This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft File: 3gr32Dxe6w1DStdTxqX0dUlpizc.mft (raw, json) Hash identifier: 1kBQiwHJAX+mWCEhGyhD9rwqOHAsPIYnHzc/vxcpJNk= Subject key identifier: C0:F4:B6:49:B7:A0:B1:51:DC:BE:54:0D:32:A8:D1:93:F8:A7:E1:E3 Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37 Certificate issuer: /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37 Certificate serial: 019B59ACA02E86CCBDDC043111C9EAD36ED3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft Manifest number: 1729 Signing time: Fri 26 Dec 2025 08:00:43 +0000 Manifest this update: Fri 26 Dec 2025 08:00:43 +0000 Manifest next update: Sat 27 Dec 2025 08:00:43 +0000 Files and hashes: 1: 3gr32Dxe6w1DStdTxqX0dUlpizc.crl (hash: H20T3xD9/3W4AvWegUb9A47+voUYWTo/qviGte1LycA=) 2: Aqgmt-0kmHhTxI4TNwO6CqQUAvI.roa (hash: OT3qKlUhR0guc2qzeYETLZJZRi9SFdXOekAamRFDQh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:a0:2e:86:cc:bd:dc:04:31:11:c9:ea:d3:6e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37 Validity Not Before: Dec 26 08:00:43 2025 GMT Not After : Dec 27 08:00:43 2025 GMT Subject: CN=c0f4b649b7a0b151dcbe540d32a8d193f8a7e1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:36:94:0a:9e:a9:57:3d:e7:f6:4c:0d:59: ef:e7:ae:a1:de:2b:d5:ba:7e:36:61:c5:70:4b:65: 7d:78:cd:91:d1:6d:fc:d0:47:f6:8d:c7:be:a5:18: 04:2e:c0:a3:12:69:fa:c1:3e:39:f2:9b:ad:f2:39: 6b:6b:be:17:d9:c5:3a:97:6f:75:06:9c:0f:cb:7c: be:7a:cc:e3:b3:37:9e:35:91:09:a0:3e:ba:0e:9d: 6f:8e:00:5b:16:32:55:6f:f2:e7:65:5b:0e:84:53: 7c:f3:69:87:2a:dd:74:18:ce:69:db:3d:ef:2f:0a: 33:03:52:33:4e:79:43:4b:ba:03:5c:f0:f8:69:25: 2e:51:01:d5:15:85:d6:6b:68:fa:57:bb:0b:f1:bf: 2c:96:c0:fd:03:48:10:73:a7:9d:f9:f0:3e:27:76: 54:73:8b:95:68:2b:c7:92:40:0e:58:ae:ce:90:49: d5:8e:6c:75:d4:d8:78:9c:27:98:97:1f:93:f4:b0: e6:39:45:09:8d:9f:ba:20:71:b6:69:4a:2f:0b:91: 70:6f:ce:c9:fc:83:95:3a:ab:2a:cf:18:f3:f3:f6: aa:7f:cd:73:31:66:ef:b2:30:5b:e2:b0:15:4b:cf: b9:97:fe:f2:ba:d5:71:95:e3:fc:5b:25:11:8e:dc: f8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F4:B6:49:B7:A0:B1:51:DC:BE:54:0D:32:A8:D1:93:F8:A7:E1:E3 X509v3 Authority Key Identifier: keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:6a:a0:fa:e5:3b:0f:7a:3e:63:7f:ad:df:6e:f0:92:f8:b0: 87:63:e4:9f:1e:85:23:42:88:a2:b2:4b:cb:f0:92:a6:95:80: 02:98:ab:13:88:17:00:53:03:f4:dc:38:e2:90:06:7e:34:53: 52:5e:a7:13:06:0c:f7:a6:4d:17:19:cb:a1:41:fd:86:0f:48: 49:c8:4f:8b:f7:80:3a:d9:ad:bc:25:51:f8:a0:94:4b:31:72: 9d:fe:47:c7:b2:5d:40:69:ae:ab:fe:7c:2a:b3:9b:e4:eb:46: f0:bb:d3:4d:dc:98:f7:1a:06:41:0e:41:4a:7a:92:83:f2:33: a0:14:07:fb:5b:66:25:5a:70:51:8d:5b:f6:d0:e8:82:eb:37: 28:b1:0a:a9:f8:a4:64:f1:14:a7:57:9e:57:58:d2:22:d7:7c: c0:c0:f1:d7:00:50:8e:80:4c:f3:af:ef:9e:f8:2f:2a:55:1b: 90:f9:45:0a:02:60:d8:7a:2b:1a:c3:2d:3b:cb:68:9e:15:0b: 41:8b:87:3a:3a:5f:bb:68:75:a0:ff:59:25:b7:14:71:94:c7: 51:c5:76:5d:96:2b:a6:bb:ca:cf:94:d2:4f:d0:59:5a:b9:c7: 2a:9d:30:05:f8:0d:98:88:27:88:9a:c6:47:f9:90:62:f0:c4: 5e:e3:07:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrKAuhsy93AQxEcnq027TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGFmN2Q4M2M1ZWViMGQ0MzRhZDc1M2M2YTVmNDc1NDk2 OThiMzcwHhcNMjUxMjI2MDgwMDQzWhcNMjUxMjI3MDgwMDQzWjAzMTEwLwYDVQQD EyhjMGY0YjY0OWI3YTBiMTUxZGNiZTU0MGQzMmE4ZDE5M2Y4YTdlMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1Y2lAqeqVc95/ZMDVnv566h3ivV un42YcVwS2V9eM2R0W380Ef2jce+pRgELsCjEmn6wT458put8jlra74X2cU6l291 BpwPy3y+eszjszeeNZEJoD66Dp1vjgBbFjJVb/LnZVsOhFN882mHKt10GM5p2z3v LwozA1IzTnlDS7oDXPD4aSUuUQHVFYXWa2j6V7sL8b8slsD9A0gQc6ed+fA+J3ZU c4uVaCvHkkAOWK7OkEnVjmx11Nh4nCeYlx+T9LDmOUUJjZ+6IHG2aUovC5Fwb87J /IOVOqsqzxjz8/aqf81zMWbvsjBb4rAVS8+5l/7yutVxleP8WyURjtz4xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMD0tkm3oLFR3L5UDTKo0ZP4p+HjMB8GA1UdIwQY MBaAFN4K99g8XusNQ0rXU8al9HVJaYs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lN2E3NzItOGIzOS00MzBkLWIxOTIt YTFiOGJjNWIyY2Q3LzEvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lN2E3NzItOGIzOS00MzBkLWIxOTItYTFiOGJjNWIyY2Q3 LzEvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWqg+uU7 D3o+Y3+t327wkviwh2Pknx6FI0KIorJLy/CSppWAApirE4gXAFMD9Nw44pAGfjRT Ul6nEwYM96ZNFxnLoUH9hg9ISchPi/eAOtmtvCVR+KCUSzFynf5Hx7JdQGmuq/58 KrOb5OtG8LvTTdyY9xoGQQ5BSnqSg/IzoBQH+1tmJVpwUY1b9tDogus3KLEKqfik ZPEUp1eeV1jSItd8wMDx1wBQjoBM86/vnvgvKlUbkPlFCgJg2HorGsMtO8tonhUL QYuHOjpfu2h1oP9ZJbcUcZTHUcV2XZYrprvKz5TST9BZWrnHKp0wBfgNmIgniJrG R/mQYvDEXuMH6A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:20 2025 by rpki-client