This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft File: 3tvumMupuOYloRR7s7VRl9LQoFc.mft (raw, json) Hash identifier: FXvnnyVcceSoMnYRTlbCKPicJSS+rqPDnjxy+zQ6Cuo= Subject key identifier: 06:D1:C9:7B:27:AA:96:5B:2F:7C:DF:31:36:92:FF:54:53:3B:65:2A Authority key identifier: DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57 Certificate issuer: /CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057 Certificate serial: 019B3C7EE3277BDA972F22EA3443B26FAE0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft Manifest number: 07F0 Signing time: Sat 20 Dec 2025 16:01:47 +0000 Manifest this update: Sat 20 Dec 2025 16:01:47 +0000 Manifest next update: Sun 21 Dec 2025 16:01:47 +0000 Files and hashes: 1: 3tvumMupuOYloRR7s7VRl9LQoFc.crl (hash: 6EcokjSECJ/9q4Hq+I10EoFpgMhDrWushmci3sNFaHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:e3:27:7b:da:97:2f:22:ea:34:43:b2:6f:ae:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057 Validity Not Before: Dec 20 16:01:47 2025 GMT Not After : Dec 21 16:01:47 2025 GMT Subject: CN=06d1c97b27aa965b2f7cdf313692ff54533b652a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6e:67:4e:fc:e9:9b:c7:83:fd:f7:92:a5:26: 9f:ee:a2:cd:64:b9:42:0d:06:3b:5e:bd:d6:65:89: 86:98:82:56:92:0c:b2:0c:25:18:0a:74:12:98:b4: 60:2a:44:60:8c:0e:5b:a9:f5:60:93:ed:16:45:04: 8a:b6:e1:33:2b:f4:b7:a3:f9:8c:57:44:37:2e:e3: be:5e:b3:a5:2e:bf:49:71:47:7a:b8:cd:41:3b:6c: c9:9a:05:5d:e9:72:7a:76:aa:4a:0c:c0:dc:83:e8: e7:db:9e:6a:b5:46:d8:1b:07:12:6e:a3:84:d4:4c: 99:70:84:31:49:b5:7d:79:0b:54:69:a3:90:18:67: a3:26:ca:a7:64:67:74:6a:cf:c4:03:71:b6:4d:30: 9c:fc:5d:a6:f6:dd:c0:1a:2a:91:42:04:ad:8f:c3: c2:f4:dc:19:66:2b:cd:41:a3:3f:22:56:56:7d:c7: 2e:f1:43:88:38:cb:30:6b:10:5d:c2:d4:2f:27:67: 01:62:91:27:89:fa:30:16:ea:63:98:12:83:5f:16: 60:17:51:d6:fc:db:83:87:b0:f2:91:f3:56:62:fa: a4:7f:6b:ca:2b:3c:c0:19:12:07:8c:88:0f:11:aa: 0e:b6:4f:21:69:bb:23:a8:28:24:ce:0e:33:cf:3d: 7a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D1:C9:7B:27:AA:96:5B:2F:7C:DF:31:36:92:FF:54:53:3B:65:2A X509v3 Authority Key Identifier: keyid:DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b9:d4:81:71:c1:6d:8d:32:26:ef:00:51:b7:d8:13:92:ec: c1:b0:34:a8:30:4b:17:d3:2a:ec:41:75:da:46:cf:a8:e7:a2: bb:1d:6d:52:fc:ed:26:d4:18:3c:a6:4a:dd:93:4f:e2:7c:52: 43:ed:8e:c8:07:f7:35:d2:c4:65:88:1f:4b:74:bf:12:d2:f1: f3:40:21:9d:10:40:3b:de:06:fc:0e:55:a3:81:4d:05:87:92: db:40:0a:32:82:4c:9c:87:ab:57:7c:ab:bf:3e:48:b6:26:a0: 35:e3:e1:47:b7:2b:f8:33:db:b1:43:11:f6:2e:8c:8c:30:65: 0e:74:49:b1:80:ef:64:cb:09:67:0c:10:77:89:3f:83:fa:ce: 25:61:ca:a1:c0:59:e9:38:9f:1f:4c:ac:59:0c:44:35:bf:15: 09:80:13:24:9e:6b:f6:8e:66:87:85:c3:1a:a3:e9:6b:b6:c7: 6d:a3:de:f6:6e:76:c9:f8:f3:0f:94:c1:13:a0:d3:4c:03:62: f4:d5:dc:8b:d8:2a:84:81:cd:d2:93:c7:4b:99:58:53:f3:00: f6:b0:90:0d:8b:06:9b:8d:95:42:03:1e:af:44:94:63:a8:54: 6b:b4:64:34:db:3e:7b:2a:c2:73:f2:16:91:43:54:f6:6c:ae: eb:e0:e7:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fuMne9qXLyLqNEOyb64NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGJlZTk4Y2JhOWI4ZTYyNWExMTQ3YmIzYjU1MTk3ZDJk MGEwNTcwHhcNMjUxMjIwMTYwMTQ3WhcNMjUxMjIxMTYwMTQ3WjAzMTEwLwYDVQQD EygwNmQxYzk3YjI3YWE5NjViMmY3Y2RmMzEzNjkyZmY1NDUzM2I2NTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm5nTvzpm8eD/feSpSaf7qLNZLlC DQY7Xr3WZYmGmIJWkgyyDCUYCnQSmLRgKkRgjA5bqfVgk+0WRQSKtuEzK/S3o/mM V0Q3LuO+XrOlLr9JcUd6uM1BO2zJmgVd6XJ6dqpKDMDcg+jn255qtUbYGwcSbqOE 1EyZcIQxSbV9eQtUaaOQGGejJsqnZGd0as/EA3G2TTCc/F2m9t3AGiqRQgStj8PC 9NwZZivNQaM/IlZWfccu8UOIOMswaxBdwtQvJ2cBYpEnifowFupjmBKDXxZgF1HW /NuDh7DykfNWYvqkf2vKKzzAGRIHjIgPEaoOtk8habsjqCgkzg4zzz16owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbRyXsnqpZbL3zfMTaS/1RTO2UqMB8GA1UdIwQY MBaAFN7b7pjLqbjmJaEUe7O1UZfS0KBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZWY2NzgtNzg3MC00ZTA4LWFiMjUt MThmMGI4MGYyNTBkLzEvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZWY2NzgtNzg3MC00ZTA4LWFiMjUtMThmMGI4MGYyNTBk LzEvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7nUgXHB bY0yJu8AUbfYE5LswbA0qDBLF9Mq7EF12kbPqOeiux1tUvztJtQYPKZK3ZNP4nxS Q+2OyAf3NdLEZYgfS3S/EtLx80AhnRBAO94G/A5Vo4FNBYeS20AKMoJMnIerV3yr vz5ItiagNePhR7cr+DPbsUMR9i6MjDBlDnRJsYDvZMsJZwwQd4k/g/rOJWHKocBZ 6TifH0ysWQxENb8VCYATJJ5r9o5mh4XDGqPpa7bHbaPe9m52yfjzD5TBE6DTTANi 9NXci9gqhIHN0pPHS5lYU/MA9rCQDYsGm42VQgMer0SUY6hUa7RkNNs+eyrCc/IW kUNU9myu6+DnEw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:11:11 2025 by rpki-client