This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.mft (raw, json) Hash identifier: QMkpxpFpH0US5DP+q4A7OyH1jMNSGqFmwE8C4I3f3mY= Subject key identifier: C1:AB:CD:27:81:AA:57:E4:E8:D8:2C:B1:CE:07:43:EF:4E:7F:A1:C2 Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49 Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49 Certificate serial: 019B21E26C30C58F7B67F1982BF6637A5D4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 12:00:45 +0000 Manifest this update: Mon 15 Dec 2025 12:00:45 +0000 Manifest next update: Tue 16 Dec 2025 12:00:45 +0000 Files and hashes: 1: 3A-eoEY21-cUGLkwkczQ5XAVvkk.crl (hash: zvKcDQEEReQwVIJMdwuFGzuShd1Yq5PvUYhW2gFDQZs=) 2: L9o7KQxJPRJhzeZqHSfbm_7F0-s.roa (hash: nN3JagCFrpyGEb5Wr7V9qHCmIBDIlF1ypYg9dy1tB3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:6c:30:c5:8f:7b:67:f1:98:2b:f6:63:7a:5d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49 Validity Not Before: Dec 15 12:00:45 2025 GMT Not After : Dec 16 12:00:45 2025 GMT Subject: CN=c1abcd2781aa57e4e8d82cb1ce0743ef4e7fa1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:f6:dc:51:b1:f1:c1:80:7a:54:8a:a6:d1: b1:e3:8d:7f:06:c9:26:72:46:21:75:f0:4b:0c:e6: de:a0:f8:86:30:c7:88:f8:f2:91:85:1c:76:e5:58: 98:68:d6:0d:56:79:4f:10:9d:2b:39:59:41:eb:ae: c6:fe:11:db:09:60:36:45:be:bc:ff:24:d3:c2:a2: d6:29:7e:9b:ec:fd:a4:66:41:bd:70:5d:ec:1d:42: 94:be:ca:c6:87:02:e8:f2:d5:d2:9a:23:3b:9f:81: 7a:54:55:5f:9f:e5:7d:a0:95:bf:b4:7a:b3:eb:fc: 59:4d:97:7c:7f:09:c9:ed:05:ee:97:de:b1:82:d3: 7d:1c:cb:af:b2:b1:7d:2b:ca:38:4c:51:7d:19:42: 07:21:12:61:60:87:8f:97:66:ea:7a:5d:2d:19:01: 90:8a:90:22:43:89:d8:af:80:58:39:38:86:4b:d2: 23:05:57:e1:74:b2:25:ed:08:25:e4:1f:b1:4a:c5: bf:9e:e6:2d:e4:fa:4f:b8:e9:56:a2:79:4d:a1:74: 73:38:d2:96:4a:c9:56:40:86:c5:8a:71:2e:a7:7f: 72:86:fd:a8:ae:07:f5:e1:6a:7b:0d:fb:4b:4f:da: d6:fc:98:12:6b:f8:a2:3c:07:05:b4:af:9a:3b:1e: d9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AB:CD:27:81:AA:57:E4:E8:D8:2C:B1:CE:07:43:EF:4E:7F:A1:C2 X509v3 Authority Key Identifier: keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3d:07:78:46:c1:69:2d:a3:8e:47:28:01:cb:0a:df:54:ce: 5e:41:db:4e:22:ae:e4:ca:92:4a:c6:a3:7c:70:03:e9:56:b5: 23:d5:42:62:8f:5f:ec:3e:e6:43:2e:32:c6:79:ab:59:42:04: dd:f4:19:82:21:08:4e:bd:e6:5b:49:56:1d:7a:5c:1b:24:bf: 49:b3:5f:b4:59:f0:69:69:1c:b6:e0:90:3e:62:dc:c1:d8:f0: cd:da:99:bc:f3:e7:c7:a1:b7:a2:f4:3e:cc:e7:4d:88:8c:3e: bf:9c:a3:a6:5f:05:8e:89:4b:49:8e:2c:07:48:7e:2b:d7:22: 3b:ea:23:74:dd:68:9e:f5:a5:51:c9:45:f8:fa:95:0c:a7:57: a2:a9:e5:5e:11:77:3f:29:cc:85:40:7a:9c:d9:f7:00:2d:d8: 66:b6:27:6d:28:91:1c:9a:da:2b:06:57:9c:45:76:c9:05:69: 5b:bb:c6:e1:90:b6:10:6a:09:a7:7d:29:09:e8:48:74:9c:6f: 9c:06:2c:7d:7d:a6:c4:24:c9:62:64:09:f6:84:aa:13:e2:f6: 39:97:8f:fe:07:89:07:2c:d0:67:df:dc:5f:50:ec:39:ab:83: 02:47:b9:33:6c:7a:54:2f:e8:39:12:ca:d3:98:ac:20:45:eb: 1c:cf:bc:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4mwwxY97Z/GYK/Zjel1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGY5ZWEwNDYzNmQ3ZTcxNDE4YjkzMDkxY2NkMGU1NzAx NWJlNDkwHhcNMjUxMjE1MTIwMDQ1WhcNMjUxMjE2MTIwMDQ1WjAzMTEwLwYDVQQD EyhjMWFiY2QyNzgxYWE1N2U0ZThkODJjYjFjZTA3NDNlZjRlN2ZhMWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtor23FGx8cGAelSKptGx441/Bskm ckYhdfBLDObeoPiGMMeI+PKRhRx25ViYaNYNVnlPEJ0rOVlB667G/hHbCWA2Rb68 /yTTwqLWKX6b7P2kZkG9cF3sHUKUvsrGhwLo8tXSmiM7n4F6VFVfn+V9oJW/tHqz 6/xZTZd8fwnJ7QXul96xgtN9HMuvsrF9K8o4TFF9GUIHIRJhYIePl2bqel0tGQGQ ipAiQ4nYr4BYOTiGS9IjBVfhdLIl7Qgl5B+xSsW/nuYt5PpPuOlWonlNoXRzONKW SslWQIbFinEup39yhv2orgf14Wp7DftLT9rW/JgSa/iiPAcFtK+aOx7Z4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGrzSeBqlfk6Ngssc4HQ+9Of6HCMB8GA1UdIwQY MBaAFNwPnqBGNtfnFBi5MJHM0OVwFb5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wMWJmOTYtODFiNi00ZTRjLWFiODAt ZTBiYzQxMDc4NDI2LzEvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8wMWJmOTYtODFiNi00ZTRjLWFiODAtZTBiYzQxMDc4NDI2 LzEvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKj0HeEbB aS2jjkcoAcsK31TOXkHbTiKu5MqSSsajfHAD6Va1I9VCYo9f7D7mQy4yxnmrWUIE 3fQZgiEITr3mW0lWHXpcGyS/SbNftFnwaWkctuCQPmLcwdjwzdqZvPPnx6G3ovQ+ zOdNiIw+v5yjpl8FjolLSY4sB0h+K9ciO+ojdN1onvWlUclF+PqVDKdXoqnlXhF3 PynMhUB6nNn3AC3YZrYnbSiRHJraKwZXnEV2yQVpW7vG4ZC2EGoJp30pCehIdJxv nAYsfX2mxCTJYmQJ9oSqE+L2OZeP/geJByzQZ9/cX1DsOauDAke5M2x6VC/oORLK 05isIEXrHM+8aw== -----END CERTIFICATE-----Generated at Mon Dec 15 18:54:44 2025 by rpki-client