This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft File: 3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json) Hash identifier: 8NOnz0SrGBbQeX74bVndr1rlC7Y4S2jIf98hI8XAXR8= Subject key identifier: 5E:8D:B9:08:E8:DB:E2:A8:BE:FC:44:0E:F5:84:7B:A1:03:67:F3:68 Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Certificate serial: 019B3C0FF05A0428088E45A9BA87FEC9CCAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 14:00:36 +0000 Manifest this update: Sat 20 Dec 2025 14:00:36 +0000 Manifest next update: Sun 21 Dec 2025 14:00:36 +0000 Files and hashes: 1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: c4WCBMr61Sy5YH63ntnVVCGcFPSFy6gKdYQEcKU83Sg=) 2: CURhnBTebRtFbuqIF-dFXdwxOsI.roa (hash: N2c5XcgW+AQpVpLwLHbjy6S9Vm1RjK7GXpDlAsFZpfk=) 3: EUX35BVNkJsUjFXuBk75OVm9PCc.roa (hash: K2j+jUDEk3zskvvRatSmoYAxHWdNXJq7sEJx+OMyHQQ=) 4: EpSf_xGsxic86z10zbwqzKmasW8.roa (hash: eSnnnz/WKP7V/MJyjND4ey6FBA8RQok1qLjk+ng6oW4=) 5: P2rbCazRzAecS6cq7qBlJh3ulhk.roa (hash: eS1swdw4PwPA3JuCzPIM9DRGgb8q7vXujdInn+mWiHc=) 6: mld6HE3RapKTIrTK3ARnJwX6Nfo.roa (hash: QckW2u4tae0vEXpqjOByW8q7ybuT0MKIf8YyQZ8Ec7k=) 7: pX4EUgeDNNWi24hGb7Vs1LSwVFU.roa (hash: 8qojOgWb70IVU0ElW5/Sut6REATPavh52G81zhsEHj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:f0:5a:04:28:08:8e:45:a9:ba:87:fe:c9:cc:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Validity Not Before: Dec 20 14:00:36 2025 GMT Not After : Dec 21 14:00:36 2025 GMT Subject: CN=5e8db908e8dbe2a8befc440ef5847ba10367f368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3c:c2:a9:d0:8c:4d:96:4f:11:64:96:56:18: 5c:b9:12:20:72:0a:66:d6:60:6c:16:b6:85:3a:5e: e5:23:2d:09:28:ad:ee:22:92:9e:a7:71:bf:85:ae: 40:91:31:16:76:2a:ce:b7:5a:46:64:07:5f:c2:43: 8e:89:f2:31:fc:75:41:0e:37:c1:a6:98:0d:ef:be: eb:94:e8:78:6e:d9:d8:fd:c7:7d:51:91:2a:2c:1e: 3c:06:b7:b6:38:29:e0:1d:e0:75:6f:d5:67:f6:fb: 9b:df:9e:af:cc:1c:33:be:38:85:ac:55:23:b4:64: 09:4f:34:f5:36:3f:7f:69:54:82:2e:2e:e1:1c:73: ba:84:ef:b9:b9:2c:97:e4:ef:db:c2:bc:d5:a4:60: 97:8d:db:be:2c:72:53:a2:a7:8e:e3:79:ca:e6:80: 9b:98:65:ef:04:81:83:65:ee:64:4c:d0:cf:53:99: c4:49:05:84:60:a6:7d:b5:ae:07:d3:91:8b:df:14: c9:d6:6e:72:79:e1:11:b8:88:c5:5c:37:92:82:4f: 43:b2:85:0b:4e:e0:55:e3:70:b3:87:29:54:34:3f: 5a:9a:03:6e:22:b2:78:4b:c9:e8:1d:d8:08:14:5b: f1:da:98:1c:51:7c:0b:ca:ce:ef:d6:45:6a:a3:ee: 9c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8D:B9:08:E8:DB:E2:A8:BE:FC:44:0E:F5:84:7B:A1:03:67:F3:68 X509v3 Authority Key Identifier: keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e4:aa:65:3f:8f:80:80:5a:0e:ad:1c:c1:c3:43:e9:92:e7: fe:d0:6e:37:63:1c:f0:0f:1d:1e:c8:39:b1:6a:c8:e0:31:99: ed:fc:ac:9a:d2:bc:b7:01:19:5d:d4:a1:f2:fc:7a:dd:c5:4d: 1c:1b:a9:46:63:30:a5:ad:9d:61:55:d3:f3:ef:d1:ed:64:c2: 5e:b8:9f:6f:9c:d2:2d:7a:81:43:46:71:f7:c1:62:6f:ac:a7: 78:cd:43:8f:12:80:ee:18:68:4b:83:5f:9c:68:51:10:b9:8f: c0:16:ec:cf:bf:46:b8:ca:30:ec:7b:d2:5c:53:c7:21:c1:69: 8c:54:78:e8:00:96:fb:01:96:a8:31:7b:35:ff:c3:d2:e3:f7: 9c:4c:c3:08:c8:48:94:a9:34:a5:43:7a:62:e6:96:f9:07:f9: 26:d7:94:c9:d2:db:49:17:17:4c:8c:6b:43:78:a5:70:c4:61: 0e:3f:f1:0d:6a:4d:27:a6:05:ac:8c:8c:2b:8f:9b:c8:e6:10: 7c:9f:3a:d5:33:52:31:1a:3b:dd:b1:30:7c:bd:4e:8f:fe:a8: 7a:60:03:cc:c4:ae:fa:e6:5c:4a:cd:cf:32:24:7a:5f:91:42: 40:99:da:1e:97:8f:03:66:05:56:e1:1b:81:08:db:b1:44:93: b7:d6:63:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D/BaBCgIjkWpuof+ycysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGQ5ZDZiNjk3Y2ExYzg2NTcwYzI1Njg2MmU2ODU4YjQ3 OTljODUwHhcNMjUxMjIwMTQwMDM2WhcNMjUxMjIxMTQwMDM2WjAzMTEwLwYDVQQD Eyg1ZThkYjkwOGU4ZGJlMmE4YmVmYzQ0MGVmNTg0N2JhMTAzNjdmMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjzCqdCMTZZPEWSWVhhcuRIgcgpm 1mBsFraFOl7lIy0JKK3uIpKep3G/ha5AkTEWdirOt1pGZAdfwkOOifIx/HVBDjfB ppgN777rlOh4btnY/cd9UZEqLB48Bre2OCngHeB1b9Vn9vub356vzBwzvjiFrFUj tGQJTzT1Nj9/aVSCLi7hHHO6hO+5uSyX5O/bwrzVpGCXjdu+LHJToqeO43nK5oCb mGXvBIGDZe5kTNDPU5nESQWEYKZ9ta4H05GL3xTJ1m5yeeERuIjFXDeSgk9DsoUL TuBV43CzhylUND9amgNuIrJ4S8noHdgIFFvx2pgcUXwLys7v1kVqo+6c2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6NuQjo2+KovvxEDvWEe6EDZ/NoMB8GA1UdIwQY MBaAFN4NnWtpfKHIZXDCVoYuaFi0eZyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYt MDFjYmZjMGU5NGU3LzEvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYtMDFjYmZjMGU5NGU3 LzEvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOSqZT+P gIBaDq0cwcND6ZLn/tBuN2Mc8A8dHsg5sWrI4DGZ7fysmtK8twEZXdSh8vx63cVN HBupRmMwpa2dYVXT8+/R7WTCXrifb5zSLXqBQ0Zx98Fib6yneM1DjxKA7hhoS4Nf nGhRELmPwBbsz79GuMow7HvSXFPHIcFpjFR46ACW+wGWqDF7Nf/D0uP3nEzDCMhI lKk0pUN6YuaW+Qf5JteUydLbSRcXTIxrQ3ilcMRhDj/xDWpNJ6YFrIyMK4+byOYQ fJ861TNSMRo73bEwfL1Oj/6oemADzMSu+uZcSs3PMiR6X5FCQJnaHpePA2YFVuEb gQjbsUSTt9ZjOA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:42:39 2025 by rpki-client