This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft File: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft (raw, json) Hash identifier: cVcm2mgWQQJnEXB5Mstn2XmgwMQ7jbbc/RKsYSfl3k0= Subject key identifier: 14:75:BA:8D:D6:C1:A8:EF:24:45:C7:18:3B:2F:D1:D9:A3:2D:EC:DB Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec Certificate serial: 019B304345B1EB8CC3CFFD066994F9A883FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft Manifest number: 1456 Signing time: Thu 18 Dec 2025 07:01:13 +0000 Manifest this update: Thu 18 Dec 2025 07:01:13 +0000 Manifest next update: Fri 19 Dec 2025 07:01:13 +0000 Files and hashes: 1: 2VevK0HBk8qY35gQ5UtjfqrB3nY.roa (hash: AmV1BLqc7vTs/6UGFEgRF0w9AuqYNGKRtxRFQd+4rZ8=) 2: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl (hash: A5gAV92toCR5B9rWAdnDsbUbR3KKYkPHVN+K8kTKwvA=) 3: 5vHG0OxzvrqhI56hWt2APxlEca8.roa (hash: bzsGlpjOWPgo9xk0iMmmEBroNlHWE3HqNZ6pialCu6g=) 4: gr8V9GG2sn3v6HXV22VsNMEvx-4.roa (hash: sigWijBONNzFo5YlkJnYB4sz+kl8GULVAa+gCk4rEkg=) 5: v3bh2N4thqCv2jw1YX5PjUcZEd0.roa (hash: nIfMLuntg2xncQRj0ShSY9tFssqvjsfpfyRvdL0VSvM=) 6: yjS8W9q67f67-uZJSGqCLJtk9CY.roa (hash: M5J4UIW6ljIVCBEds8d+YToalBiEOBtwIgj/E8wpY8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:45:b1:eb:8c:c3:cf:fd:06:69:94:f9:a8:83:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec Validity Not Before: Dec 18 07:01:13 2025 GMT Not After : Dec 19 07:01:13 2025 GMT Subject: CN=1475ba8dd6c1a8ef2445c7183b2fd1d9a32decdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:38:9a:5c:5c:fe:86:c2:dc:b6:f1:cd:9a: 58:27:ab:25:e1:8c:98:f5:fe:1b:ae:d5:bf:28:fe: 5d:13:a9:a2:91:ba:d1:52:d1:71:d0:82:45:01:ab: b5:a1:6b:91:e3:06:3c:02:f0:9c:30:47:9d:89:96: b3:a1:89:8e:ab:97:ba:ee:3c:3d:6d:11:b6:e4:d1: 92:b9:ee:bd:c8:9a:00:32:19:48:33:45:5d:06:c8: f7:95:c5:20:f8:29:7c:1c:8b:6f:13:8e:5b:90:cf: ea:2b:e4:59:1f:38:70:ec:db:54:94:3e:89:6a:bd: 57:39:54:77:d6:3c:86:b4:a3:b3:6f:5c:fc:be:28: 74:89:90:13:dd:24:d0:21:39:89:f9:89:ed:01:d7: d9:6b:a5:87:24:a9:6d:46:60:a0:55:07:05:7c:b9: 1a:10:4c:0b:b2:06:e5:85:42:b1:b5:3d:b3:33:cf: f6:50:20:8d:89:d2:13:47:75:ef:95:18:12:e2:79: fd:95:84:b8:4a:08:f8:18:cc:78:64:8b:6a:3f:46: 0a:0c:60:37:13:a9:cf:77:dd:6d:58:b4:ea:f3:5f: e9:b9:7f:98:92:79:d8:d0:a5:c4:e5:cc:b4:35:71: 23:74:19:9d:aa:73:63:b4:df:2e:a7:cb:d7:25:4e: ee:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:75:BA:8D:D6:C1:A8:EF:24:45:C7:18:3B:2F:D1:D9:A3:2D:EC:DB X509v3 Authority Key Identifier: keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:de:e7:e6:68:b0:33:14:8c:11:59:2c:ea:96:02:50:d3:cc: c5:25:30:c9:13:be:e1:15:0b:2c:6a:5b:f8:cf:e8:8c:44:df: 62:08:33:4c:7a:8f:0a:38:8c:fe:43:37:93:0a:0b:bc:17:28: d3:58:59:6b:22:b3:74:18:9b:9d:d7:6f:84:52:ed:a9:d9:f5: 10:f1:08:4d:1f:51:4b:e5:98:f6:16:9b:ec:18:3f:8d:c5:16: 82:1a:4b:b1:ef:02:61:f7:46:67:5b:81:26:7a:10:18:15:59: 3d:ac:6f:57:af:86:1f:08:bc:0a:4a:66:5a:8f:0d:63:82:5d: 7b:b5:cd:e0:ef:7c:de:60:c0:f5:86:c3:f7:ea:ca:30:d8:77: 57:da:d1:2a:aa:71:0e:42:83:41:70:73:f0:d6:8b:e7:c2:2f: 44:28:14:79:d9:52:52:bb:0d:8f:e5:4c:ff:5f:70:6a:94:e0: a7:ce:9c:1f:3a:f6:ab:49:ab:f9:cb:00:22:c8:64:b0:63:fc: 94:31:3f:f7:ce:00:5a:b7:fb:81:f3:71:47:5d:96:74:6e:f7: 94:b2:35:c5:51:b2:b7:04:b6:91:0f:83:49:18:ff:0f:2a:1d: e1:76:64:b9:85:f6:07:1c:91:8b:f2:fc:22:8e:5c:45:bf:d7: ef:d4:8e:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQ0Wx64zDz/0GaZT5qIP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjM2NiMjBjNWNhN2M0ZWQ4ZTQyMDc4YjFhNjcyODdhMGQ5 OTFjZWMwHhcNMjUxMjE4MDcwMTEzWhcNMjUxMjE5MDcwMTEzWjAzMTEwLwYDVQQD EygxNDc1YmE4ZGQ2YzFhOGVmMjQ0NWM3MTgzYjJmZDFkOWEzMmRlY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolc4mlxc/obC3LbxzZpYJ6sl4YyY 9f4brtW/KP5dE6mikbrRUtFx0IJFAau1oWuR4wY8AvCcMEediZazoYmOq5e67jw9 bRG25NGSue69yJoAMhlIM0VdBsj3lcUg+Cl8HItvE45bkM/qK+RZHzhw7NtUlD6J ar1XOVR31jyGtKOzb1z8vih0iZAT3STQITmJ+YntAdfZa6WHJKltRmCgVQcFfLka EEwLsgblhUKxtT2zM8/2UCCNidITR3XvlRgS4nn9lYS4Sgj4GMx4ZItqP0YKDGA3 E6nPd91tWLTq81/puX+YknnY0KXE5cy0NXEjdBmdqnNjtN8up8vXJU7uBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBR1uo3WwajvJEXHGDsv0dmjLezbMB8GA1UdIwQY MBaAFNw8sgxcp8TtjkIHixpnKHoNmRzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjkt ODI2NjBlZTRlYWM0LzEvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjktODI2NjBlZTRlYWM0 LzEvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAft7n5miw MxSMEVks6pYCUNPMxSUwyRO+4RULLGpb+M/ojETfYggzTHqPCjiM/kM3kwoLvBco 01hZayKzdBibnddvhFLtqdn1EPEITR9RS+WY9hab7Bg/jcUWghpLse8CYfdGZ1uB JnoQGBVZPaxvV6+GHwi8CkpmWo8NY4Jde7XN4O983mDA9YbD9+rKMNh3V9rRKqpx DkKDQXBz8NaL58IvRCgUedlSUrsNj+VM/19wapTgp86cHzr2q0mr+csAIshksGP8 lDE/984AWrf7gfNxR12WdG73lLI1xVGytwS2kQ+DSRj/Dyod4XZkuYX2BxyRi/L8 Io5cRb/X79SOpA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:26:22 2025 by rpki-client