This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft File: k3WPkqf9c1m6KEgSWoTfzELRS2w.mft (raw, json) Hash identifier: fmuMzRoNu0aVJwaT5irSyDYSejkGbQBwvxaLQGpIylM= Subject key identifier: 06:08:BC:DB:87:22:9B:B4:4F:E1:D1:86:2F:20:EA:65:84:09:B4:3E Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c Certificate serial: 019B2D0BA2BA53455324692F704383DA909C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 16:01:35 +0000 Manifest this update: Wed 17 Dec 2025 16:01:35 +0000 Manifest next update: Thu 18 Dec 2025 16:01:35 +0000 Files and hashes: 1: 6zqkbZaib1jQ2Gk8xWIE4kNkA08.roa (hash: t2pawZUDG8w+/7kKSZlwszt2WDbCUFiInD9rYvACGhw=) 2: AKC2vs0Xv6myd7svsj2_92wUeLg.roa (hash: YNCrFS5xfYguBMhlJjrv+olyy/Sk3uL/9WxwO9r8P9Y=) 3: k3WPkqf9c1m6KEgSWoTfzELRS2w.crl (hash: LAarJayKCD6opoIjVAMLCywUTmfHXvKzdGsIVH2fX+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:a2:ba:53:45:53:24:69:2f:70:43:83:da:90:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c Validity Not Before: Dec 17 16:01:35 2025 GMT Not After : Dec 18 16:01:35 2025 GMT Subject: CN=0608bcdb87229bb44fe1d1862f20ea658409b43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:11:a6:c0:a3:47:14:f0:fd:b6:b3:8d:09:b1: 1c:22:58:68:c5:18:8c:3e:70:10:ef:bf:9a:c8:46: 6c:9d:5e:fb:1b:8d:05:05:ac:c6:7e:16:d5:eb:8c: 94:1e:ba:f9:e0:34:c5:00:df:af:25:df:4d:19:a0: 56:f0:ef:64:71:81:83:19:1c:a9:a3:fd:f2:c0:c9: 23:4d:df:91:57:44:3e:00:f9:08:db:be:e4:f7:5e: 3a:4c:48:8e:6e:66:b7:4d:0d:2d:62:15:79:17:81: 9f:fb:79:8c:b5:a1:d8:a6:f1:f7:94:d5:f3:fb:c9: 52:d1:29:9d:bc:e5:fb:e5:ed:8e:8b:71:28:d8:23: 3e:0c:e6:02:dc:00:dc:28:21:e8:66:33:5a:65:cf: c4:9d:d6:98:de:d8:5d:a6:cf:20:5f:22:8b:54:18: 1d:f8:ab:02:f7:f2:3e:0c:0e:bb:78:50:bb:75:a8: 44:3d:16:89:fc:4b:5c:9c:71:51:9a:83:68:0f:4e: fd:48:7c:a3:b5:79:24:36:c4:14:1c:f8:c3:99:b4: 33:3a:84:9e:f6:da:df:4e:4b:3f:3e:02:1c:18:76: 06:7d:bb:66:e7:6c:ae:b1:eb:62:ff:96:cc:1f:c8: 57:96:14:f3:ea:37:df:db:7e:5b:10:81:b9:f1:56: 7a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:08:BC:DB:87:22:9B:B4:4F:E1:D1:86:2F:20:EA:65:84:09:B4:3E X509v3 Authority Key Identifier: keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:9e:5f:65:6d:ab:f2:d1:80:c2:ae:09:89:f4:70:36:c9:06: c4:f1:66:ec:da:f2:a0:62:40:0e:da:5f:50:0a:60:38:71:ce: c0:e3:d8:f6:1f:d0:d5:7a:4c:ef:30:17:ec:eb:e1:a8:69:e3: 4f:e9:6b:1f:7d:62:48:68:5a:e3:1d:ad:49:7e:59:02:b0:eb: 6d:1a:51:9f:f3:bf:2e:38:5a:cc:59:b3:30:d6:75:55:b5:54: 7a:d5:44:0e:b9:a8:41:98:a4:0c:17:09:7e:05:a4:8e:ea:d8: 60:4c:f7:b2:5c:c3:8c:25:ca:c3:aa:4a:d2:6f:35:dc:c2:eb: c7:7a:f3:81:c0:09:96:f2:be:40:9a:07:4a:ff:13:29:bc:40: 04:51:ae:27:12:69:c8:f5:d5:21:7a:9f:91:fd:4e:b3:c1:bf: 4c:7b:c8:b4:ad:94:d9:a1:83:6c:df:a3:10:10:8e:ed:2c:19: 51:46:d3:75:93:59:85:31:e5:6a:24:72:60:16:3d:59:c6:f1: 41:c3:12:11:d6:34:4c:d9:5c:fd:a2:31:f5:83:51:2b:47:0d: 1a:94:3f:62:91:49:79:b3:3f:f5:f2:55:84:59:cd:e5:f8:d9: f9:41:62:ff:d2:3c:4f:ae:ed:5c:8a:c6:c8:11:92:d5:b9:20: 5b:9d:db:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC6K6U0VTJGkvcEOD2pCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNzU4ZjkyYTdmZDczNTliYTI4NDgxMjVhODRkZmNjNDJk MTRiNmMwHhcNMjUxMjE3MTYwMTM1WhcNMjUxMjE4MTYwMTM1WjAzMTEwLwYDVQQD EygwNjA4YmNkYjg3MjI5YmI0NGZlMWQxODYyZjIwZWE2NTg0MDliNDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhGmwKNHFPD9trONCbEcIlhoxRiM PnAQ77+ayEZsnV77G40FBazGfhbV64yUHrr54DTFAN+vJd9NGaBW8O9kcYGDGRyp o/3ywMkjTd+RV0Q+APkI277k9146TEiObma3TQ0tYhV5F4Gf+3mMtaHYpvH3lNXz +8lS0SmdvOX75e2Oi3Eo2CM+DOYC3ADcKCHoZjNaZc/EndaY3thdps8gXyKLVBgd +KsC9/I+DA67eFC7dahEPRaJ/EtcnHFRmoNoD079SHyjtXkkNsQUHPjDmbQzOoSe 9trfTks/PgIcGHYGfbtm52yuseti/5bMH8hXlhTz6jff235bEIG58VZ6LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYIvNuHIpu0T+HRhi8g6mWECbQ+MB8GA1UdIwQY MBaAFJN1j5Kn/XNZuihIElqE38xC0UtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZjZkNGEtMTE2Ni00ZDJkLWE5MjEt ZTE0M2ZhYWEwYjgyLzEvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wZjZkNGEtMTE2Ni00ZDJkLWE5MjEtZTE0M2ZhYWEwYjgy LzEvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh55fZW2r 8tGAwq4JifRwNskGxPFm7NryoGJADtpfUApgOHHOwOPY9h/Q1XpM7zAX7OvhqGnj T+lrH31iSGha4x2tSX5ZArDrbRpRn/O/LjhazFmzMNZ1VbVUetVEDrmoQZikDBcJ fgWkjurYYEz3slzDjCXKw6pK0m813MLrx3rzgcAJlvK+QJoHSv8TKbxABFGuJxJp yPXVIXqfkf1Os8G/THvItK2U2aGDbN+jEBCO7SwZUUbTdZNZhTHlaiRyYBY9Wcbx QcMSEdY0TNlc/aIx9YNRK0cNGpQ/YpFJebM/9fJVhFnN5fjZ+UFi/9I8T67tXIrG yBGS1bkgW53b7g== -----END CERTIFICATE-----Generated at Wed Dec 17 19:13:23 2025 by rpki-client