This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft File: 3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json) Hash identifier: fwixzeR+Pg3BRPpBvQ/G5ZHusXqwXBEF7onwloU5iyQ= Subject key identifier: D0:C1:9A:01:2E:A6:42:47:B0:64:09:F8:97:E7:A8:08:D6:AE:2B:81 Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D Certificate issuer: /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d Certificate serial: 019B202AD93F51B7083EFD912E965030E24C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft Manifest number: 0CEE Signing time: Mon 15 Dec 2025 04:00:37 +0000 Manifest this update: Mon 15 Dec 2025 04:00:37 +0000 Manifest next update: Tue 16 Dec 2025 04:00:37 +0000 Files and hashes: 1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: 74w276UsiDOeGoio3bbTvZ1uCQXgKvXwc7y3bASeXhs=) 2: wkcnsTzQjgo9eEySS50APSZKqWQ.roa (hash: SKv++65s2nAU0vbkJDBqrGiZUMw6xX7YKBnglQkJRuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2a:d9:3f:51:b7:08:3e:fd:91:2e:96:50:30:e2:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d Validity Not Before: Dec 15 04:00:37 2025 GMT Not After : Dec 16 04:00:37 2025 GMT Subject: CN=d0c19a012ea64247b06409f897e7a808d6ae2b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:13:8a:ba:b7:74:91:aa:ef:c0:c2:2a:64: ee:40:b5:e1:67:58:1f:b6:2a:ab:c4:65:6b:e8:c8: 95:de:56:3f:c4:7c:dc:53:0f:61:fb:d5:63:d5:77: 74:f2:c1:02:9e:88:dd:eb:4d:c0:e9:54:dd:a8:3f: 58:fd:38:c0:ea:46:37:3b:21:71:f3:06:cf:87:fc: 5d:54:86:aa:2e:fd:26:62:b1:88:51:0e:2c:0c:76: cf:ca:a4:ee:76:60:51:09:50:34:8e:43:e0:c4:16: 7e:dd:64:06:b4:98:c3:6c:ab:21:86:bd:b9:3e:e5: ae:0b:e5:10:64:4a:ad:b6:a0:6a:69:20:49:74:c0: cf:dc:72:97:e2:e6:81:12:ad:b2:5c:99:6d:d7:d2: 2b:12:12:88:e0:72:57:82:1f:b2:21:35:56:1e:a7: 6e:1c:10:0c:d6:c0:09:ea:71:ba:0a:e9:af:00:c5: f1:4a:30:25:0a:02:39:a7:84:49:93:40:62:67:80: c1:93:bf:c3:26:7f:b6:ba:6e:bf:9a:20:cb:29:d8: 79:eb:53:ca:28:10:98:d5:ad:d9:12:44:68:74:86: e8:f5:24:39:c8:6f:04:70:b6:73:6e:71:c6:ad:52: 27:7c:b5:c5:7b:9a:6a:9b:6a:72:d5:88:51:f1:d4: ed:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C1:9A:01:2E:A6:42:47:B0:64:09:F8:97:E7:A8:08:D6:AE:2B:81 X509v3 Authority Key Identifier: keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5a:58:a7:61:4c:25:62:d7:32:70:5c:dd:f8:e9:3f:b1:93: 2f:b8:01:ed:d0:4b:1e:d1:27:ab:0d:21:91:11:2a:8a:c8:3b: 22:ea:ea:2b:dd:7a:a4:c9:51:96:19:a3:0b:98:0d:ce:b1:ab: 43:54:24:19:6a:86:5a:61:ad:0b:ed:f8:33:5b:e1:01:e7:ab: 26:15:7c:f7:1d:39:70:1c:3e:a8:50:98:5f:1c:13:6e:23:da: 0e:75:bb:a1:79:8c:55:a2:bc:f0:75:45:d5:2b:da:b7:3f:ca: 6d:16:2a:de:0a:7f:45:d7:11:24:c7:d7:ec:36:82:86:f6:34: 3f:3c:8f:e7:04:71:ef:60:25:35:7b:af:68:f1:5e:8d:a1:64: a4:c8:6a:3b:d0:fa:eb:cd:49:52:af:0d:44:aa:ac:eb:bb:29: 26:02:32:ab:04:e2:f3:36:1f:90:1c:c1:63:cc:89:d2:ad:8a: da:0b:5a:df:c5:a9:9d:2d:cc:f1:2c:b0:56:05:a2:9c:42:cc: 4f:fe:3e:6e:d0:72:49:25:3c:43:58:eb:c9:ea:82:59:cb:da: 0e:47:cd:4c:0a:f7:cc:e6:57:e2:3a:46:6a:84:e4:2d:e7:e8: 12:80:03:ec:57:16:dd:8a:c7:35:eb:ad:66:33:39:7e:5a:a2: fe:fd:65:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgKtk/UbcIPv2RLpZQMOJMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkY2ViMDhhNGI0MGYxZjg1ZTRlYmExN2NkYzdjODNlNDdi YjU5N2QwHhcNMjUxMjE1MDQwMDM3WhcNMjUxMjE2MDQwMDM3WjAzMTEwLwYDVQQD EyhkMGMxOWEwMTJlYTY0MjQ3YjA2NDA5Zjg5N2U3YTgwOGQ2YWUyYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a0Tirq3dJGq78DCKmTuQLXhZ1gf tiqrxGVr6MiV3lY/xHzcUw9h+9Vj1Xd08sECnojd603A6VTdqD9Y/TjA6kY3OyFx 8wbPh/xdVIaqLv0mYrGIUQ4sDHbPyqTudmBRCVA0jkPgxBZ+3WQGtJjDbKshhr25 PuWuC+UQZEqttqBqaSBJdMDP3HKX4uaBEq2yXJlt19IrEhKI4HJXgh+yITVWHqdu HBAM1sAJ6nG6CumvAMXxSjAlCgI5p4RJk0BiZ4DBk7/DJn+2um6/miDLKdh561PK KBCY1a3ZEkRodIbo9SQ5yG8EcLZzbnHGrVInfLXFe5pqm2py1YhR8dTtbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDBmgEupkJHsGQJ+JfnqAjWriuBMB8GA1UdIwQY MBaAFN3OsIpLQPH4Xk66F83HyD5Hu1l9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2M2d2lrdEE4ZmhlVHJvWHpjZklQa2U3V1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi85MmIwZGYtZTBkYi00Mjc2LTgzMzQt OGRiOTQ0ZTEzODEwLzEvM2M2d2lrdEE4ZmhlVHJvWHpjZklQa2U3V1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi85MmIwZGYtZTBkYi00Mjc2LTgzMzQtOGRiOTQ0ZTEzODEw LzEvM2M2d2lrdEE4ZmhlVHJvWHpjZklQa2U3V1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFpYp2FM JWLXMnBc3fjpP7GTL7gB7dBLHtEnqw0hkREqisg7IurqK916pMlRlhmjC5gNzrGr Q1QkGWqGWmGtC+34M1vhAeerJhV89x05cBw+qFCYXxwTbiPaDnW7oXmMVaK88HVF 1Svatz/KbRYq3gp/RdcRJMfX7DaChvY0PzyP5wRx72AlNXuvaPFejaFkpMhqO9D6 681JUq8NRKqs67spJgIyqwTi8zYfkBzBY8yJ0q2K2gta38WpnS3M8SywVgWinELM T/4+btBySSU8Q1jryeqCWcvaDkfNTAr3zOZX4jpGaoTkLefoEoAD7FcW3YrHNeut ZjM5flqi/v1lDw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:13:16 2025 by rpki-client