This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft File: 3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json) Hash identifier: 0GtLFwgiwB3x9NMFCBMwyNZlhLcTvpnxA/8+vlLEzJU= Subject key identifier: 32:A5:0D:35:66:46:5D:CD:12:BD:AA:12:FB:0F:8F:23:DC:87:B4:45 Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE Certificate issuer: /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae Certificate serial: 019B2E1D930BA87B21A22DEFBC6EEBFBDA38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft Manifest number: 0C01 Signing time: Wed 17 Dec 2025 21:00:48 +0000 Manifest this update: Wed 17 Dec 2025 21:00:48 +0000 Manifest next update: Thu 18 Dec 2025 21:00:48 +0000 Files and hashes: 1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: jaWRVgwFROEIdO4fxcPp/M8gobm3q57mpkOPV/krJvI=) 2: t2IAGMSzk4-7dntYHVtGoSAvw3E.roa (hash: MFygbsGgjd41JH2HTdeF0MRaBb6hffk9LejkFMw08aY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:93:0b:a8:7b:21:a2:2d:ef:bc:6e:eb:fb:da:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae Validity Not Before: Dec 17 21:00:48 2025 GMT Not After : Dec 18 21:00:48 2025 GMT Subject: CN=32a50d3566465dcd12bdaa12fb0f8f23dc87b445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:67:32:77:df:e3:c2:1c:7b:ec:7c:37:b1: 63:a6:35:3a:e9:90:27:85:99:97:ea:7a:01:d0:81: b7:e8:4d:12:07:95:38:dc:a6:0d:51:88:35:8b:a8: 27:73:aa:8c:cf:5c:cc:a8:61:f9:54:34:6d:eb:53: 39:b0:de:15:2a:8f:05:66:3f:c6:70:72:cd:91:8c: c6:50:88:c6:7b:8c:51:04:77:14:5f:78:ab:c5:cc: 52:2a:7d:49:d9:08:b5:fa:45:3c:1c:bb:5b:c1:37: a8:a9:33:82:34:35:fe:d1:8d:ac:fe:80:45:bd:80: fa:79:fb:e4:7e:b1:a1:9f:e2:94:ce:9d:9f:67:07: 48:50:66:ab:c2:5b:65:dc:24:e4:69:ef:87:6a:75: 14:96:c5:9f:56:75:ea:b8:5c:44:82:76:f4:51:cd: 13:e7:fd:4b:85:9f:df:9d:1f:08:de:9b:12:96:6c: 83:dd:ee:67:77:4a:e7:e8:07:20:db:56:f6:a2:f0: a2:1e:91:0b:82:f5:14:19:dd:11:55:31:e7:3b:d1: 20:48:1c:43:34:86:fa:ad:2b:45:f0:c9:e2:33:d9: 5a:02:29:c0:42:9b:cf:44:9e:bf:00:88:70:cd:c6: 38:67:4a:86:a1:f1:7c:73:b9:83:0d:44:16:5f:f1: fc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A5:0D:35:66:46:5D:CD:12:BD:AA:12:FB:0F:8F:23:DC:87:B4:45 X509v3 Authority Key Identifier: keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e5:c6:7f:08:3a:6f:ff:c7:1e:34:9f:d2:77:e2:59:66:c0: 2d:87:d8:6c:59:74:d8:be:50:04:db:66:3a:34:59:70:5e:68: 2a:d3:a8:24:4c:2b:b9:d0:7b:38:56:c0:73:76:45:86:9e:de: 6b:fc:ad:da:6b:b8:de:ed:54:78:57:11:b9:37:63:46:a9:ee: 25:88:f0:01:43:53:3f:12:b8:3f:5f:9c:0c:08:e1:c4:f1:3b: 19:b8:b6:b0:30:a9:76:5b:cb:fa:5c:ac:ab:48:26:3e:51:50: 1c:f2:6b:7c:66:08:6c:d1:d7:08:e0:a1:ed:d2:bb:a0:df:56: 04:bb:1d:cc:00:4d:2d:d2:8a:3d:fd:91:bf:49:34:30:3a:a6: f5:9a:20:da:19:12:01:f6:fb:7f:f7:a4:2a:63:9c:ef:99:91: b9:83:cb:1c:0d:86:bf:fb:f7:6f:b3:39:91:6f:6b:d6:17:f9: 07:25:5a:e0:c0:7a:2d:6d:6c:82:20:0f:11:21:4e:8c:93:1f: ef:75:2f:69:04:9e:3f:05:67:af:e0:26:51:9b:c3:d3:15:30: da:31:85:c2:5a:22:37:92:d7:b1:f9:61:00:15:4b:a3:06:17: 5d:eb:e6:40:20:94:72:4e:c8:6f:e3:d2:7a:66:2e:15:39:c2: 73:f3:fc:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHZMLqHshoi3vvG7r+9o4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWQyY2ZiZGI5ZDU4ZDU3NDBmZjM3NWEzMTViMzgyNTQ0 YTk0YWUwHhcNMjUxMjE3MjEwMDQ4WhcNMjUxMjE4MjEwMDQ4WjAzMTEwLwYDVQQD EygzMmE1MGQzNTY2NDY1ZGNkMTJiZGFhMTJmYjBmOGYyM2RjODdiNDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPpnMnff48Ice+x8N7FjpjU66ZAn hZmX6noB0IG36E0SB5U43KYNUYg1i6gnc6qMz1zMqGH5VDRt61M5sN4VKo8FZj/G cHLNkYzGUIjGe4xRBHcUX3irxcxSKn1J2Qi1+kU8HLtbwTeoqTOCNDX+0Y2s/oBF vYD6efvkfrGhn+KUzp2fZwdIUGarwltl3CTkae+HanUUlsWfVnXquFxEgnb0Uc0T 5/1LhZ/fnR8I3psSlmyD3e5nd0rn6Acg21b2ovCiHpELgvUUGd0RVTHnO9EgSBxD NIb6rStF8MniM9laAinAQpvPRJ6/AIhwzcY4Z0qGofF8c7mDDUQWX/H8OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKlDTVmRl3NEr2qEvsPjyPch7RFMB8GA1UdIwQY MBaAFNxdLPvbnVjVdA/zdaMVs4JUSpSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMt MTg0MjM0OGY1YzZjLzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMtMTg0MjM0OGY1YzZj LzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeXGfwg6 b//HHjSf0nfiWWbALYfYbFl02L5QBNtmOjRZcF5oKtOoJEwrudB7OFbAc3ZFhp7e a/yt2mu43u1UeFcRuTdjRqnuJYjwAUNTPxK4P1+cDAjhxPE7Gbi2sDCpdlvL+lys q0gmPlFQHPJrfGYIbNHXCOCh7dK7oN9WBLsdzABNLdKKPf2Rv0k0MDqm9Zog2hkS Afb7f/ekKmOc75mRuYPLHA2Gv/v3b7M5kW9r1hf5ByVa4MB6LW1sgiAPESFOjJMf 73UvaQSePwVnr+AmUZvD0xUw2jGFwloiN5LXsflhABVLowYXXevmQCCUck7Ib+PS emYuFTnCc/P8og== -----END CERTIFICATE-----Generated at Thu Dec 18 05:47:15 2025 by rpki-client