This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft File: 3i6RcxXwqHiyH8E51JqCGq3cPJc.mft (raw, json) Hash identifier: nGRkvtBX7EG3g6I1SeXcgNQ5eblNu8wrVooqkgOoO88= Subject key identifier: E4:2A:74:A6:57:C7:9F:1B:CC:9D:12:8E:4C:AC:BB:26:10:3E:8F:04 Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97 Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97 Certificate serial: 019B2EFAC92AF18809563E7033A39F5DF9A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft Manifest number: 1792 Signing time: Thu 18 Dec 2025 01:02:25 +0000 Manifest this update: Thu 18 Dec 2025 01:02:25 +0000 Manifest next update: Fri 19 Dec 2025 01:02:25 +0000 Files and hashes: 1: 3i6RcxXwqHiyH8E51JqCGq3cPJc.crl (hash: 1OqrtAet3umSfoqbqpa9320Le+HCNRerx+E/bWP7aGY=) 2: 6aThY8uvIN1XwAgY6N5w4VlQU8g.roa (hash: 75zQwEncUuBW4DVfhnIiHwP51JmTTN+DyyniesvlQVg=) 3: AvB8ANlawjDpzo5pEv-ozc274As.roa (hash: JAMHGl8FA3FqoIkdY9hmqgyAMGPXFfGq49FOeMqcpDU=) 4: P4Cb5oaFevIjC5s1wM4Yzi97PJE.roa (hash: 3Ogb5mf4rx+IYcLkaQHDj7kY0bKNooxxAV2yrkt6glM=) 5: yytkDg390wURQAs45MKB5G-EL9Y.roa (hash: Zh5YMYHrmE+MJNbhijbyZkT5VrFHROVfxZElaGb2ngI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:c9:2a:f1:88:09:56:3e:70:33:a3:9f:5d:f9:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97 Validity Not Before: Dec 18 01:02:25 2025 GMT Not After : Dec 19 01:02:25 2025 GMT Subject: CN=e42a74a657c79f1bcc9d128e4cacbb26103e8f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7b:1f:e3:d1:a8:c3:8c:32:d8:bd:82:2b:7a: 2a:36:8a:35:c2:47:29:c5:0a:1b:0f:ca:24:38:1a: c4:e8:67:1d:a5:e5:b6:37:71:b7:12:89:f4:e3:e0: 21:78:da:75:28:cb:cb:e3:5a:a3:e9:80:dc:b9:b2: 13:94:aa:18:34:a7:46:d4:5d:2a:13:4a:1a:26:0f: ae:96:0f:21:11:bd:0a:8e:5b:d2:ae:89:89:0b:f8: fa:d2:f0:2b:67:e6:68:fd:78:62:76:d5:4c:6f:a1: fa:06:7e:47:25:ad:29:5d:ed:53:ca:2d:0a:8b:e1: 42:24:e3:fd:2d:bb:39:02:11:09:be:bb:07:46:e8: cb:2f:f2:9b:49:ce:dd:03:8a:08:ce:5f:50:71:fd: 0a:39:2a:9b:b1:56:a4:0d:0f:cc:c2:03:95:d4:5b: a5:7d:42:5b:11:ef:52:e1:ed:31:51:bc:3c:7c:29: 70:aa:93:86:61:fe:f8:57:6d:15:bf:70:06:70:56: f3:bd:da:4f:3e:8e:0a:57:59:16:ca:cc:ef:cd:51: cb:20:bf:d0:73:9a:0c:49:16:45:10:c1:f6:20:6d: f2:30:cd:1f:92:3d:5b:d0:d8:bf:2a:15:a9:e4:75: bf:21:e8:aa:9e:14:d6:0e:b5:8e:31:0d:8b:10:27: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2A:74:A6:57:C7:9F:1B:CC:9D:12:8E:4C:AC:BB:26:10:3E:8F:04 X509v3 Authority Key Identifier: keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a6:18:07:26:d3:28:ea:8d:f8:7f:58:55:85:75:56:3c:b6: d4:6f:f4:dd:a5:14:63:80:86:13:e0:7c:02:73:a4:8b:7e:73: 3b:bc:ec:63:40:be:0b:67:70:32:8c:5b:bb:1f:1d:ee:c9:87: 85:44:7c:4e:89:9b:fb:7c:0a:6b:7d:71:0e:fd:6c:3f:2e:f8: c3:f1:ef:5d:a8:b9:3a:7d:e5:46:d3:34:1f:a9:a1:cd:86:10: 84:ea:ad:61:8a:3d:9c:21:8a:33:bc:58:d2:e3:89:90:3f:5c: da:9a:04:98:a5:27:6f:65:e1:f5:89:1d:1b:f9:fe:fb:60:56: bb:b4:9f:e5:58:bf:d3:31:0b:09:4f:75:14:76:93:f3:a7:5b: 5b:fa:c2:a0:3b:87:b4:75:9e:14:ae:0b:43:d1:c9:2f:3d:3f: f6:fa:1b:46:83:ff:01:7c:64:8e:84:da:81:55:28:f5:be:03: 9e:a4:e4:a2:5e:b1:3b:04:ea:a1:07:3b:7f:79:0d:88:ea:b9: 0c:c8:36:85:25:0c:72:31:d4:1e:23:9a:62:8d:64:cd:13:80: 86:f3:b8:2c:e5:98:78:f1:d2:3b:c7:42:d1:f6:38:9f:dc:ba: bf:44:21:4e:85:61:d7:5a:13:4f:6f:81:5e:32:38:ff:0e:9b: e0:b0:0b:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+skq8YgJVj5wM6OfXfmkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMmU5MTczMTVmMGE4NzhiMjFmYzEzOWQ0OWE4MjFhYWRk YzNjOTcwHhcNMjUxMjE4MDEwMjI1WhcNMjUxMjE5MDEwMjI1WjAzMTEwLwYDVQQD EyhlNDJhNzRhNjU3Yzc5ZjFiY2M5ZDEyOGU0Y2FjYmIyNjEwM2U4ZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXsf49Gow4wy2L2CK3oqNoo1wkcp xQobD8okOBrE6GcdpeW2N3G3Eon04+AheNp1KMvL41qj6YDcubITlKoYNKdG1F0q E0oaJg+ulg8hEb0KjlvSromJC/j60vArZ+Zo/XhidtVMb6H6Bn5HJa0pXe1Tyi0K i+FCJOP9Lbs5AhEJvrsHRujLL/KbSc7dA4oIzl9Qcf0KOSqbsVakDQ/MwgOV1Ful fUJbEe9S4e0xUbw8fClwqpOGYf74V20Vv3AGcFbzvdpPPo4KV1kWyszvzVHLIL/Q c5oMSRZFEMH2IG3yMM0fkj1b0Ni/KhWp5HW/IeiqnhTWDrWOMQ2LECdiCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQqdKZXx58bzJ0SjkysuyYQPo8EMB8GA1UdIwQY MBaAFN4ukXMV8Kh4sh/BOdSaghqt3DyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYt ZjhkNjVjOTgzNzQ0LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYtZjhkNjVjOTgzNzQ0 LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6YYBybT KOqN+H9YVYV1Vjy21G/03aUUY4CGE+B8AnOki35zO7zsY0C+C2dwMoxbux8d7smH hUR8Tomb+3wKa31xDv1sPy74w/HvXai5On3lRtM0H6mhzYYQhOqtYYo9nCGKM7xY 0uOJkD9c2poEmKUnb2Xh9YkdG/n++2BWu7Sf5Vi/0zELCU91FHaT86dbW/rCoDuH tHWeFK4LQ9HJLz0/9vobRoP/AXxkjoTagVUo9b4DnqTkol6xOwTqoQc7f3kNiOq5 DMg2hSUMcjHUHiOaYo1kzROAhvO4LOWYePHSO8dC0fY4n9y6v0QhToVh11oTT2+B XjI4/w6b4LALQg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:04:40 2025 by rpki-client