This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json) Hash identifier: +cusSOn6GrIyHovgE7OilG71yZ/mNtuOjM8htVL27eE= Subject key identifier: 8C:84:8E:3C:95:CB:AE:BA:FD:95:72:F8:15:0F:36:C6:BD:DD:57:C6 Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96 Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196 Certificate serial: 019B39B40EE24A896F740AABDB34E942B235 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 03:01:00 +0000 Manifest this update: Sat 20 Dec 2025 03:01:00 +0000 Manifest next update: Sun 21 Dec 2025 03:01:00 +0000 Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: PZsNbn+XnC6kOzlrOmY4Ku+FqszwROAJStQPzmodm0M=) 2: h-YJMMunIS0_gIZ5p26lgKRQyKc.roa (hash: bR5opkzZodiPK85GQ+pJiSPCVteQ0JuW261tZcQfTgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:0e:e2:4a:89:6f:74:0a:ab:db:34:e9:42:b2:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196 Validity Not Before: Dec 20 03:01:00 2025 GMT Not After : Dec 21 03:01:00 2025 GMT Subject: CN=8c848e3c95cbaebafd9572f8150f36c6bddd57c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:c4:6d:7d:b4:b8:5c:0a:9e:f4:95:79:d2: 1a:a1:c9:ff:8a:d0:ed:ac:fb:25:a4:c3:a7:5f:49: db:95:75:a9:f3:b6:46:76:d7:8a:0c:01:80:d4:9d: ff:0e:0e:1b:53:02:a7:79:13:17:fc:16:85:e8:44: 62:e1:ac:6f:b1:5a:d1:ae:34:54:be:82:c6:6d:e2: 8a:4a:1a:6f:88:d9:2b:f1:1f:ed:d6:91:91:fb:73: cd:1d:47:02:1a:cf:82:03:a8:0c:e1:65:11:37:e8: e0:f9:52:b4:5d:db:be:06:7f:70:32:b6:f9:44:56: 2f:bd:36:22:e2:fe:0a:96:59:27:5d:68:3f:ac:bf: 2a:54:5f:13:a7:57:73:e3:1c:0a:0b:48:6a:d5:35: 8e:fd:a7:06:00:cd:34:1f:ec:9c:35:19:03:56:d9: b3:d8:6a:c4:7a:67:9b:f6:6a:06:6c:02:99:7d:3a: bd:57:97:88:f3:0c:18:e8:69:2b:71:2b:3f:a0:0f: 63:c4:10:ef:11:ae:96:16:2c:0e:41:ba:63:b1:86: 52:d9:95:4c:62:76:cf:43:91:d1:b1:a0:3c:4a:5c: 78:8a:ce:04:a5:53:31:0a:38:89:de:53:c5:b7:b1: 11:60:80:ed:c9:71:a6:fb:de:a0:b1:0c:cd:5b:88: 83:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:84:8E:3C:95:CB:AE:BA:FD:95:72:F8:15:0F:36:C6:BD:DD:57:C6 X509v3 Authority Key Identifier: keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7f:ee:bc:76:04:25:a2:8f:40:8b:7a:d7:e5:4a:c5:cf:13: 6e:06:5e:d7:a6:13:8c:e5:f2:1f:ce:1b:f2:ee:ec:a3:b7:60: af:54:d6:27:c5:db:f5:f9:e3:fb:3c:c1:fb:5d:4c:f6:66:3b: 32:1e:7f:39:41:ee:1e:03:ee:14:1c:7b:cd:db:1a:2e:9c:cf: c7:89:22:d9:c2:d4:b2:ec:fe:e3:31:54:dd:33:cf:f2:ba:63: e4:5e:f9:43:22:d6:ce:6a:74:7f:98:ee:56:8e:9a:40:99:87: a1:ad:80:bf:98:b8:fa:d8:b1:4e:5a:c2:a6:dd:40:52:16:35: 7d:d6:a2:a0:11:88:8f:ea:63:ab:86:4f:69:3d:a3:6b:c3:85: 0f:aa:62:b4:58:03:b0:81:c5:c9:88:ed:fd:b2:a3:c8:f8:0c: 89:66:17:c5:3a:17:84:85:e2:d2:b9:ad:96:84:8b:48:5b:15: e0:97:56:c5:6a:a5:5c:45:a8:04:3a:b6:07:f3:d3:30:05:98: 26:ff:8f:37:bf:d4:e4:45:81:ef:86:f5:d1:8f:48:1c:bb:b4: 51:fe:21:cb:60:9e:6a:ed:53:f2:55:2a:f3:81:b3:f8:06:ff: ed:31:28:2b:ae:df:b6:54:dc:82:99:02:b4:12:8b:e2:80:3f: aa:dd:2b:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tA7iSolvdAqr2zTpQrI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNmJhYTYwMTIzNmFiOWJlYTI5ZjgwN2E2NjkyMGVkNTY1 NmExOTYwHhcNMjUxMjIwMDMwMTAwWhcNMjUxMjIxMDMwMTAwWjAzMTEwLwYDVQQD Eyg4Yzg0OGUzYzk1Y2JhZWJhZmQ5NTcyZjgxNTBmMzZjNmJkZGQ1N2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyvEbX20uFwKnvSVedIaocn/itDt rPslpMOnX0nblXWp87ZGdteKDAGA1J3/Dg4bUwKneRMX/BaF6ERi4axvsVrRrjRU voLGbeKKShpviNkr8R/t1pGR+3PNHUcCGs+CA6gM4WURN+jg+VK0Xdu+Bn9wMrb5 RFYvvTYi4v4KllknXWg/rL8qVF8Tp1dz4xwKC0hq1TWO/acGAM00H+ycNRkDVtmz 2GrEemeb9moGbAKZfTq9V5eI8wwY6GkrcSs/oA9jxBDvEa6WFiwOQbpjsYZS2ZVM YnbPQ5HRsaA8Slx4is4EpVMxCjiJ3lPFt7ERYIDtyXGm+96gsQzNW4iDUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyEjjyVy666/ZVy+BUPNsa93VfGMB8GA1UdIwQY MBaAFNxrqmASNqub6in4B6ZpIO1WVqGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YmQyZTMtZjNjNS00OTU1LWI5YTEt MzRhMTIzN2YxNjcwLzEvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83YmQyZTMtZjNjNS00OTU1LWI5YTEtMzRhMTIzN2YxNjcw LzEvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANn/uvHYE JaKPQIt61+VKxc8TbgZe16YTjOXyH84b8u7so7dgr1TWJ8Xb9fnj+zzB+11M9mY7 Mh5/OUHuHgPuFBx7zdsaLpzPx4ki2cLUsuz+4zFU3TPP8rpj5F75QyLWzmp0f5ju Vo6aQJmHoa2Av5i4+tixTlrCpt1AUhY1fdaioBGIj+pjq4ZPaT2ja8OFD6pitFgD sIHFyYjt/bKjyPgMiWYXxToXhIXi0rmtloSLSFsV4JdWxWqlXEWoBDq2B/PTMAWY Jv+PN7/U5EWB74b10Y9IHLu0Uf4hy2Ceau1T8lUq84Gz+Ab/7TEoK67ftlTcgpkC tBKL4oA/qt0rFg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:47:58 2025 by rpki-client