This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft File: 3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json) Hash identifier: 0T76atZTtMu7jbzsWP7wkEZdKR0tXQKICKE5a5oIyk4= Subject key identifier: 6B:92:1A:D5:25:E6:1B:E1:4E:61:1A:E7:28:AE:0D:7E:AC:81:A4:B6 Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE Certificate issuer: /CN=def838503cfbc05283fdeadd4644a47bfd783fce Certificate serial: 019B341FBA7101A19FE658FAEF6CE9EB6C79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft Manifest number: 09AD Signing time: Fri 19 Dec 2025 01:00:53 +0000 Manifest this update: Fri 19 Dec 2025 01:00:53 +0000 Manifest next update: Sat 20 Dec 2025 01:00:53 +0000 Files and hashes: 1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: AkEfR66NmYXLChh080FzUh8CXl6drWxuqxt2ec+0ah8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:ba:71:01:a1:9f:e6:58:fa:ef:6c:e9:eb:6c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce Validity Not Before: Dec 19 01:00:53 2025 GMT Not After : Dec 20 01:00:53 2025 GMT Subject: CN=6b921ad525e61be14e611ae728ae0d7eac81a4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2e:7a:28:6c:f3:6f:b8:75:e3:21:be:84:fd: 3c:ef:9d:5f:ab:3b:09:31:30:28:e6:0a:29:57:39: 40:24:d8:7e:ea:98:2d:ff:3f:e8:79:74:10:31:2a: eb:e3:f9:5c:81:77:14:0a:e3:87:f4:35:26:af:dc: 6e:14:b0:a0:14:b6:14:c2:39:78:37:be:c0:8e:4b: 6a:cc:b4:e2:ae:be:46:f9:24:45:84:92:59:a0:f9: f0:c9:ae:d8:2a:32:84:eb:64:e8:d9:5f:4e:05:a3: 45:fb:9b:ed:a4:7f:de:74:67:ef:8e:39:0e:ef:e5: fc:bf:60:01:aa:33:40:0c:8d:17:be:99:23:68:bb: b1:de:34:ea:31:49:0f:6d:57:ed:80:dc:67:c2:d2: 74:16:9d:67:a0:de:74:d2:a7:fd:ca:71:14:0f:f1: 6a:e8:d6:3c:fc:6c:e5:40:52:cd:ef:fa:46:b3:8b: 01:7e:7a:19:cf:46:43:43:73:2a:54:e5:f4:9c:64: 30:5d:00:59:f5:9a:92:05:e4:fd:51:55:72:98:f5: 15:99:ed:55:bc:1b:27:fa:62:40:5c:f4:61:3c:64: 39:e2:73:54:93:bc:fc:89:23:90:53:5d:68:89:d2: f8:a1:72:84:12:92:c5:37:75:e4:68:4b:ea:bc:e6: 75:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:92:1A:D5:25:E6:1B:E1:4E:61:1A:E7:28:AE:0D:7E:AC:81:A4:B6 X509v3 Authority Key Identifier: keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:17:21:f8:86:18:49:d3:b7:9f:b3:09:ed:90:57:e9:0c:4a: 1f:03:f4:de:6b:e6:30:81:b4:ef:eb:95:54:42:4e:ff:2d:ed: b1:0f:29:ae:07:55:52:66:d9:90:c0:0f:1a:60:e6:1d:5d:32: 88:70:07:85:15:5e:ca:34:8e:ac:48:60:87:ec:2e:e8:94:5d: 1e:05:4a:b6:c2:56:8c:bf:1f:66:08:4b:9d:c4:41:5c:3b:e2: 85:96:5b:c5:4a:ed:51:93:93:f3:22:ea:11:5a:be:19:8c:69: fa:c5:ed:4a:86:47:3a:f6:5a:8e:69:97:84:e1:f6:8b:dd:f2: e6:12:cf:3a:63:83:7e:73:2a:80:74:ed:1f:16:46:14:36:1a: 97:5e:d8:65:52:ce:58:cc:7b:18:ef:7d:00:8f:fb:0d:b9:ff: 3d:ba:7f:98:b8:78:64:92:ec:78:c4:e3:8d:c3:20:4e:76:86: 03:25:99:f1:e6:a3:ca:47:16:65:fc:8b:3d:3b:e6:a2:15:44: 85:df:30:b8:11:d0:27:80:22:c9:9f:bb:97:10:03:a6:78:81: 69:bc:37:0c:5b:b6:f8:77:36:94:88:dd:58:c9:c7:b9:ab:4d: 9d:ae:fd:31:b3:69:54:39:bb:04:3e:8d:5d:73:0b:ab:86:77: 36:b1:cd:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H7pxAaGf5lj672zp62x5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZjgzODUwM2NmYmMwNTI4M2ZkZWFkZDQ2NDRhNDdiZmQ3 ODNmY2UwHhcNMjUxMjE5MDEwMDUzWhcNMjUxMjIwMDEwMDUzWjAzMTEwLwYDVQQD Eyg2YjkyMWFkNTI1ZTYxYmUxNGU2MTFhZTcyOGFlMGQ3ZWFjODFhNGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC56KGzzb7h14yG+hP08751fqzsJ MTAo5gopVzlAJNh+6pgt/z/oeXQQMSrr4/lcgXcUCuOH9DUmr9xuFLCgFLYUwjl4 N77AjktqzLTirr5G+SRFhJJZoPnwya7YKjKE62To2V9OBaNF+5vtpH/edGfvjjkO 7+X8v2ABqjNADI0XvpkjaLux3jTqMUkPbVftgNxnwtJ0Fp1noN500qf9ynEUD/Fq 6NY8/GzlQFLN7/pGs4sBfnoZz0ZDQ3MqVOX0nGQwXQBZ9ZqSBeT9UVVymPUVme1V vBsn+mJAXPRhPGQ54nNUk7z8iSOQU11oidL4oXKEEpLFN3XkaEvqvOZ1NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuSGtUl5hvhTmEa5yiuDX6sgaS2MB8GA1UdIwQY MBaAFN74OFA8+8BSg/3q3UZEpHv9eD/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3ZnNFVEejd3RktEX2VyZFJrU2tlXzE0UDg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNzg1NTEtMDBlNS00NzdjLWI3MTIt OTcxYmI0YTUyYjNmLzEvM3ZnNFVEejd3RktEX2VyZFJrU2tlXzE0UDg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hNzg1NTEtMDBlNS00NzdjLWI3MTItOTcxYmI0YTUyYjNm LzEvM3ZnNFVEejd3RktEX2VyZFJrU2tlXzE0UDg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxch+IYY SdO3n7MJ7ZBX6QxKHwP03mvmMIG07+uVVEJO/y3tsQ8prgdVUmbZkMAPGmDmHV0y iHAHhRVeyjSOrEhgh+wu6JRdHgVKtsJWjL8fZghLncRBXDvihZZbxUrtUZOT8yLq EVq+GYxp+sXtSoZHOvZajmmXhOH2i93y5hLPOmODfnMqgHTtHxZGFDYal17YZVLO WMx7GO99AI/7Dbn/Pbp/mLh4ZJLseMTjjcMgTnaGAyWZ8eajykcWZfyLPTvmohVE hd8wuBHQJ4AiyZ+7lxADpniBabw3DFu2+Hc2lIjdWMnHuatNna79MbNpVDm7BD6N XXMLq4Z3NrHN6g== -----END CERTIFICATE-----Generated at Fri Dec 19 06:50:00 2025 by rpki-client