This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json) Hash identifier: uLI/ethA05Nk4mOG6yE0bBf/d/4liA7Yf+3tiSeVP1I= Subject key identifier: 07:F7:13:72:74:22:D5:83:6A:90:CC:4F:D4:0C:51:29:83:AB:D5:8D Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79 Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079 Certificate serial: 019B59760C2A86ED15B6EACC804922CCA69A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft Manifest number: 0CA4 Signing time: Fri 26 Dec 2025 07:01:07 +0000 Manifest this update: Fri 26 Dec 2025 07:01:07 +0000 Manifest next update: Sat 27 Dec 2025 07:01:07 +0000 Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: qZCdztTE8fnqakpvy2enKjn9YFlxMRDF5JQc1a0iFOM=) 2: 4NcSUJ4Kg8dewIwP8RGgWPLVsGw.roa (hash: NfguGRutDpTl33g3TT2hnx9Rfi2f9fnIaQJYs24UAYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:0c:2a:86:ed:15:b6:ea:cc:80:49:22:cc:a6:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079 Validity Not Before: Dec 26 07:01:07 2025 GMT Not After : Dec 27 07:01:07 2025 GMT Subject: CN=07f713727422d5836a90cc4fd40c512983abd58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:4c:07:03:8e:6a:ea:9b:5c:0d:b5:56:70: e7:9b:0c:47:f4:85:20:08:9f:ad:be:dc:a3:e1:af: c6:fd:e2:e7:a2:a8:c8:c0:58:ea:9b:12:f3:25:55: d3:ac:06:65:6b:68:e9:03:66:19:e2:85:0a:fa:38: 79:8b:03:44:71:ff:17:0b:69:87:96:05:56:96:ad: d4:f9:75:27:e8:b1:2c:82:e9:92:c5:04:34:50:95: 7a:b1:f5:4c:70:f4:46:c7:34:9f:0c:38:30:a1:f5: fd:31:21:f2:31:8f:be:27:fd:93:15:24:55:81:94: c3:fa:74:ff:7c:7b:9b:bd:b4:4c:78:65:53:fb:00: 19:c2:76:0e:dc:b9:aa:67:48:be:3c:cf:29:3a:4b: a7:40:47:98:20:7f:1b:bb:7f:92:fa:93:25:86:d5: df:2c:28:7a:f8:c5:54:cc:c5:fb:49:f0:f2:7d:58: 8a:33:b7:6c:38:86:26:b9:97:6c:66:c6:35:b9:0a: 8a:ef:ba:f4:b8:38:64:ae:af:3c:15:97:7c:dd:10: 51:4a:df:32:92:70:a8:8d:a4:ad:15:13:f7:86:31: cd:03:da:14:ac:a2:9f:51:e8:a0:0b:1a:5d:29:a6: 26:3f:69:c3:75:ce:a7:e6:e6:8b:34:77:84:c9:f9: 94:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F7:13:72:74:22:D5:83:6A:90:CC:4F:D4:0C:51:29:83:AB:D5:8D X509v3 Authority Key Identifier: keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b6:ce:cf:2e:3a:ea:38:ae:bb:3a:e9:d3:11:01:e9:3a:0d: 34:6e:b2:65:5b:b5:72:24:d5:8d:f6:c8:4c:17:e0:9f:7b:b0: ad:5b:70:6f:a7:6d:3e:19:c3:48:96:e1:5b:bc:de:09:45:a9: 50:b1:fc:67:bb:fa:b6:f2:cb:7e:2c:eb:83:d3:bb:a8:50:bc: ed:d1:1d:92:9c:0c:13:1c:42:d2:51:70:9b:da:a9:31:47:3c: 13:3b:c6:64:07:87:8d:d8:5c:d4:db:3c:49:c8:42:66:8a:56: d4:15:95:d7:c1:b1:fe:19:7b:3c:c8:b8:f1:a9:6d:14:aa:2e: 8f:71:a3:85:61:13:b8:41:48:28:6d:9e:1c:57:27:80:cb:cc: a8:38:c5:b5:d7:b2:42:5b:a1:ab:17:f0:ec:a8:99:cd:42:38: ec:73:0c:78:5b:d0:41:1d:db:bb:7e:b4:4c:41:be:2c:73:e9: 8c:29:c9:f0:66:dc:02:9f:4e:9e:d1:20:00:4b:4a:05:3a:e1: 6a:57:6f:a3:de:aa:b2:4d:b3:ac:61:ab:57:a2:42:b0:95:f2: 70:51:b9:3f:c3:7a:58:d5:23:6d:aa:96:56:fa:10:9a:88:9e: 9e:93:98:03:6e:6f:ed:a7:1c:79:ec:db:e1:94:2d:2b:70:4c: 68:1a:16:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdgwqhu0VturMgEkizKaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNDc0OGNkNDcxNGE1Y2M4N2NhZmI4NDMwZmI4MTI0OGIw OTQwNzkwHhcNMjUxMjI2MDcwMTA3WhcNMjUxMjI3MDcwMTA3WjAzMTEwLwYDVQQD EygwN2Y3MTM3Mjc0MjJkNTgzNmE5MGNjNGZkNDBjNTEyOTgzYWJkNThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpRMBwOOauqbXA21VnDnmwxH9IUg CJ+tvtyj4a/G/eLnoqjIwFjqmxLzJVXTrAZla2jpA2YZ4oUK+jh5iwNEcf8XC2mH lgVWlq3U+XUn6LEsgumSxQQ0UJV6sfVMcPRGxzSfDDgwofX9MSHyMY++J/2TFSRV gZTD+nT/fHubvbRMeGVT+wAZwnYO3LmqZ0i+PM8pOkunQEeYIH8bu3+S+pMlhtXf LCh6+MVUzMX7SfDyfViKM7dsOIYmuZdsZsY1uQqK77r0uDhkrq88FZd83RBRSt8y knCojaStFRP3hjHNA9oUrKKfUeigCxpdKaYmP2nDdc6n5uaLNHeEyfmUgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAf3E3J0ItWDapDMT9QMUSmDq9WNMB8GA1UdIwQY MBaAFN1HSM1HFKXMh8r7hDD7gSSLCUB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YzU1YWYtNWU5Yi00MTk3LTg2ZmIt Mzc1NDVkYTA1NmJkLzEvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80YzU1YWYtNWU5Yi00MTk3LTg2ZmItMzc1NDVkYTA1NmJk LzEvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLbOzy46 6jiuuzrp0xEB6ToNNG6yZVu1ciTVjfbITBfgn3uwrVtwb6dtPhnDSJbhW7zeCUWp ULH8Z7v6tvLLfizrg9O7qFC87dEdkpwMExxC0lFwm9qpMUc8EzvGZAeHjdhc1Ns8 SchCZopW1BWV18Gx/hl7PMi48altFKouj3GjhWETuEFIKG2eHFcngMvMqDjFtdey Qluhqxfw7KiZzUI47HMMeFvQQR3bu360TEG+LHPpjCnJ8GbcAp9OntEgAEtKBTrh aldvo96qsk2zrGGrV6JCsJXycFG5P8N6WNUjbaqWVvoQmoienpOYA25v7acceezb 4ZQtK3BMaBoW5g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:20 2025 by rpki-client