This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft File: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft (raw, json) Hash identifier: UsH1nRBDWAudBMuZ4NnNuYpEGGd94wBt0cWBD+Q+xcI= Subject key identifier: D2:B1:99:13:BE:FA:1B:B0:27:F8:8A:83:09:E5:8F:5E:B1:06:93:8D Authority key identifier: DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B Certificate issuer: /CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b Certificate serial: 019B59771B4C834EBA0BC8446EA11560EBF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft Manifest number: 0A Signing time: Fri 26 Dec 2025 07:02:16 +0000 Manifest this update: Fri 26 Dec 2025 07:02:16 +0000 Manifest next update: Sat 27 Dec 2025 07:02:16 +0000 Files and hashes: 1: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl (hash: C9J4bAzRWO7VTBjvLNR/pyHYWwNcQWuaDqL8cxb+q64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:1b:4c:83:4e:ba:0b:c8:44:6e:a1:15:60:eb:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b Validity Not Before: Dec 26 07:02:16 2025 GMT Not After : Dec 27 07:02:16 2025 GMT Subject: CN=d2b19913befa1bb027f88a8309e58f5eb106938d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:be:e8:e5:76:b2:82:c5:4f:67:75:a5:cf:3a: 48:79:5d:4a:a9:7d:17:6a:27:2f:90:2f:96:55:4e: 07:af:44:46:b5:b9:3e:41:c6:91:f1:7e:e6:9d:af: 01:e9:7b:83:99:89:74:1d:fc:36:ff:8c:e2:c2:63: 04:67:88:93:9c:89:65:a5:39:8a:ea:22:71:4d:b5: f4:c8:50:fb:95:38:63:a9:34:ba:7e:5c:fb:a9:f2: ee:35:ee:fc:eb:53:4b:4b:74:3c:a0:07:3e:db:54: 6e:2c:f9:12:79:90:bd:52:60:4c:48:ca:99:ea:25: 37:03:3b:f6:c9:99:be:89:23:f2:a6:63:fa:71:8e: 0d:01:58:01:80:b5:7e:e5:78:3e:bd:d5:1a:73:fc: 15:1c:81:06:fb:fa:ee:5f:7e:63:f1:ca:08:78:ec: 18:00:c3:52:a4:fa:ca:4a:2c:3b:d0:76:f8:eb:07: 44:2e:e1:0d:f6:e6:11:67:95:c3:83:25:8f:2a:ca: fd:97:25:ba:16:33:81:bb:bb:e6:f6:2c:89:f2:8b: 8a:13:a8:ee:2e:15:b8:e4:1d:11:ad:aa:19:33:3e: 71:17:3f:38:b3:bf:6b:6e:d3:0f:09:de:70:f9:0b: 51:89:d3:09:04:95:a0:e4:b2:60:28:d9:96:c3:2a: 53:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B1:99:13:BE:FA:1B:B0:27:F8:8A:83:09:E5:8F:5E:B1:06:93:8D X509v3 Authority Key Identifier: keyid:DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:40:5c:b5:c1:81:1e:6c:de:8a:41:a1:8f:33:98:d9:e6:1f: 98:ab:52:55:b9:54:ce:9e:ad:18:40:a2:92:33:42:ad:6f:36: 73:a2:92:68:a4:7c:3e:c7:84:bd:64:1c:c0:b3:e6:13:9e:0f: c1:d0:85:ec:09:7f:4f:b7:44:a4:d4:45:8b:43:05:d8:ed:cf: 63:75:48:82:91:b6:a4:c3:bb:d9:06:22:93:4f:c8:9e:c4:36: 1a:12:1d:11:c6:cc:26:d9:af:77:d9:97:cd:77:b8:0f:fb:a0: 3f:08:8b:f5:ef:ac:87:f3:74:27:7d:63:f8:bc:0b:63:0f:14: 54:9d:c0:88:80:ae:7c:b6:0d:aa:93:da:cb:9c:a6:87:f3:77: 60:be:16:b1:f0:34:62:b3:f7:7c:5e:90:15:20:aa:01:c4:76: fd:73:4c:6e:d8:81:8e:07:2b:b8:7f:29:02:09:ac:c7:f1:49: b3:03:22:1a:48:ae:86:71:4a:49:0b:b1:96:64:a8:d7:14:36: 14:66:22:bf:63:88:24:30:f8:64:84:18:be:9d:bb:cc:c9:ef: 0a:9c:2f:36:6e:4a:1d:f6:8b:32:fa:48:a5:26:9a:57:32:13: 4c:f4:77:ea:7e:21:9c:42:83:76:d3:ff:01:46:cc:e1:99:4d: 87:89:7e:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdxtMg066C8hEbqEVYOv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMWY1MjkwNzZmNDUxZWQ5ZTBiMjIyY2NlMzVkYmM5N2Ni ZGM1MWIwHhcNMjUxMjI2MDcwMjE2WhcNMjUxMjI3MDcwMjE2WjAzMTEwLwYDVQQD EyhkMmIxOTkxM2JlZmExYmIwMjdmODhhODMwOWU1OGY1ZWIxMDY5MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb7o5XaygsVPZ3WlzzpIeV1KqX0X aicvkC+WVU4Hr0RGtbk+QcaR8X7mna8B6XuDmYl0Hfw2/4ziwmMEZ4iTnIllpTmK 6iJxTbX0yFD7lThjqTS6flz7qfLuNe7861NLS3Q8oAc+21RuLPkSeZC9UmBMSMqZ 6iU3Azv2yZm+iSPypmP6cY4NAVgBgLV+5Xg+vdUac/wVHIEG+/ruX35j8coIeOwY AMNSpPrKSiw70Hb46wdELuEN9uYRZ5XDgyWPKsr9lyW6FjOBu7vm9iyJ8ouKE6ju LhW45B0RraoZMz5xFz84s79rbtMPCd5w+QtRidMJBJWg5LJgKNmWwypTMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKxmRO++huwJ/iKgwnlj16xBpONMB8GA1UdIwQY MBaAFNwfUpB29FHtngsiLM4128l8vcUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0I5U2tIYjBVZTJlQ3lJc3pqWGJ5WHk5eFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iMmNmMTctOWQyNy00NzdhLTg1N2It MmJlYmJmMTBkZDJiLzEvM0I5U2tIYjBVZTJlQ3lJc3pqWGJ5WHk5eFJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iMmNmMTctOWQyNy00NzdhLTg1N2ItMmJlYmJmMTBkZDJi LzEvM0I5U2tIYjBVZTJlQ3lJc3pqWGJ5WHk5eFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUBctcGB HmzeikGhjzOY2eYfmKtSVblUzp6tGECikjNCrW82c6KSaKR8PseEvWQcwLPmE54P wdCF7Al/T7dEpNRFi0MF2O3PY3VIgpG2pMO72QYik0/InsQ2GhIdEcbMJtmvd9mX zXe4D/ugPwiL9e+sh/N0J31j+LwLYw8UVJ3AiICufLYNqpPay5ymh/N3YL4WsfA0 YrP3fF6QFSCqAcR2/XNMbtiBjgcruH8pAgmsx/FJswMiGkiuhnFKSQuxlmSo1xQ2 FGYiv2OIJDD4ZIQYvp27zMnvCpwvNm5KHfaLMvpIpSaaVzITTPR36n4hnEKDdtP/ AUbM4ZlNh4l+uQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:41:44 2025 by rpki-client