This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json) Hash identifier: 4QsLMzIr+/p86qXT1UpxTUOL/TwGCfzsENXrizPHWE4= Subject key identifier: C8:BF:53:50:4C:D5:9E:7D:A3:22:0F:D5:0A:0A:47:B9:02:6C:DF:B0 Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4 Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4 Certificate serial: 019B4882FFB9F03CD6540A1F9D31FC7F35DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft Manifest number: 0F6F Signing time: Tue 23 Dec 2025 00:01:43 +0000 Manifest this update: Tue 23 Dec 2025 00:01:43 +0000 Manifest next update: Wed 24 Dec 2025 00:01:43 +0000 Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: ZhT17aiJWEBXkrVcvTUUYit91gYr8oebxsy57K+DXzw=) 2: C9mugrtzW_-CpWlbrAzn7HLndJs.roa (hash: us/IF6tfe4s5IdJAAyc5z0B0e23waKBVaik+zvz/TyQ=) 3: yll503ISaq2wNzfEAk_Qb_MtGbg.roa (hash: LYtS+Gvc0u0aK5E+MP2oP4ZNnIbSc6rSwiTMseFfpYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:ff:b9:f0:3c:d6:54:0a:1f:9d:31:fc:7f:35:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4 Validity Not Before: Dec 23 00:01:43 2025 GMT Not After : Dec 24 00:01:43 2025 GMT Subject: CN=c8bf53504cd59e7da3220fd50a0a47b9026cdfb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:e4:12:c2:39:f9:06:b2:ab:99:38:ed:42: 61:59:db:6c:a0:05:e6:fb:52:21:ba:ee:f9:26:aa: 40:53:93:db:b1:f5:6e:a4:06:2a:d1:1a:a3:49:8d: 93:18:f2:c0:d8:a6:a4:45:a2:61:81:45:e1:92:da: eb:53:26:55:2e:6c:f3:e1:15:56:67:cb:e1:5e:9e: 5a:b6:4f:e7:2f:1a:d5:ec:3f:66:55:9d:c3:b1:85: 89:55:c9:eb:00:94:55:6c:e1:8f:24:95:7f:f3:2c: 92:45:5b:84:ef:3e:b3:ac:cb:ba:3f:19:3d:ce:8c: 7a:65:9d:f6:4c:fe:54:e2:7d:50:be:eb:31:17:f2: c8:d9:15:9a:fd:df:04:7e:0f:94:75:4b:08:c0:c5: dd:ce:a2:fb:92:1f:06:bf:23:d2:ab:e3:26:2b:14: 2d:5a:e6:4e:8a:e4:96:41:5a:5e:79:a0:28:f4:28: 1f:4e:24:12:39:2b:3f:8c:7e:84:16:13:eb:4d:f9: 42:87:e3:48:75:09:6c:46:52:d7:66:d8:3a:20:91: 20:23:53:82:e1:3f:91:9d:7f:5e:b8:93:ad:b4:8b: c4:52:d7:2e:22:51:1b:69:2c:20:12:69:c7:de:80: f7:6f:bc:46:2f:c3:63:0b:1a:1c:f3:a9:f0:65:62: 78:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BF:53:50:4C:D5:9E:7D:A3:22:0F:D5:0A:0A:47:B9:02:6C:DF:B0 X509v3 Authority Key Identifier: keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:15:66:6b:f4:61:7c:fe:7e:09:b1:79:1d:ee:d7:a4:29:0b: 90:22:2d:26:08:4b:e7:e5:f9:dc:48:2d:76:12:39:84:75:ba: 05:79:ba:19:53:22:2b:34:a9:a3:7a:75:8e:59:5b:6d:10:32: 33:e9:82:73:49:00:4f:05:cc:89:d9:e0:d9:37:a4:39:07:9a: 3a:8e:c4:85:39:58:7d:27:cd:5f:a9:c6:22:a4:51:e4:dd:7e: 34:9a:60:49:25:9a:69:93:c9:0c:00:e7:a6:56:7a:c3:36:f7: 7f:63:77:e9:2c:8a:6b:91:6a:2f:44:8f:c4:e9:1a:9f:ec:3a: 6d:ad:5b:5f:d9:90:5f:6c:13:8b:77:28:b2:b3:ae:1e:3f:d3: e6:db:25:7f:3e:2c:0f:a4:81:14:17:76:24:fc:f5:89:9c:9c: ff:ef:5c:9f:2b:95:52:9a:03:b4:71:61:ed:23:e7:36:c2:c5: c3:b5:2a:8b:b8:fd:23:2a:3d:26:a3:bc:74:d0:3c:49:d6:0e: 01:c0:75:a5:c7:61:78:77:78:5e:6a:3f:68:a8:95:2a:1b:78: 9d:cf:07:69:f6:a3:4f:05:0b:06:df:a4:11:dd:0e:ae:ca:cb: 86:0b:3d:37:e2:38:6d:92:c3:3e:a0:d2:8a:67:2a:f3:36:30: fc:08:4e:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgv+58DzWVAofnTH8fzXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNjkxNzY0NWQ5ZDIyMDQzNWY5MWM3ZTQ2YzgxMTBjZjg5 YWNiZTQwHhcNMjUxMjIzMDAwMTQzWhcNMjUxMjI0MDAwMTQzWjAzMTEwLwYDVQQD EyhjOGJmNTM1MDRjZDU5ZTdkYTMyMjBmZDUwYTBhNDdiOTAyNmNkZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbTkEsI5+Qayq5k47UJhWdtsoAXm +1Ihuu75JqpAU5PbsfVupAYq0RqjSY2TGPLA2KakRaJhgUXhktrrUyZVLmzz4RVW Z8vhXp5atk/nLxrV7D9mVZ3DsYWJVcnrAJRVbOGPJJV/8yySRVuE7z6zrMu6Pxk9 zox6ZZ32TP5U4n1QvusxF/LI2RWa/d8Efg+UdUsIwMXdzqL7kh8GvyPSq+MmKxQt WuZOiuSWQVpeeaAo9CgfTiQSOSs/jH6EFhPrTflCh+NIdQlsRlLXZtg6IJEgI1OC 4T+RnX9euJOttIvEUtcuIlEbaSwgEmnH3oD3b7xGL8NjCxoc86nwZWJ4hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMi/U1BM1Z59oyIP1QoKR7kCbN+wMB8GA1UdIwQY MBaAFNxpF2RdnSIENfkcfkbIEQz4msvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2Et NDI4YmU5MDA4ZmJhLzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2EtNDI4YmU5MDA4ZmJh LzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhVma/Rh fP5+CbF5He7XpCkLkCItJghL5+X53EgtdhI5hHW6BXm6GVMiKzSpo3p1jllbbRAy M+mCc0kATwXMidng2TekOQeaOo7EhTlYfSfNX6nGIqRR5N1+NJpgSSWaaZPJDADn plZ6wzb3f2N36SyKa5FqL0SPxOkan+w6ba1bX9mQX2wTi3cosrOuHj/T5tslfz4s D6SBFBd2JPz1iZyc/+9cnyuVUpoDtHFh7SPnNsLFw7Uqi7j9Iyo9JqO8dNA8SdYO AcB1pcdheHd4Xmo/aKiVKht4nc8HafajTwULBt+kEd0OrsrLhgs9N+I4bZLDPqDS imcq8zYw/AhOvg== -----END CERTIFICATE-----Generated at Tue Dec 23 07:52:08 2025 by rpki-client