This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json) Hash identifier: xf0I1aSHwgaKjg1FwqvghTB24ndTcp8Fk6Zrn/hLT38= Subject key identifier: 45:0D:04:04:DF:4F:A9:90:CD:92:11:C6:A7:FE:AF:EB:65:56:62:26 Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6 Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6 Certificate serial: 019AF68A4B438589B5D2507BF37F691DFE35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft Manifest number: 0E72 Signing time: Sun 07 Dec 2025 02:00:49 +0000 Manifest this update: Sun 07 Dec 2025 02:00:49 +0000 Manifest next update: Mon 08 Dec 2025 02:00:49 +0000 Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: 2PU+u0JfbfcOVROcgFQJHPWvemKflBXA+brUcW+9jdk=) 2: vmqKHuLzrPkqklGr2oHlX4A5H1s.roa (hash: HWx6FXZlLIKlHVfqDThyZuNv2Ccv+hNVkaueWiNq1XE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:4b:43:85:89:b5:d2:50:7b:f3:7f:69:1d:fe:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6 Validity Not Before: Dec 7 02:00:49 2025 GMT Not After : Dec 8 02:00:49 2025 GMT Subject: CN=450d0404df4fa990cd9211c6a7feafeb65566226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:33:97:b6:dd:c8:49:ee:c7:8c:2f:50:65:b9: 04:1d:dc:91:94:a2:e2:5a:c9:09:83:14:a9:44:8d: f4:31:9f:53:0b:67:de:bb:43:d8:25:8d:2a:b7:96: fb:77:57:ec:a5:74:3f:cb:a4:8c:da:41:49:ee:e0: 73:6c:db:9f:fa:a7:c6:af:c9:50:0a:ba:68:72:45: 52:16:29:50:93:d6:da:61:3d:96:1e:cd:bd:1b:f3: 02:12:1b:dd:6b:25:6c:b4:c6:e0:31:06:82:ce:a6: 74:fe:9a:e0:16:d5:22:a4:30:c1:95:7a:e6:df:24: 5f:16:d0:94:8e:f7:49:5e:cc:67:d6:6b:6f:f1:17: 0a:23:0b:85:63:46:cf:b8:25:1d:28:d1:db:32:cf: 79:ca:dc:63:99:78:91:81:d4:24:19:c5:47:55:eb: 05:db:b7:d9:02:2c:a6:98:0e:8a:88:f1:f6:5d:b5: 71:26:45:78:f4:c9:5f:8e:85:c9:e2:19:09:dc:fa: 58:98:00:a7:63:33:42:31:6b:79:27:85:59:76:a4: 9d:41:21:b1:69:25:cf:b0:f2:c1:ca:dc:ab:73:5f: 9c:e3:b4:29:01:f6:2f:c3:51:10:fe:ad:75:91:5a: 3a:d8:87:a3:a0:30:4e:79:6f:c6:f5:cc:4d:6e:5a: c1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0D:04:04:DF:4F:A9:90:CD:92:11:C6:A7:FE:AF:EB:65:56:62:26 X509v3 Authority Key Identifier: keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:dd:61:34:3e:df:14:98:10:bd:05:3a:c9:7d:9a:66:cb:9b: 0c:17:c2:c1:ae:91:9e:6b:a4:d3:fe:fa:5a:2c:51:c8:3e:f4: 6c:20:65:62:b1:19:16:54:25:15:cd:44:7d:e4:3c:63:d3:d8: 82:f1:93:32:a6:c7:3a:8f:ba:4e:eb:61:73:ff:0d:75:ab:6b: d3:a7:d0:39:2b:ea:fa:b3:bf:e6:f3:76:ac:58:2e:19:4d:f4: 3d:3a:39:92:e4:fd:6d:26:0e:23:9c:06:67:a9:f2:bd:37:c9: 17:23:b9:b4:8a:12:ca:82:f1:ad:45:a0:b0:79:32:39:98:2e: d7:7d:c7:ba:3b:7a:2b:9e:29:3d:c7:62:01:b2:14:ab:3c:a7: 73:eb:93:13:41:e8:e7:8f:51:ca:74:76:44:93:f2:a4:81:91: 0b:f0:c0:c6:f2:64:8f:51:38:db:b2:36:60:01:67:90:b1:45: ca:35:bf:b7:df:ac:c0:3e:ee:ba:82:a3:67:bb:1e:df:ba:18: c3:c0:8c:f5:7d:ed:8c:8c:34:71:1e:4d:ed:ab:27:46:ab:57: f5:69:81:53:d3:54:7a:c7:49:03:48:c5:f0:0d:cb:79:d9:c2: 6a:15:82:93:a5:fd:ed:1b:29:8b:ec:a6:63:e8:0f:78:b9:40: 16:e8:4e:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2iktDhYm10lB7839pHf41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNWU2YzIzMzA5MTFiYzFkYzhjODNkNDExZWY2YjEyMDhi M2JiZDYwHhcNMjUxMjA3MDIwMDQ5WhcNMjUxMjA4MDIwMDQ5WjAzMTEwLwYDVQQD Eyg0NTBkMDQwNGRmNGZhOTkwY2Q5MjExYzZhN2ZlYWZlYjY1NTY2MjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDOXtt3ISe7HjC9QZbkEHdyRlKLi WskJgxSpRI30MZ9TC2feu0PYJY0qt5b7d1fspXQ/y6SM2kFJ7uBzbNuf+qfGr8lQ CrpockVSFilQk9baYT2WHs29G/MCEhvdayVstMbgMQaCzqZ0/prgFtUipDDBlXrm 3yRfFtCUjvdJXsxn1mtv8RcKIwuFY0bPuCUdKNHbMs95ytxjmXiRgdQkGcVHVesF 27fZAiymmA6KiPH2XbVxJkV49MlfjoXJ4hkJ3PpYmACnYzNCMWt5J4VZdqSdQSGx aSXPsPLBytyrc1+c47QpAfYvw1EQ/q11kVo62IejoDBOeW/G9cxNblrBQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUNBATfT6mQzZIRxqf+r+tlVmImMB8GA1UdIwQY MBaAFN5ebCMwkRvB3IyD1BHvaxIIs7vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2Et ZGU0YmE3ODZmODcyLzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2EtZGU0YmE3ODZmODcy LzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoN1hND7f FJgQvQU6yX2aZsubDBfCwa6Rnmuk0/76WixRyD70bCBlYrEZFlQlFc1EfeQ8Y9PY gvGTMqbHOo+6Tuthc/8Ndatr06fQOSvq+rO/5vN2rFguGU30PTo5kuT9bSYOI5wG Z6nyvTfJFyO5tIoSyoLxrUWgsHkyOZgu133Hujt6K54pPcdiAbIUqzync+uTE0Ho 549RynR2RJPypIGRC/DAxvJkj1E427I2YAFnkLFFyjW/t9+swD7uuoKjZ7se37oY w8CM9X3tjIw0cR5N7asnRqtX9WmBU9NUesdJA0jF8A3LednCahWCk6X97Rspi+ym Y+gPeLlAFuhOEA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:20 2025 by rpki-client