This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: gWqTMx55ShMdHtI5f6K9M0JBLYHrw73UhfDJFlS53Y4= Subject key identifier: BE:3D:6C:93:55:38:2A:AC:3C:F2:DD:28:91:14:AD:B5:AF:42:F5:DC Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019B3F11884BB7F25DCFE26A253178CC6AE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 1352 Signing time: Sun 21 Dec 2025 04:01:12 +0000 Manifest this update: Sun 21 Dec 2025 04:01:12 +0000 Manifest next update: Mon 22 Dec 2025 04:01:12 +0000 Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: kJ4vNgG2zsD9H9UPy/c0d7TYPSQQkxEtpjuHyh/ilmg=) 3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=) 4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=) 5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=) 6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=) 7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=) 8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:88:4b:b7:f2:5d:cf:e2:6a:25:31:78:cc:6a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Dec 21 04:01:12 2025 GMT Not After : Dec 22 04:01:12 2025 GMT Subject: CN=be3d6c9355382aac3cf2dd289114adb5af42f5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:fd:1f:ef:8d:a3:22:8b:56:40:e0:e9:cb: 22:2c:a0:69:f9:be:f7:36:39:87:e6:71:9a:06:d8: e4:fe:94:81:8b:ff:2d:5f:74:dc:08:b4:d9:db:8c: 4b:6b:04:5c:85:61:1e:ab:61:50:5c:a5:55:a5:0e: c8:41:1f:d6:f7:23:77:24:bf:c1:8a:d5:53:0d:d7: c5:61:91:e9:ed:29:5a:d7:f1:5d:0f:7b:78:54:9a: d6:e8:6d:68:4f:bc:12:43:90:f6:d5:37:72:0d:25: 75:71:3e:58:56:5e:aa:66:91:8e:a7:b6:d0:03:64: e5:4c:0b:33:e9:63:18:8b:a3:14:83:16:5c:fe:ce: 8a:16:04:0c:3d:a6:8e:5e:0d:2c:59:f8:c5:02:73: 78:0a:a9:0c:e1:b0:cc:73:c7:f0:4c:6e:80:ba:4e: c6:19:16:c5:15:34:38:22:61:cf:44:c9:55:87:c4: 32:54:93:3c:55:49:a8:39:6a:c8:51:fe:dc:c1:e6: a5:58:0d:7f:0b:9d:a4:ae:60:36:e1:34:fe:78:39: d6:57:b0:9c:e1:6a:0d:a1:57:ec:1c:45:9d:16:f5: 15:ef:c2:57:15:93:28:18:3f:dd:7c:50:43:d3:3b: 9f:81:ed:54:34:21:b5:9b:eb:49:13:d2:50:1a:81: 1c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3D:6C:93:55:38:2A:AC:3C:F2:DD:28:91:14:AD:B5:AF:42:F5:DC X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:cb:9c:85:cf:5b:a5:11:bc:7d:70:54:09:1d:66:71:ba:cf: a1:c7:26:67:1a:02:4d:bc:10:7c:c2:6e:c9:5a:ef:de:8e:a2: 82:2d:65:97:1b:a4:6b:cf:4c:12:a7:b8:be:30:01:99:c5:c7: 58:a6:99:4b:34:96:38:cf:44:74:f3:fc:25:5d:b8:43:79:2c: ae:4a:2c:0a:28:29:e4:74:32:ae:26:e9:f9:33:93:4c:fe:76: ae:b7:7f:ff:f1:88:62:22:13:fa:57:b0:8c:f7:e7:a5:a3:87: d3:6e:01:c5:c4:98:86:8e:97:53:bc:57:2f:44:8d:58:e2:16: e6:5c:99:59:1a:e3:47:e9:5d:fd:04:83:a9:8f:1c:d6:d6:e7: f1:fd:00:c1:69:90:1e:01:fd:94:8c:00:9d:17:05:d0:c2:d0: 24:6c:b5:6a:f0:44:b4:c0:ea:8d:e3:6e:d7:1a:ac:d9:99:6a: 0e:6f:40:b9:04:e1:f9:da:63:87:0e:bb:45:57:30:08:e2:22: d6:da:2a:de:e3:ac:ef:b3:67:8d:0e:0c:34:81:47:ff:cc:72: 62:80:8b:dc:50:4c:2f:54:02:45:5e:35:07:7b:b0:a3:f5:0e: 5e:65:80:54:51:4c:1d:81:d6:5b:cf:06:d9:f9:45:ea:0a:ca: d9:6a:70:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EYhLt/Jdz+JqJTF4zGrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjUxMjIxMDQwMTEyWhcNMjUxMjIyMDQwMTEyWjAzMTEwLwYDVQQD EyhiZTNkNmM5MzU1MzgyYWFjM2NmMmRkMjg5MTE0YWRiNWFmNDJmNWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZb9H++NoyKLVkDg6csiLKBp+b73 NjmH5nGaBtjk/pSBi/8tX3TcCLTZ24xLawRchWEeq2FQXKVVpQ7IQR/W9yN3JL/B itVTDdfFYZHp7Sla1/FdD3t4VJrW6G1oT7wSQ5D21TdyDSV1cT5YVl6qZpGOp7bQ A2TlTAsz6WMYi6MUgxZc/s6KFgQMPaaOXg0sWfjFAnN4CqkM4bDMc8fwTG6Auk7G GRbFFTQ4ImHPRMlVh8QyVJM8VUmoOWrIUf7cwealWA1/C52krmA24TT+eDnWV7Cc 4WoNoVfsHEWdFvUV78JXFZMoGD/dfFBD0zufge1UNCG1m+tJE9JQGoEcVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL49bJNVOCqsPPLdKJEUrbWvQvXcMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy8uchc9b pRG8fXBUCR1mcbrPoccmZxoCTbwQfMJuyVrv3o6igi1llxuka89MEqe4vjABmcXH WKaZSzSWOM9EdPP8JV24Q3ksrkosCigp5HQyribp+TOTTP52rrd///GIYiIT+lew jPfnpaOH024BxcSYho6XU7xXL0SNWOIW5lyZWRrjR+ld/QSDqY8c1tbn8f0AwWmQ HgH9lIwAnRcF0MLQJGy1avBEtMDqjeNu1xqs2ZlqDm9AuQTh+dpjhw67RVcwCOIi 1toq3uOs77NnjQ4MNIFH/8xyYoCL3FBML1QCRV41B3uwo/UOXmWAVFFMHYHWW88G 2flF6grK2Wpwww== -----END CERTIFICATE-----Generated at Sun Dec 21 11:15:02 2025 by rpki-client