This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json) Hash identifier: n5Q2fCtGS3eXe5DobYEeCQVTp9PgbwnIn2uLJVolobQ= Subject key identifier: 41:77:54:50:45:D4:4C:A8:C8:50:12:EA:EB:39:66:42:FC:37:DF:E5 Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf Certificate serial: 019B19F1EF9298CE76934F564A3BE2539E19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft Manifest number: 086F Signing time: Sat 13 Dec 2025 23:00:44 +0000 Manifest this update: Sat 13 Dec 2025 23:00:44 +0000 Manifest next update: Sun 14 Dec 2025 23:00:44 +0000 Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: oUFXQBaWx24bA3mdXNhnlia3SYzudOQ51dMvIy1rbqM=) 2: xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa (hash: wP9kQODXoT56dWOB0bEFnWVWD/Y0ndzO5Fzna/QZSuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:ef:92:98:ce:76:93:4f:56:4a:3b:e2:53:9e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf Validity Not Before: Dec 13 23:00:44 2025 GMT Not After : Dec 14 23:00:44 2025 GMT Subject: CN=4177545045d44ca8c85012eaeb396642fc37dfe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:f9:28:f7:7e:3f:75:11:8a:21:a4:5f:84: 9b:81:fa:25:ea:50:78:72:a5:e7:af:3e:c2:ab:f4: 97:d2:cd:94:0f:52:75:fb:9a:f7:f8:c9:a2:82:41: f0:8c:31:78:a5:e7:6c:84:1c:89:0d:7f:db:cd:75: b8:cf:45:05:f4:94:53:de:26:e7:5e:26:70:11:8a: a7:e0:71:7d:bc:51:cf:a2:01:7d:96:25:f5:3f:e3: 87:00:a0:ac:d7:79:88:f1:eb:66:78:06:82:d9:a1: 61:dd:6b:29:5d:a5:8c:80:b4:56:5e:35:c3:15:f2: 26:b2:21:97:cb:65:be:08:00:22:8e:4e:3c:62:c8: b1:f3:5e:da:23:11:39:f3:a5:49:a1:62:6b:a8:f1: 40:bd:df:08:2a:99:09:11:83:80:97:6c:7b:23:43: aa:40:3b:65:2d:bc:ea:29:98:14:8c:7a:70:af:ec: 62:ac:27:db:87:2c:b7:e2:dc:14:b9:5d:19:55:37: b3:1b:17:05:7d:32:5d:24:76:f0:db:fc:58:8e:c2: af:a0:cc:85:7d:a0:03:e7:0d:3f:78:f4:55:e5:74: 05:19:79:06:00:0d:fe:a0:19:0d:1f:e2:ae:0d:08: 59:ce:3c:25:3f:fd:13:a5:ea:f8:7c:ff:43:f4:df: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:77:54:50:45:D4:4C:A8:C8:50:12:EA:EB:39:66:42:FC:37:DF:E5 X509v3 Authority Key Identifier: keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e4:05:a9:3e:c4:86:98:83:b9:d9:d7:5f:d3:86:a9:9f:08: 2d:bb:c1:02:e1:e6:97:b9:b9:89:d6:d6:8e:fb:5b:a0:ae:db: f2:37:78:11:ab:c9:40:20:18:46:2b:15:96:d1:a3:35:c8:df: 0e:df:50:49:c0:b8:28:a5:6b:03:e7:dc:f6:f2:5a:96:f2:1e: 08:e5:9c:78:16:58:42:8a:67:9a:de:73:ec:f2:51:8e:38:a3: 6a:c7:34:98:62:39:8d:b2:09:f7:94:ad:8f:70:a4:89:a2:5f: c3:65:ad:86:f4:e3:84:4c:1c:2b:44:8d:24:30:09:29:89:eb: 0e:82:72:6a:ce:00:0d:8c:c9:c9:1e:66:90:52:bf:23:fc:ce: 3b:47:a0:20:12:e8:5d:29:3e:3c:b1:04:80:ed:a9:62:c0:88: 3c:9b:97:14:29:11:6f:b4:d3:47:85:db:1a:b1:b8:ca:cd:87: ff:a4:1b:8f:bb:20:24:d2:a2:28:3b:96:1b:96:fc:7e:75:e5: c4:9a:bf:e7:b7:79:88:98:fd:c8:bc:fc:0a:91:94:45:bc:6f: 77:82:ff:eb:2b:bc:87:83:27:0b:be:eb:5d:ab:38:6d:76:d3: 47:29:0c:70:a3:13:b1:1e:83:31:c1:23:25:27:fc:a7:ab:00: 14:cb:44:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8e+SmM52k09WSjviU54ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOGEzYTQzMzAxY2QyYzgwNDdlYjg1NDRmODBhYjRmZmNm ZTlhY2YwHhcNMjUxMjEzMjMwMDQ0WhcNMjUxMjE0MjMwMDQ0WjAzMTEwLwYDVQQD Eyg0MTc3NTQ1MDQ1ZDQ0Y2E4Yzg1MDEyZWFlYjM5NjY0MmZjMzdkZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHz5KPd+P3URiiGkX4Sbgfol6lB4 cqXnrz7Cq/SX0s2UD1J1+5r3+MmigkHwjDF4pedshByJDX/bzXW4z0UF9JRT3ibn XiZwEYqn4HF9vFHPogF9liX1P+OHAKCs13mI8etmeAaC2aFh3WspXaWMgLRWXjXD FfImsiGXy2W+CAAijk48Ysix817aIxE586VJoWJrqPFAvd8IKpkJEYOAl2x7I0Oq QDtlLbzqKZgUjHpwr+xirCfbhyy34twUuV0ZVTezGxcFfTJdJHbw2/xYjsKvoMyF faAD5w0/ePRV5XQFGXkGAA3+oBkNH+KuDQhZzjwlP/0Tper4fP9D9N/6LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEF3VFBF1EyoyFAS6us5ZkL8N9/lMB8GA1UdIwQY MBaAFNyKOkMwHNLIBH64VE+Aq0/8/prPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kZjBmZjMtNTYxZS00Zjc3LWE3ZGQt ZmU4NDQwNjBhNDZkLzEvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9kZjBmZjMtNTYxZS00Zjc3LWE3ZGQtZmU4NDQwNjBhNDZk LzEvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+QFqT7E hpiDudnXX9OGqZ8ILbvBAuHml7m5idbWjvtboK7b8jd4EavJQCAYRisVltGjNcjf Dt9QScC4KKVrA+fc9vJalvIeCOWceBZYQopnmt5z7PJRjjijasc0mGI5jbIJ95St j3CkiaJfw2WthvTjhEwcK0SNJDAJKYnrDoJyas4ADYzJyR5mkFK/I/zOO0egIBLo XSk+PLEEgO2pYsCIPJuXFCkRb7TTR4XbGrG4ys2H/6Qbj7sgJNKiKDuWG5b8fnXl xJq/57d5iJj9yLz8CpGURbxvd4L/6yu8h4MnC77rXas4bXbTRykMcKMTsR6DMcEj JSf8p6sAFMtEOA== -----END CERTIFICATE-----Generated at Sun Dec 14 03:42:16 2025 by rpki-client