This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json) Hash identifier: ruYHw/f7s/CeCpBk3zZzBmhlpvpdkC7tVp9pBPNz3Ao= Subject key identifier: 2D:C9:FD:13:2D:8F:7A:1E:DD:EC:2E:33:25:97:27:FF:0E:E8:6E:8E Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6 Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6 Certificate serial: 019B299BB806FA4B38842B3BE0A60DA6D1EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft Manifest number: 0649 Signing time: Wed 17 Dec 2025 00:00:29 +0000 Manifest this update: Wed 17 Dec 2025 00:00:29 +0000 Manifest next update: Thu 18 Dec 2025 00:00:29 +0000 Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: u10gnDN6XGfyEoMIy59MGElgQvEbdN9WvEOeUTl8Edw=) 2: Mvk_oqElVRdnhvvvd2d0ON2M6O0.roa (hash: h/FNSiffcYfhZT3VlgEkLi4vidisAmOMBIjfYdnqCDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:9b:b8:06:fa:4b:38:84:2b:3b:e0:a6:0d:a6:d1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6 Validity Not Before: Dec 17 00:00:29 2025 GMT Not After : Dec 18 00:00:29 2025 GMT Subject: CN=2dc9fd132d8f7a1eddec2e33259727ff0ee86e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:8f:d3:c9:46:87:10:02:9f:5d:d7:1e:51: 54:b7:63:db:c9:f3:66:96:b4:ef:a8:26:0b:0e:0d: ba:13:de:3d:8d:fe:86:fe:6d:83:42:22:ff:47:9a: f7:11:69:66:d7:c7:92:49:0e:14:d6:32:b8:fd:3d: df:e0:9b:be:d6:df:76:de:8e:a3:2f:04:6b:52:02: 7b:b1:00:1f:9f:43:07:a7:1a:30:95:f3:9b:21:10: 86:a4:db:3c:09:15:e8:09:24:a9:cf:09:10:a2:59: 7f:c8:16:e0:15:60:b0:10:0f:44:86:07:9c:24:00: a2:33:21:55:44:00:56:d0:12:ba:65:09:5e:f3:91: b7:b6:d5:64:5d:99:2f:c5:d5:d0:9e:48:52:48:75: e8:22:6d:9e:e6:17:1d:12:b4:f2:7f:ae:79:b3:f6: dc:f4:52:30:79:bc:c4:1a:83:fa:dd:24:1a:39:d0: c3:fa:75:8c:04:51:64:e9:c5:49:a1:ee:b7:f6:8e: 10:64:2a:d2:41:d4:b5:b7:70:9b:c4:e3:34:e6:16: 50:d8:75:e8:d8:cb:27:fe:82:c5:5c:e5:57:d1:a4: da:bf:b6:cd:5a:64:52:c9:21:62:07:7b:4e:50:3c: 9a:ad:aa:76:42:01:f6:20:3e:6f:8c:e8:97:9d:35: 0d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C9:FD:13:2D:8F:7A:1E:DD:EC:2E:33:25:97:27:FF:0E:E8:6E:8E X509v3 Authority Key Identifier: keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b2:db:e7:f3:25:40:45:e0:42:8e:ed:f2:50:45:00:74:26: 37:7d:5f:2c:00:c2:b7:01:9a:61:4d:4d:f6:8e:4e:3d:1c:79: 2a:3c:b9:fd:7d:b4:89:01:11:ee:6f:3e:7f:46:90:d5:ec:ed: cc:07:a1:3f:26:c4:c0:c7:bf:0b:3d:5f:80:48:6b:ff:68:07: f8:07:e2:e6:0e:40:be:a8:a0:2a:34:e2:3d:d3:29:06:23:36: 63:f2:8a:e0:e2:6f:53:e1:ff:cc:b8:6b:5a:81:1c:5e:40:fa: 4c:be:b8:98:0b:cc:92:7b:c5:66:88:0e:0f:1c:eb:75:8f:f8: 56:66:cb:58:f0:6a:96:c0:5a:ea:8d:44:7c:b9:1b:44:c9:5a: 56:3e:49:1f:3a:55:d5:35:91:b0:fc:43:0e:28:4e:4f:d3:00: b1:6d:18:1c:03:7d:f7:e1:ac:aa:aa:0c:71:eb:34:2a:02:02: 78:b9:5f:3e:d0:a2:10:31:58:3c:de:91:d6:9b:7a:21:3a:30: a3:07:7a:c8:00:8f:b5:ec:8c:8c:18:6d:7e:90:28:73:d2:99: d3:f3:b4:92:0e:e7:33:32:84:a9:dc:33:cd:31:82:a2:61:a5: d6:02:8e:b2:e9:98:1d:a7:d7:d2:df:26:7f:19:b5:7e:4c:0c: 84:a1:ce:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspm7gG+ks4hCs74KYNptHuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODJkMmM3ZWI1ZmE1NDNlMzJmMWVlZTE5Y2QzNWE1Njcz Y2ZhZTYwHhcNMjUxMjE3MDAwMDI5WhcNMjUxMjE4MDAwMDI5WjAzMTEwLwYDVQQD EygyZGM5ZmQxMzJkOGY3YTFlZGRlYzJlMzMyNTk3MjdmZjBlZTg2ZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0mP08lGhxACn13XHlFUt2PbyfNm lrTvqCYLDg26E949jf6G/m2DQiL/R5r3EWlm18eSSQ4U1jK4/T3f4Ju+1t923o6j LwRrUgJ7sQAfn0MHpxowlfObIRCGpNs8CRXoCSSpzwkQoll/yBbgFWCwEA9Ehgec JACiMyFVRABW0BK6ZQle85G3ttVkXZkvxdXQnkhSSHXoIm2e5hcdErTyf655s/bc 9FIwebzEGoP63SQaOdDD+nWMBFFk6cVJoe639o4QZCrSQdS1t3CbxOM05hZQ2HXo 2Msn/oLFXOVX0aTav7bNWmRSySFiB3tOUDyarap2QgH2ID5vjOiXnTUNfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3J/RMtj3oe3ewuMyWXJ/8O6G6OMB8GA1UdIwQY MBaAFNyC0sfrX6VD4y8e7hnNNaVnPPrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0lMU3gtdGZwVVBqTHg3dUdjMDFwV2M4LXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84NDJiNWItOTg1Yy00NGQ3LTk1OTgt MDM5ZGVhNTA2OTRlLzEvM0lMU3gtdGZwVVBqTHg3dUdjMDFwV2M4LXVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84NDJiNWItOTg1Yy00NGQ3LTk1OTgtMDM5ZGVhNTA2OTRl LzEvM0lMU3gtdGZwVVBqTHg3dUdjMDFwV2M4LXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbLb5/Ml QEXgQo7t8lBFAHQmN31fLADCtwGaYU1N9o5OPRx5Kjy5/X20iQER7m8+f0aQ1ezt zAehPybEwMe/Cz1fgEhr/2gH+Afi5g5AvqigKjTiPdMpBiM2Y/KK4OJvU+H/zLhr WoEcXkD6TL64mAvMknvFZogODxzrdY/4VmbLWPBqlsBa6o1EfLkbRMlaVj5JHzpV 1TWRsPxDDihOT9MAsW0YHAN99+GsqqoMces0KgICeLlfPtCiEDFYPN6R1pt6ITow owd6yACPteyMjBhtfpAoc9KZ0/O0kg7nMzKEqdwzzTGComGl1gKOsumYHafX0t8m fxm1fkwMhKHOkA== -----END CERTIFICATE-----Generated at Wed Dec 17 02:32:35 2025 by rpki-client