This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft File: ADn3QWhtoR55rnxeSGqikICMsbc.mft (raw, json) Hash identifier: q0YrikysiZ10gNiWS0nOFHwobPBwCpHaCu26ffY3dnw= Subject key identifier: E4:64:26:34:7E:FC:F5:14:1A:A7:C5:B3:9A:1A:2E:74:5F:66:BC:54 Authority key identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7 Certificate issuer: /CN=0039f741686da11e79ae7c5e486aa290808cb1b7 Certificate serial: 019B21ABE02074A2FA00DFEF2AE529F93A86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft Manifest number: 1426 Signing time: Mon 15 Dec 2025 11:01:10 +0000 Manifest this update: Mon 15 Dec 2025 11:01:10 +0000 Manifest next update: Tue 16 Dec 2025 11:01:10 +0000 Files and hashes: 1: ADn3QWhtoR55rnxeSGqikICMsbc.crl (hash: x6QZenjhkzfz21uRsI3ZDq96FgCiYfhnjhzVD/fOJes=) 2: Y3i7R5k-pr2oJ6IrDbTR9kOWSc4.roa (hash: GTNPbNy0VtCzCDFPUyJZWkGeAio7wlfXOb9TWYRV6sE=) 3: e9a8ONYDtpKM0KoJ-RMqjCOdosE.roa (hash: tuQ0e/czULwl9GWCOBeKLYiHJIJXkYnYmwwjDNg8QOE=) 4: xewexu8qO3LGfnqqWqfVcH7b-hQ.roa (hash: foDGso9eJE+J/6Qu10A3sNz/jBAeKKZ8zvRJtBdUh9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:e0:20:74:a2:fa:00:df:ef:2a:e5:29:f9:3a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0039f741686da11e79ae7c5e486aa290808cb1b7 Validity Not Before: Dec 15 11:01:10 2025 GMT Not After : Dec 16 11:01:10 2025 GMT Subject: CN=e46426347efcf5141aa7c5b39a1a2e745f66bc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:45:ce:7b:22:cc:51:62:d8:ff:31:cc:ec:d6: 6e:c5:3a:03:a1:ce:e2:06:47:cc:a8:51:48:ad:77: 74:96:db:ef:06:a5:b4:57:d7:d5:ce:01:d9:19:1c: 2e:c6:bd:a5:2c:04:f7:eb:e6:6e:05:6f:6e:93:a4: cf:4e:80:f5:34:08:a2:5f:e6:47:2c:f2:fe:51:01: 59:92:a8:44:58:be:19:63:35:a3:ab:8e:e1:f0:1e: 0b:00:98:df:fc:3d:69:f3:fe:05:d8:ab:7d:34:79: a9:79:1b:e2:8b:d9:8b:6a:c6:46:55:19:7f:70:37: 1c:5f:da:b4:1f:b0:9e:bf:bb:b7:7f:45:50:f7:a5: f0:ac:d9:85:a9:ce:3d:bc:a6:d1:fc:6f:89:ac:c3: cd:f5:7a:74:5c:6d:33:cb:fb:a7:42:01:5c:69:17: bd:1c:07:29:45:4f:b9:71:c0:32:9a:8d:7a:82:a1: fa:4a:1c:91:93:32:15:a6:a1:99:1d:f2:13:10:37: 47:e5:05:fa:31:3e:ab:c8:bf:17:9a:d1:02:2d:5a: ef:7e:94:05:9a:65:84:58:1d:79:de:67:bb:49:91: d6:8a:9a:5f:75:26:0a:e8:9a:86:f0:ab:27:b4:bc: d8:d0:c0:19:af:a6:d5:6e:ce:30:77:f2:a7:98:5e: 23:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:64:26:34:7E:FC:F5:14:1A:A7:C5:B3:9A:1A:2E:74:5F:66:BC:54 X509v3 Authority Key Identifier: keyid:00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9f:7d:d5:22:bd:d8:ef:89:bd:0e:9a:ea:da:68:fb:f2:d6: 19:92:63:6c:17:1a:de:e8:d2:32:04:3f:53:84:b6:f6:25:fd: 6e:4c:b1:3e:5e:e7:63:fb:49:11:3b:8e:4d:d7:3c:1a:07:77: 21:50:ac:e8:8a:77:3f:05:39:56:cc:61:07:59:53:cc:52:02: 33:77:1c:84:0b:a1:53:6c:f0:45:b0:16:fc:e1:0f:c6:9e:e8: 31:8b:b2:64:35:c1:3d:9d:50:db:96:f4:f8:2e:bc:67:4d:97: 10:26:72:08:e0:6c:b6:1f:4f:27:e2:b7:91:53:ba:7d:3b:f6: e2:36:17:fd:47:75:30:cc:08:4c:98:d8:e2:e3:73:c8:c3:17: d7:d2:64:78:41:93:84:7c:4f:c8:0f:30:7a:7a:b6:90:3c:ad: 76:4b:de:d6:72:4b:49:ea:dc:48:5a:2f:c1:3f:7c:72:41:a0: d7:9b:80:de:93:74:9e:1c:b4:3d:08:12:38:9a:81:5a:eb:af: d3:f8:82:6f:ad:ee:4b:e8:02:84:98:65:12:93:71:55:78:2b: 58:56:ef:90:e4:43:70:e7:fa:b1:a4:6b:e4:8d:d7:50:95:5b: 2e:e3:42:ad:d9:73:7c:9f:19:ba:8e:0b:77:25:ef:1c:2d:7b: dc:64:7d:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq+AgdKL6AN/vKuUp+TqGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMzlmNzQxNjg2ZGExMWU3OWFlN2M1ZTQ4NmFhMjkwODA4 Y2IxYjcwHhcNMjUxMjE1MTEwMTEwWhcNMjUxMjE2MTEwMTEwWjAzMTEwLwYDVQQD EyhlNDY0MjYzNDdlZmNmNTE0MWFhN2M1YjM5YTFhMmU3NDVmNjZiYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0XOeyLMUWLY/zHM7NZuxToDoc7i BkfMqFFIrXd0ltvvBqW0V9fVzgHZGRwuxr2lLAT36+ZuBW9uk6TPToD1NAiiX+ZH LPL+UQFZkqhEWL4ZYzWjq47h8B4LAJjf/D1p8/4F2Kt9NHmpeRvii9mLasZGVRl/ cDccX9q0H7Cev7u3f0VQ96XwrNmFqc49vKbR/G+JrMPN9Xp0XG0zy/unQgFcaRe9 HAcpRU+5ccAymo16gqH6ShyRkzIVpqGZHfITEDdH5QX6MT6ryL8XmtECLVrvfpQF mmWEWB153me7SZHWippfdSYK6JqG8KsntLzY0MAZr6bVbs4wd/KnmF4j2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORkJjR+/PUUGqfFs5oaLnRfZrxUMB8GA1UdIwQY MBaAFAA590FobaEeea58XkhqopCAjLG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQURuM1FXaHRvUjU1cm54ZVNHcWlrSUNNc2JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8zYzYxNmYtMDEzOC00ZmZiLWFmMTct NTVmNDFmZGYwZTYzLzEvQURuM1FXaHRvUjU1cm54ZVNHcWlrSUNNc2JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8zYzYxNmYtMDEzOC00ZmZiLWFmMTctNTVmNDFmZGYwZTYz LzEvQURuM1FXaHRvUjU1cm54ZVNHcWlrSUNNc2JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJ991SK9 2O+JvQ6a6tpo+/LWGZJjbBca3ujSMgQ/U4S29iX9bkyxPl7nY/tJETuOTdc8Ggd3 IVCs6Ip3PwU5VsxhB1lTzFICM3cchAuhU2zwRbAW/OEPxp7oMYuyZDXBPZ1Q25b0 +C68Z02XECZyCOBsth9PJ+K3kVO6fTv24jYX/Ud1MMwITJjY4uNzyMMX19JkeEGT hHxPyA8wenq2kDytdkve1nJLSercSFovwT98ckGg15uA3pN0nhy0PQgSOJqBWuuv 0/iCb63uS+gChJhlEpNxVXgrWFbvkORDcOf6saRr5I3XUJVbLuNCrdlzfJ8Zuo4L dyXvHC173GR91w== -----END CERTIFICATE-----Generated at Mon Dec 15 20:33:30 2025 by rpki-client