This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft File: 3GIdzcetC-Mx18mkR_KhZOQupP0.mft (raw, json) Hash identifier: ZXlbDQwu2P97kdlGnwN/yMlK1u0yYryp/XkPThKJPoY= Subject key identifier: 8E:A6:BB:D7:13:7E:F7:FA:35:29:0D:F8:4C:D8:B4:E2:DC:D8:E5:71 Authority key identifier: DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD Certificate issuer: /CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd Certificate serial: 019B3456E0717E688053566FFC085E3473C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft Manifest number: 09 Signing time: Fri 19 Dec 2025 02:01:07 +0000 Manifest this update: Fri 19 Dec 2025 02:01:07 +0000 Manifest next update: Sat 20 Dec 2025 02:01:07 +0000 Files and hashes: 1: 3GIdzcetC-Mx18mkR_KhZOQupP0.crl (hash: HhxrA/jaEbKd6V1zqqGi0j2aCez3b0Viroo3irUXgWY=) 2: z9zBZWxKEctyUTKIm_8RlJkrC_k.roa (hash: IJThR3o0JV974+Yl2uq1VkI1yGHcJoO2uQGyrnQksfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:e0:71:7e:68:80:53:56:6f:fc:08:5e:34:73:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd Validity Not Before: Dec 19 02:01:07 2025 GMT Not After : Dec 20 02:01:07 2025 GMT Subject: CN=8ea6bbd7137ef7fa35290df84cd8b4e2dcd8e571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:3d:4d:e9:7a:f9:08:a5:0e:43:cc:48:c7: 18:12:a8:3b:6b:b2:1d:68:95:75:a9:df:89:ef:3a: 34:9b:63:5c:df:77:65:4f:88:d0:c9:40:d3:ab:ab: 36:50:61:c7:58:5e:70:d9:d5:be:b2:6b:a9:3b:1f: 95:53:6d:4e:86:ae:d3:85:2c:cd:2e:9c:9e:44:78: 26:6c:d9:3c:73:e0:19:16:2c:2d:6e:48:c0:90:85: 5c:94:c9:5a:cc:15:17:23:e6:3c:d1:a0:25:1e:59: 95:79:34:3a:2c:73:d7:f3:ec:9e:9a:b7:ac:29:0f: 62:53:58:e8:be:1e:ff:7f:49:00:86:a7:de:f6:72: 33:06:2e:3c:be:67:8e:a0:ab:62:09:28:d7:5a:33: fb:2b:7d:a5:a7:21:05:ac:db:50:f6:5a:d1:13:51: e7:eb:c7:a5:ec:66:44:1b:60:4b:04:e4:c1:09:a8: cc:82:b2:57:85:c0:46:fb:a3:2d:d3:ab:cf:e6:2d: a9:54:ba:54:44:d2:47:c7:d8:f0:b2:8a:95:99:de: cf:4f:77:b9:2c:dd:e9:f9:d5:eb:6f:0c:03:49:43: 8f:72:ca:af:4e:cc:c6:73:ee:27:db:7d:0a:26:e0: 38:8c:aa:46:ef:11:a1:0c:7d:de:df:b7:ea:d4:35: 15:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A6:BB:D7:13:7E:F7:FA:35:29:0D:F8:4C:D8:B4:E2:DC:D8:E5:71 X509v3 Authority Key Identifier: keyid:DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:12:98:fd:3a:83:0f:55:ab:15:fb:f5:69:3c:58:cf:72:93: 24:8f:26:27:ae:9a:11:25:f2:a4:aa:4c:eb:eb:6b:2f:7d:82: 49:22:5b:c6:bf:1e:d5:9b:e8:c9:27:07:d6:d5:39:b0:7e:d2: 1f:5f:84:2d:4e:63:b8:99:e7:f1:e0:24:2a:55:51:b3:50:b5: 8d:d6:84:06:28:80:59:1f:94:88:97:6b:ab:3f:99:02:b8:ca: 06:c0:f4:7f:cb:f4:9f:fd:a4:5e:f3:a9:cf:3f:ab:a8:bd:3d: 80:f6:79:50:fa:75:8e:a8:f8:ae:cf:e2:23:11:3f:7f:09:ec: cd:53:0e:3f:4e:96:6b:2e:90:f5:37:92:3a:cc:b1:a8:00:c9: 6d:1a:8c:9e:17:68:bc:1e:7e:90:c0:ab:cb:19:37:9c:2c:6f: e7:8d:ff:33:99:52:70:e1:6a:c9:99:0e:e8:6c:b0:bd:8d:26: d7:a4:00:a5:0f:92:ef:28:ca:b9:86:3c:b9:c2:8b:95:f4:dc: f4:83:ba:6f:2f:bc:fb:0d:1e:9d:2f:9d:c5:b8:d6:0c:b8:c8: ac:a0:7d:a2:cf:f6:d2:c0:10:68:a5:66:3e:a5:ad:e4:cf:f7: b0:fb:7d:12:f2:c5:c6:fe:aa:a8:dc:44:c4:b1:54:32:85:e0: e0:98:c5:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VuBxfmiAU1Zv/AheNHPBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNjIxZGNkYzdhZDBiZTMzMWQ3YzlhNDQ3ZjJhMTY0ZTQy ZWE0ZmQwHhcNMjUxMjE5MDIwMTA3WhcNMjUxMjIwMDIwMTA3WjAzMTEwLwYDVQQD Eyg4ZWE2YmJkNzEzN2VmN2ZhMzUyOTBkZjg0Y2Q4YjRlMmRjZDhlNTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI49Tel6+QilDkPMSMcYEqg7a7Id aJV1qd+J7zo0m2Nc33dlT4jQyUDTq6s2UGHHWF5w2dW+smupOx+VU21Ohq7ThSzN LpyeRHgmbNk8c+AZFiwtbkjAkIVclMlazBUXI+Y80aAlHlmVeTQ6LHPX8+yemres KQ9iU1jovh7/f0kAhqfe9nIzBi48vmeOoKtiCSjXWjP7K32lpyEFrNtQ9lrRE1Hn 68el7GZEG2BLBOTBCajMgrJXhcBG+6Mt06vP5i2pVLpURNJHx9jwsoqVmd7PT3e5 LN3p+dXrbwwDSUOPcsqvTszGc+4n230KJuA4jKpG7xGhDH3e37fq1DUVmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6mu9cTfvf6NSkN+EzYtOLc2OVxMB8GA1UdIwQY MBaAFNxiHc3HrQvjMdfJpEfyoWTkLqT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0dJZHpjZXRDLU14MThta1JfS2haT1F1cFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xMjAwODQtYzg4Ni00N2NlLTkwNDAt OTYyMWIyMDg4YzJkLzEvM0dJZHpjZXRDLU14MThta1JfS2haT1F1cFAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8xMjAwODQtYzg4Ni00N2NlLTkwNDAtOTYyMWIyMDg4YzJk LzEvM0dJZHpjZXRDLU14MThta1JfS2haT1F1cFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABKY/TqD D1WrFfv1aTxYz3KTJI8mJ66aESXypKpM6+trL32CSSJbxr8e1ZvoyScH1tU5sH7S H1+ELU5juJnn8eAkKlVRs1C1jdaEBiiAWR+UiJdrqz+ZArjKBsD0f8v0n/2kXvOp zz+rqL09gPZ5UPp1jqj4rs/iIxE/fwnszVMOP06Way6Q9TeSOsyxqADJbRqMnhdo vB5+kMCryxk3nCxv543/M5lScOFqyZkO6GywvY0m16QApQ+S7yjKuYY8ucKLlfTc 9IO6by+8+w0enS+dxbjWDLjIrKB9os/20sAQaKVmPqWt5M/3sPt9EvLFxv6qqNxE xLFUMoXg4JjFKA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:02:12 2025 by rpki-client