This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft File: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft (raw, json) Hash identifier: vTjEkbHlyIKqTY9/UDlE49e34lnxHHq4CmLFAn17gmg= Subject key identifier: A9:E4:70:E7:05:F3:B8:49:3D:28:05:E1:C6:48:0E:CE:F3:64:96:7E Authority key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89 Certificate issuer: /CN=dead4c89f7aed8681d0202d22479d86e1462f889 Certificate serial: 019B2B8AC01AB994C7FCD3A366791750AE54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 09:01:11 +0000 Manifest this update: Wed 17 Dec 2025 09:01:11 +0000 Manifest next update: Thu 18 Dec 2025 09:01:11 +0000 Files and hashes: 1: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl (hash: fAuLzf+kZXbr9NvFo2VKQTMzLZfeoca+QF73YjM5hh4=) 2: hs44kTsCSKJHF4M4m6a7yybk2BU.roa (hash: sJmLUUiHtQ2muOzZ9TuqLt9boiXoy5M0LFt8+5jZEwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:c0:1a:b9:94:c7:fc:d3:a3:66:79:17:50:ae:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dead4c89f7aed8681d0202d22479d86e1462f889 Validity Not Before: Dec 17 09:01:11 2025 GMT Not After : Dec 18 09:01:11 2025 GMT Subject: CN=a9e470e705f3b8493d2805e1c6480ecef364967e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:7e:6d:8b:fd:d5:e0:b7:9e:57:94:04:11: 43:57:0b:14:36:cd:14:5f:e1:75:20:89:98:d6:59: 0b:73:56:c8:a5:d0:01:bb:b3:8c:80:a5:2a:1b:e2: b4:ef:4a:9f:7b:8c:8a:8a:7b:2b:45:7b:a4:2a:68: 68:a6:50:f7:55:75:92:2e:ad:9f:1c:f2:1e:89:ec: d9:f9:29:fc:4b:5c:01:a2:0c:88:f2:55:ed:f6:9b: be:2b:3a:7e:75:09:10:be:b3:ca:be:74:1a:8a:99: 83:e1:02:dd:76:be:22:5b:9f:09:c6:21:6f:81:ff: 59:b1:f5:27:58:2d:eb:3b:21:76:d1:be:c6:ff:2a: 7b:ad:1b:08:22:4d:5b:8f:e4:f1:b6:3c:86:50:47: 3a:51:aa:60:1a:25:fc:6b:44:bc:d3:f9:ab:c1:96: 1e:bb:68:7b:72:c4:06:e4:61:db:f2:9d:a8:cb:80: 68:a7:24:b8:3a:8b:b2:19:66:a8:5d:57:0a:42:0b: ba:6d:4a:80:c4:5f:4e:76:b2:2f:41:b4:39:26:90: 5a:1a:bd:22:fb:e8:a0:85:ce:d6:45:60:31:58:42: 59:e4:95:1d:b9:99:aa:02:d6:ad:91:93:5c:c4:91: 48:fa:fc:c5:47:49:50:96:1e:8a:96:79:0d:a8:23: 7c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E4:70:E7:05:F3:B8:49:3D:28:05:E1:C6:48:0E:CE:F3:64:96:7E X509v3 Authority Key Identifier: keyid:DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:49:77:a1:9d:15:c1:2c:45:96:9f:fb:22:c3:ca:41:cd:77: 1f:91:7f:47:53:84:2d:40:98:be:c3:6c:29:c2:4f:e0:62:11: ee:06:8f:b7:43:bd:32:2b:fa:df:2c:6c:82:b7:48:42:c7:16: 45:17:ca:43:f8:d7:ed:32:3b:d6:e6:3b:a3:34:42:04:36:20: b8:ad:a7:50:85:e5:e5:0a:6c:5b:16:cd:93:71:da:84:43:76: c1:40:72:27:2f:23:63:db:eb:d7:85:83:9a:59:58:08:80:72: fa:b7:7b:24:e6:b5:3f:2a:f6:1f:c4:32:fd:aa:d9:11:89:f4: c8:55:38:1b:25:c7:51:4a:eb:bf:54:ba:34:27:f0:5f:da:e5: c9:c0:7f:42:e0:59:e5:ea:14:6f:c1:be:8d:b6:72:cd:c6:77: 0d:13:2d:1a:48:2f:29:70:e0:cb:82:58:b7:12:6a:72:4d:66: cf:da:16:43:18:28:70:54:7b:30:67:9f:53:81:af:fc:0a:32: bb:c8:8f:a3:3f:57:6e:f4:e7:a3:06:85:3c:74:8a:f6:8b:c9: df:44:ea:c1:a6:c6:98:09:43:63:ce:14:c8:61:31:cc:66:60: b8:81:f5:18:0f:d1:f8:09:93:f7:de:7d:d9:a5:03:1e:4d:86: da:dc:4a:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrisAauZTH/NOjZnkXUK5UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYWQ0Yzg5ZjdhZWQ4NjgxZDAyMDJkMjI0NzlkODZlMTQ2 MmY4ODkwHhcNMjUxMjE3MDkwMTExWhcNMjUxMjE4MDkwMTExWjAzMTEwLwYDVQQD EyhhOWU0NzBlNzA1ZjNiODQ5M2QyODA1ZTFjNjQ4MGVjZWYzNjQ5NjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos9+bYv91eC3nleUBBFDVwsUNs0U X+F1IImY1lkLc1bIpdABu7OMgKUqG+K070qfe4yKinsrRXukKmhoplD3VXWSLq2f HPIeiezZ+Sn8S1wBogyI8lXt9pu+Kzp+dQkQvrPKvnQaipmD4QLddr4iW58JxiFv gf9ZsfUnWC3rOyF20b7G/yp7rRsIIk1bj+TxtjyGUEc6UapgGiX8a0S80/mrwZYe u2h7csQG5GHb8p2oy4BopyS4OouyGWaoXVcKQgu6bUqAxF9OdrIvQbQ5JpBaGr0i ++ighc7WRWAxWEJZ5JUduZmqAtatkZNcxJFI+vzFR0lQlh6KlnkNqCN8qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnkcOcF87hJPSgF4cZIDs7zZJZ+MB8GA1UdIwQY MBaAFN6tTIn3rthoHQIC0iR52G4UYviJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jZWE2NWYtZWNhMS00ZjgwLTg3NGUt NWJjZmNlNWNhMmM3LzEvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jZWE2NWYtZWNhMS00ZjgwLTg3NGUtNWJjZmNlNWNhMmM3 LzEvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0l3oZ0V wSxFlp/7IsPKQc13H5F/R1OELUCYvsNsKcJP4GIR7gaPt0O9Miv63yxsgrdIQscW RRfKQ/jX7TI71uY7ozRCBDYguK2nUIXl5QpsWxbNk3HahEN2wUByJy8jY9vr14WD mllYCIBy+rd7JOa1Pyr2H8Qy/arZEYn0yFU4GyXHUUrrv1S6NCfwX9rlycB/QuBZ 5eoUb8G+jbZyzcZ3DRMtGkgvKXDgy4JYtxJqck1mz9oWQxgocFR7MGefU4Gv/Aoy u8iPoz9XbvTnowaFPHSK9ovJ30TqwabGmAlDY84UyGExzGZguIH1GA/R+AmT9959 2aUDHk2G2txK8Q== -----END CERTIFICATE-----Generated at Wed Dec 17 13:47:21 2025 by rpki-client