This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft File: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft (raw, json) Hash identifier: dwrUfWqMYpiq4ui/EqpBDKO566k8Y0dwUOa2jcNVh58= Subject key identifier: A0:F2:40:72:27:31:23:19:F8:4B:3D:03:5A:1D:91:4D:52:57:12:D7 Authority key identifier: DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66 Certificate issuer: /CN=dd19b5047acc57dfdd2f87045764956f4b603066 Certificate serial: 019B59769D76089B91EE540726173972371D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft Manifest number: 0EB2 Signing time: Fri 26 Dec 2025 07:01:44 +0000 Manifest this update: Fri 26 Dec 2025 07:01:44 +0000 Manifest next update: Sat 27 Dec 2025 07:01:44 +0000 Files and hashes: 1: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl (hash: VznYM11l077v8In0F2v3tJ+UcGTt7spsRahPmXWBlSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:9d:76:08:9b:91:ee:54:07:26:17:39:72:37:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd19b5047acc57dfdd2f87045764956f4b603066 Validity Not Before: Dec 26 07:01:44 2025 GMT Not After : Dec 27 07:01:44 2025 GMT Subject: CN=a0f2407227312319f84b3d035a1d914d525712d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:55:fa:0b:97:62:12:29:3f:03:c6:74:57:33: 7c:d4:20:da:3b:ab:93:ec:e4:62:c7:e6:4d:47:de: 66:eb:09:2b:bb:82:bd:56:0e:49:f0:ef:f7:cb:80: 74:d8:c1:e4:c8:f7:3a:e4:78:f9:f9:26:73:05:f9: 2a:96:54:44:87:9f:7f:f0:5a:a2:0a:f4:fd:9f:b4: 78:14:84:43:d0:8f:c0:d5:34:f6:87:5f:40:54:6a: 75:4d:55:99:25:68:93:be:36:94:8b:aa:cf:c0:c3: 89:a1:7e:04:73:3f:92:ee:30:72:c2:6d:e5:f6:3d: ed:08:5f:cf:c5:6b:25:db:e6:9b:10:fd:f6:63:1c: b7:c1:c5:f1:be:e2:66:e5:59:20:a7:c6:30:b1:3b: d4:33:4a:3b:47:54:ca:de:ad:dd:71:7d:2f:da:c5: 36:7d:6c:e9:42:5a:5f:bd:a6:de:8d:a5:17:19:2b: 71:6b:95:82:41:4d:05:92:96:78:73:65:40:47:85: e5:3f:10:54:51:86:d0:49:9d:3e:dd:69:cf:78:50: 0a:27:5d:e1:0f:71:9a:f2:26:62:c2:ce:3a:89:c0: 24:e3:30:05:49:8d:29:ee:c5:91:8d:13:ee:6e:ef: 91:cf:3c:f5:d5:4e:0f:05:6e:47:c9:e5:b7:3f:09: 24:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F2:40:72:27:31:23:19:F8:4B:3D:03:5A:1D:91:4D:52:57:12:D7 X509v3 Authority Key Identifier: keyid:DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:47:0c:e7:6e:14:66:2c:d8:d7:78:5e:a2:42:b7:6c:e9:ee: 81:fd:87:d2:5b:dd:c7:39:33:cd:43:43:df:46:47:0f:ac:f0: f0:4d:63:61:59:8e:f8:45:08:99:c3:58:33:ac:e8:bb:14:a6: 07:e3:28:89:d6:d8:04:bc:ff:50:26:3c:e3:7e:bb:7d:e0:37: e7:d0:09:fe:ac:5a:64:76:1a:fb:68:82:e9:a1:86:8e:a1:53: c1:02:79:f8:b7:5b:88:86:b6:af:1e:96:c8:8d:01:2d:cb:6f: 85:f3:ea:7c:52:2e:d7:4e:1f:23:54:80:83:08:2f:fc:e4:86: b6:d2:95:6b:1e:36:f4:4d:94:bd:34:cc:1d:20:0a:a5:37:7b: 56:57:29:0e:3a:82:bf:b5:a5:fe:0c:86:83:8f:c4:f9:0d:86: 67:96:e6:8e:d1:f4:26:1a:8f:a3:6d:d2:e5:07:01:e0:7b:89: 42:25:9b:e2:6b:67:f0:d7:9d:bc:42:89:31:56:17:bd:d4:49: 32:24:c5:98:7e:89:5f:43:c6:a5:a2:6b:d3:e0:72:20:65:de: 59:8f:9a:ba:5a:07:a3:d8:61:f5:6c:f1:46:ae:b3:0e:dc:bc: 52:f7:a9:c6:25:0f:22:24:32:68:a8:4b:1f:39:3c:97:56:c7: 20:d9:19:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdp12CJuR7lQHJhc5cjcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMTliNTA0N2FjYzU3ZGZkZDJmODcwNDU3NjQ5NTZmNGI2 MDMwNjYwHhcNMjUxMjI2MDcwMTQ0WhcNMjUxMjI3MDcwMTQ0WjAzMTEwLwYDVQQD EyhhMGYyNDA3MjI3MzEyMzE5Zjg0YjNkMDM1YTFkOTE0ZDUyNTcxMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVX6C5diEik/A8Z0VzN81CDaO6uT 7ORix+ZNR95m6wkru4K9Vg5J8O/3y4B02MHkyPc65Hj5+SZzBfkqllREh59/8Fqi CvT9n7R4FIRD0I/A1TT2h19AVGp1TVWZJWiTvjaUi6rPwMOJoX4Ecz+S7jBywm3l 9j3tCF/PxWsl2+abEP32Yxy3wcXxvuJm5Vkgp8YwsTvUM0o7R1TK3q3dcX0v2sU2 fWzpQlpfvabejaUXGStxa5WCQU0FkpZ4c2VAR4XlPxBUUYbQSZ0+3WnPeFAKJ13h D3Ga8iZiws46icAk4zAFSY0p7sWRjRPubu+Rzzz11U4PBW5HyeW3PwkkJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDyQHInMSMZ+Es9A1odkU1SVxLXMB8GA1UdIwQY MBaAFN0ZtQR6zFff3S+HBFdklW9LYDBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1JtMUJIck1WOV9kTDRjRVYyU1ZiMHRnTUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lZjQwYjgtODMxMy00NjE4LTlkMzUt ZWRkZWY4N2UyNDFiLzEvM1JtMUJIck1WOV9kTDRjRVYyU1ZiMHRnTUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9lZjQwYjgtODMxMy00NjE4LTlkMzUtZWRkZWY4N2UyNDFi LzEvM1JtMUJIck1WOV9kTDRjRVYyU1ZiMHRnTUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0cM524U ZizY13heokK3bOnugf2H0lvdxzkzzUND30ZHD6zw8E1jYVmO+EUImcNYM6zouxSm B+MoidbYBLz/UCY84367feA359AJ/qxaZHYa+2iC6aGGjqFTwQJ5+LdbiIa2rx6W yI0BLctvhfPqfFIu104fI1SAgwgv/OSGttKVax429E2UvTTMHSAKpTd7VlcpDjqC v7Wl/gyGg4/E+Q2GZ5bmjtH0JhqPo23S5QcB4HuJQiWb4mtn8NedvEKJMVYXvdRJ MiTFmH6JX0PGpaJr0+ByIGXeWY+auloHo9hh9WzxRq6zDty8UvepxiUPIiQyaKhL Hzk8l1bHINkZpw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:34 2025 by rpki-client