This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft File: v3DW_GPRd37tzY9GpVk2F8YxneY.mft (raw, json) Hash identifier: 3teeieUCtNgGwLJLDcbLOrj5GonBT5HBbkypGFOTLGk= Subject key identifier: 83:0E:CE:20:E3:F2:DF:DD:DC:4E:EE:53:31:52:83:29:1D:8F:67:BB Authority key identifier: BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6 Certificate issuer: /CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6 Certificate serial: 019B304356BA5124B98E3E045503629C25C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 07:01:18 +0000 Manifest this update: Thu 18 Dec 2025 07:01:18 +0000 Manifest next update: Fri 19 Dec 2025 07:01:18 +0000 Files and hashes: 1: uCVmenLcASyNoh4ZOZE-C9n4LLY.roa (hash: d6oXAE1yERYBjWPnG7isycEkaI7F0yqfWlZw0H+T+Mo=) 2: v3DW_GPRd37tzY9GpVk2F8YxneY.crl (hash: U0d0mZ2GqshMUgUk5PP4t9KeKE8QvEuEj19oIfLeItE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:56:ba:51:24:b9:8e:3e:04:55:03:62:9c:25:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6 Validity Not Before: Dec 18 07:01:18 2025 GMT Not After : Dec 19 07:01:18 2025 GMT Subject: CN=830ece20e3f2dfdddc4eee53315283291d8f67bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:93:65:e3:e1:fb:eb:d2:ab:68:59:ef:eb:f0: 9f:ec:ce:e5:6d:ee:3d:9f:3a:74:53:bb:57:01:63: 11:90:c8:9d:f7:4b:9a:9c:c7:89:08:cf:54:12:e3: 0c:67:bd:4c:47:d0:0a:3e:eb:1b:fc:bb:c3:d5:c5: 5d:3d:9f:62:7a:f4:0f:42:65:f3:27:70:bc:6b:c2: 3f:a9:d2:ea:4d:ba:76:7a:da:a3:c1:cc:2b:b4:0f: 80:8b:2a:63:82:c5:77:f5:da:20:d4:72:23:1f:38: 08:28:c6:6a:87:47:d0:d1:24:17:e0:8b:67:d1:bb: cd:35:62:dc:fa:a9:27:cb:e8:ac:e9:e3:7d:ef:2b: dd:c9:b8:52:55:53:6a:9f:9d:b1:7f:d0:c6:b1:80: 8d:7b:10:fc:a5:93:e8:cb:42:04:df:f5:e2:2d:a8: 24:43:70:a8:74:10:7d:47:9b:e0:d0:d4:3c:5a:5f: d1:cf:69:f8:02:c3:bc:3e:f0:54:9c:ea:ac:a5:7b: d5:fc:fa:a1:75:5b:57:59:5f:77:af:77:d4:09:25: 6b:f5:a9:02:d6:4a:db:d9:c9:08:d2:3a:0f:11:42: b5:b1:06:5f:b8:ba:31:54:00:66:78:11:cb:fa:38: ed:3e:ea:0f:1a:c5:61:e3:41:ce:19:50:be:a3:9d: f1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0E:CE:20:E3:F2:DF:DD:DC:4E:EE:53:31:52:83:29:1D:8F:67:BB X509v3 Authority Key Identifier: keyid:BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e8:0a:3e:5b:60:b6:98:60:d9:5c:34:65:4b:90:fa:89:29: ef:1b:30:3a:e4:25:24:f4:d1:cf:c2:94:99:00:ec:75:2b:0d: b3:3d:73:3a:fe:9e:9e:a9:5d:1b:f3:a5:fd:43:61:a8:60:c5: cb:2b:a6:4e:b4:ae:94:94:35:43:c7:e1:7a:e8:f0:09:9b:89: b7:cc:d5:74:a6:4f:69:11:d7:84:23:9d:2a:50:09:ac:8e:ef: 01:94:d9:d1:e3:3b:f7:8b:1a:fa:24:6f:3f:f2:f3:61:74:17: cc:1b:d1:55:c5:5f:e6:b4:1c:f2:55:bb:16:24:80:69:b8:32: b0:ed:95:7c:b2:1f:41:6d:2b:e7:cc:4b:2e:38:c3:be:87:41: 79:1e:a2:e7:c1:ee:50:e4:29:f2:06:29:35:bc:8f:e1:f7:07: 7a:ca:96:98:ba:2e:8c:87:11:c1:a5:4c:65:d1:98:c3:f7:56: 71:48:8c:dd:db:be:c6:45:3e:74:bb:3f:3b:b2:d5:b1:a7:2d: 0a:16:1c:a4:7e:01:1b:ba:ef:e7:f9:e0:3f:49:a4:06:0b:25: a4:b1:54:d6:b0:b6:24:fe:44:b7:30:41:74:c9:b7:f2:07:cc: 9d:38:07:c0:56:05:6e:66:6b:ff:af:e6:1c:26:d1:aa:1e:3e: b6:79:4b:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQ1a6USS5jj4EVQNinCXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNzBkNmZjNjNkMTc3N2VlZGNkOGY0NmE1NTkzNjE3YzYz MTlkZTYwHhcNMjUxMjE4MDcwMTE4WhcNMjUxMjE5MDcwMTE4WjAzMTEwLwYDVQQD Eyg4MzBlY2UyMGUzZjJkZmRkZGM0ZWVlNTMzMTUyODMyOTFkOGY2N2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpNl4+H769KraFnv6/Cf7M7lbe49 nzp0U7tXAWMRkMid90uanMeJCM9UEuMMZ71MR9AKPusb/LvD1cVdPZ9ievQPQmXz J3C8a8I/qdLqTbp2etqjwcwrtA+AiypjgsV39dog1HIjHzgIKMZqh0fQ0SQX4Itn 0bvNNWLc+qkny+is6eN97yvdybhSVVNqn52xf9DGsYCNexD8pZPoy0IE3/XiLagk Q3CodBB9R5vg0NQ8Wl/Rz2n4AsO8PvBUnOqspXvV/PqhdVtXWV93r3fUCSVr9akC 1krb2ckI0joPEUK1sQZfuLoxVABmeBHL+jjtPuoPGsVh40HOGVC+o53xswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMOziDj8t/d3E7uUzFSgykdj2e7MB8GA1UdIwQY MBaAFL9w1vxj0Xd+7c2PRqVZNhfGMZ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNmI2NWMtMmZjMy00MTk2LWFmMzAt Mzk0MGQxMzViMjhiLzEvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jNmI2NWMtMmZjMy00MTk2LWFmMzAtMzk0MGQxMzViMjhi LzEvdjNEV19HUFJkMzd0elk5R3BWazJGOFl4bmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+gKPltg tphg2Vw0ZUuQ+okp7xswOuQlJPTRz8KUmQDsdSsNsz1zOv6enqldG/Ol/UNhqGDF yyumTrSulJQ1Q8fheujwCZuJt8zVdKZPaRHXhCOdKlAJrI7vAZTZ0eM794sa+iRv P/LzYXQXzBvRVcVf5rQc8lW7FiSAabgysO2VfLIfQW0r58xLLjjDvodBeR6i58Hu UOQp8gYpNbyP4fcHesqWmLoujIcRwaVMZdGYw/dWcUiM3du+xkU+dLs/O7LVsact ChYcpH4BG7rv5/ngP0mkBgslpLFU1rC2JP5EtzBBdMm38gfMnTgHwFYFbmZr/6/m HCbRqh4+tnlLdg== -----END CERTIFICATE-----Generated at Thu Dec 18 12:26:50 2025 by rpki-client