This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json) Hash identifier: vnXyJZc4Y0cMVDkliWH1Cp/lTAnq93JgfWHyBgZJauM= Subject key identifier: FA:EB:78:69:2A:AE:75:92:59:85:A4:9E:C7:8A:4A:ED:22:F4:32:90 Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2 Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2 Certificate serial: 019B1012E18D2D3F1BDB2C2F7936C6C12AA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft Manifest number: 07E9 Signing time: Fri 12 Dec 2025 01:00:31 +0000 Manifest this update: Fri 12 Dec 2025 01:00:31 +0000 Manifest next update: Sat 13 Dec 2025 01:00:31 +0000 Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: J5yorwmAdW/sS50vN+TcEA4cnI9LJynH+0d0ZB33X5o=) 2: HrIwTwMD6cd99R3d7bEiTOryXZg.roa (hash: 1wrHqn0lkUk+GnZl+JBgqFqtnLiVA3gNpwduqpO2T9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:12:e1:8d:2d:3f:1b:db:2c:2f:79:36:c6:c1:2a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2 Validity Not Before: Dec 12 01:00:31 2025 GMT Not After : Dec 13 01:00:31 2025 GMT Subject: CN=faeb78692aae75925985a49ec78a4aed22f43290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:7d:5b:cb:69:64:5b:2e:f7:b5:2c:e3:b3: 3f:a1:d7:be:8c:02:b7:36:7b:0d:5a:c7:f3:73:c4: 61:ac:83:be:ac:64:65:b3:4b:e0:0e:a2:36:1e:ff: 28:17:57:f0:cf:be:76:c9:4e:75:7f:1c:3e:4b:fe: da:af:08:89:2f:00:76:ef:ec:bd:d4:f0:63:95:34: 8e:81:96:04:e1:13:cd:0a:6e:09:59:12:9f:35:2b: c2:19:d9:98:e1:bc:0f:80:d1:d4:02:de:78:da:82: 28:62:89:41:b6:25:f5:23:49:ab:66:bf:8c:b6:8e: 75:ef:9b:ef:02:85:1d:19:42:30:5c:81:31:63:12: 0b:18:44:03:24:5f:c3:ae:2b:09:38:2f:72:9c:3c: 8e:7e:f6:e4:ad:b9:ec:32:ea:a1:1b:09:c7:83:f5: ce:a1:78:ab:d2:bd:c9:14:4d:7f:b3:91:d3:d1:1d: c7:e9:d3:cc:96:4f:c7:49:7b:05:43:31:13:a8:38: d9:69:40:84:c6:3c:eb:33:48:eb:63:16:1f:90:bc: e4:28:d4:0f:bb:15:e7:04:f3:44:a8:c0:86:42:e0: f8:69:2e:b8:cb:d0:09:cd:11:58:28:a2:67:18:92: c9:c4:33:7b:9e:b9:24:d0:71:d9:72:4b:b9:a1:30: 54:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EB:78:69:2A:AE:75:92:59:85:A4:9E:C7:8A:4A:ED:22:F4:32:90 X509v3 Authority Key Identifier: keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:67:f4:a9:56:61:63:19:64:2c:0c:cc:ec:33:05:f9:c7:ad: b0:c7:74:33:94:c8:63:b9:ff:1d:19:05:01:8a:c4:88:34:c7: 48:6d:92:6d:fc:cd:4b:4c:f9:2c:b5:bf:df:d2:d0:79:df:ca: 37:bb:91:c0:dc:dd:20:ce:24:a0:04:42:4e:78:ad:a9:a1:0a: d8:52:49:76:5e:d3:8b:2c:b4:d0:dd:71:75:49:c9:2f:88:fd: e4:b5:c4:e1:a5:61:55:d1:d8:79:1d:2b:87:9a:92:96:50:fd: 71:b2:2b:32:85:36:ae:3a:0a:61:73:a8:3e:bb:f9:85:c4:4d: 94:95:fe:8e:67:60:52:3d:27:70:dc:59:b7:2e:b3:70:2b:f8: 1d:b7:19:d6:fc:40:77:08:90:f0:93:44:23:2d:a2:db:ca:8b: d5:6d:30:9a:b3:17:8f:bc:11:7c:23:f5:a0:60:fc:0d:8c:84: e7:dc:b7:d8:a3:70:a1:54:04:94:59:70:96:99:c9:43:b2:68: 00:d6:ff:fc:b6:e2:70:ab:fd:76:39:52:da:3a:ed:66:5f:da: 9d:26:82:b7:bb:f9:89:15:74:8d:68:bb:dc:1a:98:44:0f:06: 72:be:a9:69:a5:de:88:d9:73:5b:3d:b0:ec:f4:07:ef:e0:cf: fd:1b:f1:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEuGNLT8b2ywveTbGwSqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDNlYTJjZDA3OTk3ZWNkZmUxNzE4ODg3MjcwODY1MmUx NzJkZjIwHhcNMjUxMjEyMDEwMDMxWhcNMjUxMjEzMDEwMDMxWjAzMTEwLwYDVQQD EyhmYWViNzg2OTJhYWU3NTkyNTk4NWE0OWVjNzhhNGFlZDIyZjQzMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcl9W8tpZFsu97Us47M/ode+jAK3 NnsNWsfzc8RhrIO+rGRls0vgDqI2Hv8oF1fwz752yU51fxw+S/7arwiJLwB27+y9 1PBjlTSOgZYE4RPNCm4JWRKfNSvCGdmY4bwPgNHUAt542oIoYolBtiX1I0mrZr+M to5175vvAoUdGUIwXIExYxILGEQDJF/DrisJOC9ynDyOfvbkrbnsMuqhGwnHg/XO oXir0r3JFE1/s5HT0R3H6dPMlk/HSXsFQzETqDjZaUCExjzrM0jrYxYfkLzkKNQP uxXnBPNEqMCGQuD4aS64y9AJzRFYKKJnGJLJxDN7nrkk0HHZcku5oTBUHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrreGkqrnWSWYWknseKSu0i9DKQMB8GA1UdIwQY MBaAFNxD6izQeZfs3+FxiIcnCGUuFy3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2Yt NDQ2NDRkZDVlZDQ0LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2YtNDQ2NDRkZDVlZDQ0 LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGf0qVZh YxlkLAzM7DMF+cetsMd0M5TIY7n/HRkFAYrEiDTHSG2SbfzNS0z5LLW/39LQed/K N7uRwNzdIM4koARCTnitqaEK2FJJdl7Tiyy00N1xdUnJL4j95LXE4aVhVdHYeR0r h5qSllD9cbIrMoU2rjoKYXOoPrv5hcRNlJX+jmdgUj0ncNxZty6zcCv4HbcZ1vxA dwiQ8JNEIy2i28qL1W0wmrMXj7wRfCP1oGD8DYyE59y32KNwoVQElFlwlpnJQ7Jo ANb//LbicKv9djlS2jrtZl/anSaCt7v5iRV0jWi73BqYRA8Gcr6paaXeiNlzWz2w 7PQH7+DP/RvxVA== -----END CERTIFICATE-----Generated at Fri Dec 12 07:26:39 2025 by rpki-client