This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft File: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft (raw, json) Hash identifier: S5G5FyKkCAdqIpISgnocCxhsUMuei/8qb7sQLM1c4vM= Subject key identifier: 71:19:E6:23:A7:8F:E0:52:7F:E8:BF:19:5D:91:88:8E:DB:7D:90:8B Authority key identifier: FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10 Certificate issuer: /CN=fb7b9ba2a7f4752d828b834abe51752b21906910 Certificate serial: 019B5A520B501C89445C922C5DB29E6DC2E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft Manifest number: 3B Signing time: Fri 26 Dec 2025 11:01:24 +0000 Manifest this update: Fri 26 Dec 2025 11:01:24 +0000 Manifest next update: Sat 27 Dec 2025 11:01:24 +0000 Files and hashes: 1: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl (hash: IwBsS9gIlA8YY1EwtNDpoiFGE+RCnxWtEczlRBBNM50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:0b:50:1c:89:44:5c:92:2c:5d:b2:9e:6d:c2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb7b9ba2a7f4752d828b834abe51752b21906910 Validity Not Before: Dec 26 11:01:24 2025 GMT Not After : Dec 27 11:01:24 2025 GMT Subject: CN=7119e623a78fe0527fe8bf195d91888edb7d908b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:0c:8c:4a:32:34:8e:3e:9c:21:1b:16:2c: b1:f5:04:c6:d9:e2:22:cc:31:9e:87:c2:60:c5:7d: 36:6b:e2:47:88:e2:18:f9:3a:9f:fb:b4:29:e5:54: ab:d4:4a:e1:39:17:9e:f3:9d:12:2a:79:b1:72:ac: 76:72:a8:a7:8c:f2:9b:40:da:cb:ba:2a:d3:a0:c4: 51:9c:aa:4d:9b:3e:35:eb:af:1f:35:f5:6a:fa:cd: 5c:46:34:74:42:8a:16:29:f0:85:bd:ad:2b:db:b5: 67:42:15:ae:e5:b6:56:1c:b5:28:84:d5:a5:91:32: 34:f7:63:88:50:01:bc:d1:21:35:89:98:34:af:b0: c4:bf:73:50:15:69:1e:2d:cf:3d:79:5d:0d:67:df: 9c:ff:71:e0:86:67:90:f3:bd:66:dc:1f:69:2e:41: de:80:ef:23:ed:cc:e1:e2:dc:d1:83:5a:ca:ef:78: 6d:25:05:6a:f3:ee:3f:99:58:c3:30:9e:ac:de:51: a1:ea:ca:7c:d5:75:23:c4:1b:a2:b0:bd:91:59:f5: 50:bc:16:71:62:19:90:b4:13:8d:5f:b4:e2:19:8f: ee:b1:ed:6b:bb:a7:f2:c7:4d:41:e9:fd:8d:d7:e5: 2e:24:34:a3:b3:f4:4f:79:58:7c:51:fb:60:b4:27: e8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:19:E6:23:A7:8F:E0:52:7F:E8:BF:19:5D:91:88:8E:DB:7D:90:8B X509v3 Authority Key Identifier: keyid:FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:96:7b:e6:b4:f4:63:ca:77:d4:d5:70:2f:b6:64:77:77:f6: 7b:81:1e:96:71:d0:6f:aa:9b:16:0d:fa:02:a4:a0:82:44:2e: 49:18:e7:34:d6:86:bd:be:f8:67:c2:b0:a6:30:4c:5f:c9:01: 41:ad:66:7c:f8:26:a9:93:15:0a:b7:ea:d1:1e:e6:02:de:e2: c0:da:e3:7f:f6:5e:64:94:2d:4f:e5:ca:8e:b8:f6:82:19:bb: b3:45:7c:9b:1e:47:ac:29:82:03:e5:f5:86:6a:1a:d9:03:02: f7:e8:81:f3:d8:43:3a:4d:7a:59:91:59:ab:d3:18:fb:18:56: bd:91:d3:31:1f:9c:a0:a1:8b:6e:3e:67:a1:b8:0a:67:33:d9: c6:f7:6c:81:2f:86:9e:e6:2a:87:2b:52:ef:53:64:95:ad:d8: b3:ac:4e:ed:d9:d7:3b:05:7a:09:a4:29:99:6e:dd:78:45:00: a5:28:90:a7:c0:26:44:6b:fd:ba:54:21:5a:e2:a7:48:aa:81: 8f:72:06:94:97:51:53:d1:ff:e8:61:d3:8b:c8:4d:b6:5e:cf: 93:03:59:63:4e:92:8d:6b:90:9d:d5:47:22:91:0e:ab:99:b2: 82:2a:64:6f:f5:3f:a3:2f:3b:90:38:83:1a:9e:3f:41:d3:42: 77:5a:68:ea -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtaUgtQHIlEXJIsXbKebcLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiN2I5YmEyYTdmNDc1MmQ4MjhiODM0YWJlNTE3NTJiMjE5 MDY5MTAwHhcNMjUxMjI2MTEwMTI0WhcNMjUxMjI3MTEwMTI0WjAzMTEwLwYDVQQD Eyg3MTE5ZTYyM2E3OGZlMDUyN2ZlOGJmMTk1ZDkxODg4ZWRiN2Q5MDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLMMjEoyNI4+nCEbFiyx9QTG2eIi zDGeh8JgxX02a+JHiOIY+Tqf+7Qp5VSr1ErhORee850SKnmxcqx2cqinjPKbQNrL uirToMRRnKpNmz41668fNfVq+s1cRjR0QooWKfCFva0r27VnQhWu5bZWHLUohNWl kTI092OIUAG80SE1iZg0r7DEv3NQFWkeLc89eV0NZ9+c/3HghmeQ871m3B9pLkHe gO8j7czh4tzRg1rK73htJQVq8+4/mVjDMJ6s3lGh6sp81XUjxBuisL2RWfVQvBZx YhmQtBONX7TiGY/use1ru6fyx01B6f2N1+UuJDSjs/RPeVh8UftgtCfokwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHEZ5iOnj+BSf+i/GV2RiI7bfZCLMB8GA1UdIwQY MBaAFPt7m6Kn9HUtgouDSr5RdSshkGkQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zdWJvcWYwZFMyQ2k0Tkt2bEYxS3lHUWFSQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvZjY2ZDU3LWEwNzUtNGQ4Ny05YWI5 LWJjZDEyMjA2ZmZhYS8xLzEtM3Vib3FmMGRTMkNpNE5LdmxGMUt5R1FhUkEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2IxL2Y2NmQ1Ny1hMDc1LTRkODctOWFiOS1iY2QxMjIwNmZm YWEvMS8xLTN1Ym9xZjBkUzJDaTROS3ZsRjFLeUdRYVJBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5Z7 5rT0Y8p31NVwL7Zkd3f2e4EelnHQb6qbFg36AqSggkQuSRjnNNaGvb74Z8KwpjBM X8kBQa1mfPgmqZMVCrfq0R7mAt7iwNrjf/ZeZJQtT+XKjrj2ghm7s0V8mx5HrCmC A+X1hmoa2QMC9+iB89hDOk16WZFZq9MY+xhWvZHTMR+coKGLbj5nobgKZzPZxvds gS+GnuYqhytS71Nkla3Ys6xO7dnXOwV6CaQpmW7deEUApSiQp8AmRGv9ulQhWuKn SKqBj3IGlJdRU9H/6GHTi8hNtl7PkwNZY06SjWuQndVHIpEOq5mygipkb/U/oy87 kDiDGp4/QdNCd1po6g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:17 2025 by rpki-client