This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json) Hash identifier: Kos0SqHHW676xCQ7GutZHCnAFG2lEFCXZjRkr6ZZx8Y= Subject key identifier: 44:DD:0D:D3:04:CD:FE:BE:06:43:E8:0F:15:88:F4:58:CE:75:4F:4E Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94 Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894 Certificate serial: 019B330CF6AE539F2446A9C339449121D56B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 20:00:46 +0000 Manifest this update: Thu 18 Dec 2025 20:00:46 +0000 Manifest next update: Fri 19 Dec 2025 20:00:46 +0000 Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: SCOQAga3YRGZixwZZZpbu98dq7HBtl3MXQXBlevYg2w=) 2: b5tCOGfZlXjj3Rp4LI2wyRIwTZc.roa (hash: Ux81ccFaPxD7MPa+kjPcqatGWLTvR5GEGbxi2D0f0BI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:f6:ae:53:9f:24:46:a9:c3:39:44:91:21:d5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894 Validity Not Before: Dec 18 20:00:46 2025 GMT Not After : Dec 19 20:00:46 2025 GMT Subject: CN=44dd0dd304cdfebe0643e80f1588f458ce754f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:51:fc:15:eb:cd:9c:7b:eb:1b:4c:1f:b8: 54:45:03:23:8a:dd:28:b9:83:15:87:ff:53:d2:a9: c1:68:79:ec:dd:c2:c9:8c:ce:a6:77:fe:6f:8e:5b: 6e:27:cf:76:75:ed:87:98:05:d6:77:6f:5e:fe:1e: 3b:4b:73:33:dd:9c:4d:21:ec:a4:d7:b4:b7:e9:e5: 68:39:03:ce:fe:11:c2:13:61:27:0e:6b:35:7b:12: 0e:8d:e9:dc:b1:88:6b:33:6f:58:a4:48:49:41:92: 77:2e:3d:f3:0b:eb:3a:6e:74:54:cd:4c:1e:8c:47: 6b:1e:28:b7:80:ee:0d:7e:ec:e6:9a:83:3d:ed:b0: ad:00:5d:c1:ae:85:33:c2:ff:ba:1b:f3:df:13:6c: b0:27:8d:2e:3d:3c:9e:b7:80:c3:aa:c6:3c:a5:fc: 13:3e:dd:e5:7b:9c:24:87:d0:bc:9d:f5:cd:b2:35: 69:aa:1a:c9:fb:2e:b8:1d:60:42:43:e9:73:cc:01: 5b:87:3c:27:52:20:f8:23:5f:63:26:f8:af:59:6a: b0:68:01:3a:39:57:4d:d0:a8:59:75:df:bc:ab:38: 4e:a5:e2:02:94:b1:17:22:02:a0:b7:c3:71:a8:f0: c9:0f:59:df:35:e9:9b:28:52:62:b0:ec:e4:fa:c5: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DD:0D:D3:04:CD:FE:BE:06:43:E8:0F:15:88:F4:58:CE:75:4F:4E X509v3 Authority Key Identifier: keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:63:af:2c:71:cd:b9:32:99:30:67:e0:2d:0a:80:06:06:e4: ca:d8:12:10:70:a7:20:c7:e8:23:b3:bf:a8:ad:e8:16:c8:59: 54:b8:9b:13:60:62:46:0f:25:1f:9d:42:03:af:8c:48:98:0a: 79:73:54:5c:d7:2d:f8:92:db:3a:4e:dd:9c:7a:03:3f:85:be: 9c:67:06:ff:c3:aa:99:5f:24:78:03:54:c4:36:dc:f2:62:f2: 45:02:8b:73:21:2d:e4:07:9a:75:24:af:18:98:71:cc:4b:e1: 14:56:af:d5:72:83:d2:62:2a:1d:28:f8:d5:0a:06:d5:44:02: 7f:bd:db:8c:33:0f:64:18:f9:0a:56:25:4d:23:50:94:08:6f: 7a:13:1b:d4:38:4e:6e:f2:ff:38:0e:b1:67:57:00:52:56:62: 69:19:40:be:ad:d2:a3:35:04:fe:09:83:94:ba:a4:18:f7:b9: 2e:6b:da:41:f8:42:e9:67:f7:33:c3:14:f5:72:49:f7:5e:02: dc:0f:f9:f7:21:a6:bb:18:c1:97:22:c0:b7:cb:7f:c2:ff:c8: 8d:25:18:5d:ea:46:13:1f:6d:3b:d7:97:37:d5:a4:10:39:de: b5:38:10:e4:30:fc:ad:85:e0:2f:a9:40:93:73:2f:7b:93:eb: 6f:f2:db:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDPauU58kRqnDOUSRIdVrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTU3MmZjYmQ2NjVmNzJlMDBlNWZmZGI4ZGI4MDJkMWNi ZWM4OTQwHhcNMjUxMjE4MjAwMDQ2WhcNMjUxMjE5MjAwMDQ2WjAzMTEwLwYDVQQD Eyg0NGRkMGRkMzA0Y2RmZWJlMDY0M2U4MGYxNTg4ZjQ1OGNlNzU0ZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTxR/BXrzZx76xtMH7hURQMjit0o uYMVh/9T0qnBaHns3cLJjM6md/5vjltuJ892de2HmAXWd29e/h47S3Mz3ZxNIeyk 17S36eVoOQPO/hHCE2EnDms1exIOjencsYhrM29YpEhJQZJ3Lj3zC+s6bnRUzUwe jEdrHii3gO4NfuzmmoM97bCtAF3BroUzwv+6G/PfE2ywJ40uPTyet4DDqsY8pfwT Pt3le5wkh9C8nfXNsjVpqhrJ+y64HWBCQ+lzzAFbhzwnUiD4I19jJvivWWqwaAE6 OVdN0KhZdd+8qzhOpeIClLEXIgKgt8NxqPDJD1nfNembKFJisOzk+sVjHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETdDdMEzf6+BkPoDxWI9FjOdU9OMB8GA1UdIwQY MBaAFN6Vcvy9Zl9y4A5f/bjbgC0cvsiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83OTIyMDAtMmRhMC00MWJmLTg1ODct YTkyOTM0Y2IxZGU4LzEvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83OTIyMDAtMmRhMC00MWJmLTg1ODctYTkyOTM0Y2IxZGU4 LzEvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmOvLHHN uTKZMGfgLQqABgbkytgSEHCnIMfoI7O/qK3oFshZVLibE2BiRg8lH51CA6+MSJgK eXNUXNct+JLbOk7dnHoDP4W+nGcG/8OqmV8keANUxDbc8mLyRQKLcyEt5AeadSSv GJhxzEvhFFav1XKD0mIqHSj41QoG1UQCf73bjDMPZBj5ClYlTSNQlAhvehMb1DhO bvL/OA6xZ1cAUlZiaRlAvq3SozUE/gmDlLqkGPe5LmvaQfhC6Wf3M8MU9XJJ914C 3A/59yGmuxjBlyLAt8t/wv/IjSUYXepGEx9tO9eXN9WkEDnetTgQ5DD8rYXgL6lA k3Mve5Prb/Lbzg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:54:30 2025 by rpki-client