This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json) Hash identifier: mV6+evCHWNZrF7F+0JZVoOVi0q5/aO1PqZdFNvBdthk= Subject key identifier: AE:C2:A0:7E:C3:1C:D2:FD:84:8F:94:BD:7E:41:37:9B:08:5D:E2:6A Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463 Certificate serial: 019AF276B1E1CEA6031A000E767DDE5756A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft Manifest number: 01D3 Signing time: Sat 06 Dec 2025 07:00:55 +0000 Manifest this update: Sat 06 Dec 2025 07:00:55 +0000 Manifest next update: Sun 07 Dec 2025 07:00:55 +0000 Files and hashes: 1: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: nPJ0Z+g6b8JbT4s1DgoC2gA3IMm9ZDNPCC9+DCIuK+w=) 2: 9PYNd2Mqf0MgiwYiWD5Tou1mIuE.roa (hash: afICcgfnIITniDH/lSXwW7AGExaecqfSGTuSlxA7xGg=) 3: 9r6qhrs-WMkKmRhAntLw5h6AV9I.roa (hash: mGzN/cmzbkWWHzKCoo8CWgSNL6Xv/KsXwu7f/tuseAI=) 4: FV7sZMg6O9JY4mwLcg69aoeW06M.roa (hash: VMFrYstU7+hz9IBC63E6LRr18iCOAuJeM9dbn8Jpzcg=) 5: te3WMh-yrJFuEs-O68YZIgyPTj4.roa (hash: PUYB4+IXFx4u1CgmVxG5cnaiyHUWZquRy6c28CZK2GY=) 6: wisg1C0CAyX9XxLdO577ldeT69g.roa (hash: M3DmtV6K4CRmVxyCwx6PvbpzCTNJhQrB7qDUrLhfsqs=) 7: x9OQVd5EhLuMfEc41OZ9FtQxau0.roa (hash: S4KeHAe6LXOVOw99dVjAwA7gRPfLYoFF69p3U5kCgFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b1:e1:ce:a6:03:1a:00:0e:76:7d:de:57:56:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463 Validity Not Before: Dec 6 07:00:55 2025 GMT Not After : Dec 7 07:00:55 2025 GMT Subject: CN=aec2a07ec31cd2fd848f94bd7e41379b085de26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c7:56:c3:c8:c3:ab:96:54:5a:06:a9:97:cc: 00:43:f3:c6:99:58:8b:2d:79:a2:70:db:d5:b3:9c: 87:2a:d8:3a:91:c5:53:9a:bd:e6:99:ca:56:68:9a: 93:7e:73:cc:ad:67:6e:5b:14:e7:69:b6:34:d1:54: 72:cd:f8:2d:0a:59:bb:cd:b2:03:72:87:cf:54:56: e1:8a:d6:89:4c:dd:57:29:84:e5:8f:e6:41:1a:ce: 41:1c:6f:ef:82:df:aa:d6:a4:cc:b3:fa:4c:94:20: 99:32:93:ad:30:a3:4c:7e:50:22:fd:8f:0d:22:a4: 79:16:e5:e6:41:b5:1d:c1:ee:0c:40:17:e2:aa:45: 76:44:b5:0c:b1:3b:a4:5a:ca:0e:cf:8c:9f:2a:da: a5:d0:56:dd:11:fb:6b:4a:8d:1c:b8:d8:1d:64:f5: 4b:86:27:de:bf:ee:6e:ef:4b:8d:af:65:2b:58:35: 5f:17:e4:1f:87:fa:81:14:98:8d:a5:81:93:ef:bf: 5e:00:e2:35:f9:98:23:8b:da:05:20:d3:77:96:e0: 16:0f:2c:f0:f2:f5:10:e1:c1:96:8b:6b:6c:24:bf: db:19:38:97:3c:2c:bf:35:6e:21:be:e5:b7:5f:fb: dd:b1:1f:ac:77:25:85:d7:96:ac:0d:d5:2f:2c:a5: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C2:A0:7E:C3:1C:D2:FD:84:8F:94:BD:7E:41:37:9B:08:5D:E2:6A X509v3 Authority Key Identifier: keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ad:ec:fd:53:3f:1f:87:9c:b2:94:55:9f:77:3b:77:29:60: 4c:af:45:18:37:ba:4a:ca:db:8b:5a:36:a5:d2:e2:b4:40:1b: bc:ca:c1:11:69:87:2c:78:94:07:7b:db:8a:72:f2:9f:e8:99: 75:0c:65:95:c4:90:51:f1:3e:9d:27:68:61:0c:eb:bc:67:50: b6:d5:a2:2e:fa:c0:35:a8:2c:eb:d2:00:47:a7:d5:54:55:86: 09:b1:f2:7d:5b:8d:b6:e5:34:ff:95:ac:44:ee:25:75:8e:e5: 2b:ab:0c:12:8f:12:40:8e:93:4f:38:53:30:f0:6c:45:3e:d8: 5c:82:77:f0:07:c8:9b:e3:29:11:e8:b6:6b:5d:e0:f8:81:7f: 72:a8:8b:35:33:56:c6:ce:e2:51:ff:33:1f:97:fa:e5:2b:a6: 06:34:ec:be:0d:7b:df:9c:24:f0:78:ce:aa:fc:7d:e0:c0:18: 0d:75:5e:ad:a3:2e:ed:b4:8e:53:bb:06:68:32:7c:e2:2e:4a: db:a5:0e:75:3a:cf:98:81:2a:a5:6f:bd:60:aa:f4:b8:46:99: d7:70:82:7b:16:f7:d5:f7:01:73:9d:4b:e9:7b:08:de:3d:b8: 58:87:01:a5:96:49:3b:1d:2a:7a:dd:8d:56:b6:f8:85:5c:62: 8c:42:bb:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrHhzqYDGgAOdn3eV1anMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNjQxNjZhOTExNzkzMDhmMjUzYTkxNzU2MTZjY2M2ODI4 YzQ0NjMwHhcNMjUxMjA2MDcwMDU1WhcNMjUxMjA3MDcwMDU1WjAzMTEwLwYDVQQD EyhhZWMyYTA3ZWMzMWNkMmZkODQ4Zjk0YmQ3ZTQxMzc5YjA4NWRlMjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcdWw8jDq5ZUWgapl8wAQ/PGmViL LXmicNvVs5yHKtg6kcVTmr3mmcpWaJqTfnPMrWduWxTnabY00VRyzfgtClm7zbID cofPVFbhitaJTN1XKYTlj+ZBGs5BHG/vgt+q1qTMs/pMlCCZMpOtMKNMflAi/Y8N IqR5FuXmQbUdwe4MQBfiqkV2RLUMsTukWsoOz4yfKtql0FbdEftrSo0cuNgdZPVL hifev+5u70uNr2UrWDVfF+Qfh/qBFJiNpYGT779eAOI1+Zgji9oFINN3luAWDyzw 8vUQ4cGWi2tsJL/bGTiXPCy/NW4hvuW3X/vdsR+sdyWF15asDdUvLKVlXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7CoH7DHNL9hI+UvX5BN5sIXeJqMB8GA1UdIwQY MBaAFN1kFmqRF5MI8lOpF1YWzMaCjERjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3Yzct NzRkZTI1OGE3NmY4LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3YzctNzRkZTI1OGE3NmY4 LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaK3s/VM/ H4ecspRVn3c7dylgTK9FGDe6Ssrbi1o2pdLitEAbvMrBEWmHLHiUB3vbinLyn+iZ dQxllcSQUfE+nSdoYQzrvGdQttWiLvrANags69IAR6fVVFWGCbHyfVuNtuU0/5Ws RO4ldY7lK6sMEo8SQI6TTzhTMPBsRT7YXIJ38AfIm+MpEei2a13g+IF/cqiLNTNW xs7iUf8zH5f65SumBjTsvg1735wk8HjOqvx94MAYDXVeraMu7bSOU7sGaDJ84i5K 26UOdTrPmIEqpW+9YKr0uEaZ13CCexb31fcBc51L6XsI3j24WIcBpZZJOx0qet2N Vrb4hVxijEK79Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:16 2025 by rpki-client