This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json) Hash identifier: 7Nz/rEKc6Tlm1pcBRjUHhUT0DA80+SVa+PKck1Q54Rw= Subject key identifier: 33:18:DC:4B:6A:5E:B6:CA:F0:8B:47:21:A6:EA:06:4B:2A:03:06:8C Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6 Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6 Certificate serial: 019B481501026D32E6E80451D817EEF1C6D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft Manifest number: 0E9D Signing time: Mon 22 Dec 2025 22:01:34 +0000 Manifest this update: Mon 22 Dec 2025 22:01:34 +0000 Manifest next update: Tue 23 Dec 2025 22:01:34 +0000 Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: V5w4gb2MoxxH4IjNNoxyghxcvPbS6ILe4rGMbgWDnHw=) 2: G0H1NZGAbtsyoA2e--eIMeks25w.asa (hash: hXpme5X4li6UsZQl1l4A/uCi4ohrlAjpSmRIc/a8sgw=) 3: vmqKHuLzrPkqklGr2oHlX4A5H1s.roa (hash: HWx6FXZlLIKlHVfqDThyZuNv2Ccv+hNVkaueWiNq1XE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:01:02:6d:32:e6:e8:04:51:d8:17:ee:f1:c6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6 Validity Not Before: Dec 22 22:01:34 2025 GMT Not After : Dec 23 22:01:34 2025 GMT Subject: CN=3318dc4b6a5eb6caf08b4721a6ea064b2a03068c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:08:e5:70:6e:8c:cd:38:98:c8:b1:03:9f: ad:1e:52:d5:cc:8c:3a:f1:91:8a:67:47:f7:45:ea: 6b:05:d0:96:3f:c9:9a:81:c4:18:7a:65:98:f6:ee: 6e:4c:a1:6e:74:c0:ea:c5:08:36:3c:24:e1:ad:51: ef:20:38:9c:c8:98:d8:cb:7b:ee:9e:25:9f:ef:22: 26:38:08:28:a7:a2:c0:9c:aa:98:e8:d9:18:b6:65: 0a:fb:8a:31:b2:0b:d2:57:76:6e:6e:3e:c7:69:1c: 9f:ed:07:68:fa:02:38:ae:52:43:cc:ee:62:f7:21: f5:0d:57:7e:e3:bf:ee:03:c0:34:22:35:c0:aa:37: 8d:4d:98:44:1d:1a:d8:80:cb:30:1f:3f:4f:61:a1: 0e:69:6c:c4:bf:99:c5:f0:bd:30:46:65:ce:eb:12: 34:9a:fe:55:10:20:3c:8d:74:52:1b:d5:80:ee:16: 0d:a3:c3:c5:ec:ff:6e:ba:fb:5e:a0:12:b2:0d:33: ee:c5:fc:e0:65:d3:5f:6f:61:96:18:43:df:21:d7: 9a:5f:b4:ad:de:d9:f4:55:71:9a:0a:da:ba:39:f7: 37:16:49:1b:69:c6:a3:a7:cf:4a:0a:f8:71:51:e9: 49:2f:82:22:96:84:84:c3:d5:8a:28:f2:7a:e4:a2: 19:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:18:DC:4B:6A:5E:B6:CA:F0:8B:47:21:A6:EA:06:4B:2A:03:06:8C X509v3 Authority Key Identifier: keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b7:47:a3:ae:55:fa:bd:9a:7a:e4:23:c2:6d:95:18:02:e8: be:06:aa:af:c5:7e:b2:47:7a:78:bd:c7:48:5e:db:49:6a:d6: 6b:7b:84:dd:9d:05:56:8c:36:50:5d:2a:8d:dc:3c:80:2b:29: 65:a3:eb:1c:2f:ff:0d:93:fb:14:ff:fd:b4:b3:a2:ed:d1:c7: d2:56:63:22:50:3b:52:7f:59:18:07:cf:a5:88:ac:45:0e:f4: 9b:53:03:eb:97:c4:c5:f6:dc:aa:80:8f:8a:6f:db:89:04:be: 65:31:b7:9f:2e:92:25:a9:72:ad:81:18:a0:c3:9d:f8:fd:b3: 35:9c:3e:3b:76:32:7c:4b:51:83:33:b8:a4:fb:07:77:ec:49: ab:e8:86:a9:de:32:8d:94:a0:2e:f1:fd:64:b0:d3:ae:78:9a: 31:11:ea:6d:94:81:58:4d:14:88:4a:06:c3:9f:96:14:e9:b2: 20:8a:c8:81:d9:1b:3d:ac:ce:93:19:bb:3e:9a:2f:17:b3:76: e2:02:47:9f:cd:65:73:67:7d:f6:aa:9c:10:82:1a:d5:6e:46: 94:a8:21:6c:74:2e:4f:32:52:f0:79:6d:a4:34:35:d8:fc:66: f6:e4:ee:cd:e6:8a:b3:4f:61:6f:4a:c3:09:48:da:9d:5b:47: 6e:e2:0b:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFQECbTLm6ARR2Bfu8cbZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNWU2YzIzMzA5MTFiYzFkYzhjODNkNDExZWY2YjEyMDhi M2JiZDYwHhcNMjUxMjIyMjIwMTM0WhcNMjUxMjIzMjIwMTM0WjAzMTEwLwYDVQQD EygzMzE4ZGM0YjZhNWViNmNhZjA4YjQ3MjFhNmVhMDY0YjJhMDMwNjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ0I5XBujM04mMixA5+tHlLVzIw6 8ZGKZ0f3ReprBdCWP8magcQYemWY9u5uTKFudMDqxQg2PCThrVHvIDicyJjYy3vu niWf7yImOAgop6LAnKqY6NkYtmUK+4oxsgvSV3Zubj7HaRyf7Qdo+gI4rlJDzO5i 9yH1DVd+47/uA8A0IjXAqjeNTZhEHRrYgMswHz9PYaEOaWzEv5nF8L0wRmXO6xI0 mv5VECA8jXRSG9WA7hYNo8PF7P9uuvteoBKyDTPuxfzgZdNfb2GWGEPfIdeaX7St 3tn0VXGaCtq6Ofc3Fkkbacajp89KCvhxUelJL4IiloSEw9WKKPJ65KIZcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMY3EtqXrbK8ItHIabqBksqAwaMMB8GA1UdIwQY MBaAFN5ebCMwkRvB3IyD1BHvaxIIs7vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2Et ZGU0YmE3ODZmODcyLzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2EtZGU0YmE3ODZmODcy LzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrdHo65V +r2aeuQjwm2VGALovgaqr8V+skd6eL3HSF7bSWrWa3uE3Z0FVow2UF0qjdw8gCsp ZaPrHC//DZP7FP/9tLOi7dHH0lZjIlA7Un9ZGAfPpYisRQ70m1MD65fExfbcqoCP im/biQS+ZTG3ny6SJalyrYEYoMOd+P2zNZw+O3YyfEtRgzO4pPsHd+xJq+iGqd4y jZSgLvH9ZLDTrniaMRHqbZSBWE0UiEoGw5+WFOmyIIrIgdkbPazOkxm7PpovF7N2 4gJHn81lc2d99qqcEIIa1W5GlKghbHQuTzJS8HltpDQ12Pxm9uTuzeaKs09hb0rD CUjanVtHbuIL+A== -----END CERTIFICATE-----Generated at Tue Dec 23 06:05:05 2025 by rpki-client