This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft File: Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json) Hash identifier: ONc/GaEF8DAlRx03GBjZCcmyF4shRrS2/+a3edRUK1g= Subject key identifier: 3F:A4:A1:3B:78:39:76:40:A6:97:D2:A5:28:90:BD:8D:87:BE:F1:2A Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c Certificate serial: 019B30E837E14552330F7EB8EC88A25DC0A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft Manifest number: 0F1E Signing time: Thu 18 Dec 2025 10:01:23 +0000 Manifest this update: Thu 18 Dec 2025 10:01:23 +0000 Manifest next update: Fri 19 Dec 2025 10:01:23 +0000 Files and hashes: 1: 2elU8M79ZokIDRQA4FCMvXhZ_30.roa (hash: xpy/QNiCAMomRGDsG3lcQqLW5mZVYEG99RtMqAQeBgw=) 2: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: uVZDUYX2/QdBi4TVH9wdamPS8N+JV5Hb8zZT6ckCSIg=) 3: aivWngKJz6YVhMe876fRwO2Pwak.roa (hash: QrxS5tWIMxcDOD99WB/oU0c4ZizRW8rYWP871u28/z4=) 4: uElDFGcVxZsMl0bu0vs6jORoDh8.roa (hash: aT6b179aTl0Zm/hagXpA3FILak7batN1BBwPLZgXw5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:37:e1:45:52:33:0f:7e:b8:ec:88:a2:5d:c0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c Validity Not Before: Dec 18 10:01:23 2025 GMT Not After : Dec 19 10:01:23 2025 GMT Subject: CN=3fa4a13b78397640a697d2a52890bd8d87bef12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:ea:7f:38:c2:9c:a0:49:c4:f6:89:70:f3: c0:e3:ba:8c:76:cc:62:66:a2:c1:c8:ee:d3:3b:b1: 1a:2c:05:34:f0:2d:ab:5c:3a:c7:40:78:4f:64:24: 11:10:7e:ff:94:56:d0:15:97:0a:fc:cf:39:98:9b: 00:c1:61:d4:1a:d0:5c:da:38:be:f1:f5:f4:43:af: 10:31:ab:81:95:55:ff:74:7d:0f:8a:33:64:48:6b: 7a:23:c9:e3:79:70:3a:4e:af:a4:fd:9f:e6:27:f3: 6f:47:e0:96:b1:dc:6a:20:c0:7d:54:83:2b:1b:a2: e4:a9:90:78:dc:22:ec:e0:6f:3b:4d:57:0d:11:36: d7:d9:db:d9:94:4b:7d:20:21:68:16:96:ba:77:a8: 5f:0e:bc:70:cb:5e:e5:62:3c:12:05:94:05:69:f7: c4:bc:5b:84:bf:0f:57:71:03:1f:2e:85:7e:4e:5b: 19:2e:f0:6f:c5:87:ab:9e:fb:ab:a7:a5:4d:ae:3e: d9:fb:ac:f0:60:0c:b3:cc:5d:96:9c:ff:2c:2b:bb: b7:f8:af:4e:25:67:b5:07:88:2b:fd:66:ba:0f:ea: cc:a5:b2:03:43:e0:3b:82:09:55:45:fe:91:33:38: 0d:f0:9a:ea:15:f3:fd:ad:c2:2c:25:97:5f:a3:6f: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A4:A1:3B:78:39:76:40:A6:97:D2:A5:28:90:BD:8D:87:BE:F1:2A X509v3 Authority Key Identifier: keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:6d:72:cd:02:85:8f:68:bf:10:b3:e0:76:44:4b:6d:c9:09: 44:a7:78:b2:f4:ae:9b:1b:3d:b7:63:e9:09:b8:a7:85:ca:f6: 41:ea:33:31:de:95:90:f4:f2:a3:12:96:1e:ce:9a:09:8a:c1: 56:67:e5:ab:56:4e:8b:45:64:bd:90:f2:77:59:2d:0b:52:b8: 1f:bd:32:db:4e:fd:20:cc:20:71:9f:47:4c:2e:b4:67:c6:8c: d7:79:e3:e1:d1:29:a8:9c:e9:e3:25:2d:4f:f9:68:ef:4e:87: 5a:27:e2:0a:a8:46:89:54:8b:cf:79:72:53:5f:b5:06:4f:1c: c6:41:ab:42:9a:2b:c3:fb:0d:c6:85:34:d0:92:3d:57:ed:44: 9b:e5:fc:92:87:4f:1b:70:d2:fc:94:3b:3e:b2:65:e8:e6:48: a0:d2:49:45:36:6c:54:0f:c0:47:cc:05:55:8c:96:d6:5b:fa: a5:8b:22:64:a4:9e:e7:3b:d4:e3:b2:61:f8:53:d7:d0:6f:c5: 8e:13:4f:24:04:95:68:b5:06:e9:e5:de:31:0a:9e:d3:92:0e: c4:0b:ec:8d:89:2b:de:42:b4:0b:dd:91:62:02:19:b6:c5:94: 9f:b8:57:fd:b3:92:f9:96:93:8e:10:65:93:bc:d2:48:88:5d: 73:ea:44:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6DfhRVIzD3647IiiXcCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZGRkNGM5ZGMyM2ZhYzM1NTc0ZmNlMmI0Mjk0Mzk4YWRk ODUyMWMwHhcNMjUxMjE4MTAwMTIzWhcNMjUxMjE5MTAwMTIzWjAzMTEwLwYDVQQD EygzZmE0YTEzYjc4Mzk3NjQwYTY5N2QyYTUyODkwYmQ4ZDg3YmVmMTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNrqfzjCnKBJxPaJcPPA47qMdsxi ZqLByO7TO7EaLAU08C2rXDrHQHhPZCQREH7/lFbQFZcK/M85mJsAwWHUGtBc2ji+ 8fX0Q68QMauBlVX/dH0PijNkSGt6I8njeXA6Tq+k/Z/mJ/NvR+CWsdxqIMB9VIMr G6LkqZB43CLs4G87TVcNETbX2dvZlEt9ICFoFpa6d6hfDrxwy17lYjwSBZQFaffE vFuEvw9XcQMfLoV+TlsZLvBvxYernvurp6VNrj7Z+6zwYAyzzF2WnP8sK7u3+K9O JWe1B4gr/Wa6D+rMpbIDQ+A7gglVRf6RMzgN8JrqFfP9rcIsJZdfo2/u8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+koTt4OXZAppfSpSiQvY2HvvEqMB8GA1UdIwQY MBaAFBXd1MncI/rDVXT84rQpQ5it2FIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmQzVXlkd2otc05WZFB6aXRDbERtSzNZVWh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zNTgyNTMtNDFlOC00YzEzLWJmYWEt Y2IzY2QwNDA0YWI1LzEvRmQzVXlkd2otc05WZFB6aXRDbERtSzNZVWh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zNTgyNTMtNDFlOC00YzEzLWJmYWEtY2IzY2QwNDA0YWI1 LzEvRmQzVXlkd2otc05WZFB6aXRDbERtSzNZVWh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeW1yzQKF j2i/ELPgdkRLbckJRKd4svSumxs9t2PpCbinhcr2QeozMd6VkPTyoxKWHs6aCYrB Vmflq1ZOi0VkvZDyd1ktC1K4H70y2079IMwgcZ9HTC60Z8aM13nj4dEpqJzp4yUt T/lo706HWifiCqhGiVSLz3lyU1+1Bk8cxkGrQporw/sNxoU00JI9V+1Em+X8kodP G3DS/JQ7PrJl6OZIoNJJRTZsVA/AR8wFVYyW1lv6pYsiZKSe5zvU47Jh+FPX0G/F jhNPJASVaLUG6eXeMQqe05IOxAvsjYkr3kK0C92RYgIZtsWUn7hX/bOS+ZaTjhBl k7zSSIhdc+pEuQ== -----END CERTIFICATE-----Generated at Thu Dec 18 19:05:26 2025 by rpki-client