This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json) Hash identifier: UOsYIehqvwL4MbSpBcihGQm2WEz0HlrojByC9vz35zw= Subject key identifier: D5:E2:DF:52:AE:B5:5D:3C:9D:D9:D1:9B:12:92:5C:5D:3C:DB:59:54 Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89 Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89 Certificate serial: 019B10816B876D6389121F1F6B7A3C22B329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft Manifest number: 1278 Signing time: Fri 12 Dec 2025 03:01:15 +0000 Manifest this update: Fri 12 Dec 2025 03:01:15 +0000 Manifest next update: Sat 13 Dec 2025 03:01:15 +0000 Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: Xg6e7mLMXZwaETV7BrOWpHYC75mG+xs6KRXWabXFSxc=) 2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:6b:87:6d:63:89:12:1f:1f:6b:7a:3c:22:b3:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89 Validity Not Before: Dec 12 03:01:15 2025 GMT Not After : Dec 13 03:01:15 2025 GMT Subject: CN=d5e2df52aeb55d3c9dd9d19b12925c5d3cdb5954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:18:66:d3:35:c7:9f:0d:15:7e:5e:08:ee:71: 4e:1e:b0:26:be:a1:dc:5b:a0:cd:1c:e3:32:04:4f: b0:a4:aa:76:d5:be:02:bb:05:9a:f9:b9:4d:98:8c: e5:22:b3:a7:cd:46:14:3c:30:14:5e:3f:25:69:6f: 20:0a:1c:ef:7e:84:c5:26:6a:e1:f3:68:ff:f2:9a: a1:e8:08:cf:ef:8b:ca:27:73:3a:91:22:ec:b7:f8: e8:ac:0c:26:e1:56:c8:40:d4:23:17:a6:8b:98:8e: 3e:0d:3b:3c:b0:f1:60:f9:84:a7:2a:2f:63:76:d0: 05:8d:fb:f4:25:d5:14:f2:cf:e1:ae:01:22:a8:5a: 36:f8:36:90:41:52:6d:f5:60:9b:69:f3:77:67:fd: 42:07:31:19:3d:6a:a2:72:52:b5:9f:6a:58:24:95: cf:e7:52:09:75:78:0f:dc:8f:9e:98:42:ed:2e:4b: eb:25:ca:49:61:c3:c7:f6:81:88:67:b0:da:5f:88: c9:57:6e:c9:4d:3c:34:3d:79:bb:9a:5e:68:ff:db: b3:ef:d3:45:04:e6:91:f8:2b:9e:6b:73:73:32:80: 10:5e:4a:56:f4:d6:0b:80:ef:9a:e3:03:0e:24:12: 01:8a:d2:41:78:c7:3c:c9:1c:7d:34:5d:1d:d1:94: 8d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E2:DF:52:AE:B5:5D:3C:9D:D9:D1:9B:12:92:5C:5D:3C:DB:59:54 X509v3 Authority Key Identifier: keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8b:a1:74:a8:7f:6f:b7:6a:98:a6:a8:6a:53:f8:94:a2:9d: d8:a9:f9:56:f7:36:5c:39:bb:07:c3:98:e6:28:44:60:0f:64: 6e:70:20:05:2a:e7:0a:eb:01:8d:44:61:4c:54:61:ef:b7:37: 37:80:0c:3b:3c:ce:4b:37:33:d4:14:31:30:57:af:40:92:1a: 05:eb:c0:55:5a:77:05:f9:b7:af:44:64:86:c2:4e:ff:42:74: 8e:bb:1c:26:b2:b2:5f:f9:66:95:3f:4a:94:ad:4e:3d:3a:c1: bf:cc:dc:34:a5:54:bf:5d:87:61:04:b0:6e:a2:e9:e7:ff:e0: f5:88:c8:56:f8:f8:4a:d5:31:3a:ba:8b:71:b3:2a:40:48:ba: 89:54:92:a4:95:88:c9:23:9d:81:74:a7:54:03:09:6e:14:57: 59:63:8c:0b:0d:a1:c0:b1:a2:dc:c9:c3:22:0f:ca:a3:d9:b3: 9e:d4:cb:97:8e:7d:d1:2b:86:30:70:c2:08:98:59:0a:5c:04: fa:b1:ea:d9:6a:9b:56:2e:03:ce:30:ca:b7:94:a9:c2:31:a0: b7:d4:69:dc:6f:ae:17:c9:09:db:8b:71:a0:78:17:1a:d4:c8: 4f:7a:3a:2d:20:bf:3c:e7:d1:6e:cb:af:aa:37:78:10:59:f1: 9b:c1:9c:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgWuHbWOJEh8fa3o8IrMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMjk2Y2Y3MDQzODM2ZWJlMTc0OWM1YzE0NTQ3Yzc5ODQx ZTFiODkwHhcNMjUxMjEyMDMwMTE1WhcNMjUxMjEzMDMwMTE1WjAzMTEwLwYDVQQD EyhkNWUyZGY1MmFlYjU1ZDNjOWRkOWQxOWIxMjkyNWM1ZDNjZGI1OTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Rhm0zXHnw0Vfl4I7nFOHrAmvqHc W6DNHOMyBE+wpKp21b4CuwWa+blNmIzlIrOnzUYUPDAUXj8laW8gChzvfoTFJmrh 82j/8pqh6AjP74vKJ3M6kSLst/jorAwm4VbIQNQjF6aLmI4+DTs8sPFg+YSnKi9j dtAFjfv0JdUU8s/hrgEiqFo2+DaQQVJt9WCbafN3Z/1CBzEZPWqiclK1n2pYJJXP 51IJdXgP3I+emELtLkvrJcpJYcPH9oGIZ7DaX4jJV27JTTw0PXm7ml5o/9uz79NF BOaR+Cuea3NzMoAQXkpW9NYLgO+a4wMOJBIBitJBeMc8yRx9NF0d0ZSNbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXi31KutV08ndnRmxKSXF0821lUMB8GA1UdIwQY MBaAFNwpbPcEODbr4XScXBRUfHmEHhuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMt NjhhYmU1MmQzMDM0LzEvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMtNjhhYmU1MmQzMDM0 LzEvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIuhdKh/ b7dqmKaoalP4lKKd2Kn5Vvc2XDm7B8OY5ihEYA9kbnAgBSrnCusBjURhTFRh77c3 N4AMOzzOSzcz1BQxMFevQJIaBevAVVp3Bfm3r0RkhsJO/0J0jrscJrKyX/lmlT9K lK1OPTrBv8zcNKVUv12HYQSwbqLp5//g9YjIVvj4StUxOrqLcbMqQEi6iVSSpJWI ySOdgXSnVAMJbhRXWWOMCw2hwLGi3MnDIg/Ko9mzntTLl4590SuGMHDCCJhZClwE +rHq2WqbVi4DzjDKt5SpwjGgt9Rp3G+uF8kJ24txoHgXGtTIT3o6LSC/POfRbsuv qjd4EFnxm8GcTg== -----END CERTIFICATE-----Generated at Fri Dec 12 13:01:18 2025 by rpki-client