This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft File: 3j4BZ79YLOzkjWxtApqCzeJyqdU.mft (raw, json) Hash identifier: w4kang9w1lBlK/hgyqeeCmyalhWYqKFnGUsi2SEtW6M= Subject key identifier: 1F:42:59:B7:79:2F:5B:6B:84:37:0A:6E:94:9B:1B:51:D8:B4:0F:30 Authority key identifier: DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5 Certificate issuer: /CN=de3e0167bf582cece48d6c6d029a82cde272a9d5 Certificate serial: 019B47A650DDF35586195C42AC5BD7446491 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft Manifest number: 1721 Signing time: Mon 22 Dec 2025 20:00:40 +0000 Manifest this update: Mon 22 Dec 2025 20:00:40 +0000 Manifest next update: Tue 23 Dec 2025 20:00:40 +0000 Files and hashes: 1: 3j4BZ79YLOzkjWxtApqCzeJyqdU.crl (hash: MrjhobyA/JlEZyp/vkyn/U+3ju6So4LHOeOwJpuxX5g=) 2: WK3H-x4lvtSz5PAYVzf83jx6Xhg.roa (hash: IHyV2nIBoBadJ+LZrUqe4zccqPuVek6+/UVCrBQ/9jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:50:dd:f3:55:86:19:5c:42:ac:5b:d7:44:64:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de3e0167bf582cece48d6c6d029a82cde272a9d5 Validity Not Before: Dec 22 20:00:40 2025 GMT Not After : Dec 23 20:00:40 2025 GMT Subject: CN=1f4259b7792f5b6b84370a6e949b1b51d8b40f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:64:67:cd:6c:30:57:ef:3f:ea:ed:aa:66:a2: 05:8f:3d:2b:9a:d1:58:b9:d9:ef:a0:5f:d8:86:93: c5:27:39:2f:b9:61:49:01:4f:bc:30:4e:29:f3:45: 0d:77:20:01:d2:22:81:7f:b1:17:d9:b4:a6:07:99: 0f:79:54:8e:dd:25:59:16:c3:81:40:17:cf:61:4f: ba:bf:31:71:6b:b2:ce:c2:6c:4d:7c:7f:30:05:94: 8c:68:86:84:b3:6e:36:37:c9:5c:55:6d:7c:14:40: 49:14:df:75:a5:d1:27:9d:76:7c:0f:23:49:97:44: 19:16:8d:0a:2e:35:97:94:1a:0f:5c:c1:e6:df:ba: c5:7f:e1:b7:33:54:d3:e0:8b:d7:21:83:7e:4c:d2: fb:05:c0:ef:26:57:22:47:7c:ff:12:0e:dc:d1:e4: 1b:95:d8:0f:93:b6:3d:aa:b5:61:e5:80:b6:52:a0: 17:ff:9e:11:bd:d0:a2:0e:aa:c8:32:1a:00:88:3e: 6b:96:79:dd:3e:2c:b9:3e:ad:13:a8:33:da:53:f7: 89:67:0f:98:3b:8e:1c:b7:74:89:81:49:e9:d7:ed: a3:e7:2e:2a:47:5e:d4:16:33:43:a7:2b:b3:08:b8: c9:a5:ca:e3:95:84:5d:2e:06:e1:d9:0e:e1:86:eb: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:42:59:B7:79:2F:5B:6B:84:37:0A:6E:94:9B:1B:51:D8:B4:0F:30 X509v3 Authority Key Identifier: keyid:DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:da:e2:fe:7c:93:43:49:a4:02:13:3c:85:00:68:75:03:31: c4:d5:a1:0f:d2:55:3e:89:a8:62:62:e4:6a:7c:a3:d1:e4:cb: 32:10:76:bc:ed:e8:5f:10:18:eb:d4:4f:47:c7:0d:66:5b:44: b6:7c:ed:d7:8b:9e:c5:84:eb:f8:30:46:34:e8:26:9c:80:83: 50:e3:7c:d4:ef:16:64:44:94:df:96:0d:9f:c3:2a:1a:54:13: 89:33:d6:29:08:5c:f5:15:da:4a:ee:08:4e:8a:74:d1:94:8e: 10:8e:93:c3:6f:6b:1c:d9:a1:15:06:2d:ef:65:29:a9:29:f7: d1:1d:36:a2:b8:54:30:d4:c9:f4:a3:93:92:31:a0:e4:f8:75: 59:3c:cc:79:ad:e1:ce:1e:28:d7:07:26:cc:c2:b2:7b:1d:69: 15:c9:d5:f6:ec:e0:21:d3:b8:24:3a:ea:a5:4f:2a:23:46:0e: 0e:d9:bd:79:ff:63:e6:14:d7:9c:81:13:fd:1a:cd:1a:2c:e1: 04:9a:b7:22:c6:2b:b6:a0:d2:e9:81:0d:67:e8:24:b4:2b:66: ce:57:f6:24:b1:58:ca:7e:7a:c3:7d:c4:2a:2f:87:2d:76:db: b7:51:71:e9:66:07:ba:88:87:26:25:62:3d:57:1b:44:48:43: 61:b8:f6:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHplDd81WGGVxCrFvXRGSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlM2UwMTY3YmY1ODJjZWNlNDhkNmM2ZDAyOWE4MmNkZTI3 MmE5ZDUwHhcNMjUxMjIyMjAwMDQwWhcNMjUxMjIzMjAwMDQwWjAzMTEwLwYDVQQD EygxZjQyNTliNzc5MmY1YjZiODQzNzBhNmU5NDliMWI1MWQ4YjQwZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGRnzWwwV+8/6u2qZqIFjz0rmtFY udnvoF/YhpPFJzkvuWFJAU+8ME4p80UNdyAB0iKBf7EX2bSmB5kPeVSO3SVZFsOB QBfPYU+6vzFxa7LOwmxNfH8wBZSMaIaEs242N8lcVW18FEBJFN91pdEnnXZ8DyNJ l0QZFo0KLjWXlBoPXMHm37rFf+G3M1TT4IvXIYN+TNL7BcDvJlciR3z/Eg7c0eQb ldgPk7Y9qrVh5YC2UqAX/54RvdCiDqrIMhoAiD5rlnndPiy5Pq0TqDPaU/eJZw+Y O44ct3SJgUnp1+2j5y4qR17UFjNDpyuzCLjJpcrjlYRdLgbh2Q7hhuskxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9CWbd5L1trhDcKbpSbG1HYtA8wMB8GA1UdIwQY MBaAFN4+AWe/WCzs5I1sbQKags3icqnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9hNzE1Y2UtNDEwZC00MzkwLThlOGMt OGIyMzc5ZWJhMTNlLzEvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9hNzE1Y2UtNDEwZC00MzkwLThlOGMtOGIyMzc5ZWJhMTNl LzEvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtri/nyT Q0mkAhM8hQBodQMxxNWhD9JVPomoYmLkanyj0eTLMhB2vO3oXxAY69RPR8cNZltE tnzt14uexYTr+DBGNOgmnICDUON81O8WZESU35YNn8MqGlQTiTPWKQhc9RXaSu4I Top00ZSOEI6Tw29rHNmhFQYt72UpqSn30R02orhUMNTJ9KOTkjGg5Ph1WTzMea3h zh4o1wcmzMKyex1pFcnV9uzgIdO4JDrqpU8qI0YODtm9ef9j5hTXnIET/RrNGizh BJq3IsYrtqDS6YENZ+gktCtmzlf2JLFYyn56w33EKi+HLXbbt1Fx6WYHuoiHJiVi PVcbREhDYbj2/Q== -----END CERTIFICATE-----Generated at Tue Dec 23 01:56:30 2025 by rpki-client