This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json) Hash identifier: nxpyAp4JEZJXrZ6gv+Ydfp4+6Xn1EXcY9J/wS5/thrk= Subject key identifier: B8:2D:A4:3C:C5:2B:96:1E:3A:88:86:61:BE:C6:8C:6F:97:FA:C4:07 Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03 Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203 Certificate serial: 019B495E01BCF355AE3864F24BC7F3728F77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft Manifest number: 055F Signing time: Tue 23 Dec 2025 04:00:56 +0000 Manifest this update: Tue 23 Dec 2025 04:00:56 +0000 Manifest next update: Wed 24 Dec 2025 04:00:56 +0000 Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: QfhJgXFJDdrMBdje7QkO+QJKMk3DGPXDV+CYXAXgWnA=) 2: Opp8U8aeHzNwIE0mPBiUqooeCJQ.roa (hash: V/D3sQNgSw6lGL7igciFA6sJiWbs7FF9hEBFUMCcvFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:01:bc:f3:55:ae:38:64:f2:4b:c7:f3:72:8f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203 Validity Not Before: Dec 23 04:00:56 2025 GMT Not After : Dec 24 04:00:56 2025 GMT Subject: CN=b82da43cc52b961e3a888661bec68c6f97fac407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:d1:14:30:11:3b:65:48:e7:20:f0:5e:01: 18:61:dc:a4:73:a0:df:12:ca:1b:f8:9f:de:40:b9: 49:6a:c4:c1:d3:23:82:89:e7:e2:70:63:20:51:60: 24:e5:19:76:46:22:09:24:81:12:a8:fa:24:ce:c1: 76:79:1d:28:81:db:ac:1f:88:2a:52:39:8d:47:16: 3f:ae:f0:1a:e9:41:9d:fe:d6:5e:62:2f:ee:38:bc: d6:16:0e:fc:ad:c9:c0:1a:e1:e9:ee:87:63:c6:ff: 20:df:17:e7:2b:d1:aa:93:80:8b:36:58:2c:29:20: 56:29:e4:9c:c7:f4:bf:cd:f3:50:e8:76:1c:1b:a4: 17:88:ad:0f:d0:bb:8b:96:14:4a:7f:37:4e:95:a3: 0b:b8:bc:b2:06:5d:cd:09:1e:68:fa:cd:63:07:41: fd:b3:99:fa:c0:38:9c:0a:87:6e:b6:24:93:4d:03: cd:96:c8:e6:15:7b:59:69:ea:98:d8:bd:7f:e2:c1: b7:7e:32:39:5f:a0:ec:9a:db:c4:1d:90:d6:fa:20: 11:58:aa:fd:20:f2:62:02:24:45:78:31:f0:38:96: b0:64:f1:1b:02:1c:15:27:05:93:98:5a:67:09:91: c3:d6:b0:61:cf:33:14:94:24:eb:49:21:38:ee:55: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2D:A4:3C:C5:2B:96:1E:3A:88:86:61:BE:C6:8C:6F:97:FA:C4:07 X509v3 Authority Key Identifier: keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1b:95:8b:08:b1:bc:92:72:8c:2d:1c:6f:64:12:fd:4e:19: 13:49:78:08:42:56:be:9f:cc:55:17:c8:21:49:e2:b2:8b:4d: af:0b:85:17:62:10:3b:58:eb:d3:0f:7b:ae:70:bd:54:46:fc: c3:cf:69:cf:d1:b8:df:b3:94:71:85:79:6a:23:48:01:0f:39: 4c:a0:bd:bd:b4:a3:11:c0:c1:c3:33:c9:63:22:3f:62:b3:29: d3:f4:8b:45:06:5d:66:d6:34:cc:d5:5e:bb:9f:b0:35:92:f6: 11:96:85:86:b6:41:88:e7:7a:f9:a7:f3:24:b1:93:2d:3f:eb: f3:8f:4a:3d:59:5f:73:5c:c2:75:f7:84:14:e8:63:7e:56:8c: 62:6d:dd:86:f8:de:e1:ed:55:1f:30:48:5c:e5:0c:8a:ba:c0: 3c:01:dd:17:a7:cf:b1:1f:a8:dc:1b:a8:cb:af:ae:c0:54:44: b7:3b:4c:45:79:19:91:50:d7:ce:d9:4e:d3:7a:17:f0:6f:ae: d4:95:a3:7a:e1:93:c4:8f:55:fb:03:44:83:7d:da:dd:3e:e7: 67:69:48:7a:0e:c0:30:f3:65:95:d4:87:38:e7:f7:be:db:4e: 05:53:45:1f:bc:e4:2c:42:32:fd:f2:d7:7b:d4:95:f1:2b:0e: ec:95:d0:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXgG881WuOGTyS8fzco93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZGVkM2VhM2JhNjczYTgwOGNmNWU2YWRjYjUxZWE3ZjMz ZjQyMDMwHhcNMjUxMjIzMDQwMDU2WhcNMjUxMjI0MDQwMDU2WjAzMTEwLwYDVQQD EyhiODJkYTQzY2M1MmI5NjFlM2E4ODg2NjFiZWM2OGM2Zjk3ZmFjNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK3RFDARO2VI5yDwXgEYYdykc6Df Esob+J/eQLlJasTB0yOCieficGMgUWAk5Rl2RiIJJIESqPokzsF2eR0ogdusH4gq UjmNRxY/rvAa6UGd/tZeYi/uOLzWFg78rcnAGuHp7odjxv8g3xfnK9Gqk4CLNlgs KSBWKeScx/S/zfNQ6HYcG6QXiK0P0LuLlhRKfzdOlaMLuLyyBl3NCR5o+s1jB0H9 s5n6wDicCodutiSTTQPNlsjmFXtZaeqY2L1/4sG3fjI5X6DsmtvEHZDW+iARWKr9 IPJiAiRFeDHwOJawZPEbAhwVJwWTmFpnCZHD1rBhzzMUlCTrSSE47lWWHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgtpDzFK5YeOoiGYb7GjG+X+sQHMB8GA1UdIwQY MBaAFNze0+o7pnOoCM9eaty1HqfzP0IDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMt MTU3MzBlMjQ2YmE2LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMtMTU3MzBlMjQ2YmE2 LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBuViwix vJJyjC0cb2QS/U4ZE0l4CEJWvp/MVRfIIUnisotNrwuFF2IQO1jr0w97rnC9VEb8 w89pz9G437OUcYV5aiNIAQ85TKC9vbSjEcDBwzPJYyI/YrMp0/SLRQZdZtY0zNVe u5+wNZL2EZaFhrZBiOd6+afzJLGTLT/r849KPVlfc1zCdfeEFOhjflaMYm3dhvje 4e1VHzBIXOUMirrAPAHdF6fPsR+o3Buoy6+uwFREtztMRXkZkVDXztlO03oX8G+u 1JWjeuGTxI9V+wNEg33a3T7nZ2lIeg7AMPNlldSHOOf3vttOBVNFH7zkLEIy/fLX e9SV8SsO7JXQ5g== -----END CERTIFICATE-----Generated at Tue Dec 23 11:03:35 2025 by rpki-client