This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft File: 3-ytVuquEjX6eI5OrTkiwpbig6U.mft (raw, json) Hash identifier: dNG2QZLygMRjO6lE92beXSAAqUwnw3XgZiweD4nVOzI= Subject key identifier: 8E:BA:61:ED:3E:CA:C8:AB:09:79:F4:4C:7F:64:0F:5D:26:D3:5E:8B Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5 Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5 Certificate serial: 019B4280009E0C26E218A00D915F06D98A58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft Manifest number: 02C4 Signing time: Sun 21 Dec 2025 20:00:43 +0000 Manifest this update: Sun 21 Dec 2025 20:00:43 +0000 Manifest next update: Mon 22 Dec 2025 20:00:43 +0000 Files and hashes: 1: 3-ytVuquEjX6eI5OrTkiwpbig6U.crl (hash: ti8nLLqND7apPl4WeCBngwPFFQp8esW4WGbKoNVizWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:00:9e:0c:26:e2:18:a0:0d:91:5f:06:d9:8a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5 Validity Not Before: Dec 21 20:00:43 2025 GMT Not After : Dec 22 20:00:43 2025 GMT Subject: CN=8eba61ed3ecac8ab0979f44c7f640f5d26d35e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5a:9f:76:aa:10:ae:ce:39:f5:b2:8c:61:0a: d3:23:ee:90:27:33:f5:01:9c:0f:d5:df:28:f1:b8: eb:51:7b:1d:a8:36:95:cb:eb:9b:26:ec:61:39:8d: 92:0e:98:1c:cd:b6:ca:c0:3f:31:84:e0:75:b2:28: 47:20:34:b6:a6:b5:b4:e4:65:af:65:77:d4:bd:15: 0f:c2:ca:0f:a9:85:ad:f0:2e:60:a8:90:47:6c:3b: ec:4f:17:4a:51:96:7a:82:d1:b2:14:c0:b4:fb:f7: c6:0c:f0:38:96:69:51:87:33:fb:c9:81:6a:38:a1: 68:df:20:b7:86:98:03:25:b2:e3:bb:19:38:a4:d8: 1b:69:e2:5b:45:7e:26:20:cb:dd:be:c9:dd:89:10: 5e:d4:6a:f4:d3:de:f5:6a:56:bb:3c:46:88:85:a9: bd:8d:1d:ef:e9:e0:9d:a1:12:bb:26:5a:8e:eb:33: be:68:e4:0e:7d:bb:bf:da:0f:3f:99:e8:a6:e4:46: af:be:e0:88:a8:78:b9:d0:e5:66:4e:e7:13:8c:31: d6:2e:f8:8d:ed:c4:b3:e3:6c:a7:cb:b9:6d:8d:27: 7d:1b:db:9b:09:86:f0:ef:d9:c3:5c:5a:c5:86:6c: ef:c4:bd:bf:6a:0a:82:36:22:bd:9d:96:9b:08:03: 4c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BA:61:ED:3E:CA:C8:AB:09:79:F4:4C:7F:64:0F:5D:26:D3:5E:8B X509v3 Authority Key Identifier: keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:08:1a:2f:7b:ae:f4:d4:63:71:c8:3d:2f:ea:c4:3c:11:54: 28:38:1b:19:c5:ae:5f:b1:31:6e:15:6d:f0:b5:d2:dc:b6:f8: de:d6:ea:de:be:41:eb:ef:f1:2f:bf:56:53:fe:e8:2d:6d:1a: c9:5d:81:a0:33:47:3a:c4:56:97:5d:42:b7:15:8f:50:17:d9: be:63:42:aa:87:55:ee:46:f4:22:7c:23:19:8f:91:21:50:33: d6:99:b4:8a:ad:a0:30:55:3e:25:80:55:11:49:8a:a8:2d:48: 71:0e:e7:6c:32:d6:3a:dd:3b:ba:5a:31:a3:74:fc:7a:ac:f3: 5a:d8:ed:2d:e3:16:7e:19:88:46:94:58:69:b5:e9:36:a5:8e: bf:68:b3:b5:b0:03:34:c6:d8:e3:f4:91:d4:2e:d6:e6:90:86: ff:92:b5:87:23:bb:da:03:ae:49:66:41:26:f5:c3:4e:ba:a6: 2e:3b:76:f8:b0:77:da:43:6e:75:8c:94:f7:fb:76:70:fd:bf: 73:fd:98:69:b2:bd:fb:ed:d2:f2:04:31:b0:01:0e:22:0e:cb: 40:8e:f9:68:b4:94:e2:48:3f:c5:94:81:d9:58:f9:d3:c8:f8: d1:bd:80:64:5a:b8:91:69:56:be:7c:f7:60:12:cb:db:de:88: 9d:29:3f:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgACeDCbiGKANkV8G2YpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZWNhZDU2ZWFhZTEyMzVmYTc4OGU0ZWFkMzkyMmMyOTZl MjgzYTUwHhcNMjUxMjIxMjAwMDQzWhcNMjUxMjIyMjAwMDQzWjAzMTEwLwYDVQQD Eyg4ZWJhNjFlZDNlY2FjOGFiMDk3OWY0NGM3ZjY0MGY1ZDI2ZDM1ZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFqfdqoQrs459bKMYQrTI+6QJzP1 AZwP1d8o8bjrUXsdqDaVy+ubJuxhOY2SDpgczbbKwD8xhOB1sihHIDS2prW05GWv ZXfUvRUPwsoPqYWt8C5gqJBHbDvsTxdKUZZ6gtGyFMC0+/fGDPA4lmlRhzP7yYFq OKFo3yC3hpgDJbLjuxk4pNgbaeJbRX4mIMvdvsndiRBe1Gr00971ala7PEaIham9 jR3v6eCdoRK7JlqO6zO+aOQOfbu/2g8/meim5EavvuCIqHi50OVmTucTjDHWLviN 7cSz42yny7ltjSd9G9ubCYbw79nDXFrFhmzvxL2/agqCNiK9nZabCANMaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI66Ye0+ysirCXn0TH9kD10m016LMB8GA1UdIwQY MBaAFN/srVbqrhI1+niOTq05IsKW4oOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMy15dFZ1cXVFalg2ZUk1T3JUa2l3cGJpZzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kNjcwODctNzY1Yi00NmViLTgwOGMt Njc3YmFiNjEzYWZmLzEvMy15dFZ1cXVFalg2ZUk1T3JUa2l3cGJpZzZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9kNjcwODctNzY1Yi00NmViLTgwOGMtNjc3YmFiNjEzYWZm LzEvMy15dFZ1cXVFalg2ZUk1T3JUa2l3cGJpZzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQgaL3uu 9NRjccg9L+rEPBFUKDgbGcWuX7ExbhVt8LXS3Lb43tbq3r5B6+/xL79WU/7oLW0a yV2BoDNHOsRWl11CtxWPUBfZvmNCqodV7kb0InwjGY+RIVAz1pm0iq2gMFU+JYBV EUmKqC1IcQ7nbDLWOt07uloxo3T8eqzzWtjtLeMWfhmIRpRYabXpNqWOv2iztbAD NMbY4/SR1C7W5pCG/5K1hyO72gOuSWZBJvXDTrqmLjt2+LB32kNudYyU9/t2cP2/ c/2YabK9++3S8gQxsAEOIg7LQI75aLSU4kg/xZSB2Vj508j40b2AZFq4kWlWvnz3 YBLL296InSk/ZA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:17:51 2025 by rpki-client