This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json) Hash identifier: ns83Rl3m3OoVJYhJtsgTUH0GB21O8mRlcHJ8FqqTsQQ= Subject key identifier: 92:96:78:D4:00:20:E9:C0:E3:30:97:A6:A1:99:3F:5E:81:B4:A2:DE Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52 Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52 Certificate serial: 019B405C098CCA97F47316820F6C967371F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 10:02:12 +0000 Manifest this update: Sun 21 Dec 2025 10:02:12 +0000 Manifest next update: Mon 22 Dec 2025 10:02:12 +0000 Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: Z2hlm4hejCyQYJiR+todotedozego+ADuThT2Teu1oA=) 2: O3I8fzz4GA8viyeptOfjUJ2mnRw.roa (hash: MhSpfjBUjJxXqy4aU0rHbneKVULz0h6JWSZvHTRBN24=) 3: ovS3rx1XoRtGLlvdJ72CyzvNZcw.roa (hash: lov3tLPiy71ecc5+P9JXxH2Fu9PCJbxZNtxQg4EVWM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:09:8c:ca:97:f4:73:16:82:0f:6c:96:73:71:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52 Validity Not Before: Dec 21 10:02:12 2025 GMT Not After : Dec 22 10:02:12 2025 GMT Subject: CN=929678d40020e9c0e33097a6a1993f5e81b4a2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e3:a3:c6:ef:8e:45:e5:54:9a:57:50:3a:37: 0a:c2:d8:8a:ad:f2:73:ad:e6:7f:64:d3:1c:96:5d: 16:c2:a1:55:c6:21:55:83:4d:9e:54:31:a8:a2:61: ca:0b:ac:78:62:cc:90:e1:84:56:6a:7b:64:52:6a: 22:90:6a:0f:0a:8f:71:a8:45:05:5c:c5:4a:0e:b4: e5:55:6a:4e:8f:9f:26:63:35:f8:63:7b:bd:89:2c: cc:f5:99:b2:0b:08:65:70:55:b0:08:1c:2a:f1:94: c5:c8:32:21:21:ff:96:23:1c:a5:f1:5c:7b:a7:d4: 4a:e8:7f:a1:18:e4:cb:f6:8e:17:dd:3d:24:f7:9a: 04:50:e0:23:64:9c:d8:d0:f2:0f:13:fe:db:0c:7b: 9f:83:67:cf:77:b8:6f:02:f5:d4:6d:cc:95:85:ec: c7:d2:9f:fb:e6:1e:10:20:a4:3c:a6:de:35:56:32: 3d:47:db:48:d6:59:18:65:e1:af:c2:e6:43:0f:da: ab:3f:f3:fd:40:9a:77:b1:a2:d4:e1:51:13:e8:3c: a9:d1:49:9b:b1:a7:45:80:f5:1f:38:2c:c2:a6:9e: 47:ae:79:1c:91:90:17:90:f3:ba:08:b9:d1:ba:89: 55:34:d0:a1:24:52:04:90:9d:23:be:1e:02:dc:17: fd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:96:78:D4:00:20:E9:C0:E3:30:97:A6:A1:99:3F:5E:81:B4:A2:DE X509v3 Authority Key Identifier: keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:4c:67:1c:bf:6d:1c:2a:16:d3:5f:97:26:0f:2d:4f:77:c2: d1:82:47:22:1c:a9:a6:06:7b:f8:af:98:0e:dc:10:58:6f:32: 87:f1:c3:08:5a:10:ef:82:27:34:32:10:8a:85:13:80:c9:be: ab:c0:52:e6:3e:12:3d:2e:70:a5:22:16:cc:52:4c:7b:8c:34: b0:29:85:5e:e0:eb:cd:30:3a:ae:94:ba:9e:6b:cc:e3:e0:02: cc:a0:d9:86:0a:da:38:22:bd:0a:03:ee:ef:a1:b2:b4:31:bb: ba:92:ac:7f:00:29:89:06:d3:bd:4a:0f:18:df:14:b3:61:00: a2:49:d5:2a:4e:c2:75:8f:d6:2f:4e:7f:bf:14:3b:b5:57:71: 44:8a:09:81:f4:ac:c1:82:a8:78:e9:fe:f0:b3:d9:c7:68:11: 83:92:d5:25:5d:dc:03:fb:e6:5f:61:1f:44:36:47:bc:09:f2: c7:b9:be:ab:9f:5d:4b:ec:03:b8:17:bb:04:39:37:ac:05:05: 45:c4:1b:d6:6d:bf:de:28:b6:20:fa:68:25:f1:35:1b:11:e3: a7:7c:77:72:e0:9f:8b:5f:7f:08:f9:2d:89:91:37:ea:1c:5a: c5:6b:15:38:b5:37:99:a7:9d:9a:cf:ae:e5:d8:48:30:5d:31: d1:3d:4f:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXAmMypf0cxaCD2yWc3H0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZGNiMDJiNjFlM2ExNWVhYzM3M2I5OTJlMGUxYTY1NDVm NjFlNTIwHhcNMjUxMjIxMTAwMjEyWhcNMjUxMjIyMTAwMjEyWjAzMTEwLwYDVQQD Eyg5Mjk2NzhkNDAwMjBlOWMwZTMzMDk3YTZhMTk5M2Y1ZTgxYjRhMmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+Ojxu+OReVUmldQOjcKwtiKrfJz reZ/ZNMcll0WwqFVxiFVg02eVDGoomHKC6x4YsyQ4YRWantkUmoikGoPCo9xqEUF XMVKDrTlVWpOj58mYzX4Y3u9iSzM9ZmyCwhlcFWwCBwq8ZTFyDIhIf+WIxyl8Vx7 p9RK6H+hGOTL9o4X3T0k95oEUOAjZJzY0PIPE/7bDHufg2fPd7hvAvXUbcyVhezH 0p/75h4QIKQ8pt41VjI9R9tI1lkYZeGvwuZDD9qrP/P9QJp3saLU4VET6Dyp0Umb sadFgPUfOCzCpp5HrnkckZAXkPO6CLnRuolVNNChJFIEkJ0jvh4C3Bf9NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKWeNQAIOnA4zCXpqGZP16BtKLeMB8GA1UdIwQY MBaAFNzcsCth46FerDc7mS4OGmVF9h5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAt NjY3NTg0Nzk4NjNlLzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAtNjY3NTg0Nzk4NjNl LzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdExnHL9t HCoW01+XJg8tT3fC0YJHIhyppgZ7+K+YDtwQWG8yh/HDCFoQ74InNDIQioUTgMm+ q8BS5j4SPS5wpSIWzFJMe4w0sCmFXuDrzTA6rpS6nmvM4+ACzKDZhgraOCK9CgPu 76GytDG7upKsfwApiQbTvUoPGN8Us2EAoknVKk7CdY/WL05/vxQ7tVdxRIoJgfSs wYKoeOn+8LPZx2gRg5LVJV3cA/vmX2EfRDZHvAnyx7m+q59dS+wDuBe7BDk3rAUF RcQb1m2/3ii2IPpoJfE1GxHjp3x3cuCfi19/CPktiZE36hxaxWsVOLU3maedms+u 5dhIMF0x0T1P6A== -----END CERTIFICATE-----Generated at Sun Dec 21 12:06:02 2025 by rpki-client