This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json) Hash identifier: DDTO/R/55r79D8oSwQmv4BCzJA5yM3EPpp+HDJkB5SU= Subject key identifier: DD:6D:0D:18:11:8D:87:24:7C:3D:1B:0E:E6:11:DE:57:F8:39:20:39 Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79 Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579 Certificate serial: 019B2364CF8E95678917865B3E65CF030B7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 19:02:47 +0000 Manifest this update: Mon 15 Dec 2025 19:02:47 +0000 Manifest next update: Tue 16 Dec 2025 19:02:47 +0000 Files and hashes: 1: 2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa (hash: HuLQbolqCGZmiUhvPO/wiFvtWi3Okwmgccu/aBpptuc=) 2: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: sDEbOlOxymqLp3b2/CiHRH+XwZC89gGHpcJoIbR1u6A=) 3: S87qjShx0Cde64tPkPpF-gZYMZE.roa (hash: KfR58Ep5CQd0S3bEgqtjtqAMWmdjTVJqVmZhBaCwNRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:cf:8e:95:67:89:17:86:5b:3e:65:cf:03:0b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579 Validity Not Before: Dec 15 19:02:47 2025 GMT Not After : Dec 16 19:02:47 2025 GMT Subject: CN=dd6d0d18118d87247c3d1b0ee611de57f8392039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:28:53:f8:e0:12:16:19:8a:9d:51:2f:ac:04: 12:50:c1:18:8b:de:4a:c8:b6:be:fa:92:ec:ec:fd: cc:c1:49:7b:68:8e:35:7b:0e:da:57:d0:76:59:a4: ed:09:a1:ed:54:db:5f:f2:3a:55:55:0d:65:51:cd: e3:7b:67:7c:66:a0:91:7c:ea:24:ee:d4:ca:11:3d: 67:92:a4:e2:b5:f5:cd:6f:e5:62:69:35:aa:34:2f: d9:60:62:2f:5e:04:2a:da:51:fb:42:c0:75:4c:c2: e5:68:c6:66:0b:34:15:82:91:75:60:dc:9a:2a:b5: c1:dd:00:2a:9e:8c:6d:0f:6f:35:65:ee:eb:4a:a3: c0:7b:a9:08:67:f5:5a:b5:4b:62:68:bd:e4:e2:ea: 81:10:bd:52:05:0a:5c:b8:e2:11:57:9d:4e:76:d2: 7d:ca:f9:28:8b:02:d2:35:1c:51:39:b1:5d:4e:de: d7:8a:c5:d8:30:9e:62:6f:96:af:58:0d:a0:53:7b: f0:ec:fe:42:60:19:79:bc:a4:96:83:ae:c7:ad:b4: c7:30:3b:89:db:db:b1:91:e8:ad:a8:0e:9d:d3:77: bb:41:a6:19:40:6b:d9:69:eb:32:ee:fe:47:96:ef: 68:24:85:1c:08:70:8e:31:07:73:a9:fd:cb:fe:4a: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6D:0D:18:11:8D:87:24:7C:3D:1B:0E:E6:11:DE:57:F8:39:20:39 X509v3 Authority Key Identifier: keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:53:64:a2:5a:a9:85:1e:b8:52:ed:cd:a6:0b:91:a4:6b:15: ba:cd:23:75:9f:13:d2:a4:57:d7:c1:c6:65:ad:bd:55:0c:80: 96:7d:34:0b:ee:1e:9b:d1:07:d0:61:1a:ac:3c:79:0a:17:ed: 2d:b7:a8:f5:d5:e5:6d:b7:7d:78:47:c5:15:7e:e8:55:43:34: 88:54:4d:94:74:02:f4:90:1e:d0:bc:eb:21:64:35:68:f1:98: 71:ab:7e:c4:db:a6:bb:04:8c:e9:db:d7:4a:28:8b:ea:7d:00: a1:1e:b8:0f:53:3d:32:e7:0d:7f:8b:8e:d7:06:f7:f8:90:ad: 8b:77:81:f7:12:0f:91:e1:e7:c0:03:10:33:69:9e:62:f6:c0: 67:a8:95:72:e5:b2:7e:5f:b3:70:de:61:11:2f:fa:be:28:b6: 00:31:5e:c0:e8:9f:db:97:09:40:e1:91:ce:43:5d:76:9a:a4: d1:ca:56:5a:93:dc:9d:b7:9e:f6:51:24:de:89:3c:a7:f5:30: 99:d2:e6:d7:eb:3e:c7:1b:81:4c:20:94:15:00:a9:8d:cf:4c: 1f:f0:16:7b:ca:42:25:8a:37:62:29:4a:84:f6:7f:ab:ca:01: 7b:59:b7:9a:8e:b0:2e:fa:57:90:a9:30:88:04:12:8e:e7:94: f2:94:17:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZM+OlWeJF4ZbPmXPAwt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNjUxNjY5MmM2MzgyYjNmODNkYWU5OTFmZDg5ZGQxYjBj ZWY1NzkwHhcNMjUxMjE1MTkwMjQ3WhcNMjUxMjE2MTkwMjQ3WjAzMTEwLwYDVQQD EyhkZDZkMGQxODExOGQ4NzI0N2MzZDFiMGVlNjExZGU1N2Y4MzkyMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArShT+OASFhmKnVEvrAQSUMEYi95K yLa++pLs7P3MwUl7aI41ew7aV9B2WaTtCaHtVNtf8jpVVQ1lUc3je2d8ZqCRfOok 7tTKET1nkqTitfXNb+ViaTWqNC/ZYGIvXgQq2lH7QsB1TMLlaMZmCzQVgpF1YNya KrXB3QAqnoxtD281Ze7rSqPAe6kIZ/VatUtiaL3k4uqBEL1SBQpcuOIRV51OdtJ9 yvkoiwLSNRxRObFdTt7XisXYMJ5ib5avWA2gU3vw7P5CYBl5vKSWg67HrbTHMDuJ 29uxkeitqA6d03e7QaYZQGvZaesy7v5Hlu9oJIUcCHCOMQdzqf3L/kpJzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1tDRgRjYckfD0bDuYR3lf4OSA5MB8GA1UdIwQY MBaAFNxlFmksY4Kz+D2umR/YndGwzvV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jZDlmZDMtYTNlZS00ZWM1LThjNTQt MmYzODNlODVlYmMwLzEvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9jZDlmZDMtYTNlZS00ZWM1LThjNTQtMmYzODNlODVlYmMw LzEvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1Nkolqp hR64Uu3NpguRpGsVus0jdZ8T0qRX18HGZa29VQyAln00C+4em9EH0GEarDx5Chft Lbeo9dXlbbd9eEfFFX7oVUM0iFRNlHQC9JAe0LzrIWQ1aPGYcat+xNumuwSM6dvX SiiL6n0AoR64D1M9MucNf4uO1wb3+JCti3eB9xIPkeHnwAMQM2meYvbAZ6iVcuWy fl+zcN5hES/6vii2ADFewOif25cJQOGRzkNddpqk0cpWWpPcnbee9lEk3ok8p/Uw mdLm1+s+xxuBTCCUFQCpjc9MH/AWe8pCJYo3YilKhPZ/q8oBe1m3mo6wLvpXkKkw iAQSjueU8pQXdw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:45:28 2025 by rpki-client