This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft File: 3tvumMupuOYloRR7s7VRl9LQoFc.mft (raw, json) Hash identifier: D2+AfEZJgEEak3E47SULVbyinxtqIhViN4ZLSwk54VA= Subject key identifier: 71:0B:4E:1B:7C:9B:FE:F1:D0:F8:66:EB:61:CD:9B:5C:3D:29:C2:95 Authority key identifier: DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57 Certificate issuer: /CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057 Certificate serial: 019B4815B79DFF694265C2A0C58895F00337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft Manifest number: 07F6 Signing time: Mon 22 Dec 2025 22:02:21 +0000 Manifest this update: Mon 22 Dec 2025 22:02:21 +0000 Manifest next update: Tue 23 Dec 2025 22:02:21 +0000 Files and hashes: 1: 3tvumMupuOYloRR7s7VRl9LQoFc.crl (hash: sPlD09etQ5j229hve6t7iJqEmp7n2tn7MHBUoMk38Yc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:b7:9d:ff:69:42:65:c2:a0:c5:88:95:f0:03:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057 Validity Not Before: Dec 22 22:02:21 2025 GMT Not After : Dec 23 22:02:21 2025 GMT Subject: CN=710b4e1b7c9bfef1d0f866eb61cd9b5c3d29c295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:03:b4:81:3e:86:6a:cf:51:19:a6:df:3b:42: 26:4b:f4:c4:bc:de:67:44:81:60:a9:dd:4b:ab:45: d9:a6:11:6f:e4:eb:69:50:49:52:89:dd:b0:2b:b0: 81:1e:d5:29:de:45:5f:04:fc:2b:ce:16:2e:4b:78: be:af:d9:f5:70:36:5f:12:0a:ab:44:af:89:ea:d8: 20:fe:31:9d:d8:4a:a5:0b:29:2b:aa:c2:3f:1a:fe: 01:da:07:c7:54:d3:46:04:c8:aa:35:38:1a:c5:89: 70:53:0c:26:fb:13:7d:20:86:d3:1e:60:a0:c2:53: 2c:e9:ed:51:47:29:62:24:f0:e4:6b:b3:31:48:04: 7c:19:2f:e7:03:26:cd:c7:15:b4:23:c2:88:1b:1f: 44:2f:58:82:54:c3:2e:72:bf:68:67:b1:60:ca:30: d2:38:93:91:88:2f:70:c8:d6:5b:ca:fc:81:82:86: be:a8:87:17:ef:a9:ca:60:3b:d1:c5:3d:cd:ef:76: 7a:75:ac:94:f5:4e:94:6e:13:09:67:bc:73:83:9b: 29:3f:e6:85:e9:a6:da:c9:c8:d5:15:61:20:3b:1e: ce:7d:af:d5:a2:be:56:ce:b7:f2:ae:d3:e8:56:d9: 77:4f:a9:39:f6:0d:e1:a1:fc:ee:b4:18:28:53:d3: 1c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0B:4E:1B:7C:9B:FE:F1:D0:F8:66:EB:61:CD:9B:5C:3D:29:C2:95 X509v3 Authority Key Identifier: keyid:DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:bb:b2:5b:70:45:d5:66:fc:4a:65:d9:66:74:94:87:fe:b5: 44:ca:0a:2c:2f:30:51:4b:68:0b:19:bc:7c:5e:fd:ff:b1:ea: 8d:f5:fe:40:68:a3:96:e9:71:79:8f:dc:15:2a:b9:bc:34:fb: b6:de:8d:b7:5a:59:06:0f:59:25:f5:5c:1b:50:5e:33:fd:46: 2e:e1:16:16:d7:6c:1a:15:35:1b:40:ce:70:6d:d6:e3:c9:cd: 46:93:d9:7d:f4:09:16:9d:60:7b:64:db:6a:c8:a1:d4:48:8e: 2c:d0:90:21:c5:9b:28:3a:03:2c:7c:9d:a4:02:9c:72:f4:d8: be:73:e9:3f:5e:ea:5f:71:de:b0:ff:bb:39:26:20:fd:93:2d: 7d:94:cb:bc:2c:2d:37:ee:26:98:ed:b5:de:96:79:51:6d:44: 36:34:19:49:38:d9:6d:5c:2f:0d:c9:0d:3d:e2:f6:86:a8:0a: 3b:bb:36:58:36:2d:0d:fb:db:ad:f6:79:ab:17:c8:0a:f3:58: 35:a0:58:4e:6b:64:7f:ea:f4:9e:7a:c1:2f:6b:aa:c8:a6:18: 75:19:fa:a8:4a:34:62:ac:55:f6:88:7f:35:65:f3:f9:63:79: 5c:69:61:b1:ca:76:7d:20:66:18:fc:78:13:df:f0:88:46:74: 2f:5e:aa:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFbed/2lCZcKgxYiV8AM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGJlZTk4Y2JhOWI4ZTYyNWExMTQ3YmIzYjU1MTk3ZDJk MGEwNTcwHhcNMjUxMjIyMjIwMjIxWhcNMjUxMjIzMjIwMjIxWjAzMTEwLwYDVQQD Eyg3MTBiNGUxYjdjOWJmZWYxZDBmODY2ZWI2MWNkOWI1YzNkMjljMjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAO0gT6Gas9RGabfO0ImS/TEvN5n RIFgqd1Lq0XZphFv5OtpUElSid2wK7CBHtUp3kVfBPwrzhYuS3i+r9n1cDZfEgqr RK+J6tgg/jGd2EqlCykrqsI/Gv4B2gfHVNNGBMiqNTgaxYlwUwwm+xN9IIbTHmCg wlMs6e1RRyliJPDka7MxSAR8GS/nAybNxxW0I8KIGx9EL1iCVMMucr9oZ7FgyjDS OJORiC9wyNZbyvyBgoa+qIcX76nKYDvRxT3N73Z6dayU9U6UbhMJZ7xzg5spP+aF 6abaycjVFWEgOx7Ofa/Vor5WzrfyrtPoVtl3T6k59g3hofzutBgoU9MclwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHELTht8m/7x0Phm62HNm1w9KcKVMB8GA1UdIwQY MBaAFN7b7pjLqbjmJaEUe7O1UZfS0KBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZWY2NzgtNzg3MC00ZTA4LWFiMjUt MThmMGI4MGYyNTBkLzEvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZWY2NzgtNzg3MC00ZTA4LWFiMjUtMThmMGI4MGYyNTBk LzEvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAruyW3BF 1Wb8SmXZZnSUh/61RMoKLC8wUUtoCxm8fF79/7HqjfX+QGijlulxeY/cFSq5vDT7 tt6Nt1pZBg9ZJfVcG1BeM/1GLuEWFtdsGhU1G0DOcG3W48nNRpPZffQJFp1ge2Tb asih1EiOLNCQIcWbKDoDLHydpAKccvTYvnPpP17qX3HesP+7OSYg/ZMtfZTLvCwt N+4mmO213pZ5UW1ENjQZSTjZbVwvDckNPeL2hqgKO7s2WDYtDfvbrfZ5qxfICvNY NaBYTmtkf+r0nnrBL2uqyKYYdRn6qEo0YqxV9oh/NWXz+WN5XGlhscp2fSBmGPx4 E9/wiEZ0L16qpQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:46:42 2025 by rpki-client