This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json) Hash identifier: W6gqsepTYPkJz/4iscZuDs/hEU3M+qQ1mbTxcOwensk= Subject key identifier: 0F:F0:70:9E:34:68:02:F7:CC:B1:8B:C8:BC:D7:DB:EE:58:91:23:C7 Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02 Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302 Certificate serial: 019B3CB4E0EB4F019F48628EBFA754A6317C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft Manifest number: 0410 Signing time: Sat 20 Dec 2025 17:00:45 +0000 Manifest this update: Sat 20 Dec 2025 17:00:45 +0000 Manifest next update: Sun 21 Dec 2025 17:00:45 +0000 Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: ss9pUXqni+VD/PuszizzKjPNY0yiWoUY7DqwjNuSeSU=) 2: wSO8Qf5_v1p-oNDifbsTI9tUaPY.roa (hash: t8VFb4R1YuauyoB16s9G5smfDaNXuP879i5idHgDRZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:e0:eb:4f:01:9f:48:62:8e:bf:a7:54:a6:31:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302 Validity Not Before: Dec 20 17:00:45 2025 GMT Not After : Dec 21 17:00:45 2025 GMT Subject: CN=0ff0709e346802f7ccb18bc8bcd7dbee589123c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:58:6b:82:19:47:83:ae:20:ad:51:dc:cd:da: 2a:83:a5:20:af:c5:ae:c2:e0:3e:89:d3:c8:2f:f5: 9c:ca:8d:7e:aa:38:c4:05:fc:a2:4a:5d:40:1f:5b: ee:d8:4e:0c:cd:84:83:5f:c1:2a:da:40:26:41:31: 51:99:6f:e0:e9:3e:8a:52:57:80:7a:da:a1:96:c4: 0d:57:59:02:8f:55:3c:02:74:1f:a7:48:9b:b2:fa: d1:d9:91:26:50:f6:48:b5:1d:5a:94:1a:bd:6e:06: 12:13:fa:d1:d7:32:9c:aa:64:1d:b4:ff:ec:2e:31: 4a:38:23:00:4b:75:7f:af:20:31:d9:d4:74:8c:84: 88:04:9d:e5:94:27:54:d8:8a:5b:19:97:98:17:51: e6:9a:68:69:e2:7a:a4:c1:e0:9b:a6:64:62:c4:4c: 99:05:ef:98:ee:35:e4:bc:da:bf:86:86:73:67:71: 9e:44:d2:92:ef:42:7d:81:c6:34:ed:aa:60:8d:b5: 54:ec:2c:e8:17:1e:4e:ec:c7:63:7b:58:b7:d8:dc: 0c:f9:d3:2a:28:f0:62:ff:ab:92:b7:6e:51:d1:7d: d7:e9:2e:c3:88:64:e7:0d:ac:04:be:a8:4c:95:48: e5:e4:74:c0:c2:41:9d:39:df:9b:5a:18:e7:9c:58: 28:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F0:70:9E:34:68:02:F7:CC:B1:8B:C8:BC:D7:DB:EE:58:91:23:C7 X509v3 Authority Key Identifier: keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:dd:50:e9:91:4a:5f:88:7d:49:c6:e7:83:3a:61:3b:f5:a5: 58:f3:57:aa:1c:10:72:9d:0f:1d:c3:eb:3f:64:b3:58:4b:08: fe:ca:88:58:5f:7d:a2:53:aa:39:21:b7:2c:95:29:0e:60:9b: 92:0d:27:b7:be:38:35:af:41:9c:ef:8e:a2:a4:3e:bc:d9:6e: 3d:15:a5:6f:2a:2f:53:8f:ba:f8:d8:29:8e:56:af:cc:8c:79: 1f:71:5b:aa:6d:b4:61:99:ad:48:ae:d8:2a:79:47:42:67:dd: f7:01:4a:b5:d2:70:65:4d:80:76:f1:70:6f:b2:7d:51:94:a6: a0:e0:d9:f1:40:dd:f8:d6:22:aa:ef:ed:c7:84:ac:a8:d3:75: 63:94:1a:c1:9e:01:32:a0:64:0e:5f:14:e8:a3:0d:7b:a7:a1: c1:fa:b8:15:fa:25:6e:c9:62:60:61:fc:d7:74:2f:70:00:2a: 60:75:e1:b7:cf:dc:c7:e2:9e:63:9a:6a:f8:57:c0:14:db:1b: 9c:aa:cf:29:e7:01:67:ab:35:05:f7:eb:d9:75:c0:04:06:b2: 89:25:f9:5f:70:c6:fd:ed:f2:dd:eb:63:27:c5:60:be:f3:fd: 97:b4:e2:39:d4:34:68:05:2e:4c:9a:a2:08:2c:f5:ab:b6:9e: c4:78:12:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tODrTwGfSGKOv6dUpjF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOGUzODE4N2FlNzBjYmM3YmVkNjk1NzU5ZjBlMDMyOTlm YmIzMDIwHhcNMjUxMjIwMTcwMDQ1WhcNMjUxMjIxMTcwMDQ1WjAzMTEwLwYDVQQD EygwZmYwNzA5ZTM0NjgwMmY3Y2NiMThiYzhiY2Q3ZGJlZTU4OTEyM2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllhrghlHg64grVHczdoqg6Ugr8Wu wuA+idPIL/Wcyo1+qjjEBfyiSl1AH1vu2E4MzYSDX8Eq2kAmQTFRmW/g6T6KUleA etqhlsQNV1kCj1U8AnQfp0ibsvrR2ZEmUPZItR1alBq9bgYSE/rR1zKcqmQdtP/s LjFKOCMAS3V/ryAx2dR0jISIBJ3llCdU2IpbGZeYF1Hmmmhp4nqkweCbpmRixEyZ Be+Y7jXkvNq/hoZzZ3GeRNKS70J9gcY07apgjbVU7CzoFx5O7Mdje1i32NwM+dMq KPBi/6uSt25R0X3X6S7DiGTnDawEvqhMlUjl5HTAwkGdOd+bWhjnnFgoqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/wcJ40aAL3zLGLyLzX2+5YkSPHMB8GA1UdIwQY MBaAFN6OOBh65wy8e+1pV1nw4DKZ+7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMt NWIxZjQ4YjNlMjE0LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMtNWIxZjQ4YjNlMjE0 LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANN1Q6ZFK X4h9ScbngzphO/WlWPNXqhwQcp0PHcPrP2SzWEsI/sqIWF99olOqOSG3LJUpDmCb kg0nt744Na9BnO+OoqQ+vNluPRWlbyovU4+6+NgpjlavzIx5H3Fbqm20YZmtSK7Y KnlHQmfd9wFKtdJwZU2AdvFwb7J9UZSmoODZ8UDd+NYiqu/tx4SsqNN1Y5QawZ4B MqBkDl8U6KMNe6ehwfq4FfolbsliYGH813QvcAAqYHXht8/cx+KeY5pq+FfAFNsb nKrPKecBZ6s1Bffr2XXABAayiSX5X3DG/e3y3etjJ8VgvvP9l7TiOdQ0aAUuTJqi CCz1q7aexHgSjg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:31:40 2025 by rpki-client