This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json) Hash identifier: YSzP6QcvNa7Gl8z3/KY18701+lOV3vmlkZTPhqDt3Sc= Subject key identifier: A1:60:3A:40:21:F4:53:EB:4A:94:AA:AA:0F:B2:BB:9C:09:70:BD:09 Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89 Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89 Certificate serial: 019B311EB679FEB8A827BC889D543C434749 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 11:00:54 +0000 Manifest this update: Thu 18 Dec 2025 11:00:54 +0000 Manifest next update: Fri 19 Dec 2025 11:00:54 +0000 Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: sEZntUczfW6pSA/+LCcU5uYXXkfeMcZ1T4k/ek+3aMs=) 2: 3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa (hash: k3QEknU5rjZnXpONxqfvLO581xpn3+pyaYB6EDwI7ck=) 3: 7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa (hash: LAvqsJ06fMyPoV983D+eGZunyZuIfO7UCXuYbTjEljc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:b6:79:fe:b8:a8:27:bc:88:9d:54:3c:43:47:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89 Validity Not Before: Dec 18 11:00:54 2025 GMT Not After : Dec 19 11:00:54 2025 GMT Subject: CN=a1603a4021f453eb4a94aaaa0fb2bb9c0970bd09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:9f:c6:09:17:b1:e3:d6:1a:66:fb:20:17: 11:1b:16:67:a1:13:0b:2b:28:c9:31:01:2f:32:f2: d9:9d:46:5b:a4:48:a4:9e:8d:d3:5e:e7:77:06:7d: 4d:eb:36:5d:a7:0c:62:87:48:eb:2d:0d:bc:7c:f4: 3b:e4:45:cf:96:19:00:ae:09:fb:56:1c:d4:0d:bd: 4c:c0:25:6a:f0:db:28:f8:5f:8e:e7:aa:2c:11:72: 16:07:22:76:e2:d8:30:ec:b1:bc:8b:59:cb:69:da: 6c:65:a3:01:90:79:86:17:99:4b:87:d0:ba:9e:41: 9e:38:9c:42:25:87:56:c6:7b:ff:c2:7f:fd:21:1c: 0d:30:22:c6:13:c7:5f:35:c9:28:c9:90:b2:a3:c0: e4:81:77:49:55:1f:14:d0:bf:76:66:6e:cd:bf:64: 18:26:3a:a4:11:63:b4:f2:35:6e:a1:4d:60:c5:0e: 43:5f:30:29:cc:c6:0c:d8:e2:3a:7d:d3:98:1a:6a: 54:04:bd:06:6a:5d:9f:3c:14:a5:30:19:24:96:d9: 09:fa:92:cb:a0:d7:07:4e:10:84:07:79:57:fc:0f: 3b:61:c9:1b:45:1a:3a:b5:d4:36:f0:a4:01:a2:a4: 40:69:cb:bb:ba:34:35:72:bb:c9:9d:3b:f4:88:b4: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:60:3A:40:21:F4:53:EB:4A:94:AA:AA:0F:B2:BB:9C:09:70:BD:09 X509v3 Authority Key Identifier: keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f6:a8:36:5a:69:04:dc:00:14:11:b0:d2:b7:48:6c:cb:a2: af:1e:ad:60:2d:58:3f:ac:4a:37:e1:7d:5f:b8:19:96:94:47: ed:0a:44:77:af:de:39:0c:0e:cb:71:a5:57:f8:3f:1b:7a:b6: 53:d9:80:83:ba:cc:af:b4:9e:bf:58:16:85:e7:ee:a8:4a:95: 45:a2:df:f6:5d:1c:84:2f:d4:88:3e:ff:56:1a:b2:1a:22:1a: e3:8e:75:4d:df:1f:7c:dc:c8:2a:6f:d4:67:06:8b:87:45:f3: 02:da:43:16:e6:1d:dc:21:26:2a:94:11:2e:52:48:ab:c2:b1: d0:ca:0c:b1:59:0d:70:69:18:33:80:44:13:c2:de:2b:0b:4d: 07:be:7c:12:8b:cc:d4:15:bc:83:b1:02:31:87:db:14:43:b7: 0b:86:cc:2b:db:09:67:1f:29:70:f7:93:87:8b:7c:6e:0c:30: 5c:94:96:76:6b:4f:de:9c:f8:1a:48:02:d6:b9:71:e0:6b:83: 11:ee:d2:50:81:53:eb:ad:e9:35:77:4d:ff:7c:69:81:ce:2d: 3c:13:da:31:6e:31:fb:0b:ac:b0:9b:8f:ef:6d:75:76:b5:aa: 99:63:a8:32:50:c4:27:42:b9:b7:61:ec:ee:9c:11:85:19:6a: f4:dc:43:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHrZ5/rioJ7yInVQ8Q0dJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZmM0OTE5NWE0MzlkNWI5ZDcxMTJiMzM2MDE1ZWVlMmM5 NDRkODkwHhcNMjUxMjE4MTEwMDU0WhcNMjUxMjE5MTEwMDU0WjAzMTEwLwYDVQQD EyhhMTYwM2E0MDIxZjQ1M2ViNGE5NGFhYWEwZmIyYmI5YzA5NzBiZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyqfxgkXsePWGmb7IBcRGxZnoRML KyjJMQEvMvLZnUZbpEikno3TXud3Bn1N6zZdpwxih0jrLQ28fPQ75EXPlhkArgn7 VhzUDb1MwCVq8Nso+F+O56osEXIWByJ24tgw7LG8i1nLadpsZaMBkHmGF5lLh9C6 nkGeOJxCJYdWxnv/wn/9IRwNMCLGE8dfNckoyZCyo8DkgXdJVR8U0L92Zm7Nv2QY JjqkEWO08jVuoU1gxQ5DXzApzMYM2OI6fdOYGmpUBL0Gal2fPBSlMBkkltkJ+pLL oNcHThCEB3lX/A87YckbRRo6tdQ28KQBoqRAacu7ujQ1crvJnTv0iLSzuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFgOkAh9FPrSpSqqg+yu5wJcL0JMB8GA1UdIwQY MBaAFN/8SRlaQ51bnXESszYBXu4slE2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iMjhkODktYjg5Yi00NjgyLWI4Yzct N2ViYjZiOWUzNjlkLzEvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9iMjhkODktYjg5Yi00NjgyLWI4YzctN2ViYjZiOWUzNjlk LzEvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvaoNlpp BNwAFBGw0rdIbMuirx6tYC1YP6xKN+F9X7gZlpRH7QpEd6/eOQwOy3GlV/g/G3q2 U9mAg7rMr7Sev1gWhefuqEqVRaLf9l0chC/UiD7/VhqyGiIa4451Td8ffNzIKm/U ZwaLh0XzAtpDFuYd3CEmKpQRLlJIq8Kx0MoMsVkNcGkYM4BEE8LeKwtNB758EovM 1BW8g7ECMYfbFEO3C4bMK9sJZx8pcPeTh4t8bgwwXJSWdmtP3pz4GkgC1rlx4GuD Ee7SUIFT663pNXdN/3xpgc4tPBPaMW4x+wussJuP7211drWqmWOoMlDEJ0K5t2Hs 7pwRhRlq9NxDCQ== -----END CERTIFICATE-----Generated at Thu Dec 18 15:41:34 2025 by rpki-client