This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json) Hash identifier: Hl69qltbHFXSXuDa/52iSNP85NYSBispKfoMwq1q8s4= Subject key identifier: 90:F4:E7:52:E1:FF:4A:35:41:1C:93:1F:D5:4C:79:03:7F:2E:D5:44 Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81 Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81 Certificate serial: 019B3D910768525CF1281ACF27CB309494BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 21:01:13 +0000 Manifest this update: Sat 20 Dec 2025 21:01:13 +0000 Manifest next update: Sun 21 Dec 2025 21:01:13 +0000 Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: olr+vAzsmDedAO7N2vEUZnWaTTz2sqh9BtaJylg4rNI=) 2: Q6UDfcr6-wjzrSR02hz91bMMgCQ.roa (hash: Ri+ho1nwscaoaR+lGA/lmNvU5bMAzGg4wnbtbjS6IAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:07:68:52:5c:f1:28:1a:cf:27:cb:30:94:94:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81 Validity Not Before: Dec 20 21:01:13 2025 GMT Not After : Dec 21 21:01:13 2025 GMT Subject: CN=90f4e752e1ff4a35411c931fd54c79037f2ed544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b9:2a:2d:44:f7:df:19:30:07:33:92:69:55: c5:1a:a1:63:e6:1c:93:7c:0d:52:f2:2c:b4:06:22: 71:8c:91:35:62:60:ed:8c:45:d9:33:49:6d:87:23: 43:a2:b2:70:17:1c:2d:01:e9:4c:c9:0a:25:26:3b: 3b:96:7c:67:52:7c:bf:37:c1:4b:64:d4:62:6c:f5: 03:02:08:41:82:8c:3c:4f:a9:26:16:ed:8c:f2:9d: 87:c6:76:a5:e0:ec:ff:94:86:bd:aa:81:10:fd:f6: 9f:24:c7:30:3e:6d:65:67:d7:50:7e:87:24:ad:33: fe:92:72:e1:73:dd:48:ad:00:a8:a5:72:90:92:24: ad:cd:f0:54:63:ca:c6:c4:25:f6:fd:8b:c4:5b:ee: 1f:41:dd:6e:9b:9d:02:d5:6a:3c:0f:21:15:8f:60: cd:c5:9f:26:3b:17:96:8a:c5:91:31:29:b7:09:d1: 1e:54:93:b7:31:62:7d:63:18:a1:67:b4:dd:e5:16: 89:bd:19:93:1b:84:ee:cf:18:21:c3:d0:7e:bf:4b: 8c:96:2e:56:aa:bb:ee:e4:a4:d3:ba:b7:ad:6d:11: f6:b8:0c:fe:3c:70:0d:27:2f:cd:18:e3:a1:e2:03: 77:32:0c:48:da:05:a3:79:6c:c5:16:ff:41:3d:28: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F4:E7:52:E1:FF:4A:35:41:1C:93:1F:D5:4C:79:03:7F:2E:D5:44 X509v3 Authority Key Identifier: keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:af:ea:70:db:44:72:3b:9f:2a:88:8a:8a:b8:72:13:31:d4: a5:c1:dc:3d:a3:75:4b:b4:d5:ce:f8:c7:7e:1d:c0:d7:71:63: 79:a9:98:7f:ad:a9:1c:4b:af:a3:00:3e:f9:31:5c:0f:38:fe: 68:84:0b:07:9b:f7:a5:49:4f:8f:0f:4a:20:13:5d:a1:f4:72: e0:16:e5:1b:fe:4b:05:4c:02:d4:af:44:79:56:bd:ff:df:76: 47:6c:24:26:e5:30:83:59:ee:00:6d:ac:89:8a:c3:6a:82:9a: 3a:e0:8d:ee:17:e3:aa:ea:87:93:64:9d:70:1b:67:e9:59:c7: af:c8:e2:22:da:ec:8f:c4:69:54:09:a6:82:6e:4f:20:c3:89: 7a:b5:85:00:49:e9:0a:4e:d0:d9:1c:6a:e2:fc:72:04:28:1d: ea:d1:bf:07:ad:3d:b6:f7:2d:15:ea:ce:91:26:f3:4e:bb:86: 33:40:38:99:ae:69:50:c7:28:da:46:5e:2b:2d:2d:73:f2:2b: 50:47:3c:c2:b9:96:2f:d8:bf:b5:bb:3c:2f:ed:b7:0c:50:41: 85:0b:a5:de:ac:22:cc:63:53:10:e8:be:72:2d:62:d4:33:26: 32:63:0a:55:d2:71:ae:b3:8a:a5:89:ec:67:70:ef:f4:6d:76: 36:05:8a:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kQdoUlzxKBrPJ8swlJS8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOGU2MGJiMTExMDg3ZDA4MDNmYzNmY2M0YWYzMjdhYTg1 YzBiODEwHhcNMjUxMjIwMjEwMTEzWhcNMjUxMjIxMjEwMTEzWjAzMTEwLwYDVQQD Eyg5MGY0ZTc1MmUxZmY0YTM1NDExYzkzMWZkNTRjNzkwMzdmMmVkNTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LkqLUT33xkwBzOSaVXFGqFj5hyT fA1S8iy0BiJxjJE1YmDtjEXZM0lthyNDorJwFxwtAelMyQolJjs7lnxnUny/N8FL ZNRibPUDAghBgow8T6kmFu2M8p2Hxnal4Oz/lIa9qoEQ/fafJMcwPm1lZ9dQfock rTP+knLhc91IrQCopXKQkiStzfBUY8rGxCX2/YvEW+4fQd1um50C1Wo8DyEVj2DN xZ8mOxeWisWRMSm3CdEeVJO3MWJ9YxihZ7Td5RaJvRmTG4Tuzxghw9B+v0uMli5W qrvu5KTTuretbRH2uAz+PHANJy/NGOOh4gN3MgxI2gWjeWzFFv9BPSipAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJD051Lh/0o1QRyTH9VMeQN/LtVEMB8GA1UdIwQY MBaAFN6OYLsREIfQgD/D/MSvMnqoXAuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYt YTZmNTM0YzMwN2YxLzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYtYTZmNTM0YzMwN2Yx LzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAja/qcNtE cjufKoiKirhyEzHUpcHcPaN1S7TVzvjHfh3A13FjeamYf62pHEuvowA++TFcDzj+ aIQLB5v3pUlPjw9KIBNdofRy4BblG/5LBUwC1K9EeVa9/992R2wkJuUwg1nuAG2s iYrDaoKaOuCN7hfjquqHk2SdcBtn6VnHr8jiItrsj8RpVAmmgm5PIMOJerWFAEnp Ck7Q2Rxq4vxyBCgd6tG/B609tvctFerOkSbzTruGM0A4ma5pUMco2kZeKy0tc/Ir UEc8wrmWL9i/tbs8L+23DFBBhQul3qwizGNTEOi+ci1i1DMmMmMKVdJxrrOKpYns Z3Dv9G12NgWKnA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:21:37 2025 by rpki-client