This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft File: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json) Hash identifier: sm1qFhTlLVrYCoWV/Bd0iDU8JvWt4DLUyKEh7P38bF4= Subject key identifier: 85:B6:B0:3E:F9:6A:C5:0E:D4:7E:57:15:04:98:D5:38:AE:3B:A6:D4 Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5 Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5 Certificate serial: 019B33440FF76E88947A1CCA5C86B209C567 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft Manifest number: 16A4 Signing time: Thu 18 Dec 2025 21:00:57 +0000 Manifest this update: Thu 18 Dec 2025 21:00:57 +0000 Manifest next update: Fri 19 Dec 2025 21:00:57 +0000 Files and hashes: 1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: rmgL9S6OQnO7tHPkPPyUHl8Q+89laQzfu1Ua3t8FF5o=) 2: LYPvA08Q5up42ir_ROLNJePR6WM.roa (hash: 2Ysa/oCUxmnS7fKzOGdKW8YJA2KVw4PdW/o1jAQ6yws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:0f:f7:6e:88:94:7a:1c:ca:5c:86:b2:09:c5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5 Validity Not Before: Dec 18 21:00:57 2025 GMT Not After : Dec 19 21:00:57 2025 GMT Subject: CN=85b6b03ef96ac50ed47e57150498d538ae3ba6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a4:00:c1:37:d4:f5:eb:cb:38:35:21:03:3c: d3:e7:fc:c7:2b:60:40:bc:52:af:6c:a9:1a:0b:28: 37:ce:b3:c1:24:5d:1d:8d:89:d3:12:27:7d:52:17: e0:21:f1:3a:23:01:4b:d7:ef:50:8c:17:19:7d:aa: 94:71:c2:ab:41:85:c2:2f:f7:cd:e1:3a:f3:b0:64: 6e:51:67:7d:ff:d5:07:66:9f:9e:86:24:30:3c:20: 11:db:bc:5e:84:68:f8:4e:9f:c7:0a:20:44:1a:e9: 69:4b:e9:b0:bb:59:f1:49:eb:df:c0:28:b6:8e:1c: d5:b7:ba:10:47:6e:71:7e:60:fc:ad:13:f1:a6:61: cd:79:7d:04:e4:79:af:d9:0f:17:fd:88:de:11:69: 99:89:db:a1:83:16:23:15:80:5d:2d:6d:d7:4a:fb: b0:99:b3:d9:7a:c2:61:31:da:c9:09:7a:7f:83:b3: a9:d8:fe:d4:d0:d8:8b:99:99:cc:31:24:08:f6:0c: 79:b9:4b:1a:1c:00:9e:30:ec:74:da:ae:be:af:c9: 40:f3:f7:9f:cc:fb:0c:bf:93:dd:45:e6:cc:f7:b0: 6f:d4:ba:49:46:17:66:fd:01:4b:64:80:ed:5b:39: 9a:37:98:5a:e8:30:b3:73:00:67:40:94:f7:9e:3a: a9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B6:B0:3E:F9:6A:C5:0E:D4:7E:57:15:04:98:D5:38:AE:3B:A6:D4 X509v3 Authority Key Identifier: keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:89:09:95:de:2d:ae:74:5b:84:a4:e7:02:12:39:e5:cc:be: ae:a6:c0:03:b7:76:73:f3:ac:e5:b0:d5:ac:37:13:f4:18:bd: e2:c3:32:8c:dc:af:c4:a4:92:9d:21:bb:6a:12:b2:ab:b7:14: 88:35:e1:10:87:0c:06:46:91:b4:ff:d3:e4:2d:1d:eb:47:37: bc:b2:4c:ce:bb:96:93:2b:ea:88:ff:98:0a:97:d6:8d:2a:77: 26:99:bc:d9:01:47:fe:ae:cb:e2:82:9c:76:b0:f0:65:f8:bb: c6:b4:5f:c5:9f:6f:0a:7f:0d:97:a6:21:ae:16:bb:8c:61:05: ee:a4:a8:3e:49:11:0c:01:90:6a:41:bc:69:e3:43:44:bf:61: fe:aa:28:30:26:96:d2:b6:51:0a:3d:0b:c3:25:44:b4:01:50: 02:ea:33:70:ba:80:03:c3:b4:f2:b5:5c:5a:cb:46:93:be:70: ba:23:ae:81:28:9d:db:eb:73:8c:83:b4:f8:bc:c0:8e:b9:83: 1d:99:f1:2a:cb:6c:e8:10:27:e1:db:c8:94:87:bc:ce:25:6d: 48:d0:c4:f9:9e:dd:dc:e9:86:13:d9:0e:e0:6f:89:f9:8f:c0: 79:a2:55:28:a6:8e:40:f2:af:4d:d3:e2:4b:c3:be:7a:67:a2: 6b:17:6e:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRA/3boiUehzKXIayCcVnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjM2YyNjM5ZmZjNzg4NzFhZDY0YmZlZDcxYjc5NTRiYzkw ZGVhYjUwHhcNMjUxMjE4MjEwMDU3WhcNMjUxMjE5MjEwMDU3WjAzMTEwLwYDVQQD Eyg4NWI2YjAzZWY5NmFjNTBlZDQ3ZTU3MTUwNDk4ZDUzOGFlM2JhNmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6QAwTfU9evLODUhAzzT5/zHK2BA vFKvbKkaCyg3zrPBJF0djYnTEid9UhfgIfE6IwFL1+9QjBcZfaqUccKrQYXCL/fN 4TrzsGRuUWd9/9UHZp+ehiQwPCAR27xehGj4Tp/HCiBEGulpS+mwu1nxSevfwCi2 jhzVt7oQR25xfmD8rRPxpmHNeX0E5Hmv2Q8X/YjeEWmZiduhgxYjFYBdLW3XSvuw mbPZesJhMdrJCXp/g7Op2P7U0NiLmZnMMSQI9gx5uUsaHACeMOx02q6+r8lA8/ef zPsMv5PdRebM97Bv1LpJRhdm/QFLZIDtWzmaN5ha6DCzcwBnQJT3njqptwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIW2sD75asUO1H5XFQSY1TiuO6bUMB8GA1UdIwQY MBaAFNw/Jjn/x4hxrWS/7XG3lUvJDeq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDct OWNmZjNmZTA1MTgwLzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDctOWNmZjNmZTA1MTgw LzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACokJld4t rnRbhKTnAhI55cy+rqbAA7d2c/Os5bDVrDcT9Bi94sMyjNyvxKSSnSG7ahKyq7cU iDXhEIcMBkaRtP/T5C0d60c3vLJMzruWkyvqiP+YCpfWjSp3Jpm82QFH/q7L4oKc drDwZfi7xrRfxZ9vCn8Nl6Yhrha7jGEF7qSoPkkRDAGQakG8aeNDRL9h/qooMCaW 0rZRCj0LwyVEtAFQAuozcLqAA8O08rVcWstGk75wuiOugSid2+tzjIO0+LzAjrmD HZnxKsts6BAn4dvIlIe8ziVtSNDE+Z7d3OmGE9kO4G+J+Y/AeaJVKKaOQPKvTdPi S8O+emeiaxduDA== -----END CERTIFICATE-----Generated at Fri Dec 19 05:47:33 2025 by rpki-client