This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json) Hash identifier: Ls7tIKFapb0PuaGEGfzkhj3yJqOXUWFNHWynKPldl+4= Subject key identifier: 20:6B:22:57:41:39:E1:B9:C8:EF:65:35:03:43:06:6C:0A:C0:10:CB Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20 Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120 Certificate serial: 019B2175F760BDF44F8025B345726D56D4B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 10:02:17 +0000 Manifest this update: Mon 15 Dec 2025 10:02:17 +0000 Manifest next update: Tue 16 Dec 2025 10:02:17 +0000 Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: TgpUb8mRMl5tLjWS14zul9QsN+vNDYl+qjGJeD7B6D8=) 2: VU0FkvZgVaRI8EGkm-qXkP1h2_c.roa (hash: FXgImtBv7FeA5blXsKdg5pD7MuiscFVJi0Lfx25h6e4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:f7:60:bd:f4:4f:80:25:b3:45:72:6d:56:d4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120 Validity Not Before: Dec 15 10:02:17 2025 GMT Not After : Dec 16 10:02:17 2025 GMT Subject: CN=206b22574139e1b9c8ef65350343066c0ac010cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:67:0d:17:cc:98:61:b5:45:6f:67:17:61:7e: 89:8f:4c:f1:3e:ca:d7:71:26:ac:f4:48:a7:7a:21: c1:99:c0:90:98:fa:64:0e:e9:5b:32:ee:7f:84:fd: c4:0b:b8:a7:57:d4:b9:c8:42:f1:fb:31:d2:1d:73: 41:ae:f5:2a:8c:de:f1:cc:de:6b:e7:ea:9a:90:9c: 75:20:69:13:ef:6f:da:81:56:a8:1a:51:5f:d9:7c: 8a:0b:11:8a:96:32:2f:0c:f2:48:39:10:da:58:e2: 90:4d:bc:e6:1d:c3:bf:e1:3f:f9:28:92:8a:8d:ab: ff:48:5a:f6:ea:5f:a5:85:a3:77:2f:37:61:41:d2: 3b:24:7c:70:47:be:58:30:48:b4:93:f4:33:6f:ef: c1:ff:08:48:77:d7:63:d7:d5:9f:6e:39:51:21:98: 1d:d3:8a:6c:1c:79:61:ad:54:66:ad:6d:07:8e:4b: e4:53:e6:d2:14:9a:cb:b3:bd:f1:ce:ab:7b:1a:67: cc:43:93:f6:95:21:60:83:5f:29:ac:6a:35:e5:03: a9:76:69:86:4a:4d:86:ea:60:1b:2b:29:76:d3:c2: a2:dc:59:1a:6d:6d:4f:af:1a:f8:85:7e:55:21:ad: 5b:ac:28:0f:d3:db:18:35:54:73:0a:84:40:cf:94: 35:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6B:22:57:41:39:E1:B9:C8:EF:65:35:03:43:06:6C:0A:C0:10:CB X509v3 Authority Key Identifier: keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:27:e7:7b:5e:a0:94:eb:54:b4:fe:2e:a5:94:dd:9d:e0:47: 70:71:70:55:48:07:3c:86:c8:24:5e:4c:1b:86:2a:94:05:95: ab:f2:3f:df:d8:37:4d:86:23:11:d3:4e:b8:df:51:b2:16:2b: c8:4c:66:fc:91:b0:be:a3:b5:5d:d8:c6:6b:01:e4:d4:c9:7f: 09:2a:1c:c3:97:38:6c:8f:ee:12:57:79:4c:b4:9a:9c:0d:ae: 4a:fb:e9:c5:5c:9e:cb:9b:38:46:8a:88:9e:cc:93:78:a7:cf: 79:15:29:e6:a4:42:ae:c3:99:3e:ef:30:d5:60:ef:db:bf:93: 25:c4:45:97:5b:19:b3:95:af:67:09:26:ad:b1:c5:5d:ad:23: de:82:d8:39:3c:1a:03:d7:cb:07:91:33:a1:79:69:da:57:32: d3:0d:21:37:3d:6e:3a:27:7f:57:98:44:9a:63:9b:f8:6e:95: f7:a5:9b:dd:ed:7b:7e:10:05:e7:6f:78:0d:f0:b1:d0:08:48: b7:b5:61:fc:1c:83:a8:42:4a:10:ee:6f:38:4a:ce:2a:74:13: 1d:00:2e:a2:b3:c4:9b:c1:6d:0d:53:1a:34:08:7a:13:63:9b: c4:28:b5:6a:12:9b:ac:16:60:a7:cf:76:58:d0:80:1e:53:b8: 2c:6d:12:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdfdgvfRPgCWzRXJtVtS4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDVkZjZlNDA0ZWY5MjBlNmE1OTI4ZDg5NjNlNmE1Zjhk NjExMjAwHhcNMjUxMjE1MTAwMjE3WhcNMjUxMjE2MTAwMjE3WjAzMTEwLwYDVQQD EygyMDZiMjI1NzQxMzllMWI5YzhlZjY1MzUwMzQzMDY2YzBhYzAxMGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32cNF8yYYbVFb2cXYX6Jj0zxPsrX cSas9EineiHBmcCQmPpkDulbMu5/hP3EC7inV9S5yELx+zHSHXNBrvUqjN7xzN5r 5+qakJx1IGkT72/agVaoGlFf2XyKCxGKljIvDPJIORDaWOKQTbzmHcO/4T/5KJKK jav/SFr26l+lhaN3LzdhQdI7JHxwR75YMEi0k/Qzb+/B/whId9dj19WfbjlRIZgd 04psHHlhrVRmrW0HjkvkU+bSFJrLs73xzqt7GmfMQ5P2lSFgg18prGo15QOpdmmG Sk2G6mAbKyl208Ki3FkabW1Prxr4hX5VIa1brCgP09sYNVRzCoRAz5Q1BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBrIldBOeG5yO9lNQNDBmwKwBDLMB8GA1UdIwQY MBaAFNwF325ATvkg5qWSjYlj5qX41hEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQt YmNlOTM0MjA1YWU4LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQtYmNlOTM0MjA1YWU4 LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxifne16g lOtUtP4upZTdneBHcHFwVUgHPIbIJF5MG4YqlAWVq/I/39g3TYYjEdNOuN9RshYr yExm/JGwvqO1XdjGawHk1Ml/CSocw5c4bI/uEld5TLSanA2uSvvpxVyey5s4RoqI nsyTeKfPeRUp5qRCrsOZPu8w1WDv27+TJcRFl1sZs5WvZwkmrbHFXa0j3oLYOTwa A9fLB5EzoXlp2lcy0w0hNz1uOid/V5hEmmOb+G6V96Wb3e17fhAF5294DfCx0AhI t7Vh/ByDqEJKEO5vOErOKnQTHQAuorPEm8FtDVMaNAh6E2ObxCi1ahKbrBZgp892 WNCAHlO4LG0S1g== -----END CERTIFICATE-----Generated at Mon Dec 15 16:52:33 2025 by rpki-client