This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json) Hash identifier: Y48s18JvtQs82T22qLdFPvQyEUJwFA06Ip+/bcpP0Uk= Subject key identifier: 34:91:5E:52:01:03:5A:55:2E:55:51:5D:13:85:7C:AF:95:F5:07:20 Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03 Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903 Certificate serial: 019B36B426CDE99D5130FB241A38CB069189 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft Manifest number: 100C Signing time: Fri 19 Dec 2025 13:02:14 +0000 Manifest this update: Fri 19 Dec 2025 13:02:14 +0000 Manifest next update: Sat 20 Dec 2025 13:02:14 +0000 Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: uKtHuhXgHRYhPFbs/0Qnni4kVaUTR5vEpdcUm5gUYRc=) 2: xEogw3XOMF8942N9C953fQ9p_WQ.roa (hash: gm/zrEw7lZ+SPbWVu4mrs06eSMAYkDfSw1DjLnUzlh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:26:cd:e9:9d:51:30:fb:24:1a:38:cb:06:91:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903 Validity Not Before: Dec 19 13:02:14 2025 GMT Not After : Dec 20 13:02:14 2025 GMT Subject: CN=34915e5201035a552e55515d13857caf95f50720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:0c:db:56:b1:26:97:f1:f5:56:ca:d4:33: 08:04:41:ba:b3:5e:ca:ca:b5:a2:17:15:0e:5f:3b: 8a:85:bb:31:6d:33:94:d6:b4:50:f2:27:f6:5c:f1: 74:94:dd:59:81:32:25:4d:b9:7e:05:f7:02:90:dc: 9e:6c:d6:40:fb:7e:2f:24:7e:bd:cf:16:5f:f6:be: 7e:9f:1e:cc:5f:cc:78:d9:89:5e:8b:f7:98:36:86: 2b:f3:d5:b7:fc:0f:76:b7:5a:4e:03:95:05:3f:87: 82:86:d5:1c:1f:17:26:9d:dc:15:b5:e8:5f:33:c1: 58:f5:58:3f:4b:33:20:0d:ce:4d:d2:a1:3d:3a:ae: 03:46:21:b3:49:f3:36:e9:27:97:66:29:2f:67:af: 4b:96:33:36:e9:6b:88:51:c5:a6:c6:c0:84:2c:73: 6a:b3:93:14:0e:58:dc:ad:18:c7:83:c8:d5:00:7f: 90:a6:00:cc:70:bb:c6:4f:51:76:b1:82:05:41:5e: 1c:ee:ca:80:21:86:84:13:0f:12:f2:64:01:8f:54: d7:d9:42:e0:d0:91:b1:d2:2c:51:68:0b:f7:84:de: 81:a5:e5:20:0f:24:9c:81:d8:1d:40:be:f1:8b:e4: 28:d4:fb:6c:a6:21:04:4b:30:02:f9:8c:20:75:e8: 5c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:91:5E:52:01:03:5A:55:2E:55:51:5D:13:85:7C:AF:95:F5:07:20 X509v3 Authority Key Identifier: keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:27:ac:d4:d9:32:ba:c7:00:df:fb:ca:97:ed:46:d6:1b:40: bb:bf:8c:d5:84:78:29:94:29:c9:10:bb:b0:f1:08:d4:1d:a8: b3:dd:f3:0c:e1:90:ca:80:fb:dc:a4:60:62:41:e6:df:a2:ce: 79:a4:07:20:06:4c:3f:6b:6f:bb:47:74:be:05:fd:4e:4f:a0: 70:bc:87:c7:d5:fa:11:74:d5:73:1c:61:b4:dd:95:d4:81:ce: 1f:81:aa:f3:70:59:21:fe:ab:e2:43:16:92:25:6e:94:45:7c: 40:8f:f5:1f:d9:86:06:51:09:7d:22:fb:16:b5:f7:f0:af:04: 89:d2:01:0c:fa:98:10:fb:e4:82:e9:46:3d:28:33:e4:10:4c: 18:d6:78:69:b1:fa:60:92:c5:51:b3:eb:10:2e:43:ee:ac:91: a5:7b:81:89:83:67:88:d1:e6:e3:b7:8f:49:37:00:c5:d3:34: 3d:5a:96:f0:f6:ac:58:bd:f6:1d:06:8e:fe:80:eb:08:bc:d5: 3d:93:c4:73:c6:2d:3d:88:ad:af:59:ef:07:da:d8:0e:fc:1e: 7f:3d:82:89:7d:c0:50:6e:4f:65:17:e0:94:8e:df:7b:e6:b4: 0b:51:5e:24:6f:e7:cb:6b:a5:dc:95:dd:1f:0f:db:4b:8c:ae: 9a:2c:66:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tCbN6Z1RMPskGjjLBpGJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNWFlY2JhMTAzYmIzYzBjMGU4ODRkNTIwZWIzODQ2NGQw ZmE5MDMwHhcNMjUxMjE5MTMwMjE0WhcNMjUxMjIwMTMwMjE0WjAzMTEwLwYDVQQD EygzNDkxNWU1MjAxMDM1YTU1MmU1NTUxNWQxMzg1N2NhZjk1ZjUwNzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5YM21axJpfx9VbK1DMIBEG6s17K yrWiFxUOXzuKhbsxbTOU1rRQ8if2XPF0lN1ZgTIlTbl+BfcCkNyebNZA+34vJH69 zxZf9r5+nx7MX8x42Ylei/eYNoYr89W3/A92t1pOA5UFP4eChtUcHxcmndwVtehf M8FY9Vg/SzMgDc5N0qE9Oq4DRiGzSfM26SeXZikvZ69LljM26WuIUcWmxsCELHNq s5MUDljcrRjHg8jVAH+QpgDMcLvGT1F2sYIFQV4c7sqAIYaEEw8S8mQBj1TX2ULg 0JGx0ixRaAv3hN6BpeUgDyScgdgdQL7xi+Qo1PtspiEESzAC+YwgdehcYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSRXlIBA1pVLlVRXROFfK+V9QcgMB8GA1UdIwQY MBaAFN5a7LoQO7PAwOiE1SDrOEZND6kDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2xyc3VoQTdzOERBNklUVklPczRSazBQcVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81NWMxZjEtNjNhYi00MTQ1LWIxNTYt ZTZhZWI5NDEzZjcyLzEvM2xyc3VoQTdzOERBNklUVklPczRSazBQcVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS81NWMxZjEtNjNhYi00MTQ1LWIxNTYtZTZhZWI5NDEzZjcy LzEvM2xyc3VoQTdzOERBNklUVklPczRSazBQcVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyes1Nky uscA3/vKl+1G1htAu7+M1YR4KZQpyRC7sPEI1B2os93zDOGQyoD73KRgYkHm36LO eaQHIAZMP2tvu0d0vgX9Tk+gcLyHx9X6EXTVcxxhtN2V1IHOH4Gq83BZIf6r4kMW kiVulEV8QI/1H9mGBlEJfSL7FrX38K8EidIBDPqYEPvkgulGPSgz5BBMGNZ4abH6 YJLFUbPrEC5D7qyRpXuBiYNniNHm47ePSTcAxdM0PVqW8PasWL32HQaO/oDrCLzV PZPEc8YtPYitr1nvB9rYDvwefz2CiX3AUG5PZRfglI7fe+a0C1FeJG/ny2ul3JXd Hw/bS4yumixmbw== -----END CERTIFICATE-----Generated at Fri Dec 19 15:36:53 2025 by rpki-client