This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft File: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json) Hash identifier: 2Dg5TLHlXQQJrlLJ60TAzPJ6rWGq1kDkqVuWPKF66jg= Subject key identifier: 20:12:A7:92:10:98:4C:22:2A:40:5B:8F:D7:81:7F:06:A3:AB:D4:53 Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19 Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19 Certificate serial: 019B300BD8B95A0C5EF6B560B09D51F34753 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft Manifest number: 0DDD Signing time: Thu 18 Dec 2025 06:00:41 +0000 Manifest this update: Thu 18 Dec 2025 06:00:41 +0000 Manifest next update: Fri 19 Dec 2025 06:00:41 +0000 Files and hashes: 1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: IfoZ4LT+vihNRZHavn4H3S80UG+CMOkaoXsu5KWrmZQ=) 2: bJQvsBvbQPoYZP2_LHbwvNkWsqI.roa (hash: 6bSavq+Amxtx/G0AW8vYM/flHBEJUHj3DU6R3v4xOug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:d8:b9:5a:0c:5e:f6:b5:60:b0:9d:51:f3:47:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19 Validity Not Before: Dec 18 06:00:41 2025 GMT Not After : Dec 19 06:00:41 2025 GMT Subject: CN=2012a79210984c222a405b8fd7817f06a3abd453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a5:df:eb:47:4a:9a:7d:b6:9e:e7:02:f4:15: f9:95:c2:60:b1:a2:4f:a0:b7:c0:5b:3c:f0:48:85: a8:cf:b4:2a:2d:80:54:b6:30:99:0f:de:06:b9:82: 8b:c8:7c:a3:6a:a4:a3:48:91:0c:35:a6:7b:13:90: 5a:88:94:d8:7b:b6:7c:72:dd:03:c3:b6:d7:23:5d: f5:46:ff:c7:13:79:4d:9f:fe:a9:77:31:21:21:60: 6b:53:a1:93:1c:81:e4:7e:d8:fd:98:d5:9b:60:a1: 3e:d5:5e:44:07:59:4d:cd:11:58:2c:f2:a4:13:54: ae:a1:ad:91:d2:0e:f1:7e:8f:58:84:08:9c:0b:17: 1e:04:ef:e1:9e:4c:08:fd:ba:3f:c1:0b:31:1a:53: d8:da:c7:43:7b:31:d1:10:f8:52:0c:c3:4b:01:5e: 15:b2:a4:1b:ef:fc:e2:e7:a0:27:89:49:0e:2e:cb: a6:75:fb:6d:91:e2:c3:6c:27:1b:2e:d5:72:55:95: 1e:0c:10:50:09:a2:8b:71:58:2b:ab:b3:2d:16:63: 0f:c1:36:08:3a:51:d4:18:72:e8:27:b1:9d:cd:8c: 5b:0d:36:a6:18:fe:7b:db:63:0c:ec:47:84:7d:b6: 29:ab:1a:b7:61:9a:90:53:8c:91:30:6f:3c:7a:9f: eb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:12:A7:92:10:98:4C:22:2A:40:5B:8F:D7:81:7F:06:A3:AB:D4:53 X509v3 Authority Key Identifier: keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:9d:0b:c2:1b:26:3e:3c:18:03:85:4c:cb:16:04:9e:b9:dd: cf:57:c8:86:98:7e:ab:5e:31:36:20:8b:36:ce:99:bb:8d:c6: 7e:82:73:9f:9d:e7:5c:22:2d:45:ca:bf:d5:03:59:a7:a2:9b: 3c:45:63:f8:60:a6:4d:d6:82:64:c0:89:ee:5c:4c:ba:c6:be: ba:6a:81:ff:96:b4:a8:67:9c:46:39:c6:98:c6:ae:73:8a:16: 3c:0b:b5:43:d5:3c:6c:13:12:63:8d:55:e6:72:e2:b9:98:47: 21:97:a4:b8:81:60:7d:41:5b:fd:72:87:4d:e2:63:ab:d7:ec: 8e:4f:21:0f:39:aa:dd:59:7b:3c:b8:89:d6:db:03:e3:9c:05: 38:86:29:18:64:86:b7:8d:2f:89:f3:cc:1a:93:36:29:af:a7: 6e:88:d0:cf:7f:85:04:58:2d:4c:ad:79:f0:1e:dc:29:27:a6: 7f:d5:fa:be:a1:80:36:38:b3:1f:c8:9a:58:ed:01:70:8e:a9: 6d:8d:cb:be:0a:9e:33:6f:7e:7e:a5:74:27:f9:ad:7e:d2:e1: b5:15:3d:b5:20:a9:e8:8c:85:5a:95:1d:05:85:23:b0:ee:91: 75:5b:e1:8a:dd:a1:01:56:46:6a:82:7f:05:89:70:75:e3:77: ac:e9:51:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC9i5Wgxe9rVgsJ1R80dTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZmE1NTI2MDFjNDc3YzUyYmZjZTRhODhkYmFiZTFiN2Nk NzJlMTkwHhcNMjUxMjE4MDYwMDQxWhcNMjUxMjE5MDYwMDQxWjAzMTEwLwYDVQQD EygyMDEyYTc5MjEwOTg0YzIyMmE0MDViOGZkNzgxN2YwNmEzYWJkNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaXf60dKmn22nucC9BX5lcJgsaJP oLfAWzzwSIWoz7QqLYBUtjCZD94GuYKLyHyjaqSjSJEMNaZ7E5BaiJTYe7Z8ct0D w7bXI131Rv/HE3lNn/6pdzEhIWBrU6GTHIHkftj9mNWbYKE+1V5EB1lNzRFYLPKk E1Suoa2R0g7xfo9YhAicCxceBO/hnkwI/bo/wQsxGlPY2sdDezHREPhSDMNLAV4V sqQb7/zi56AniUkOLsumdfttkeLDbCcbLtVyVZUeDBBQCaKLcVgrq7MtFmMPwTYI OlHUGHLoJ7GdzYxbDTamGP5722MM7EeEfbYpqxq3YZqQU4yRMG88ep/reQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCASp5IQmEwiKkBbj9eBfwajq9RTMB8GA1UdIwQY MBaAFNz6VSYBxHfFK/zkqI26vht81y4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NWU4YzUtY2JkMC00MWQ2LWEwYmQt NDdjNjNjZGZmZDA4LzEvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83NWU4YzUtY2JkMC00MWQ2LWEwYmQtNDdjNjNjZGZmZDA4 LzEvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJ0Lwhsm PjwYA4VMyxYEnrndz1fIhph+q14xNiCLNs6Zu43GfoJzn53nXCItRcq/1QNZp6Kb PEVj+GCmTdaCZMCJ7lxMusa+umqB/5a0qGecRjnGmMauc4oWPAu1Q9U8bBMSY41V 5nLiuZhHIZekuIFgfUFb/XKHTeJjq9fsjk8hDzmq3Vl7PLiJ1tsD45wFOIYpGGSG t40vifPMGpM2Ka+nbojQz3+FBFgtTK158B7cKSemf9X6vqGANjizH8iaWO0BcI6p bY3LvgqeM29+fqV0J/mtftLhtRU9tSCp6IyFWpUdBYUjsO6RdVvhit2hAVZGaoJ/ BYlwdeN3rOlRAg== -----END CERTIFICATE-----Generated at Thu Dec 18 08:00:52 2025 by rpki-client