This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json) Hash identifier: PToHsjPh3ApHYPbQrUOM5yD3Rck3Sj2KLSwuAjRtdtQ= Subject key identifier: B5:37:79:1B:ED:17:31:EB:AB:DF:20:76:A0:5C:40:C6:F4:22:DE:98 Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47 Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847 Certificate serial: 019B59E3EF7CBCF76E95F3C39932CC81B683 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft Manifest number: 172B Signing time: Fri 26 Dec 2025 09:01:08 +0000 Manifest this update: Fri 26 Dec 2025 09:01:08 +0000 Manifest next update: Sat 27 Dec 2025 09:01:08 +0000 Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: rmLveA+dJ17zgtWGXNi9Vw2PTcB0Y3A07M7ru5FHEsU=) 2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:ef:7c:bc:f7:6e:95:f3:c3:99:32:cc:81:b6:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847 Validity Not Before: Dec 26 09:01:08 2025 GMT Not After : Dec 27 09:01:08 2025 GMT Subject: CN=b537791bed1731ebabdf2076a05c40c6f422de98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b8:1e:ba:fa:3a:75:1c:d1:cc:d9:96:eb:b8: 82:4b:0f:44:64:d2:10:90:47:f8:11:03:09:f5:19: 8e:f7:59:e0:82:a5:76:c2:a2:ac:5b:41:2d:7c:47: e0:a5:40:9a:c8:0f:71:06:6a:b9:0b:d3:6b:5e:41: e0:0a:d4:b3:60:3d:13:83:31:6e:4d:b0:03:50:b6: 09:88:65:f0:92:ee:f3:a2:9f:62:af:19:3a:82:c2: 2f:f1:a5:e9:8c:62:f3:81:aa:c3:cf:d1:1b:3e:06: 94:7c:b3:77:bd:e2:f4:48:97:bf:0e:c5:f4:fb:d8: 46:63:65:ee:7c:75:36:8b:a6:5f:f6:f8:34:7b:bb: 3a:38:66:80:d6:75:4f:8a:a6:01:03:86:48:36:07: f7:e0:3d:a2:ef:2b:db:ff:45:3c:f9:5a:c6:56:7d: c1:fb:02:ce:f3:51:71:3e:7d:ed:fc:66:71:6d:9a: ba:28:ee:ce:59:33:63:ac:2f:7e:46:37:fa:f7:b7: 32:b9:5b:5c:87:c5:71:85:6c:59:fb:27:5a:09:e6: e2:28:86:81:42:57:92:e0:41:a7:8d:26:21:21:84: be:96:fa:ce:27:2c:8f:93:c2:7c:f4:85:ce:db:38: a7:22:91:0c:75:12:00:a6:e3:6a:8d:18:ce:1b:8f: 7e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:37:79:1B:ED:17:31:EB:AB:DF:20:76:A0:5C:40:C6:F4:22:DE:98 X509v3 Authority Key Identifier: keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:9b:ea:83:89:70:2c:47:4a:9f:55:68:03:c6:c3:7d:36:38: d9:ba:c3:dc:9e:f1:25:2a:05:49:bd:0f:15:52:4e:aa:c9:8a: 07:d1:bc:6a:78:79:b8:f2:3e:50:17:39:b6:fe:8a:6a:95:0f: 25:cb:d7:06:d7:bc:2a:bb:25:23:e4:07:a8:bf:41:ca:2f:00: 97:51:fb:10:ae:05:00:40:87:f5:21:e7:d4:d1:d6:c2:e0:08: 5e:d3:cb:95:59:33:7b:23:ca:b0:c2:1d:f5:20:68:e9:af:2a: 9f:f2:b0:de:5f:e8:c5:b2:12:d1:af:c2:1c:13:de:0d:dd:97: fd:2a:8f:85:ba:3e:34:b9:99:17:0e:d4:4c:7e:a3:49:cf:a2: b3:05:ea:88:a4:94:dd:d6:1f:06:73:24:13:33:23:54:98:7d: 28:8a:a9:8d:46:29:b8:b7:62:b9:b5:90:ac:65:60:63:ef:8a: 6e:35:eb:67:7b:0d:14:83:ac:c6:d2:3e:7b:06:94:1a:10:00: 4a:43:d6:66:41:2a:7a:62:03:c2:b4:e0:3e:65:56:e3:8d:20: 44:26:64:05:5f:c9:4e:c3:bc:c0:c3:66:37:ea:e4:96:ea:d7: ff:a5:ed:30:51:6e:23:54:d4:ca:f1:15:8f:61:5d:04:d5:97: cb:56:f0:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4+98vPdulfPDmTLMgbaDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGRlYTRlYTI1NDZkN2EwMTlhNGVmODI0M2I1ZWI2MzU2 NWM4NDcwHhcNMjUxMjI2MDkwMTA4WhcNMjUxMjI3MDkwMTA4WjAzMTEwLwYDVQQD EyhiNTM3NzkxYmVkMTczMWViYWJkZjIwNzZhMDVjNDBjNmY0MjJkZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbgeuvo6dRzRzNmW67iCSw9EZNIQ kEf4EQMJ9RmO91nggqV2wqKsW0EtfEfgpUCayA9xBmq5C9NrXkHgCtSzYD0TgzFu TbADULYJiGXwku7zop9irxk6gsIv8aXpjGLzgarDz9EbPgaUfLN3veL0SJe/DsX0 +9hGY2XufHU2i6Zf9vg0e7s6OGaA1nVPiqYBA4ZINgf34D2i7yvb/0U8+VrGVn3B +wLO81FxPn3t/GZxbZq6KO7OWTNjrC9+Rjf697cyuVtch8VxhWxZ+ydaCebiKIaB QleS4EGnjSYhIYS+lvrOJyyPk8J89IXO2zinIpEMdRIApuNqjRjOG49+DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU3eRvtFzHrq98gdqBcQMb0It6YMB8GA1UdIwQY MBaAFNwN6k6iVG16AZpO+CQ7XrY1ZchHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMt M2Q0YjI4M2YzMjJkLzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMtM2Q0YjI4M2YzMjJk LzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5vqg4lw LEdKn1VoA8bDfTY42brD3J7xJSoFSb0PFVJOqsmKB9G8anh5uPI+UBc5tv6KapUP JcvXBte8KrslI+QHqL9Byi8Al1H7EK4FAECH9SHn1NHWwuAIXtPLlVkzeyPKsMId 9SBo6a8qn/Kw3l/oxbIS0a/CHBPeDd2X/SqPhbo+NLmZFw7UTH6jSc+iswXqiKSU 3dYfBnMkEzMjVJh9KIqpjUYpuLdiubWQrGVgY++KbjXrZ3sNFIOsxtI+ewaUGhAA SkPWZkEqemIDwrTgPmVW440gRCZkBV/JTsO8wMNmN+rklurX/6XtMFFuI1TUyvEV j2FdBNWXy1bwZQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:53 2025 by rpki-client