This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json) Hash identifier: ZkM8d91G5/fo8uZoYL+rRLaIsHU66kGXL+l9BHjie1Y= Subject key identifier: 56:A1:B5:74:F1:64:74:1C:E2:0A:71:3F:D4:69:7F:F1:BF:F1:18:DC Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86 Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786 Certificate serial: 019B4B4C72C2447221AF453025B058BE4517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft Manifest number: 0594 Signing time: Tue 23 Dec 2025 13:00:59 +0000 Manifest this update: Tue 23 Dec 2025 13:00:59 +0000 Manifest next update: Wed 24 Dec 2025 13:00:59 +0000 Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: IJQw+S5sH8apntyv6eal+AsdSn5yQMaz7MsDAm+cwEM=) 2: PT68lLdfHWq61L0p7mbOXLRwHhw.roa (hash: A4keDsv/7uOGmjAx+h6C5RlssIOEsmTqNcUP9OgH66s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:72:c2:44:72:21:af:45:30:25:b0:58:be:45:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786 Validity Not Before: Dec 23 13:00:59 2025 GMT Not After : Dec 24 13:00:59 2025 GMT Subject: CN=56a1b574f164741ce20a713fd4697ff1bff118dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4b:f9:01:79:78:af:a5:66:72:d9:12:69:8c: 6b:cc:8a:b0:71:98:d4:05:84:78:1d:bc:dc:6b:c5: 95:a9:b9:34:e0:1f:64:b2:b1:f2:1b:af:9c:00:e2: 52:fe:67:67:0b:2a:30:81:79:55:c6:1a:0f:94:38: 47:95:d5:44:1a:5f:fc:5d:ec:87:dd:cd:9e:6b:58: 63:97:2f:f8:12:32:27:c2:a8:51:41:d6:80:30:67: 15:0e:fd:1e:c5:77:4f:fb:7b:9d:f8:58:ba:dc:ba: 45:77:73:6b:22:1e:4f:ae:39:3f:6f:ea:ac:2e:df: 8e:53:a8:34:13:ea:4f:a5:65:6c:52:31:5c:32:1a: 4c:b9:43:d0:35:11:8d:31:6c:8a:c4:09:89:45:f3: bc:c0:86:24:c5:95:14:6c:96:18:81:56:39:d7:88: 4d:f0:3a:fd:77:bd:4b:27:2f:a7:30:26:6b:1d:47: 1e:6e:65:2f:41:37:a1:ff:18:92:9b:ab:57:cd:37: b7:2f:a4:87:4f:cc:9c:21:e5:e6:bc:19:67:f2:e7: e5:ce:7c:aa:bd:75:bb:b0:80:2b:f9:f6:c2:5b:90: ac:be:1e:9b:8b:ee:94:80:cb:b2:59:48:71:e7:ef: 1d:f3:a7:d6:5b:b4:e4:31:c7:c1:3b:26:2d:c0:0b: f4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A1:B5:74:F1:64:74:1C:E2:0A:71:3F:D4:69:7F:F1:BF:F1:18:DC X509v3 Authority Key Identifier: keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:50:f2:97:ec:2a:21:a3:3d:89:a5:b9:67:3d:dc:62:14:1c: 11:e5:e0:d4:2a:88:a3:d7:a4:38:04:0a:f5:86:b6:41:55:97: 93:a3:f9:2a:f8:26:18:bb:48:ee:b7:9f:16:d4:af:fb:21:4c: 1c:32:a5:be:82:6d:b5:fe:e7:4a:8f:7d:bf:32:3e:a8:3c:37: b3:30:3a:61:ca:f4:91:38:bf:ff:72:86:a4:84:93:5f:97:c5: 7c:11:d5:97:9d:00:61:fb:90:1b:14:fa:24:fb:b0:d5:46:28: 16:25:5a:4c:c7:cb:f3:b8:b7:98:ba:53:0a:24:89:6a:fe:da: 53:bf:47:06:54:6d:ac:5c:f4:dc:a1:7d:ab:6e:88:11:87:31: bc:a0:ad:42:87:7d:fa:4c:94:ab:f6:6f:65:d8:6f:08:8c:ba: 64:25:35:d1:53:b8:f3:fa:84:f6:a1:a8:68:ec:10:4f:c7:ce: 57:f9:23:48:3f:e4:3f:10:9a:e2:73:10:26:54:4d:19:fa:9e: 0e:5d:ea:5a:e7:ea:58:6b:e8:b4:36:00:9c:9c:bf:aa:c8:27: 69:b5:17:9e:ab:48:7a:dd:ba:cf:a1:47:64:4c:70:80:3b:0a: f8:95:6c:66:d7:77:d5:b5:9d:af:f6:ed:ce:43:ad:ba:2e:47: ce:8a:1d:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTHLCRHIhr0UwJbBYvkUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGY5MGE5M2RjOTQyNzg1NTY0NDkwM2NiNzBjMWY3NGI5 MzE3ODYwHhcNMjUxMjIzMTMwMDU5WhcNMjUxMjI0MTMwMDU5WjAzMTEwLwYDVQQD Eyg1NmExYjU3NGYxNjQ3NDFjZTIwYTcxM2ZkNDY5N2ZmMWJmZjExOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Uv5AXl4r6VmctkSaYxrzIqwcZjU BYR4Hbzca8WVqbk04B9ksrHyG6+cAOJS/mdnCyowgXlVxhoPlDhHldVEGl/8XeyH 3c2ea1hjly/4EjInwqhRQdaAMGcVDv0exXdP+3ud+Fi63LpFd3NrIh5Prjk/b+qs Lt+OU6g0E+pPpWVsUjFcMhpMuUPQNRGNMWyKxAmJRfO8wIYkxZUUbJYYgVY514hN 8Dr9d71LJy+nMCZrHUcebmUvQTeh/xiSm6tXzTe3L6SHT8ycIeXmvBln8uflznyq vXW7sIAr+fbCW5Csvh6bi+6UgMuyWUhx5+8d86fWW7TkMcfBOyYtwAv01QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFahtXTxZHQc4gpxP9Rpf/G/8RjcMB8GA1UdIwQY MBaAFNxPkKk9yUJ4VWRJA8twwfdLkxeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUt NjMxNzdmYjE5YWJlLzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUtNjMxNzdmYjE5YWJl LzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVDyl+wq IaM9iaW5Zz3cYhQcEeXg1CqIo9ekOAQK9Ya2QVWXk6P5KvgmGLtI7refFtSv+yFM HDKlvoJttf7nSo99vzI+qDw3szA6Ycr0kTi//3KGpISTX5fFfBHVl50AYfuQGxT6 JPuw1UYoFiVaTMfL87i3mLpTCiSJav7aU79HBlRtrFz03KF9q26IEYcxvKCtQod9 +kyUq/ZvZdhvCIy6ZCU10VO48/qE9qGoaOwQT8fOV/kjSD/kPxCa4nMQJlRNGfqe Dl3qWufqWGvotDYAnJy/qsgnabUXnqtIet26z6FHZExwgDsK+JVsZtd31bWdr/bt zkOtui5HzoodaQ== -----END CERTIFICATE-----Generated at Tue Dec 23 16:43:00 2025 by rpki-client