This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: DvBC+8+PLPgXy528h0sqBqKuOCk0NaZ9NftO2nM4L34= Subject key identifier: A1:B4:96:31:42:0B:0E:38:E6:BB:EF:D6:BB:13:51:47:89:8E:77:DA Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019B5C08B28E2C109A09ADCB4764C2E2B907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 1361 Signing time: Fri 26 Dec 2025 19:00:32 +0000 Manifest this update: Fri 26 Dec 2025 19:00:32 +0000 Manifest next update: Sat 27 Dec 2025 19:00:32 +0000 Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: UurNOi9zZIN1pCarMWKdX8WypGu7tRdilQuljpgvzPo=) 3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=) 4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=) 5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=) 6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=) 7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=) 8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:08:b2:8e:2c:10:9a:09:ad:cb:47:64:c2:e2:b9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Dec 26 19:00:32 2025 GMT Not After : Dec 27 19:00:32 2025 GMT Subject: CN=a1b49631420b0e38e6bbefd6bb135147898e77da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:76:6f:2b:58:a5:25:3c:4d:b4:87:c3:0d:4c: 83:33:58:c9:7e:b3:14:35:70:c7:4d:7a:0b:ef:42: 64:a1:6c:a8:59:37:7a:9e:8b:c4:1e:a3:8c:3e:53: 32:90:27:2b:ee:18:28:7f:98:bf:31:55:38:fe:ab: 3c:f9:92:c3:dc:08:8f:47:1e:5d:b4:ea:a5:65:64: fe:f9:b0:37:4d:90:88:29:4e:3e:fd:28:3f:4c:8f: 20:c5:19:e0:f4:3a:5b:d7:e2:e2:56:af:eb:a2:a6: e2:9b:bd:00:91:cc:a2:d7:a8:8b:b5:0e:59:f5:04: f1:5d:a0:f7:c4:d2:17:c1:67:dc:cc:3f:8e:38:9e: d3:3d:6f:b0:97:e1:ff:d6:9f:40:b9:81:b5:02:6e: 6f:8e:cf:ce:5f:17:0a:82:c2:ee:2f:e6:d0:b1:0a: e3:20:c8:be:8c:33:05:00:63:76:99:7a:34:07:41: ab:68:6a:d7:ab:6d:8d:40:0e:92:8e:29:ec:88:30: a2:d8:e7:c6:ea:49:52:df:e7:89:e2:10:41:ed:6a: e0:70:d4:9c:ee:6e:6b:52:21:95:6d:e0:1f:7a:15: d2:7a:fd:06:99:2c:c2:28:1b:b1:e9:45:c6:40:01: 8a:51:31:22:63:90:e1:9a:de:c0:f0:14:d2:1e:4c: 6d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B4:96:31:42:0B:0E:38:E6:BB:EF:D6:BB:13:51:47:89:8E:77:DA X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:6b:ef:7a:1a:da:c5:6d:84:97:e6:66:2f:2c:c0:fa:7d:ef: 4c:37:35:02:24:7b:85:a4:dd:ec:25:66:ec:15:fd:f1:8d:4d: 66:0e:b1:bc:e2:d4:a9:6e:20:43:fc:4e:c5:50:a6:18:4c:20: e7:7a:23:78:e6:70:34:4b:36:6d:d2:f8:a8:ae:18:3a:7f:c3: af:50:26:a3:8c:4e:9f:93:18:b3:67:2c:bc:5c:03:e7:72:68: 89:16:91:6f:74:3b:16:21:23:44:43:a1:9a:15:51:e1:13:ee: 01:3f:a8:48:96:ab:8f:e2:df:5a:8e:6d:f7:0e:f7:1b:c5:46: e3:d7:4b:b1:64:d1:da:e6:86:b5:9f:4d:6d:77:32:8a:c2:ce: b3:13:b4:8a:44:ac:5c:3c:63:37:9c:f7:d2:7c:ca:ad:89:4d: 63:a1:f6:06:69:a6:e8:95:bf:52:97:78:6d:e1:87:9a:c8:56: c0:c6:7f:e9:33:7e:a9:65:55:72:2d:ed:74:a8:b9:17:9b:2a: b6:97:47:a2:fd:ee:b5:a1:c3:42:cf:42:fe:99:4f:fe:23:8b: e3:3e:fe:42:0c:a3:e1:3f:32:5d:40:71:13:21:64:e0:7a:4d: 7a:ee:7d:28:8e:3d:58:c8:93:d9:5b:a8:70:b2:b0:01:8b:d2: b5:c1:00:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCLKOLBCaCa3LR2TC4rkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjUxMjI2MTkwMDMyWhcNMjUxMjI3MTkwMDMyWjAzMTEwLwYDVQQD EyhhMWI0OTYzMTQyMGIwZTM4ZTZiYmVmZDZiYjEzNTE0Nzg5OGU3N2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3ZvK1ilJTxNtIfDDUyDM1jJfrMU NXDHTXoL70JkoWyoWTd6novEHqOMPlMykCcr7hgof5i/MVU4/qs8+ZLD3AiPRx5d tOqlZWT++bA3TZCIKU4+/Sg/TI8gxRng9Dpb1+LiVq/roqbim70Akcyi16iLtQ5Z 9QTxXaD3xNIXwWfczD+OOJ7TPW+wl+H/1p9AuYG1Am5vjs/OXxcKgsLuL+bQsQrj IMi+jDMFAGN2mXo0B0GraGrXq22NQA6SjinsiDCi2OfG6klS3+eJ4hBB7WrgcNSc 7m5rUiGVbeAfehXSev0GmSzCKBux6UXGQAGKUTEiY5Dhmt7A8BTSHkxt/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKG0ljFCCw445rvv1rsTUUeJjnfaMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyWvvehra xW2El+ZmLyzA+n3vTDc1AiR7haTd7CVm7BX98Y1NZg6xvOLUqW4gQ/xOxVCmGEwg 53ojeOZwNEs2bdL4qK4YOn/Dr1Amo4xOn5MYs2csvFwD53JoiRaRb3Q7FiEjREOh mhVR4RPuAT+oSJarj+LfWo5t9w73G8VG49dLsWTR2uaGtZ9NbXcyisLOsxO0ikSs XDxjN5z30nzKrYlNY6H2Bmmm6JW/Upd4beGHmshWwMZ/6TN+qWVVci3tdKi5F5sq tpdHov3utaHDQs9C/plP/iOL4z7+Qgyj4T8yXUBxEyFk4HpNeu59KI49WMiT2Vuo cLKwAYvStcEA4Q== -----END CERTIFICATE-----Generated at Fri Dec 26 20:25:36 2025 by rpki-client