This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json) Hash identifier: TrZdFWtoz8m6DuPhz4W/s17CMFfCPjRjtk/+AVB6kys= Subject key identifier: 82:10:1A:80:A0:6E:14:70:8A:7F:78:2A:7B:8B:17:D5:E0:AB:C3:42 Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26 Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26 Certificate serial: 019B31C392D9CDBD94BF09F39179B7201D0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft Manifest number: 178B Signing time: Thu 18 Dec 2025 14:00:59 +0000 Manifest this update: Thu 18 Dec 2025 14:00:59 +0000 Manifest next update: Fri 19 Dec 2025 14:00:59 +0000 Files and hashes: 1: N9sOXFw97UnrkSQWGmd4QE2g0Pc.roa (hash: FcVUr7Wqd51Nq1eKBFPb0ZOL/WKLNXNrrGtgMRztb2M=) 2: p6HHOYDEee_YFxcXEQQw4tj_loo.roa (hash: XVgmeoKKw2smz01W8p65Y0a7sBeyS3+sdPmsdrroyxo=) 3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: N2sBbuUzO2qQ9r1/zKSBUgVBskwI2RxwDHklt3pU7gQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:92:d9:cd:bd:94:bf:09:f3:91:79:b7:20:1d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26 Validity Not Before: Dec 18 14:00:59 2025 GMT Not After : Dec 19 14:00:59 2025 GMT Subject: CN=82101a80a06e14708a7f782a7b8b17d5e0abc342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:16:3d:1d:60:ba:3e:71:d8:b2:ad:01:56:ef: b5:26:e4:84:86:c5:8e:ce:41:dd:ea:a3:62:8b:a8: a3:c9:47:29:a0:75:fb:11:66:d6:85:e4:02:e0:8d: 4c:bc:74:01:50:32:34:9a:c8:ed:a8:aa:ce:d4:1f: 7f:d4:5c:2d:49:16:ad:60:fe:41:d9:e0:43:14:b4: 60:18:72:6a:3f:69:0b:be:e9:e4:51:1d:ac:40:e8: 8e:8d:c7:32:3b:f0:2e:12:15:11:bf:25:c1:b7:b0: 8e:40:4b:f2:4d:60:6d:fb:c6:2a:0c:10:1c:20:86: 25:f7:5e:58:1e:ab:0c:db:d3:95:5b:83:82:4c:a8: f7:c0:a5:7f:cc:fd:dc:40:eb:9a:c2:0f:4d:fa:af: df:55:14:71:23:77:24:0d:ce:7f:19:3f:83:6e:8c: bb:7b:d5:40:19:ab:76:b8:0e:3f:96:03:d8:1b:60: 1a:d7:ad:1e:9f:04:4e:78:d0:f4:06:b2:33:b7:2f: ad:b8:2f:e8:63:7b:2d:c6:91:58:c4:a4:e2:65:01: f1:72:fd:b1:31:cb:1f:2c:d7:01:33:41:bd:ec:f5: 81:ca:7e:89:21:99:51:43:56:96:eb:51:e0:4d:99: 88:3d:23:52:97:80:10:1b:15:f3:e7:b9:db:87:ab: ee:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:10:1A:80:A0:6E:14:70:8A:7F:78:2A:7B:8B:17:D5:E0:AB:C3:42 X509v3 Authority Key Identifier: keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a7:d7:71:99:59:05:74:d0:c6:03:4c:42:cc:8d:91:fe:ad: d8:88:27:5c:8f:de:56:a0:95:71:f7:db:97:02:38:8c:5d:b9: 67:91:2c:00:4a:95:58:be:60:49:28:16:a3:9f:c5:a9:ee:00: 98:c1:a9:ed:34:94:65:1f:1f:c1:4f:01:04:6d:19:7f:09:62: 21:6f:2c:c7:93:87:85:1b:e1:75:3d:97:eb:a2:cf:9e:d9:a9: 57:f2:35:da:b5:74:8e:2f:69:8f:f7:d4:a1:3d:ea:d3:77:35: 20:74:20:f3:5d:9d:93:4a:44:2b:1d:cc:e9:d1:a9:00:51:d4: 86:5b:8b:c4:91:51:69:86:00:87:a5:9d:a0:9a:8d:99:fb:fa: 76:5d:15:a7:ca:bc:9d:33:05:53:c6:4f:63:b4:06:46:1b:5e: a5:9f:11:b6:fb:fc:c9:88:d9:fc:b3:4e:84:b2:b0:e6:68:80: 26:25:48:53:6a:2c:dd:cc:3b:f3:c8:6b:f9:18:4d:4c:b5:94: eb:10:e4:4f:29:3d:a5:11:31:73:b3:7b:44:3a:8f:85:02:93: a5:be:d8:7a:e6:2b:4c:49:e0:c2:1d:95:b2:2a:71:4d:39:0a: bf:fe:f5:4f:0e:d4:47:24:3d:80:51:60:4c:2c:df:aa:e0:5a: 2e:95:d9:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw5LZzb2UvwnzkXm3IB0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzNmZjFlYzU1ZjQ5Mjk2ZGQ3MzQwMzlmYTAyODRjYzQw MGViMjYwHhcNMjUxMjE4MTQwMDU5WhcNMjUxMjE5MTQwMDU5WjAzMTEwLwYDVQQD Eyg4MjEwMWE4MGEwNmUxNDcwOGE3Zjc4MmE3YjhiMTdkNWUwYWJjMzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBY9HWC6PnHYsq0BVu+1JuSEhsWO zkHd6qNii6ijyUcpoHX7EWbWheQC4I1MvHQBUDI0msjtqKrO1B9/1FwtSRatYP5B 2eBDFLRgGHJqP2kLvunkUR2sQOiOjccyO/AuEhURvyXBt7COQEvyTWBt+8YqDBAc IIYl915YHqsM29OVW4OCTKj3wKV/zP3cQOuawg9N+q/fVRRxI3ckDc5/GT+Dboy7 e9VAGat2uA4/lgPYG2Aa160enwROeND0BrIzty+tuC/oY3stxpFYxKTiZQHxcv2x McsfLNcBM0G97PWByn6JIZlRQ1aW61HgTZmIPSNSl4AQGxXz57nbh6vupwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIQGoCgbhRwin94KnuLF9Xgq8NCMB8GA1UdIwQY MBaAFK9z/x7FX0kpbdc0A5+gKEzEAOsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZWE1ODEtNWNkZS00NTc0LWJhMGEt MmM2MmRlN2IzZTQ1LzEvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jZWE1ODEtNWNkZS00NTc0LWJhMGEtMmM2MmRlN2IzZTQ1 LzEvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfafXcZlZ BXTQxgNMQsyNkf6t2IgnXI/eVqCVcffblwI4jF25Z5EsAEqVWL5gSSgWo5/Fqe4A mMGp7TSUZR8fwU8BBG0ZfwliIW8sx5OHhRvhdT2X66LPntmpV/I12rV0ji9pj/fU oT3q03c1IHQg812dk0pEKx3M6dGpAFHUhluLxJFRaYYAh6WdoJqNmfv6dl0Vp8q8 nTMFU8ZPY7QGRhtepZ8Rtvv8yYjZ/LNOhLKw5miAJiVIU2os3cw788hr+RhNTLWU 6xDkTyk9pRExc7N7RDqPhQKTpb7YeuYrTEngwh2VsipxTTkKv/71Tw7URyQ9gFFg TCzfquBaLpXZvQ== -----END CERTIFICATE-----Generated at Thu Dec 18 16:16:38 2025 by rpki-client