This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft File: 3Hgh4by_bgdOpIFKqlxj47qBPF8.mft (raw, json) Hash identifier: +8h5GtE3ncFjPfMRo3ICGhWTMivnZvj+PbAlqIjlk1g= Subject key identifier: D5:DD:3D:81:7F:CD:03:71:86:B4:F1:2F:B0:14:C9:56:FB:0F:26:1D Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f Certificate serial: 019B4C5EC8F7293ACC498A8B15684950D673 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft Manifest number: 17A2 Signing time: Tue 23 Dec 2025 18:00:38 +0000 Manifest this update: Tue 23 Dec 2025 18:00:38 +0000 Manifest next update: Wed 24 Dec 2025 18:00:38 +0000 Files and hashes: 1: 3Hgh4by_bgdOpIFKqlxj47qBPF8.crl (hash: /p2xGwLoBJngeihKa6/kRBjrrCiYKbb0mvHQFk2r1hM=) 2: 4MXMdJWAndzkkiHFnmOxrlOkHIs.roa (hash: OiJ7+6r4bWAFN5vOHYBjk8U2TGkBpOBvwNxXY+Qb+To=) 3: FnxhJQ5jd2jBoCiaTZ0_b7pYcn4.roa (hash: YbjDITXwnNkMY1d8iM5sg8TPIw1q/oeZDc75wOKQiOE=) 4: Rbk5PVjqlkpGo1SxsQ_tSeJLPbo.roa (hash: BRLtcU6d3bxk4bV/7KHF4XZmiUFqH8jja8emVx8VywY=) 5: biONUDB1iLS86N-lmaqB6_yoBtQ.roa (hash: 5maaRfHknlsWIxQOJIJbyzAegwgxyX3Q4OIbKY62ook=) 6: e8yyBy_WYk0MmiOF_-c6ZOE78e0.roa (hash: XCwVuTCuJ/Y/WAoLWIkeepq2X2E/4/mFMfojm79U0cM=) 7: s30LP9oNn_a9WqmNNhVG8BZsr_E.roa (hash: niAKqfiybnbnJMKEAdo6F1LKY3RNGfAvckOC23OVwd0=) 8: uRWNqrl7lEtL4BdXY6zm3up7W9g.roa (hash: 5dZDwl/VQCf/bzBpVyR3+W+VZSdwG299LMVlDR4jvrU=) 9: w6y6tA7YYKjCRBu0w7S_pejO5kU.roa (hash: m4339RdE053FyeU5wm1JX9FNzAT+cE85Onp7E9j3YoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5e:c8:f7:29:3a:cc:49:8a:8b:15:68:49:50:d6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f Validity Not Before: Dec 23 18:00:38 2025 GMT Not After : Dec 24 18:00:38 2025 GMT Subject: CN=d5dd3d817fcd037186b4f12fb014c956fb0f261d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:5c:ff:39:85:e3:a0:ab:f0:b1:de:4e:dc: 4a:ac:c3:0f:a3:33:f0:b8:17:95:e4:32:b0:ec:4f: 95:ac:d3:34:3d:88:15:93:d3:e6:13:d9:60:d4:25: 47:fb:fb:84:9d:1b:2c:f8:d6:e9:cc:32:46:4e:25: 22:4e:d8:90:97:6f:79:85:9c:c6:da:e9:1b:24:3b: d6:17:76:24:63:71:aa:cd:36:a4:c7:af:fd:9e:c3: 4d:66:82:f2:a3:c5:40:f1:cd:54:fd:0f:b6:33:4d: 64:09:90:5d:d2:6a:8c:0d:d1:5d:b6:e2:82:41:34: 50:93:9b:26:09:a2:52:3d:c9:e1:85:52:74:cb:8f: dc:0f:1e:38:c7:62:81:9b:4b:33:8e:32:f8:45:04: 9a:ce:d9:c9:c5:1f:80:b4:6f:e2:21:14:83:0b:b6: e4:14:85:84:98:f8:65:ed:7a:f7:08:71:1c:d8:1f: c0:70:7e:b2:12:fb:54:06:dc:88:9d:10:08:2a:93: 30:fe:48:52:70:02:e2:05:5f:b4:27:83:99:23:f4: 71:e0:4c:f1:04:0c:fe:ff:cf:fd:27:32:e1:a1:87: 48:9c:f1:94:63:fb:6f:ff:a4:06:b0:9f:0a:25:3d: d8:62:50:3b:c4:5f:49:6b:97:ec:8e:a7:64:1a:10: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DD:3D:81:7F:CD:03:71:86:B4:F1:2F:B0:14:C9:56:FB:0F:26:1D X509v3 Authority Key Identifier: keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:49:81:c9:7f:f6:71:fd:e1:67:46:5b:e7:5a:c2:ba:f5:c0: 4f:28:46:4e:37:45:a1:87:27:31:b3:c2:f4:85:63:03:1e:f8: cb:14:32:4f:8d:3d:a7:37:c7:ea:4e:9d:67:20:bc:c7:db:c2: ed:22:76:ab:56:bb:12:04:1a:b1:7d:79:fb:a9:f3:19:af:a7: f2:bc:03:53:be:af:f0:c9:2a:13:1d:ab:66:95:1c:a2:c5:0d: 9d:2a:fd:03:3d:af:04:c5:b5:14:a7:db:1b:e3:6e:b0:b9:93: c5:f2:8f:49:3e:a8:42:4c:5c:e5:0b:dc:9b:8a:10:04:12:d7: 0b:cf:8a:b5:78:13:c6:3c:97:75:44:11:13:fc:ec:e0:e7:a6: 36:e1:85:be:35:e9:82:76:ca:b1:f3:e2:60:39:93:b7:bc:93: 48:82:11:97:32:ec:ae:c8:b1:c1:24:90:8c:e6:c7:1b:2e:40: a2:31:7b:7b:e5:6f:ed:22:e9:9e:3d:92:66:36:5b:ba:06:fd: 94:53:c8:6f:60:f3:7c:13:06:86:fc:16:95:ba:f5:63:d4:21: d1:cc:31:97:73:ab:d7:15:6e:69:01:35:e0:42:f1:41:9a:b5: 87:47:8f:ee:45:90:6f:be:2e:36:9b:14:d1:67:c2:73:90:63: 27:fb:2e:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXsj3KTrMSYqLFWhJUNZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNzgyMWUxYmNiZjZlMDc0ZWE0ODE0YWFhNWM2M2UzYmE4 MTNjNWYwHhcNMjUxMjIzMTgwMDM4WhcNMjUxMjI0MTgwMDM4WjAzMTEwLwYDVQQD EyhkNWRkM2Q4MTdmY2QwMzcxODZiNGYxMmZiMDE0Yzk1NmZiMGYyNjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX9c/zmF46Cr8LHeTtxKrMMPozPw uBeV5DKw7E+VrNM0PYgVk9PmE9lg1CVH+/uEnRss+NbpzDJGTiUiTtiQl295hZzG 2ukbJDvWF3YkY3GqzTakx6/9nsNNZoLyo8VA8c1U/Q+2M01kCZBd0mqMDdFdtuKC QTRQk5smCaJSPcnhhVJ0y4/cDx44x2KBm0szjjL4RQSaztnJxR+AtG/iIRSDC7bk FIWEmPhl7Xr3CHEc2B/AcH6yEvtUBtyInRAIKpMw/khScALiBV+0J4OZI/Rx4Ezx BAz+/8/9JzLhoYdInPGUY/tv/6QGsJ8KJT3YYlA7xF9Ja5fsjqdkGhCBxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXdPYF/zQNxhrTxL7AUyVb7DyYdMB8GA1UdIwQY MBaAFNx4IeG8v24HTqSBSqpcY+O6gTxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYt ZDQ4YjQyZWYxNTliLzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYtZDQ4YjQyZWYxNTli LzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkmByX/2 cf3hZ0Zb51rCuvXATyhGTjdFoYcnMbPC9IVjAx74yxQyT409pzfH6k6dZyC8x9vC 7SJ2q1a7EgQasX15+6nzGa+n8rwDU76v8MkqEx2rZpUcosUNnSr9Az2vBMW1FKfb G+NusLmTxfKPST6oQkxc5Qvcm4oQBBLXC8+KtXgTxjyXdUQRE/zs4OemNuGFvjXp gnbKsfPiYDmTt7yTSIIRlzLsrsixwSSQjObHGy5AojF7e+Vv7SLpnj2SZjZbugb9 lFPIb2DzfBMGhvwWlbr1Y9Qh0cwxl3Or1xVuaQE14ELxQZq1h0eP7kWQb74uNpsU 0WfCc5BjJ/suYQ== -----END CERTIFICATE-----Generated at Tue Dec 23 22:23:30 2025 by rpki-client