This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft File: 3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json) Hash identifier: VvCBW2zcUrjy8ZjfPjxhXRWrD902I5dsEiisG+GiZ40= Subject key identifier: 16:F0:6F:E2:32:5D:B0:6D:DF:6C:2C:E0:89:8E:6B:A3:2C:AA:09:8F Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64 Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64 Certificate serial: 019B101420D075DB866B7531F32D1BAA0877 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft Manifest number: 1782 Signing time: Fri 12 Dec 2025 01:01:53 +0000 Manifest this update: Fri 12 Dec 2025 01:01:53 +0000 Manifest next update: Sat 13 Dec 2025 01:01:53 +0000 Files and hashes: 1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: 1UZYATRNVH8sR9EXTYnJlXZ4Puc0bUYycyQmG/ifemI=) 2: I3GFCz8gt6Rki8DJxRT45IEltuo.roa (hash: uBBouPhKhyaXIv9GSGFn2zrE6uv7a/jKMDEUQeG9Dfo=) 3: RoNUSsRbSgnW76cSNeAr425YYHY.roa (hash: ty/WAAmbUm3G9276dnnVRYAsJCuw7HHC84siWPb6a6o=) 4: j06EmkksF4YrV0BvXtZ5BQd7X_0.roa (hash: W1w1cQpGhDndwAuyI1OFa9FFiGMVh7oMpQVYkrYTonk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:20:d0:75:db:86:6b:75:31:f3:2d:1b:aa:08:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64 Validity Not Before: Dec 12 01:01:53 2025 GMT Not After : Dec 13 01:01:53 2025 GMT Subject: CN=16f06fe2325db06ddf6c2ce0898e6ba32caa098f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f3:e1:23:fa:0f:58:d1:5a:8d:7f:32:2c:e2: 90:e9:4f:62:60:03:64:6a:f8:93:01:5f:c8:95:9e: f2:25:9d:3e:0d:73:b4:d4:6d:44:19:8e:28:68:f1: c5:6a:58:d0:ea:cf:16:a8:d5:bd:11:4b:0d:d7:c8: eb:d6:31:4e:84:17:b2:da:d4:66:8d:c9:1e:cb:30: fb:9d:61:99:32:b6:05:9a:99:4e:fd:5e:f7:fd:1b: 5b:30:cd:c8:c7:28:7f:0c:dc:1c:a2:c2:92:26:73: 88:db:af:23:b0:0e:e2:25:fb:62:48:0a:4c:f2:66: 00:b4:df:8c:2c:05:33:9e:e0:3c:82:9f:10:7e:74: 18:a0:4d:f2:9e:9b:ac:c7:36:e9:ff:5c:8b:b9:0a: 52:55:2a:1d:90:5c:e8:0d:53:81:7d:78:60:44:26: d7:3a:db:70:39:02:e6:19:83:bf:ca:dc:c3:bb:c7: fd:ea:99:18:8c:e9:89:37:f1:db:41:f8:89:0f:40: b1:46:51:0e:1f:96:7c:d3:b2:c9:7c:7a:55:a0:f9: a9:0b:ae:88:ae:11:d8:68:16:79:e2:6f:6a:dc:25: 9d:90:0f:40:5c:f2:7d:0e:15:42:df:95:2b:1e:a0: 03:f7:d5:62:89:12:49:c3:f4:a3:68:94:02:e5:d4: 46:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F0:6F:E2:32:5D:B0:6D:DF:6C:2C:E0:89:8E:6B:A3:2C:AA:09:8F X509v3 Authority Key Identifier: keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:fd:55:01:31:b3:b2:44:e4:5f:86:b6:ba:32:1b:89:d2:2e: ff:fc:6f:b8:43:49:54:5a:1a:63:a9:b9:30:9f:df:fd:98:f5: d8:b4:da:0f:d1:e4:21:08:e4:d2:9a:23:96:41:87:fe:05:4c: 5e:b6:44:39:4b:9b:0f:c8:88:73:76:b4:16:ee:f7:5b:9a:79: 88:ee:8a:9f:ca:da:77:71:a1:48:c9:4d:ac:85:f6:72:8a:eb: ba:55:21:2f:9c:70:bf:15:b8:43:85:a4:2b:d5:ce:7f:12:dd: f6:df:53:ad:af:86:c3:59:84:4e:71:e7:d6:f1:e2:a4:b5:b1: 29:47:80:26:bb:c4:6c:cf:06:7f:8a:68:f1:f2:c9:7a:f0:fb: 4c:cb:b3:e9:16:91:8e:8b:5a:68:c5:a0:b1:a1:05:d0:4a:cb: 8f:05:0f:76:e9:32:fc:54:e7:7b:75:51:f1:2a:ce:d3:a5:a6: b0:27:51:44:ea:ed:21:c1:d9:b3:16:6a:45:41:fd:4a:77:df: 3f:fd:3f:dc:e2:03:c5:55:bf:45:8a:be:6a:4c:d3:67:dd:dc: cc:21:b6:30:7b:ff:b2:d9:92:15:58:10:13:dc:9d:f6:b8:24: 3b:c4:b4:1f:09:b1:fc:a4:cc:8d:69:8f:f8:85:5e:96:cb:5f: 2a:56:1b:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFCDQdduGa3Ux8y0bqgh3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNWYyZTdjYzJjNjg3ZjU4YzBkMWY2MTMyYmIyZGNmZGYz OGNiNjQwHhcNMjUxMjEyMDEwMTUzWhcNMjUxMjEzMDEwMTUzWjAzMTEwLwYDVQQD EygxNmYwNmZlMjMyNWRiMDZkZGY2YzJjZTA4OThlNmJhMzJjYWEwOThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/PhI/oPWNFajX8yLOKQ6U9iYANk aviTAV/IlZ7yJZ0+DXO01G1EGY4oaPHFaljQ6s8WqNW9EUsN18jr1jFOhBey2tRm jckeyzD7nWGZMrYFmplO/V73/RtbMM3Ixyh/DNwcosKSJnOI268jsA7iJftiSApM 8mYAtN+MLAUznuA8gp8QfnQYoE3ynpusxzbp/1yLuQpSVSodkFzoDVOBfXhgRCbX OttwOQLmGYO/ytzDu8f96pkYjOmJN/HbQfiJD0CxRlEOH5Z807LJfHpVoPmpC66I rhHYaBZ54m9q3CWdkA9AXPJ9DhVC35UrHqAD99ViiRJJw/SjaJQC5dRGEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbwb+IyXbBt32ws4ImOa6MsqgmPMB8GA1UdIwQY MBaAFN1fLnzCxof1jA0fYTK7Lc/fOMtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iYzBhMjUtOTMzYS00ZjVhLWE1ZjMt OWRjZmQyZWYzMDIzLzEvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iYzBhMjUtOTMzYS00ZjVhLWE1ZjMtOWRjZmQyZWYzMDIz LzEvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkf1VATGz skTkX4a2ujIbidIu//xvuENJVFoaY6m5MJ/f/Zj12LTaD9HkIQjk0pojlkGH/gVM XrZEOUubD8iIc3a0Fu73W5p5iO6Kn8rad3GhSMlNrIX2corrulUhL5xwvxW4Q4Wk K9XOfxLd9t9Tra+Gw1mETnHn1vHipLWxKUeAJrvEbM8Gf4po8fLJevD7TMuz6RaR jotaaMWgsaEF0ErLjwUPduky/FTne3VR8SrO06WmsCdRROrtIcHZsxZqRUH9Snff P/0/3OIDxVW/RYq+akzTZ93czCG2MHv/stmSFVgQE9yd9rgkO8S0Hwmx/KTMjWmP +IVelstfKlYbtg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:39:02 2025 by rpki-client