This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft File: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json) Hash identifier: s88sq/IYW7rPMYPe4ywuItzi9fQpGGKWM+KN76zLP28= Subject key identifier: CD:A6:63:50:75:79:2D:23:86:CC:CD:B2:C3:DD:A9:4D:3F:BC:A6:03 Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E Certificate issuer: /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e Certificate serial: 019B2363C5F1C74BCEA5E6F4DFE8312ED15C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 19:01:39 +0000 Manifest this update: Mon 15 Dec 2025 19:01:39 +0000 Manifest next update: Tue 16 Dec 2025 19:01:39 +0000 Files and hashes: 1: 3R3CMh1y4wsFDSZM0M3C1xZygbQ.roa (hash: XMT6KzECLufc9ZTbE5ZuXejsU3/rr0tksv09pEK0Cjw=) 2: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: 6x1A8Ds3sMdoMqFJ7avBIn2/6GYyeXG6RvhiozGRnQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:c5:f1:c7:4b:ce:a5:e6:f4:df:e8:31:2e:d1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e Validity Not Before: Dec 15 19:01:39 2025 GMT Not After : Dec 16 19:01:39 2025 GMT Subject: CN=cda6635075792d2386cccdb2c3dda94d3fbca603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:d7:3d:6d:fd:2a:3e:e0:74:b5:6f:e0:fb: f9:c0:a0:98:d7:c5:57:09:cd:8a:1a:1d:e7:90:c9: 6f:4f:d0:dd:c2:f1:24:a0:27:1f:c9:9d:b6:a4:99: 11:0e:ea:43:5c:65:a7:56:83:0d:d2:38:56:b7:50: 9f:51:45:a6:d8:05:31:4d:a8:fd:a0:34:d0:5e:95: e2:71:2c:26:7b:7e:ac:ce:df:1f:a9:89:02:cf:ca: cd:4f:d3:b1:b6:e4:8b:18:3e:7b:05:f5:b8:d4:33: 1d:02:3b:da:bf:a1:1e:7c:58:71:10:7c:48:aa:61: 5a:b9:df:e8:96:d5:f7:eb:c9:32:1d:06:1a:82:a2: 12:e4:62:21:57:ce:a0:68:3d:96:45:dc:bb:3a:34: 0c:a9:b4:d6:c8:62:10:3c:29:b2:83:77:fa:a0:cb: 97:c5:73:d4:66:f8:10:d3:ba:2b:58:5b:f3:c9:bc: 99:64:4b:04:2d:78:c9:7c:2e:d0:db:05:16:6a:4d: f7:1e:6d:5c:7a:0d:5b:6c:ea:d3:c8:1e:2a:43:43: d3:99:bf:5b:c2:fe:42:80:9c:69:01:af:bf:c8:b0: 9e:93:46:9a:6b:86:1f:31:ac:ae:00:65:a2:16:6f: ef:d9:fc:8a:3c:c9:4c:bd:b0:32:43:6b:29:64:a3: 3d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A6:63:50:75:79:2D:23:86:CC:CD:B2:C3:DD:A9:4D:3F:BC:A6:03 X509v3 Authority Key Identifier: keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:8d:2f:67:be:93:f0:0b:a3:f6:86:93:cf:64:92:4d:a7:59: d2:45:5e:f9:f3:79:71:d4:ab:75:fa:73:ca:2c:1d:48:8b:84: 01:af:1b:4d:0e:01:9d:69:58:80:fd:7b:fd:e8:09:f4:cc:d7: 61:c7:c4:d1:4c:fa:2d:b5:57:71:9c:72:ed:80:5a:19:f7:b1: b4:17:65:d0:f0:18:04:19:79:7f:0b:29:ca:f7:e8:e3:0c:88: 57:7c:27:02:40:cf:e5:bc:4a:65:f6:21:19:12:e0:c5:4c:a9: d5:a9:17:55:f2:6e:b1:0c:fe:5a:a3:4b:25:11:40:2d:d9:78: e4:65:f1:c7:6d:7a:ad:29:a3:29:3f:e2:79:5e:d0:ae:4c:8b: 79:bf:9f:09:9e:6d:47:96:19:e1:b2:4c:e6:ef:67:7a:4b:16: a1:a1:44:55:a0:7e:f2:c0:73:b9:0f:35:89:ed:48:c3:e8:14: 1f:66:6c:12:05:a0:41:89:a6:a7:ec:7b:9e:aa:25:91:81:b7: 66:b1:a3:c5:39:32:5b:12:5d:06:2e:8a:3e:4a:bb:a6:c2:a7: d9:fa:bc:b6:f1:8d:0a:81:54:5c:e9:0d:41:56:3a:3d:f8:29: 55:c0:5d:95:b5:23:5b:f2:34:1a:f8:59:0f:5d:10:a4:0d:b4: b3:c1:fe:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY8Xxx0vOpeb03+gxLtFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2I3OTZjM2ZjNTU5YmZhZjRiNzY1NTA4OTRjZmY0ZDMw YjliN2UwHhcNMjUxMjE1MTkwMTM5WhcNMjUxMjE2MTkwMTM5WjAzMTEwLwYDVQQD EyhjZGE2NjM1MDc1NzkyZDIzODZjY2NkYjJjM2RkYTk0ZDNmYmNhNjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8vXPW39Kj7gdLVv4Pv5wKCY18VX Cc2KGh3nkMlvT9DdwvEkoCcfyZ22pJkRDupDXGWnVoMN0jhWt1CfUUWm2AUxTaj9 oDTQXpXicSwme36szt8fqYkCz8rNT9OxtuSLGD57BfW41DMdAjvav6EefFhxEHxI qmFaud/oltX368kyHQYagqIS5GIhV86gaD2WRdy7OjQMqbTWyGIQPCmyg3f6oMuX xXPUZvgQ07orWFvzybyZZEsELXjJfC7Q2wUWak33Hm1ceg1bbOrTyB4qQ0PTmb9b wv5CgJxpAa+/yLCek0aaa4YfMayuAGWiFm/v2fyKPMlMvbAyQ2spZKM9xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2mY1B1eS0jhszNssPdqU0/vKYDMB8GA1UdIwQY MBaAFN87eWw/xVm/r0t2VQiUz/TTC5t+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUt MjhlNDRmMmVlOTBhLzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUtMjhlNDRmMmVlOTBh LzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAco0vZ76T 8Auj9oaTz2SSTadZ0kVe+fN5cdSrdfpzyiwdSIuEAa8bTQ4BnWlYgP17/egJ9MzX YcfE0Uz6LbVXcZxy7YBaGfextBdl0PAYBBl5fwspyvfo4wyIV3wnAkDP5bxKZfYh GRLgxUyp1akXVfJusQz+WqNLJRFALdl45GXxx216rSmjKT/ieV7QrkyLeb+fCZ5t R5YZ4bJM5u9neksWoaFEVaB+8sBzuQ81ie1Iw+gUH2ZsEgWgQYmmp+x7nqolkYG3 ZrGjxTkyWxJdBi6KPkq7psKn2fq8tvGNCoFUXOkNQVY6PfgpVcBdlbUjW/I0GvhZ D10QpA20s8H+oA== -----END CERTIFICATE-----Generated at Tue Dec 16 00:32:29 2025 by rpki-client