This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft File: 3j4BZ79YLOzkjWxtApqCzeJyqdU.mft (raw, json) Hash identifier: PicgcBTsxeZytgLokAJ/LP6cUBoF+P3f0JD6lHSFBC8= Subject key identifier: C4:FC:00:9B:5A:23:E8:DE:56:C3:CB:A0:EE:1A:A8:A2:BC:E4:B5:FB Authority key identifier: DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5 Certificate issuer: /CN=de3e0167bf582cece48d6c6d029a82cde272a9d5 Certificate serial: 019B0FA553FB20CF8E5E4857AE04BB36756C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft Manifest number: 1704 Signing time: Thu 11 Dec 2025 23:00:51 +0000 Manifest this update: Thu 11 Dec 2025 23:00:51 +0000 Manifest next update: Fri 12 Dec 2025 23:00:51 +0000 Files and hashes: 1: 3j4BZ79YLOzkjWxtApqCzeJyqdU.crl (hash: CNjfpCsZoNTZTyMYClaS0cexHomM35NEIgq3E/UNUjM=) 2: WK3H-x4lvtSz5PAYVzf83jx6Xhg.roa (hash: IHyV2nIBoBadJ+LZrUqe4zccqPuVek6+/UVCrBQ/9jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:53:fb:20:cf:8e:5e:48:57:ae:04:bb:36:75:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de3e0167bf582cece48d6c6d029a82cde272a9d5 Validity Not Before: Dec 11 23:00:51 2025 GMT Not After : Dec 12 23:00:51 2025 GMT Subject: CN=c4fc009b5a23e8de56c3cba0ee1aa8a2bce4b5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:8a:87:61:7e:e2:ec:fc:d6:00:c1:a9:9f: 43:04:05:29:f1:8e:07:1d:8b:0e:c3:1c:3e:ef:69: dd:06:03:c4:1b:bd:b5:76:a8:f5:83:5b:c7:71:c8: 5b:69:dd:f5:7f:f7:bc:50:5d:93:d8:c9:b7:9c:38: 90:20:a8:39:86:ea:03:77:1f:2f:a0:35:93:1d:b8: 69:2a:41:2a:40:68:7f:f2:fb:3a:19:c9:f6:6a:c9: 9c:9f:d3:ac:5a:11:3d:2c:cc:14:b0:01:16:3a:d2: e0:df:dc:76:6b:17:e1:d2:3d:37:f8:25:1c:a5:b3: ba:5b:f0:16:44:a4:fd:65:a6:0a:1f:d3:2e:74:38: 41:58:56:3e:d4:34:78:fc:28:10:54:f9:07:7b:eb: 45:ce:1d:a0:47:29:65:ad:0c:90:6d:81:b2:d6:60: e1:d8:1a:87:20:f2:dd:37:23:87:81:b9:bb:53:96: aa:47:32:20:c1:22:53:51:47:36:dd:04:15:f8:6d: bb:d0:5c:dc:93:a9:05:e7:25:fd:62:06:93:59:f6: 35:ec:ae:6a:ef:ee:e8:fd:e2:25:61:7e:e0:b2:e5: 80:ed:d6:2e:50:89:be:60:96:53:ea:c6:f5:5c:f1: 47:4c:33:af:9b:12:d7:96:44:66:55:2d:c2:68:fe: 83:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FC:00:9B:5A:23:E8:DE:56:C3:CB:A0:EE:1A:A8:A2:BC:E4:B5:FB X509v3 Authority Key Identifier: keyid:DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:bd:1a:d9:c5:59:b2:a9:0f:e7:c0:39:36:96:65:b7:31:45: 14:47:a3:f5:20:89:66:53:ca:ad:f8:8e:85:61:7a:e5:2e:83: d0:34:ee:49:75:32:f7:f3:49:56:9b:df:75:37:72:67:88:7e: 3f:bc:bd:04:c7:87:7e:b3:7d:f3:2e:fe:98:a6:47:56:ea:d7: 57:f7:0a:7d:cf:44:3f:83:8f:9a:74:12:47:6a:81:52:34:65: b7:36:5c:29:14:43:c1:1e:4d:d3:4b:bf:4d:c8:1a:90:91:ea: a6:0a:c1:a1:b2:03:d9:c3:69:e0:27:a9:ba:b2:a5:32:10:da: 3b:18:2b:05:57:59:81:64:79:dd:34:76:21:b2:9c:42:6b:5b: 59:56:ba:91:cf:1d:1c:65:b4:5d:73:20:e4:54:af:cf:09:9f: c1:7e:60:59:ab:bd:9a:bb:00:28:90:05:b7:56:d8:3c:cc:c0: 59:e7:fe:47:63:99:b2:f5:37:d2:d8:2c:ec:78:d9:ce:39:7b: 8c:ff:aa:64:2b:27:32:f9:92:98:c4:c6:9b:53:bc:33:98:a9: ed:77:cb:34:07:e1:da:7f:93:0c:6e:87:3f:6b:05:d4:57:a9: 44:5b:58:25:1d:f6:9c:90:80:38:4f:5b:6a:79:5d:af:3d:81: 89:47:73:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpVP7IM+OXkhXrgS7NnVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlM2UwMTY3YmY1ODJjZWNlNDhkNmM2ZDAyOWE4MmNkZTI3 MmE5ZDUwHhcNMjUxMjExMjMwMDUxWhcNMjUxMjEyMjMwMDUxWjAzMTEwLwYDVQQD EyhjNGZjMDA5YjVhMjNlOGRlNTZjM2NiYTBlZTFhYThhMmJjZTRiNWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVmKh2F+4uz81gDBqZ9DBAUp8Y4H HYsOwxw+72ndBgPEG721dqj1g1vHcchbad31f/e8UF2T2Mm3nDiQIKg5huoDdx8v oDWTHbhpKkEqQGh/8vs6Gcn2asmcn9OsWhE9LMwUsAEWOtLg39x2axfh0j03+CUc pbO6W/AWRKT9ZaYKH9MudDhBWFY+1DR4/CgQVPkHe+tFzh2gRyllrQyQbYGy1mDh 2BqHIPLdNyOHgbm7U5aqRzIgwSJTUUc23QQV+G270Fzck6kF5yX9YgaTWfY17K5q 7+7o/eIlYX7gsuWA7dYuUIm+YJZT6sb1XPFHTDOvmxLXlkRmVS3CaP6DHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMT8AJtaI+jeVsPLoO4aqKK85LX7MB8GA1UdIwQY MBaAFN4+AWe/WCzs5I1sbQKags3icqnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9hNzE1Y2UtNDEwZC00MzkwLThlOGMt OGIyMzc5ZWJhMTNlLzEvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9hNzE1Y2UtNDEwZC00MzkwLThlOGMtOGIyMzc5ZWJhMTNl LzEvM2o0Qlo3OVlMT3prald4dEFwcUN6ZUp5cWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1L0a2cVZ sqkP58A5NpZltzFFFEej9SCJZlPKrfiOhWF65S6D0DTuSXUy9/NJVpvfdTdyZ4h+ P7y9BMeHfrN98y7+mKZHVurXV/cKfc9EP4OPmnQSR2qBUjRltzZcKRRDwR5N00u/ TcgakJHqpgrBobID2cNp4CepurKlMhDaOxgrBVdZgWR53TR2IbKcQmtbWVa6kc8d HGW0XXMg5FSvzwmfwX5gWau9mrsAKJAFt1bYPMzAWef+R2OZsvU30tgs7HjZzjl7 jP+qZCsnMvmSmMTGm1O8M5ip7XfLNAfh2n+TDG6HP2sF1FepRFtYJR32nJCAOE9b anldrz2BiUdzGQ== -----END CERTIFICATE-----Generated at Fri Dec 12 08:01:00 2025 by rpki-client