This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft File: k3WPkqf9c1m6KEgSWoTfzELRS2w.mft (raw, json) Hash identifier: GaZOsx5pgeM/YnwpKzWN601iut8IICs8WGelTcGxYao= Subject key identifier: 05:94:38:5F:0E:52:E3:DD:EA:D0:92:7C:C6:93:0B:3E:CA:A8:2E:9F Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c Certificate serial: 019B3FED29EADFB555B252903599AC6712EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 08:01:05 +0000 Manifest this update: Sun 21 Dec 2025 08:01:05 +0000 Manifest next update: Mon 22 Dec 2025 08:01:05 +0000 Files and hashes: 1: 3eljxNVJVZAst96YnbvE652QheI.roa (hash: 945B3Tb82Y1r4mEfNvlyjYkVtkNkGVILFWSmWev6li0=) 2: k3WPkqf9c1m6KEgSWoTfzELRS2w.crl (hash: bLv3RMWFWhg0LjabQWgZshjERDNi/OiBDDdazW7xNCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:29:ea:df:b5:55:b2:52:90:35:99:ac:67:12:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c Validity Not Before: Dec 21 08:01:05 2025 GMT Not After : Dec 22 08:01:05 2025 GMT Subject: CN=0594385f0e52e3ddead0927cc6930b3ecaa82e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:fb:a3:3d:bb:c8:24:b4:34:f1:44:2e:f5: 8c:d1:65:7a:c7:c1:f1:6c:cd:29:7a:2f:be:53:8a: dd:f9:ec:a0:e3:7a:ee:46:bb:58:4a:bb:22:a8:ca: ef:15:c3:90:99:10:d6:6d:4a:3a:39:57:82:c6:59: e2:a7:e2:84:39:c6:61:b8:77:0a:de:56:b9:c8:9f: 29:fe:1c:a8:f5:13:f8:b5:e1:57:79:fb:66:95:fd: f4:5c:6b:19:56:37:ea:f3:1d:de:45:07:fc:ed:e8: 10:93:d3:5f:66:e1:00:bf:a7:58:ee:7e:f6:a4:96: 63:57:7e:4a:f2:e3:45:64:83:94:a0:1d:80:c8:93: 47:ce:7b:52:ed:bb:e7:48:1f:c9:f6:85:a2:1e:27: 82:80:63:ef:81:74:c2:ba:ee:ab:e2:77:93:7f:72: ad:40:4b:8a:d1:e2:c8:9b:7e:5b:28:49:5a:43:aa: 41:91:7c:0b:e5:be:d1:32:fb:cb:60:d9:fa:1f:de: 84:a1:b4:bb:ed:49:78:a3:c7:47:d2:45:ac:2f:b3: 3e:5a:81:b7:1c:d0:59:11:e9:5e:d2:25:50:39:df: 70:17:81:6a:e6:60:45:a0:f7:6d:4a:c1:b7:66:07: 56:25:ef:33:4e:d5:9f:27:9a:98:21:f9:38:2b:33: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:94:38:5F:0E:52:E3:DD:EA:D0:92:7C:C6:93:0B:3E:CA:A8:2E:9F X509v3 Authority Key Identifier: keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a4:b1:f3:da:a5:df:04:0c:3a:fd:fc:2b:69:96:8c:ec:24: 95:3c:d5:57:8c:f0:79:e8:e9:a3:2c:a0:41:cf:11:33:07:ec: ad:2b:4a:97:6d:1a:91:e6:7e:76:14:b5:7f:9b:8b:8a:7a:d3: 7f:82:f6:3d:47:13:63:65:b2:d4:42:ed:2a:16:f0:5f:75:f9: 21:68:07:06:f5:e5:4a:07:a8:c0:2a:00:b5:c6:2e:ac:df:b4: 08:b2:b7:4f:90:e0:51:ff:b5:c0:da:60:49:f0:cb:bb:a7:a5: 23:59:2d:93:26:b8:cc:cf:ba:b7:b8:c6:b1:9a:d3:7e:12:d3: 6c:c9:06:34:1a:ac:13:05:89:8d:0e:73:1f:05:45:32:43:ad: bb:8f:fa:83:2a:05:a0:0a:27:c1:31:2d:dc:9a:f4:12:96:7d: ad:40:d7:26:fc:5d:f6:c5:8b:6d:83:1b:b1:1c:32:1f:75:fd: a7:d5:cd:2e:a2:36:23:4a:10:68:ef:75:3c:50:e6:de:36:32: 00:8e:04:c9:da:5b:88:62:69:8d:b4:81:d6:4a:4f:17:7e:d1: bf:4a:0d:df:b0:a3:11:68:0c:16:b1:02:24:9d:91:a4:18:bd: 5d:00:8f:1c:42:d4:31:ca:8e:40:5d:cd:8a:06:ad:4e:13:1b: 94:04:03:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7Snq37VVslKQNZmsZxLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNzU4ZjkyYTdmZDczNTliYTI4NDgxMjVhODRkZmNjNDJk MTRiNmMwHhcNMjUxMjIxMDgwMTA1WhcNMjUxMjIyMDgwMTA1WjAzMTEwLwYDVQQD EygwNTk0Mzg1ZjBlNTJlM2RkZWFkMDkyN2NjNjkzMGIzZWNhYTgyZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArov7oz27yCS0NPFELvWM0WV6x8Hx bM0pei++U4rd+eyg43ruRrtYSrsiqMrvFcOQmRDWbUo6OVeCxlnip+KEOcZhuHcK 3la5yJ8p/hyo9RP4teFXeftmlf30XGsZVjfq8x3eRQf87egQk9NfZuEAv6dY7n72 pJZjV35K8uNFZIOUoB2AyJNHzntS7bvnSB/J9oWiHieCgGPvgXTCuu6r4neTf3Kt QEuK0eLIm35bKElaQ6pBkXwL5b7RMvvLYNn6H96EobS77Ul4o8dH0kWsL7M+WoG3 HNBZEele0iVQOd9wF4Fq5mBFoPdtSsG3ZgdWJe8zTtWfJ5qYIfk4KzP9ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWUOF8OUuPd6tCSfMaTCz7KqC6fMB8GA1UdIwQY MBaAFJN1j5Kn/XNZuihIElqE38xC0UtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZjZkNGEtMTE2Ni00ZDJkLWE5MjEt ZTE0M2ZhYWEwYjgyLzEvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wZjZkNGEtMTE2Ni00ZDJkLWE5MjEtZTE0M2ZhYWEwYjgy LzEvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6Sx89ql 3wQMOv38K2mWjOwklTzVV4zweejpoyygQc8RMwfsrStKl20akeZ+dhS1f5uLinrT f4L2PUcTY2Wy1ELtKhbwX3X5IWgHBvXlSgeowCoAtcYurN+0CLK3T5DgUf+1wNpg SfDLu6elI1ktkya4zM+6t7jGsZrTfhLTbMkGNBqsEwWJjQ5zHwVFMkOtu4/6gyoF oAonwTEt3Jr0EpZ9rUDXJvxd9sWLbYMbsRwyH3X9p9XNLqI2I0oQaO91PFDm3jYy AI4EydpbiGJpjbSB1kpPF37Rv0oN37CjEWgMFrECJJ2RpBi9XQCPHELUMcqOQF3N igatThMblAQDcg== -----END CERTIFICATE-----Generated at Sun Dec 21 16:55:59 2025 by rpki-client