This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft File: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft (raw, json) Hash identifier: Sdi2zy1+hsa0jl79R1m9dCpEkdDuWQRAq6c6pbsWcJA= Subject key identifier: 01:E5:D2:0D:B9:A6:8B:4A:2F:07:AE:58:AB:EA:F1:40:8F:75:1C:23 Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2 Certificate issuer: /CN=de0b59fb68151e21dc99d62faf03589be41fbea2 Certificate serial: 019B4A03C2FB24D13647F14359E7378D2928 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft Manifest number: 0B94 Signing time: Tue 23 Dec 2025 07:01:59 +0000 Manifest this update: Tue 23 Dec 2025 07:01:59 +0000 Manifest next update: Wed 24 Dec 2025 07:01:59 +0000 Files and hashes: 1: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl (hash: j5AWWxyVckjrGNYzUW3T3Q/54zli8AQtdaxDUdKbdz4=) 2: EiOjn6Cn36HWuMJFodH0EVbfYdc.roa (hash: prKCNtfilLl42pcGEF7Kjg7za6QhPHVZeIUhroTyVuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:c2:fb:24:d1:36:47:f1:43:59:e7:37:8d:29:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2 Validity Not Before: Dec 23 07:01:59 2025 GMT Not After : Dec 24 07:01:59 2025 GMT Subject: CN=01e5d20db9a68b4a2f07ae58abeaf1408f751c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cc:4f:52:55:59:08:b2:aa:01:ea:5d:a9:8d: 1f:d6:fc:41:dd:8f:af:cf:e1:5e:f9:28:39:9a:57: 07:4b:d2:1b:2f:87:d0:ce:5f:d5:c6:4d:1b:22:e7: ae:83:fd:1c:b5:65:2e:28:9a:21:7d:70:fb:35:9b: e2:91:0a:d1:b9:d1:a1:72:01:2c:0e:52:0b:46:5b: 9a:cf:d0:0e:fd:83:c1:d7:fe:2f:c0:16:58:3e:4c: 4c:14:2b:ab:9e:04:84:4f:f1:77:a0:4c:9a:78:bc: 69:e9:97:73:42:f3:23:3b:91:71:10:ee:63:df:c4: 24:ea:f6:c0:da:6c:ed:c3:a2:a3:04:34:bc:09:23: e8:18:10:80:fa:38:9b:6a:e1:2d:8a:94:1c:09:51: 88:dc:36:3b:cb:26:b2:a9:a8:6e:51:e8:94:06:a8: 3b:85:b6:ac:f3:fe:bc:3b:0c:c2:bd:88:89:8f:ae: 5e:da:eb:9e:0d:f6:ae:13:1e:45:b4:b4:38:ca:13: c8:c2:ba:ff:de:64:38:66:fa:16:6a:69:c1:54:dc: 73:4d:11:b8:b1:bf:10:67:1f:21:ad:4f:e7:ae:60: 3f:04:a9:5b:05:d3:77:b6:4f:ba:d2:38:88:af:d5: f4:f9:9c:26:59:d0:d2:f1:f2:02:5f:fc:09:75:ba: fa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E5:D2:0D:B9:A6:8B:4A:2F:07:AE:58:AB:EA:F1:40:8F:75:1C:23 X509v3 Authority Key Identifier: keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b2:7f:2c:7a:95:51:ea:4a:f1:03:f2:c6:51:71:eb:8c:0b: 9d:14:78:77:ea:a7:94:91:b1:15:7e:c5:e7:bb:21:a9:44:d6: 18:21:58:e9:59:04:b0:ee:c9:45:34:6b:cb:66:4c:f2:1b:0c: b8:3a:4d:56:cf:bf:97:ee:bb:99:61:d8:42:20:15:83:e9:81: 35:af:23:ee:80:b9:7f:e2:3e:c5:3a:9a:d7:a1:c6:6f:67:c3: a8:69:99:60:52:8e:e7:4a:d6:29:34:c3:a7:fe:86:21:ca:f1: 6b:67:be:54:22:0f:5d:04:96:e4:3f:e2:98:93:0a:7a:bf:b9: 35:2b:cb:8e:b6:eb:8d:ed:d5:21:06:a2:33:ed:e5:e9:7c:d1: 55:00:40:11:f9:fa:1c:ca:8a:a0:88:47:c2:7d:b2:4a:79:4d: eb:49:41:8d:f7:fa:f7:89:54:f1:6c:e6:f5:bc:8e:39:71:46: 0f:7c:f5:de:72:aa:14:f6:5c:12:f3:76:92:5a:eb:56:f5:54: 05:84:14:6e:1c:21:0c:3a:a4:0c:0f:0e:1d:5c:23:01:c1:08: 62:37:38:95:5e:c2:22:c0:9e:37:ad:4c:8f:77:b6:8e:07:31: 3d:d2:21:c5:cc:41:76:ed:f5:fa:00:6c:4c:32:4b:ae:9d:ae: 6b:d5:10:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA8L7JNE2R/FDWec3jSkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGI1OWZiNjgxNTFlMjFkYzk5ZDYyZmFmMDM1ODliZTQx ZmJlYTIwHhcNMjUxMjIzMDcwMTU5WhcNMjUxMjI0MDcwMTU5WjAzMTEwLwYDVQQD EygwMWU1ZDIwZGI5YTY4YjRhMmYwN2FlNThhYmVhZjE0MDhmNzUxYzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8xPUlVZCLKqAepdqY0f1vxB3Y+v z+Fe+Sg5mlcHS9IbL4fQzl/Vxk0bIueug/0ctWUuKJohfXD7NZvikQrRudGhcgEs DlILRluaz9AO/YPB1/4vwBZYPkxMFCurngSET/F3oEyaeLxp6ZdzQvMjO5FxEO5j 38Qk6vbA2mztw6KjBDS8CSPoGBCA+jibauEtipQcCVGI3DY7yyayqahuUeiUBqg7 hbas8/68OwzCvYiJj65e2uueDfauEx5FtLQ4yhPIwrr/3mQ4ZvoWamnBVNxzTRG4 sb8QZx8hrU/nrmA/BKlbBdN3tk+60jiIr9X0+ZwmWdDS8fICX/wJdbr6jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHl0g25potKLweuWKvq8UCPdRwjMB8GA1UdIwQY MBaAFN4LWftoFR4h3JnWL68DWJvkH76iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YWQ1MDgtYmZjMS00YjhhLWJhZmMt Y2QwMjQ3ODhlZDNjLzEvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85YWQ1MDgtYmZjMS00YjhhLWJhZmMtY2QwMjQ3ODhlZDNj LzEvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7J/LHqV UepK8QPyxlFx64wLnRR4d+qnlJGxFX7F57shqUTWGCFY6VkEsO7JRTRry2ZM8hsM uDpNVs+/l+67mWHYQiAVg+mBNa8j7oC5f+I+xTqa16HGb2fDqGmZYFKO50rWKTTD p/6GIcrxa2e+VCIPXQSW5D/imJMKer+5NSvLjrbrje3VIQaiM+3l6XzRVQBAEfn6 HMqKoIhHwn2ySnlN60lBjff694lU8Wzm9byOOXFGD3z13nKqFPZcEvN2klrrVvVU BYQUbhwhDDqkDA8OHVwjAcEIYjc4lV7CIsCeN61Mj3e2jgcxPdIhxcxBdu31+gBs TDJLrp2ua9UQMw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:52:44 2025 by rpki-client