Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93 Certificate serial: 019B4136D745ECCA0AEE145EBD39AA0263D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft Manifest number: 0733 Signing time: Sun 21 Dec 2025 14:01:11 +0000 Manifest this update: Sun 21 Dec 2025 14:01:11 +0000 Manifest next update: Mon 22 Dec 2025 14:01:11 +0000 Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: BXe0egktcajbBImPqoL2eNBHUE80sFTlSvPgiLMh01E=) 2: Q6We2_Kzknmf_FU65X_ThS9Li9U.roa (hash: T5kdvis2FcaJDZX7ZiymCfqr46qyRqmHtR1xf7wekhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:d7:45:ec:ca:0a:ee:14:5e:bd:39:aa:02:63:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93 Validity Not Before: Dec 21 14:01:11 2025 GMT Not After : Dec 22 14:01:11 2025 GMT Subject: CN=db2816afa83fe83d055933b6282e373164991be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:0d:f7:62:d3:73:56:ab:67:d2:56:a2:8e: 59:d7:2e:b3:c9:ac:e1:ff:ed:de:b5:a5:33:98:0b: 50:b8:52:cb:38:b9:f2:f8:6b:a9:3c:2d:02:25:97: a1:1a:94:7c:89:54:1d:7b:53:b7:e8:bd:24:89:75: 6c:f4:ee:17:e5:44:cb:1c:c5:9a:75:ee:8c:5a:c0: 0b:8b:6b:11:ce:24:9d:06:6e:e0:5c:b1:db:f9:35: 16:8b:87:c5:8c:02:87:b6:94:fc:ba:f4:fa:00:0e: 17:8a:59:fe:07:d3:c8:b5:04:a6:39:9b:0e:21:54: de:a5:d4:3d:16:f8:67:49:8d:75:38:74:a3:d7:c8: 14:5b:2b:26:22:98:e4:dc:b5:8b:9e:ae:fb:a0:f5: 9f:b5:c0:c2:87:e3:08:f7:56:ee:b3:13:9b:0f:90: c1:12:2c:4d:3b:de:95:32:f8:ba:35:54:41:98:8c: 9c:dc:6c:70:2b:a1:df:cc:8b:e3:14:00:ee:e6:16: 6e:ad:b1:97:6a:77:ae:23:3e:05:f7:50:5e:e9:6f: ac:b2:20:c1:56:36:6d:55:39:23:43:e8:b5:d3:a5: 34:9d:23:69:db:2c:5f:18:de:d4:31:77:49:03:55: 00:18:17:4c:a6:ca:16:f6:cf:c7:db:bf:ce:72:e0: 15:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:28:16:AF:A8:3F:E8:3D:05:59:33:B6:28:2E:37:31:64:99:1B:E5 X509v3 Authority Key Identifier: keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a6:d6:3f:8d:67:35:6a:29:90:96:14:18:ed:35:ad:61:04: 12:32:87:6b:57:cf:c4:97:1c:7c:53:d4:c8:45:1f:98:b2:25: 31:86:64:ab:e0:ac:cc:3d:cf:ee:2f:28:85:a0:f4:93:a5:8f: 95:ed:58:38:43:f9:56:23:9e:9e:0a:c1:ea:df:83:db:a3:1e: b0:2e:fc:47:67:1a:a8:79:38:f3:f2:4c:58:11:42:69:16:0f: 51:9e:d8:80:1a:78:bb:45:45:6c:05:21:f3:57:32:b0:78:1a: 51:26:b6:d7:2f:4b:2b:d7:b1:99:52:20:3e:7d:f2:21:f7:2b: e7:c4:88:2a:c1:08:dc:0e:44:2e:4e:a6:82:55:3e:f2:e4:13: 75:24:c9:39:00:94:de:f6:b0:1f:28:9c:bf:12:a2:99:64:fa: 8b:36:a6:8b:e1:f0:47:0b:59:06:78:e9:5d:8f:73:89:63:fe: 2f:e7:45:89:1e:6f:6e:46:54:8d:1e:3f:44:4c:53:f9:65:74: 4c:e5:37:36:a7:de:b5:4a:5a:94:f8:ad:35:ac:d7:1e:21:c7: de:16:4f:c3:b0:00:ec:58:d5:9d:23:88:31:e0:2f:bd:c4:09: 0f:9d:d6:ca:1a:f7:86:cb:62:cf:6c:fc:d6:d7:36:3d:0a:a3: 10:04:6e:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNtdF7MoK7hRevTmqAmPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGI0YTE4YTdlMTUxYTM3ZGE1ZTRjY2RhYTllN2RiZDg4 ZTlkOTMwHhcNMjUxMjIxMTQwMTExWhcNMjUxMjIyMTQwMTExWjAzMTEwLwYDVQQD EyhkYjI4MTZhZmE4M2ZlODNkMDU1OTMzYjYyODJlMzczMTY0OTkxYmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFYN92LTc1arZ9JWoo5Z1y6zyazh /+3etaUzmAtQuFLLOLny+GupPC0CJZehGpR8iVQde1O36L0kiXVs9O4X5UTLHMWa de6MWsALi2sRziSdBm7gXLHb+TUWi4fFjAKHtpT8uvT6AA4Xiln+B9PItQSmOZsO IVTepdQ9FvhnSY11OHSj18gUWysmIpjk3LWLnq77oPWftcDCh+MI91busxObD5DB EixNO96VMvi6NVRBmIyc3GxwK6HfzIvjFADu5hZurbGXaneuIz4F91Be6W+ssiDB VjZtVTkjQ+i106U0nSNp2yxfGN7UMXdJA1UAGBdMpsoW9s/H27/OcuAVWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsoFq+oP+g9BVkztiguNzFkmRvlMB8GA1UdIwQY MBaAFNxLShin4VGjfaXkzNqp59vYjp2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUt M2RkMjkzZjc0ZTVlLzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUtM2RkMjkzZjc0ZTVl LzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKbWP41n NWopkJYUGO01rWEEEjKHa1fPxJccfFPUyEUfmLIlMYZkq+CszD3P7i8ohaD0k6WP le1YOEP5ViOengrB6t+D26MesC78R2caqHk48/JMWBFCaRYPUZ7YgBp4u0VFbAUh 81cysHgaUSa21y9LK9exmVIgPn3yIfcr58SIKsEI3A5ELk6mglU+8uQTdSTJOQCU 3vawHyicvxKimWT6izami+HwRwtZBnjpXY9ziWP+L+dFiR5vbkZUjR4/RExT+WV0 TOU3NqfetUpalPitNazXHiHH3hZPw7AA7FjVnSOIMeAvvcQJD53Wyhr3hstiz2z8 1tc2PQqjEARuUQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:27:44 2025 by rpki-client