This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft File: 3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json) Hash identifier: UUtZ7/4IZ/yzheJD8FiPvVPAmxv0i46UzlRmjs3YpZ0= Subject key identifier: A5:DD:0A:43:6D:92:F9:38:FE:F8:59:3C:71:67:BE:05:4B:0B:F6:B7 Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36 Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36 Certificate serial: 019B2174FDEB92E3D330A81A02FC0143E874 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft Manifest number: 0AFE Signing time: Mon 15 Dec 2025 10:01:13 +0000 Manifest this update: Mon 15 Dec 2025 10:01:13 +0000 Manifest next update: Tue 16 Dec 2025 10:01:13 +0000 Files and hashes: 1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: W3gkmlh69jruJX3WwsojUGtnf5580NgGBObaYMhD9g0=) 2: WGy1cA3da99W4WDLy3MY4ZyczoU.roa (hash: SJ9b+hH7b3cVwCr6CT26WQO6ifaQhtn6CrsiD/nybF0=) 3: jkdGIndQz1w9lSn5gC2Ktns7PmQ.roa (hash: VwGNfeMCv18NN23Twwp0pPWxKthypMsuMJxPjN6yLC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:fd:eb:92:e3:d3:30:a8:1a:02:fc:01:43:e8:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36 Validity Not Before: Dec 15 10:01:13 2025 GMT Not After : Dec 16 10:01:13 2025 GMT Subject: CN=a5dd0a436d92f938fef8593c7167be054b0bf6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:95:65:bb:04:5b:ca:57:cc:37:ce:50:5a: 19:72:41:ee:98:31:8b:94:7d:db:ea:ea:1a:02:e7: 20:91:62:96:28:4c:54:92:cc:d8:ac:1e:19:00:0c: 55:1b:74:3f:55:a6:53:35:63:36:fa:a0:a9:f4:ce: 80:ad:cb:83:c6:4e:b8:fd:69:cb:37:e3:4c:f7:71: fe:06:45:05:5a:26:1c:1f:c6:af:b1:c2:ab:17:66: cb:e4:7a:e4:a2:d1:ce:99:7a:a4:5a:a9:e3:e6:7c: 16:f2:8a:4d:b0:58:ee:51:78:de:a0:73:f5:e8:c5: 5e:d7:e9:ed:ca:32:d7:d1:25:e8:38:cc:38:4b:a9: 5f:14:21:6a:f4:27:10:02:17:75:90:9b:98:44:13: 15:33:48:db:54:71:ee:a3:b4:7e:26:bf:67:db:5c: 8c:96:df:63:a7:55:b9:5e:34:99:96:6b:88:e2:f8: f1:05:c6:b0:37:c3:f5:b6:48:f9:00:c3:31:d6:9d: f0:8a:72:e6:9a:4f:67:ac:96:ae:67:e5:13:8d:98: 76:ed:9e:7b:e7:c4:de:3d:36:89:e5:2c:cb:d1:78: c4:bc:34:f3:59:7a:ac:4a:8e:d4:35:d4:72:3b:96: 61:64:a1:09:37:bf:23:78:f1:16:ab:34:a7:a6:be: 4b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DD:0A:43:6D:92:F9:38:FE:F8:59:3C:71:67:BE:05:4B:0B:F6:B7 X509v3 Authority Key Identifier: keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ea:e5:4d:77:86:c1:85:85:96:c9:8e:9a:68:fd:ce:61:75: ff:07:aa:9b:1d:7b:5a:b1:32:c4:13:37:48:6d:7a:71:77:77: 8b:e9:d6:7d:15:69:ed:49:21:b3:eb:61:85:b8:97:c4:fa:0f: 1b:43:05:60:2a:29:44:af:e0:09:ef:2f:61:fc:18:61:4c:e0: 86:92:9b:87:dc:b4:ab:e3:ad:60:d3:ba:47:31:da:56:41:ca: 44:aa:c8:a1:78:b6:cd:0b:68:9b:87:20:9b:3e:23:64:33:42: 07:62:f9:f5:81:a6:d5:03:83:d6:7c:4e:ff:a1:41:fb:ec:57: 94:be:ce:d1:be:8f:16:0a:5d:90:3f:6b:c7:1f:08:10:af:c1: f5:14:79:fe:ea:63:71:78:22:45:d0:17:39:f3:14:72:88:f0: f4:b1:43:1c:79:1a:7e:03:16:d9:8e:2d:62:08:08:ff:fe:91: a7:46:7b:35:f3:54:24:18:a5:eb:89:c7:d6:47:3a:f6:e6:26: c0:cc:93:55:af:1a:dd:4b:37:15:23:57:89:bf:89:06:a1:29: b0:bc:c7:cc:e5:e7:7e:f9:7f:42:54:25:fc:9e:3b:33:eb:72: 3e:8c:c6:ec:84:3e:e1:6d:93:2f:be:1d:c4:02:d4:55:d7:2e: fa:64:b3:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdP3rkuPTMKgaAvwBQ+h0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGUyNWUxN2E1MTY5NjkyM2E1YzAyOTY2Nzg3NDA5YWFj OWFhMzYwHhcNMjUxMjE1MTAwMTEzWhcNMjUxMjE2MTAwMTEzWjAzMTEwLwYDVQQD EyhhNWRkMGE0MzZkOTJmOTM4ZmVmODU5M2M3MTY3YmUwNTRiMGJmNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4qVZbsEW8pXzDfOUFoZckHumDGL lH3b6uoaAucgkWKWKExUkszYrB4ZAAxVG3Q/VaZTNWM2+qCp9M6ArcuDxk64/WnL N+NM93H+BkUFWiYcH8avscKrF2bL5HrkotHOmXqkWqnj5nwW8opNsFjuUXjeoHP1 6MVe1+ntyjLX0SXoOMw4S6lfFCFq9CcQAhd1kJuYRBMVM0jbVHHuo7R+Jr9n21yM lt9jp1W5XjSZlmuI4vjxBcawN8P1tkj5AMMx1p3winLmmk9nrJauZ+UTjZh27Z57 58TePTaJ5SzL0XjEvDTzWXqsSo7UNdRyO5ZhZKEJN78jePEWqzSnpr5LgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXdCkNtkvk4/vhZPHFnvgVLC/a3MB8GA1UdIwQY MBaAFNwOJeF6UWlpI6XAKWZ4dAmqyao2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2M0NmMtOGM1MS00MzMwLWI2MjMt MTgzNWNjOGExZDlkLzEvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8yY2M0NmMtOGM1MS00MzMwLWI2MjMtMTgzNWNjOGExZDlk LzEvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATurlTXeG wYWFlsmOmmj9zmF1/weqmx17WrEyxBM3SG16cXd3i+nWfRVp7Ukhs+thhbiXxPoP G0MFYCopRK/gCe8vYfwYYUzghpKbh9y0q+OtYNO6RzHaVkHKRKrIoXi2zQtom4cg mz4jZDNCB2L59YGm1QOD1nxO/6FB++xXlL7O0b6PFgpdkD9rxx8IEK/B9RR5/upj cXgiRdAXOfMUcojw9LFDHHkafgMW2Y4tYggI//6Rp0Z7NfNUJBil64nH1kc69uYm wMyTVa8a3Us3FSNXib+JBqEpsLzHzOXnfvl/QlQl/J47M+tyPozG7IQ+4W2TL74d xALUVdcu+mSzpg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:48 2025 by rpki-client