This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json) Hash identifier: JvflUOtwJoURyTXuTtSjY2a3jfrA2vXEJEpATYlPtog= Subject key identifier: 71:7E:F4:EE:9D:76:3B:FC:F8:E3:D3:50:AD:9E:96:C8:26:0B:7F:04 Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67 Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67 Certificate serial: 019B4ADE801A86D958A02E1C7AD6F2296CBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft Manifest number: 10D2 Signing time: Tue 23 Dec 2025 11:00:54 +0000 Manifest this update: Tue 23 Dec 2025 11:00:54 +0000 Manifest next update: Wed 24 Dec 2025 11:00:54 +0000 Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: E64b+m2ss02ACgcheYUbylLN/JgePt34QqA2f5Zjyk0=) 2: GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa (hash: qcKfQ/V3fbXzE7gbTkc10cKeggN9uhLupcmee0zeuj8=) 3: gDn1RHCMxQyNW_pGfUDeAoFsteY.roa (hash: aOveJJ3ah1WLjPcvfI87OOrTavXERjpgS9XWi0GEgq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:80:1a:86:d9:58:a0:2e:1c:7a:d6:f2:29:6c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67 Validity Not Before: Dec 23 11:00:54 2025 GMT Not After : Dec 24 11:00:54 2025 GMT Subject: CN=717ef4ee9d763bfcf8e3d350ad9e96c8260b7f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:fc:72:08:3a:f2:65:8c:22:65:a8:c2:03: c6:2b:e4:17:7d:72:00:c2:fb:d7:a2:92:2c:1e:34: 02:cc:7f:b0:62:b4:50:90:bf:89:2e:cb:70:54:57: 6b:29:6f:74:2d:8f:dc:98:68:09:f6:28:a6:6c:9c: 09:de:53:28:26:ac:4e:f4:b2:35:71:79:d4:ad:fd: ed:60:3e:4e:45:a9:6b:f3:32:c1:32:9a:cb:83:c7: 17:7e:d6:61:65:0b:6f:fc:cc:17:f3:8e:f7:ea:c7: 3d:0f:11:47:df:b1:89:ee:77:08:a3:81:ed:3c:fe: 3a:2b:7e:ef:ef:2d:b0:90:1f:ee:82:e3:0b:6d:80: ec:7c:99:92:85:cb:9e:5b:c6:65:c3:6f:5c:3e:32: 41:a4:a0:4b:ef:e4:e2:4e:a9:d1:36:58:ae:e4:3e: e7:fd:76:e2:85:5c:ed:c0:9a:25:4a:8a:75:34:2b: 30:e5:cb:51:2b:2b:44:97:54:88:73:21:11:3c:50: 21:fb:75:43:4c:72:11:70:83:e9:52:89:21:80:06: 75:3b:0d:04:d3:fc:ef:6b:b9:00:80:11:dc:1a:2c: 3e:d0:b5:cb:a4:eb:de:36:08:82:2f:88:86:10:94: c7:94:fa:e7:99:f9:b4:e6:69:b1:ca:e5:d3:3d:ba: 62:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7E:F4:EE:9D:76:3B:FC:F8:E3:D3:50:AD:9E:96:C8:26:0B:7F:04 X509v3 Authority Key Identifier: keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:79:28:67:b0:ef:f9:3e:60:04:95:39:bd:44:fc:b5:2e:03: 04:31:36:0f:69:fa:ec:e2:94:83:d2:a4:18:91:a9:2a:c0:26: c0:17:93:47:3a:30:e8:bd:3c:9c:04:a0:e0:ab:ef:1f:9b:aa: 51:09:82:3d:65:13:17:9c:6b:79:18:eb:9f:e5:ac:ba:62:e6: 9a:ba:b9:cc:67:98:a5:aa:07:18:99:f1:df:9f:e6:3b:ab:68: c3:da:90:d8:71:e4:5b:de:b2:2d:4f:01:14:38:71:0b:00:83: d5:78:9d:2a:48:bd:00:50:35:7a:d0:92:c4:5a:c0:77:16:e3: cd:2c:2c:40:2b:17:3a:0c:8a:fb:83:8e:f3:95:44:15:8d:79: f1:73:5d:9b:cf:0e:c8:1f:c4:18:d1:6d:c5:7f:14:8d:a1:4a: bc:69:21:ef:03:12:e5:c4:aa:04:f4:b6:e2:8e:cf:22:37:c0: b0:12:a9:5f:94:a6:79:43:21:76:00:a1:cb:87:d8:cd:1b:b5: 1c:2a:a2:12:9e:d4:13:fd:bb:13:8f:b5:53:bd:3b:80:73:ab: f4:f6:09:5d:04:4b:20:f4:42:6c:7f:4f:d9:c4:fd:d5:64:69: 0b:ea:a0:20:ce:ad:b9:8c:b1:21:d0:e5:86:b3:ff:27:12:7f: e7:3a:38:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3oAahtlYoC4cetbyKWy7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZTM2ZTk4MDIxMjY0ZjVhODA3MDEwNjc4MGJlMjlkNDhh MTZjNjcwHhcNMjUxMjIzMTEwMDU0WhcNMjUxMjI0MTEwMDU0WjAzMTEwLwYDVQQD Eyg3MTdlZjRlZTlkNzYzYmZjZjhlM2QzNTBhZDllOTZjODI2MGI3ZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ78cgg68mWMImWowgPGK+QXfXIA wvvXopIsHjQCzH+wYrRQkL+JLstwVFdrKW90LY/cmGgJ9iimbJwJ3lMoJqxO9LI1 cXnUrf3tYD5ORalr8zLBMprLg8cXftZhZQtv/MwX84736sc9DxFH37GJ7ncIo4Ht PP46K37v7y2wkB/uguMLbYDsfJmShcueW8Zlw29cPjJBpKBL7+TiTqnRNliu5D7n /XbihVztwJolSop1NCsw5ctRKytEl1SIcyERPFAh+3VDTHIRcIPpUokhgAZ1Ow0E 0/zva7kAgBHcGiw+0LXLpOveNgiCL4iGEJTHlPrnmfm05mmxyuXTPbpiDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHF+9O6ddjv8+OPTUK2elsgmC38EMB8GA1UdIwQY MBaAFN3jbpgCEmT1qAcBBngL4p1IoWxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2VOdW1BSVNaUFdvQndFR2VBdmluVWloYkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NmFlZTEtZTIyMC00ZTIyLTljYjUt OGZlM2EwZjYxNDM3LzEvM2VOdW1BSVNaUFdvQndFR2VBdmluVWloYkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NmFlZTEtZTIyMC00ZTIyLTljYjUtOGZlM2EwZjYxNDM3 LzEvM2VOdW1BSVNaUFdvQndFR2VBdmluVWloYkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHkoZ7Dv +T5gBJU5vUT8tS4DBDE2D2n67OKUg9KkGJGpKsAmwBeTRzow6L08nASg4KvvH5uq UQmCPWUTF5xreRjrn+WsumLmmrq5zGeYpaoHGJnx35/mO6tow9qQ2HHkW96yLU8B FDhxCwCD1XidKki9AFA1etCSxFrAdxbjzSwsQCsXOgyK+4OO85VEFY158XNdm88O yB/EGNFtxX8UjaFKvGkh7wMS5cSqBPS24o7PIjfAsBKpX5SmeUMhdgChy4fYzRu1 HCqiEp7UE/27E4+1U707gHOr9PYJXQRLIPRCbH9P2cT91WRpC+qgIM6tuYyxIdDl hrP/JxJ/5zo4/A== -----END CERTIFICATE-----Generated at Tue Dec 23 16:47:05 2025 by rpki-client