This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft File: 3GIdzcetC-Mx18mkR_KhZOQupP0.mft (raw, json) Hash identifier: Qpv9lDFwq8K1ysem5707/xn66vjDieAanCrlW0+52G4= Subject key identifier: 67:1B:F7:03:EF:64:62:70:21:37:0B:BD:37:33:2E:28:02:BC:82:B6 Authority key identifier: DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD Certificate issuer: /CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd Certificate serial: 019B5AF67D6903FD5AC51042F5660FDF2B6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft Manifest number: 1D Signing time: Fri 26 Dec 2025 14:01:01 +0000 Manifest this update: Fri 26 Dec 2025 14:01:01 +0000 Manifest next update: Sat 27 Dec 2025 14:01:01 +0000 Files and hashes: 1: 3GIdzcetC-Mx18mkR_KhZOQupP0.crl (hash: pMTyOM2EkZSEDGO1iV41GiXHPtTR4dj1vexLzgulY8Y=) 2: z9zBZWxKEctyUTKIm_8RlJkrC_k.roa (hash: IJThR3o0JV974+Yl2uq1VkI1yGHcJoO2uQGyrnQksfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:7d:69:03:fd:5a:c5:10:42:f5:66:0f:df:2b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd Validity Not Before: Dec 26 14:01:01 2025 GMT Not After : Dec 27 14:01:01 2025 GMT Subject: CN=671bf703ef64627021370bbd37332e2802bc82b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:04:0f:76:e8:33:e8:0b:90:a6:ef:c0:45:86: 82:1d:90:f6:3c:f6:24:05:a5:99:c3:6e:24:39:7c: 43:ac:b4:c4:61:06:f9:e7:60:f5:cf:37:21:5a:e8: eb:34:3f:d2:9d:15:13:28:0d:6b:37:dc:20:55:8e: 34:fb:5a:19:b8:1b:b0:6c:6e:a5:c9:7a:57:c1:f3: 8b:89:1b:39:96:7c:8a:0e:5d:69:15:c2:f5:e3:d1: 75:5e:13:d7:72:41:25:31:71:83:d0:1e:9c:18:db: 98:30:5a:7a:7e:23:ae:51:f2:3c:e0:01:3a:c1:4a: 73:f4:f3:0b:70:f6:f7:25:cd:e7:5f:21:6a:f7:02: e0:93:03:b0:b2:b0:26:01:96:38:66:b9:d9:b3:7c: c4:36:41:3f:c1:d0:41:50:17:d9:43:19:ff:41:83: df:ec:c6:0b:a4:36:08:bd:48:03:08:62:47:2a:01: 11:da:b8:fd:d0:2a:7f:13:69:6b:7f:33:d5:46:8b: 66:14:32:ae:ea:01:d3:17:81:42:7c:7a:af:4a:b9: 35:61:56:7a:96:6f:5b:3b:b7:01:1b:c3:ed:16:54: b1:f5:a8:9e:65:3a:9c:c8:a3:6a:35:33:66:1b:18: c4:29:cb:bf:56:2b:ad:f5:d6:b7:33:e6:1b:3c:25: 1e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1B:F7:03:EF:64:62:70:21:37:0B:BD:37:33:2E:28:02:BC:82:B6 X509v3 Authority Key Identifier: keyid:DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4d:9b:a8:64:f4:46:42:14:6e:45:60:7e:ce:99:bc:d8:ab: 62:71:e7:5a:30:13:07:8c:9f:47:26:e0:7a:ec:5b:96:c9:0b: 8e:8b:c6:82:03:c5:7c:a9:3b:b2:6e:66:d7:c6:9b:0c:7c:c3: c8:c9:b1:86:31:80:65:65:79:24:f4:e3:4c:42:21:64:eb:a8: e7:1a:0a:36:41:5b:89:7f:48:60:f5:d5:a5:0c:a0:54:f7:79: 7e:b5:a2:c7:fc:72:91:b9:1a:4f:0c:85:e8:6b:ed:1d:13:03: b8:a2:d2:bd:38:49:43:f6:60:b4:08:03:12:39:bd:97:58:cf: e2:07:b2:0a:96:d4:63:e8:d9:12:b4:24:23:41:48:05:dc:af: 18:79:45:f1:4d:8f:61:cf:33:e0:0a:1f:70:b1:cc:60:bf:23: 9e:eb:7d:92:14:c5:f2:a0:ce:64:8b:18:2d:8b:7b:b2:9c:62: d9:f7:f8:86:40:50:af:9f:8c:a3:b9:16:e3:ea:d7:d4:6f:1d: ac:34:00:ba:32:d6:c2:e9:24:38:c6:02:18:2c:fb:dc:08:9f: c9:e7:34:85:f8:5c:64:8c:d3:70:d8:5c:d0:92:e2:b3:59:2e: ac:87:7f:20:50:b5:d2:97:1e:5e:51:b5:b0:6b:31:8c:a2:e0: ef:c7:e6:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9n1pA/1axRBC9WYP3ytqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNjIxZGNkYzdhZDBiZTMzMWQ3YzlhNDQ3ZjJhMTY0ZTQy ZWE0ZmQwHhcNMjUxMjI2MTQwMTAxWhcNMjUxMjI3MTQwMTAxWjAzMTEwLwYDVQQD Eyg2NzFiZjcwM2VmNjQ2MjcwMjEzNzBiYmQzNzMzMmUyODAyYmM4MmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwQPdugz6AuQpu/ARYaCHZD2PPYk BaWZw24kOXxDrLTEYQb552D1zzchWujrND/SnRUTKA1rN9wgVY40+1oZuBuwbG6l yXpXwfOLiRs5lnyKDl1pFcL149F1XhPXckElMXGD0B6cGNuYMFp6fiOuUfI84AE6 wUpz9PMLcPb3Jc3nXyFq9wLgkwOwsrAmAZY4ZrnZs3zENkE/wdBBUBfZQxn/QYPf 7MYLpDYIvUgDCGJHKgER2rj90Cp/E2lrfzPVRotmFDKu6gHTF4FCfHqvSrk1YVZ6 lm9bO7cBG8PtFlSx9aieZTqcyKNqNTNmGxjEKcu/Viut9da3M+YbPCUepQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcb9wPvZGJwITcLvTczLigCvIK2MB8GA1UdIwQY MBaAFNxiHc3HrQvjMdfJpEfyoWTkLqT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0dJZHpjZXRDLU14MThta1JfS2haT1F1cFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xMjAwODQtYzg4Ni00N2NlLTkwNDAt OTYyMWIyMDg4YzJkLzEvM0dJZHpjZXRDLU14MThta1JfS2haT1F1cFAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8xMjAwODQtYzg4Ni00N2NlLTkwNDAtOTYyMWIyMDg4YzJk LzEvM0dJZHpjZXRDLU14MThta1JfS2haT1F1cFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP02bqGT0 RkIUbkVgfs6ZvNirYnHnWjATB4yfRybgeuxblskLjovGggPFfKk7sm5m18abDHzD yMmxhjGAZWV5JPTjTEIhZOuo5xoKNkFbiX9IYPXVpQygVPd5frWix/xykbkaTwyF 6GvtHRMDuKLSvThJQ/ZgtAgDEjm9l1jP4geyCpbUY+jZErQkI0FIBdyvGHlF8U2P Yc8z4AofcLHMYL8jnut9khTF8qDOZIsYLYt7spxi2ff4hkBQr5+Mo7kW4+rX1G8d rDQAujLWwukkOMYCGCz73Aifyec0hfhcZIzTcNhc0JLis1kurId/IFC10pceXlG1 sGsxjKLg78fmqA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:33 2025 by rpki-client