This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json) Hash identifier: nAGuPw8GADpcVyl+oHo2hY67Pa9VUtV+udAc26b8Aqk= Subject key identifier: 2E:FA:28:24:61:EE:2E:BC:C8:33:B9:1A:B5:29:3D:CA:30:FE:F2:01 Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17 Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617 Certificate serial: 019B19F1BFF40E403B7348F00441FB5A36CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft Manifest number: 0C9C Signing time: Sat 13 Dec 2025 23:00:32 +0000 Manifest this update: Sat 13 Dec 2025 23:00:32 +0000 Manifest next update: Sun 14 Dec 2025 23:00:32 +0000 Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: HRZScQM/x05ChXAX0ZTMDT1I6ffjXbsOggKdUrIXH3M=) 2: GTryjErQ-QvKOHELwraRwqDQoQ4.roa (hash: GN3kBbzA5jk8ZVZGy0p/hEuJ6JzyB6iMj6OE8Sf6qCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:bf:f4:0e:40:3b:73:48:f0:04:41:fb:5a:36:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec756af77dafebca10684d68556baacd7173617 Validity Not Before: Dec 13 23:00:32 2025 GMT Not After : Dec 14 23:00:32 2025 GMT Subject: CN=2efa282461ee2ebcc833b91ab5293dca30fef201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9b:39:e3:bb:18:ad:34:4c:9c:01:af:37:a7: 94:75:30:e9:1f:f1:16:80:f9:31:db:82:b2:71:dd: 63:55:66:00:75:c8:61:56:90:25:56:1f:f1:52:50: c0:40:66:3d:6d:53:bf:78:2d:85:8a:64:30:46:a7: cd:e8:e2:25:4d:e9:da:55:79:2e:ce:f7:4e:76:05: 5d:39:63:be:58:a0:f9:c5:25:9d:c3:13:9b:7a:1a: c0:2f:01:a9:81:09:f2:2a:fb:70:a1:c7:15:e9:67: d3:c2:cf:cc:92:4f:62:f7:70:4d:b1:84:b3:5b:68: be:b0:36:ca:c7:0d:b8:78:7f:27:22:f4:40:31:b6: 47:23:1e:81:38:d7:2f:1d:e1:18:f9:2b:25:e2:98: 25:c9:ad:f9:5b:54:73:8b:f1:30:9a:ce:c7:b7:fd: f7:52:bc:03:06:29:99:ec:01:a3:53:c9:01:ce:4b: b3:8c:97:0a:36:c4:cb:11:76:b6:a0:ff:f6:dd:6b: 09:3d:74:9f:5e:aa:f7:7d:e7:8d:d5:31:94:ff:c1: 01:6c:39:89:95:14:6c:a7:ce:0a:f2:a8:a8:19:0a: c7:9f:fa:b2:51:94:8e:5b:61:ed:6f:44:79:c1:2d: 81:d0:51:4c:0a:ad:de:a2:77:72:17:81:26:9a:85: 3e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FA:28:24:61:EE:2E:BC:C8:33:B9:1A:B5:29:3D:CA:30:FE:F2:01 X509v3 Authority Key Identifier: keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:25:10:f0:21:2a:85:05:38:30:d7:e8:15:62:22:94:23:2d: 51:dd:ed:73:3a:07:f6:51:63:1a:bf:e8:ce:11:cd:b6:de:60: dc:37:ee:ff:35:79:46:01:ae:2f:2d:a7:0d:73:d9:d0:13:4c: 10:aa:b6:ee:22:9d:e6:d2:58:a9:9c:76:9e:1b:b4:b2:47:ad: 68:d6:35:b3:df:ad:ce:30:06:03:2f:47:4e:b0:45:00:26:1a: 2a:04:d1:11:2a:53:8d:8a:00:c1:68:fd:28:a5:63:a5:4a:d2: ea:94:4f:99:04:02:20:c4:19:bf:4d:16:ce:0e:d2:5e:74:f5: 02:74:da:ad:b0:4b:b6:9f:7c:bf:62:4d:64:23:f6:a6:de:95: c4:2b:51:02:9d:76:27:61:4b:73:f5:08:74:a4:d6:c0:fd:eb: b8:2a:2a:b9:8f:95:46:79:2e:ae:72:18:1f:fc:60:54:4e:3d: 6a:c9:49:36:42:f8:78:d7:f1:c6:a1:56:68:f6:8d:53:84:2b: 18:3e:2f:7f:4e:58:f6:ac:60:8e:65:3b:ff:38:fb:59:4e:c4: 69:f5:9c:ec:84:ba:23:f8:45:bb:a8:d5:a3:f8:ff:23:51:78: f0:6c:4c:a4:5d:f5:e4:e2:54:a2:2e:e1:6c:4b:52:bc:69:b1: 9b:c9:09:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8b/0DkA7c0jwBEH7WjbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYzc1NmFmNzdkYWZlYmNhMTA2ODRkNjg1NTZiYWFjZDcx NzM2MTcwHhcNMjUxMjEzMjMwMDMyWhcNMjUxMjE0MjMwMDMyWjAzMTEwLwYDVQQD EygyZWZhMjgyNDYxZWUyZWJjYzgzM2I5MWFiNTI5M2RjYTMwZmVmMjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZs547sYrTRMnAGvN6eUdTDpH/EW gPkx24Kycd1jVWYAdchhVpAlVh/xUlDAQGY9bVO/eC2FimQwRqfN6OIlTenaVXku zvdOdgVdOWO+WKD5xSWdwxObehrALwGpgQnyKvtwoccV6WfTws/Mkk9i93BNsYSz W2i+sDbKxw24eH8nIvRAMbZHIx6BONcvHeEY+Ssl4pglya35W1Rzi/Ewms7Ht/33 UrwDBimZ7AGjU8kBzkuzjJcKNsTLEXa2oP/23WsJPXSfXqr3feeN1TGU/8EBbDmJ lRRsp84K8qioGQrHn/qyUZSOW2Htb0R5wS2B0FFMCq3eondyF4EmmoU+hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC76KCRh7i68yDO5GrUpPcow/vIBMB8GA1UdIwQY MBaAFN7HVq932v68oQaE1oVWuqzXFzYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MWI4MmItY2RlMC00YWY2LTk1MmMt N2UwYzdkMzUyNjcxLzEvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80MWI4MmItY2RlMC00YWY2LTk1MmMtN2UwYzdkMzUyNjcx LzEvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniUQ8CEq hQU4MNfoFWIilCMtUd3tczoH9lFjGr/ozhHNtt5g3Dfu/zV5RgGuLy2nDXPZ0BNM EKq27iKd5tJYqZx2nhu0sketaNY1s9+tzjAGAy9HTrBFACYaKgTRESpTjYoAwWj9 KKVjpUrS6pRPmQQCIMQZv00Wzg7SXnT1AnTarbBLtp98v2JNZCP2pt6VxCtRAp12 J2FLc/UIdKTWwP3ruCoquY+VRnkurnIYH/xgVE49aslJNkL4eNfxxqFWaPaNU4Qr GD4vf05Y9qxgjmU7/zj7WU7EafWc7IS6I/hFu6jVo/j/I1F48GxMpF315OJUoi7h bEtSvGmxm8kJIw== -----END CERTIFICATE-----Generated at Sun Dec 14 07:47:52 2025 by rpki-client