This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json) Hash identifier: RNsvt9E9d/TyMGst2hyXJePSaXIzcIuwl1DAFdp7pnU= Subject key identifier: 15:7C:3E:43:52:8F:EF:E4:01:ED:DB:B8:BD:7B:90:6F:07:22:C5:72 Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3 Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3 Certificate serial: 019B3B6B4CBAF476EE2F9EC917F156E530AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 11:00:46 +0000 Manifest this update: Sat 20 Dec 2025 11:00:46 +0000 Manifest next update: Sun 21 Dec 2025 11:00:46 +0000 Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: KnAtPEyG6tehXJRe1Nr5kVTPDfABy4WKT50o8T/o+WA=) 2: 57HaC7393494-Kydk1JdAp5sP5I.roa (hash: MC5zLYnL7jsECqxeDtP30qM0sWScy6N43eUhfx207aw=) 3: m5gUSNnJ2hKaiWTW0ODmWqqDw-s.roa (hash: EE2S7AYIPyyJZqEsdRi77q99LaNKBqMzcLpUq4bS+A8=) 4: nX1l9uEaP3hKft0f6nr66330FaY.roa (hash: Ify3evSlWibc6XFuSTIlXp6BEPgQD/cUtILAv8sgqKU=) 5: rYOTmI6zBWy0_qXug-7vEbI5-NE.roa (hash: WCnXAEMnH2mCY9gWHiuKlZ1HO6eQUoArgriFfc+fAVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:4c:ba:f4:76:ee:2f:9e:c9:17:f1:56:e5:30:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3 Validity Not Before: Dec 20 11:00:46 2025 GMT Not After : Dec 21 11:00:46 2025 GMT Subject: CN=157c3e43528fefe401eddbb8bd7b906f0722c572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:a5:3c:31:19:e4:93:8c:19:cb:64:c2:a3: 07:9a:fb:0b:eb:02:74:72:81:ea:9f:78:53:28:26: 01:fb:50:8d:4f:1a:dd:ff:9f:fa:93:54:30:9e:c3: 97:75:64:f6:7b:72:bc:29:d6:50:41:d0:8b:00:44: 19:f3:39:fa:e5:39:02:b9:8c:5b:44:67:1b:57:5a: 79:e6:a2:56:5d:58:70:62:64:d4:bb:99:e1:67:d2: 63:e6:80:9a:a7:5b:20:a6:e1:4d:7d:1f:5c:c2:3e: b3:49:ea:88:4d:14:a7:7a:7e:4d:90:28:d1:fa:13: 7c:f5:c6:3a:ca:16:fb:04:38:b1:ff:68:b2:dd:8a: 2a:10:5f:85:c0:64:61:c6:63:20:e4:2f:41:06:7f: 22:53:e8:b4:28:f6:90:fd:16:bb:91:1a:86:2a:20: 63:a9:60:8e:dd:fb:7d:6a:5b:e1:eb:67:7e:1f:20: 35:1c:9d:01:e9:af:c0:27:ca:ed:ea:53:49:3a:87: 0c:aa:5c:6a:6a:ad:10:61:44:6f:d4:11:a4:38:11: 9d:66:c6:47:29:4a:df:42:0d:e4:90:59:6d:af:33: bb:b9:00:a5:01:be:1d:cb:e9:9e:4b:b5:20:71:e0: 32:7a:8d:9a:da:5f:b0:76:ec:ae:e0:c1:6c:8b:14: ab:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7C:3E:43:52:8F:EF:E4:01:ED:DB:B8:BD:7B:90:6F:07:22:C5:72 X509v3 Authority Key Identifier: keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2a:40:c8:b4:03:b4:ed:65:c5:f7:98:cc:0d:c1:40:9f:dd: e6:8e:7e:21:9d:52:f7:9a:78:02:28:b0:84:99:81:ae:05:aa: ff:5e:73:ef:27:01:a1:a5:ac:a3:3c:87:68:ac:74:70:ee:75: 59:11:01:15:6f:9d:72:90:bb:b3:e1:c7:9d:f9:19:c3:59:2c: 93:9b:43:e6:fb:18:88:ff:a0:9b:1c:1d:1d:74:12:24:a5:ff: b8:95:03:fd:b8:0f:cc:8d:ac:38:33:31:3d:41:60:f5:46:ea: 30:15:17:fd:71:be:26:c6:e5:13:87:14:5b:a0:bc:43:0c:a2: 12:f9:84:a0:e6:08:7c:89:c0:5d:aa:b6:31:32:1c:f4:02:e9: 6e:1a:29:69:c4:be:1d:78:70:d6:b4:15:82:5e:d2:d8:2a:e2: 52:51:d8:c0:3c:8c:bb:61:a9:6e:a1:a0:6f:cc:62:98:24:8b: 19:03:a2:e1:bd:41:39:b8:dc:7e:07:8d:6e:35:fa:b4:3f:8c: 63:95:e3:ef:90:3d:2e:3d:22:1e:05:b3:f7:e3:0c:ca:6d:5e: 15:74:04:7e:10:c3:32:33:90:e9:5a:90:c2:ad:ec:e7:7f:68: a7:dc:79:7e:c7:da:2b:0d:f9:43:d3:d0:ea:75:f2:07:c5:3d: 60:77:1d:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a0y69HbuL57JF/FW5TCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTA4OWM5NDJiNjgwMzM2ODNiNGRkNTA2YzBjMzZmNzRi ZTBlYTMwHhcNMjUxMjIwMTEwMDQ2WhcNMjUxMjIxMTEwMDQ2WjAzMTEwLwYDVQQD EygxNTdjM2U0MzUyOGZlZmU0MDFlZGRiYjhiZDdiOTA2ZjA3MjJjNTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw2lPDEZ5JOMGctkwqMHmvsL6wJ0 coHqn3hTKCYB+1CNTxrd/5/6k1QwnsOXdWT2e3K8KdZQQdCLAEQZ8zn65TkCuYxb RGcbV1p55qJWXVhwYmTUu5nhZ9Jj5oCap1sgpuFNfR9cwj6zSeqITRSnen5NkCjR +hN89cY6yhb7BDix/2iy3YoqEF+FwGRhxmMg5C9BBn8iU+i0KPaQ/Ra7kRqGKiBj qWCO3ft9alvh62d+HyA1HJ0B6a/AJ8rt6lNJOocMqlxqaq0QYURv1BGkOBGdZsZH KUrfQg3kkFltrzO7uQClAb4dy+meS7UgceAyeo2a2l+wduyu4MFsixSrzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBV8PkNSj+/kAe3buL17kG8HIsVyMB8GA1UdIwQY MBaAFNwQiclCtoAzaDtN1QbAw290vg6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDkt Y2I1NmVkM2VhN2ZhLzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDktY2I1NmVkM2VhN2Zh LzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCpAyLQD tO1lxfeYzA3BQJ/d5o5+IZ1S95p4AiiwhJmBrgWq/15z7ycBoaWsozyHaKx0cO51 WREBFW+dcpC7s+HHnfkZw1ksk5tD5vsYiP+gmxwdHXQSJKX/uJUD/bgPzI2sODMx PUFg9UbqMBUX/XG+JsblE4cUW6C8QwyiEvmEoOYIfInAXaq2MTIc9ALpbhopacS+ HXhw1rQVgl7S2CriUlHYwDyMu2GpbqGgb8ximCSLGQOi4b1BObjcfgeNbjX6tD+M Y5Xj75A9Lj0iHgWz9+MMym1eFXQEfhDDMjOQ6VqQwq3s539op9x5fsfaKw35Q9PQ 6nXyB8U9YHcdog== -----END CERTIFICATE-----Generated at Sat Dec 20 14:05:45 2025 by rpki-client