This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json) Hash identifier: W1dY7OJVTYv+dsM9+o6y03GofOYJESET3W8c2wBGffw= Subject key identifier: 52:2E:D9:58:67:46:2C:64:D3:2E:AE:D4:27:27:94:8B:39:7B:52:C1 Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Certificate serial: 019AF0BF14AEAABF403E5FE88A39DB67887E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft Manifest number: 177E Signing time: Fri 05 Dec 2025 23:00:45 +0000 Manifest this update: Fri 05 Dec 2025 23:00:45 +0000 Manifest next update: Sat 06 Dec 2025 23:00:45 +0000 Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: sctmZos3JqAC2CHjaHZoAPH1yBXo8FaqESsbZf1Qezw=) 2: 6vn0S84Of3Am641RtQSWgEcI8LQ.roa (hash: liXU+EaS34eLz4h7mt5PwqdMf8bXjU0VdoViqn9V7yA=) 3: 8CNNYBbzQiDFPTM1tjqp5lUESM8.roa (hash: FKMYJ+6HiuRFIY6sbk4LB3mHseE0YsFT5neIU8ZSV0A=) 4: SgwPvwknub36baQ9KcDiF10XVjg.roa (hash: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=) 5: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (hash: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=) 6: YJiS4qGuwLN_Sg41RSYko6CqAYU.roa (hash: 2h4yWiYaNQUsbtMp+bAg/Hr+KrDeiT3A2mqFfxK9yew=) 7: goC_YpQrwJcU48WyzOg3OlsUAbY.roa (hash: OHpeanfXRy8bamPYQwO5dLykWIe4C63dtCxwNHxZdBc=) 8: lXMs99__wPFL_tQdoxzgPhccZK0.roa (hash: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:14:ae:aa:bf:40:3e:5f:e8:8a:39:db:67:88:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Validity Not Before: Dec 5 23:00:45 2025 GMT Not After : Dec 6 23:00:45 2025 GMT Subject: CN=522ed95867462c64d32eaed42727948b397b52c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:de:05:0e:c6:5f:18:46:03:04:b5:4d:ad: fb:9a:d6:b4:92:e3:50:22:5f:67:dd:94:41:91:47: 0c:a8:10:4a:61:48:4c:a4:af:58:0e:af:98:7f:a4: cd:c0:cb:66:08:06:22:db:03:dd:bd:0e:aa:6f:92: f5:0d:c3:f9:3a:8e:cd:3e:77:a8:f5:39:5f:2c:63: df:bd:c6:2d:d2:f3:f8:15:5a:ea:e2:52:da:86:cd: 3c:07:dc:76:78:46:58:44:6f:36:40:1e:6c:5c:ca: 57:bc:b1:c5:e2:0a:4e:59:15:ce:4d:55:dd:a6:c1: a4:c9:7a:a9:98:97:a1:a5:64:ae:36:9e:91:25:7a: 10:81:29:b7:87:df:5f:c2:36:e4:0b:f9:e3:95:37: c1:fe:ea:37:b4:41:eb:35:8a:2e:83:33:4a:4f:1d: 5a:00:b9:02:4a:99:68:42:31:ff:36:67:e5:61:1c: 4e:d7:7a:b6:fe:0c:83:d9:af:c1:84:3a:5e:c1:cd: 70:15:51:1d:ca:03:b5:9b:8d:bc:91:c7:4a:1f:2b: 06:89:4b:4a:d0:f3:c3:3d:c1:d7:76:40:59:6b:d9: 4a:8e:bf:1d:00:5e:54:a5:cc:40:6c:38:6d:6c:ac: 0f:65:4e:3a:f4:a1:91:94:3d:40:2a:39:6e:9a:8b: e2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2E:D9:58:67:46:2C:64:D3:2E:AE:D4:27:27:94:8B:39:7B:52:C1 X509v3 Authority Key Identifier: keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:de:57:b2:93:8b:ee:62:3a:4d:98:0e:44:fe:ed:0b:c6:04: a5:04:f2:b4:dd:68:1c:ab:a1:87:e0:b8:d6:5a:8a:48:da:f7: 2b:f5:de:52:2b:a3:49:78:67:61:6d:32:98:a5:9a:3f:17:06: 88:15:e2:80:ba:16:d0:6d:43:fb:fa:55:4e:95:bc:7e:63:17: ce:87:ef:b8:9f:09:48:ad:20:bf:a2:99:fe:bb:16:b0:a0:4a: 19:ce:d7:45:8f:89:40:36:b4:96:37:0f:d9:cf:45:ad:1e:7b: c8:9e:be:85:37:d9:19:52:69:99:dc:b4:2c:e6:3d:a6:60:eb: fa:c8:c7:ba:f3:92:d9:d9:fe:c1:38:06:5f:68:f6:0e:7e:49: 9f:11:8d:05:a8:9e:e2:2e:2d:f2:de:42:5c:92:f1:95:17:2f: 2c:37:80:71:31:a0:00:c2:b3:8d:b2:43:88:93:08:9b:17:f1: 76:8e:8b:89:f2:1d:ab:f4:f1:68:1a:37:3d:87:86:7c:a3:c3: df:72:fc:a0:91:69:20:e9:4c:78:6b:e9:41:c8:d8:5b:69:96: b7:2d:2a:15:72:dc:3b:15:2c:8a:a0:85:83:54:59:81:0a:31: 37:71:a9:cd:3f:79:14:30:a2:73:84:1e:0c:f3:ec:55:c3:bd: b3:c4:ed:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxSuqr9APl/oijnbZ4h+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0 OWQ3NGQwHhcNMjUxMjA1MjMwMDQ1WhcNMjUxMjA2MjMwMDQ1WjAzMTEwLwYDVQQD Eyg1MjJlZDk1ODY3NDYyYzY0ZDMyZWFlZDQyNzI3OTQ4YjM5N2I1MmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskveBQ7GXxhGAwS1Ta37mta0kuNQ Il9n3ZRBkUcMqBBKYUhMpK9YDq+Yf6TNwMtmCAYi2wPdvQ6qb5L1DcP5Oo7NPneo 9TlfLGPfvcYt0vP4FVrq4lLahs08B9x2eEZYRG82QB5sXMpXvLHF4gpOWRXOTVXd psGkyXqpmJehpWSuNp6RJXoQgSm3h99fwjbkC/njlTfB/uo3tEHrNYougzNKTx1a ALkCSploQjH/NmflYRxO13q2/gyD2a/BhDpewc1wFVEdygO1m428kcdKHysGiUtK 0PPDPcHXdkBZa9lKjr8dAF5UpcxAbDhtbKwPZU469KGRlD1AKjlumovijQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIu2VhnRixk0y6u1CcnlIs5e1LBMB8GA1UdIwQY MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt NjY0ZjA0ZDJhNjhkLzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS95XspOL 7mI6TZgORP7tC8YEpQTytN1oHKuhh+C41lqKSNr3K/XeUiujSXhnYW0ymKWaPxcG iBXigLoW0G1D+/pVTpW8fmMXzofvuJ8JSK0gv6KZ/rsWsKBKGc7XRY+JQDa0ljcP 2c9FrR57yJ6+hTfZGVJpmdy0LOY9pmDr+sjHuvOS2dn+wTgGX2j2Dn5JnxGNBaie 4i4t8t5CXJLxlRcvLDeAcTGgAMKzjbJDiJMImxfxdo6LifIdq/TxaBo3PYeGfKPD 33L8oJFpIOlMeGvpQcjYW2mWty0qFXLcOxUsiqCFg1RZgQoxN3GpzT95FDCic4Qe DPPsVcO9s8TtVw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:11 2025 by rpki-client