This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json) Hash identifier: tU9sg+MaCZ+GPclmKLllh6tncKvUZx0jIJ+IVykOYNI= Subject key identifier: B2:67:F1:AE:81:CC:9B:23:D9:2F:12:22:1E:73:60:12:3F:CA:A1:D8 Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92 Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592 Certificate serial: 019B3CB5391FA5321B64AE3C246285F31470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft Manifest number: 0564 Signing time: Sat 20 Dec 2025 17:01:08 +0000 Manifest this update: Sat 20 Dec 2025 17:01:08 +0000 Manifest next update: Sun 21 Dec 2025 17:01:08 +0000 Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: tW70cPyDOHfQlm+2TacJwyJvIPrkAug8UrTX68lZ8rM=) 2: 8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa (hash: 2BY/rA9giuFltjXSROUw0wjIihHos+N8ZqL5OdXbUVw=) 3: SiGDnp8oSt95ArckPVGAAWtJUNs.roa (hash: j9ZTEJfSb12eUtJGUY9GVfUETUmyTkhHBnRZ+wXplM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:39:1f:a5:32:1b:64:ae:3c:24:62:85:f3:14:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc327af32a98492757b200ea040db24ec3136592 Validity Not Before: Dec 20 17:01:08 2025 GMT Not After : Dec 21 17:01:08 2025 GMT Subject: CN=b267f1ae81cc9b23d92f12221e7360123fcaa1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:f8:eb:91:27:bf:bd:a1:5a:29:99:10:0a: be:02:e6:16:d2:84:df:54:b4:88:51:d6:48:ab:8b: e4:e2:21:4f:23:b7:2a:14:40:7f:d0:56:c8:10:9c: c7:b5:15:4a:24:1a:3b:3c:66:58:01:9e:1b:ea:73: 51:74:fe:71:ce:f4:94:e5:ef:9d:df:7d:01:e2:9c: eb:e4:4d:83:c9:71:44:7e:7e:aa:79:af:00:11:d5: 10:1d:80:bc:6a:55:48:b6:7d:63:f2:d0:89:b3:27: ee:82:51:9b:5e:4d:7b:ea:a6:cb:5b:20:19:a0:d2: fe:72:73:57:7f:db:f2:ab:fa:f7:0a:d4:ba:7d:e3: 81:d3:7a:52:d8:63:4c:ef:5f:c4:7a:3f:b1:f9:04: d5:eb:77:55:c4:df:9a:1f:d5:ed:68:2c:c5:84:02: b7:6c:91:ea:7c:a0:8f:6c:91:f5:1f:6a:3c:1e:35: 4f:6c:f4:3a:1f:1c:c1:aa:bb:68:cd:10:f9:6e:67: 37:64:43:30:59:c3:4d:19:1a:53:6f:27:15:71:19: 64:48:29:33:c2:93:d4:ee:59:76:3e:7a:83:5f:b1: c6:d3:4a:a5:e2:a4:ef:9f:bd:f0:ac:df:37:84:dc: c2:5a:e8:d0:44:33:aa:ff:68:62:73:d6:dc:67:0f: 5d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:67:F1:AE:81:CC:9B:23:D9:2F:12:22:1E:73:60:12:3F:CA:A1:D8 X509v3 Authority Key Identifier: keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:22:92:24:1e:d4:22:4e:60:91:af:2f:36:83:49:70:3c:78: 10:dc:ef:e6:e8:36:27:72:c0:d6:76:20:d7:28:b7:4c:59:3e: 14:62:b7:ac:ea:a7:a0:94:21:5b:50:48:51:a3:52:a5:02:05: 80:19:78:a6:d7:12:2c:20:e9:47:b5:71:c4:3e:3b:4c:72:05: 86:b2:6f:77:2b:e0:cc:b2:ae:2c:c2:38:37:0e:b1:ef:d6:83: de:47:83:15:12:99:41:70:f7:01:01:de:45:73:7e:0e:05:81: 93:bc:5c:3f:64:c1:a8:11:e3:89:83:76:c2:19:b9:65:63:67: fb:ff:ec:30:a0:72:1a:c3:d4:12:f0:66:20:b7:d7:68:a0:a3: e6:5f:07:05:a5:4e:7c:80:90:a9:e3:1e:c1:8c:39:24:a6:aa: 31:c4:d2:3f:b4:ca:dc:d4:d4:ea:76:82:32:84:d7:12:ad:cb: 7a:80:b7:9f:8f:a6:bd:b7:4f:16:a5:0f:f9:2b:af:14:b7:6e: e9:1c:4c:58:37:d3:e6:37:02:78:8c:9b:cb:1c:18:fb:16:76: c4:38:44:dc:09:bb:19:e0:60:3e:93:05:2f:cb:72:f5:af:1d: 16:d5:7d:3b:bf:0f:aa:01:00:27:22:d2:18:18:6c:94:6d:d2: 90:17:45:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tTkfpTIbZK48JGKF8xRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMzI3YWYzMmE5ODQ5Mjc1N2IyMDBlYTA0MGRiMjRlYzMx MzY1OTIwHhcNMjUxMjIwMTcwMTA4WhcNMjUxMjIxMTcwMTA4WjAzMTEwLwYDVQQD EyhiMjY3ZjFhZTgxY2M5YjIzZDkyZjEyMjIxZTczNjAxMjNmY2FhMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseD465Env72hWimZEAq+AuYW0oTf VLSIUdZIq4vk4iFPI7cqFEB/0FbIEJzHtRVKJBo7PGZYAZ4b6nNRdP5xzvSU5e+d 330B4pzr5E2DyXFEfn6qea8AEdUQHYC8alVItn1j8tCJsyfuglGbXk176qbLWyAZ oNL+cnNXf9vyq/r3CtS6feOB03pS2GNM71/Eej+x+QTV63dVxN+aH9XtaCzFhAK3 bJHqfKCPbJH1H2o8HjVPbPQ6HxzBqrtozRD5bmc3ZEMwWcNNGRpTbycVcRlkSCkz wpPU7ll2PnqDX7HG00ql4qTvn73wrN83hNzCWujQRDOq/2hic9bcZw9dOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJn8a6BzJsj2S8SIh5zYBI/yqHYMB8GA1UdIwQY MBaAFNwyevMqmEknV7IA6gQNsk7DE2WSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0RKNjh5cVlTU2RYc2dEcUJBMnlUc01UWlpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hNGY2MTktNGU5My00MWQ2LTg0NmMt MTYyMTllMTQwZmE3LzEvM0RKNjh5cVlTU2RYc2dEcUJBMnlUc01UWlpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9hNGY2MTktNGU5My00MWQ2LTg0NmMtMTYyMTllMTQwZmE3 LzEvM0RKNjh5cVlTU2RYc2dEcUJBMnlUc01UWlpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSKSJB7U Ik5gka8vNoNJcDx4ENzv5ug2J3LA1nYg1yi3TFk+FGK3rOqnoJQhW1BIUaNSpQIF gBl4ptcSLCDpR7VxxD47THIFhrJvdyvgzLKuLMI4Nw6x79aD3keDFRKZQXD3AQHe RXN+DgWBk7xcP2TBqBHjiYN2whm5ZWNn+//sMKByGsPUEvBmILfXaKCj5l8HBaVO fICQqeMewYw5JKaqMcTSP7TK3NTU6naCMoTXEq3LeoC3n4+mvbdPFqUP+SuvFLdu 6RxMWDfT5jcCeIybyxwY+xZ2xDhE3Am7GeBgPpMFL8ty9a8dFtV9O78PqgEAJyLS GBhslG3SkBdFdQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:56:08 2025 by rpki-client