This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: GbX8b2PtVqLI4DWvveCaJR2VwUBnWGhx1TJiOnSZxWg= Subject key identifier: DD:62:D7:11:CC:5D:F8:09:E5:9C:32:C1:D2:89:3A:A2:B2:24:AE:31 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019B1494AD488C8884A2895B15297432C401 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 133C Signing time: Fri 12 Dec 2025 22:00:46 +0000 Manifest this update: Fri 12 Dec 2025 22:00:46 +0000 Manifest next update: Sat 13 Dec 2025 22:00:46 +0000 Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: dFOY1FodG1uhf60r48Y49v/hAjRtaQsJj+3t1AMO1RU=) 3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=) 4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=) 5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=) 6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=) 7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=) 8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:94:ad:48:8c:88:84:a2:89:5b:15:29:74:32:c4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Dec 12 22:00:46 2025 GMT Not After : Dec 13 22:00:46 2025 GMT Subject: CN=dd62d711cc5df809e59c32c1d2893aa2b224ae31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d6:cd:8a:38:10:d7:30:b8:55:b6:87:e4:c9: 7b:3e:35:22:04:ba:d1:e9:c3:53:68:1e:6f:10:d7: 86:aa:35:ce:98:65:07:d1:09:c3:9e:63:b6:b5:0f: 7a:86:c4:85:f8:8b:0c:f8:a4:a3:09:92:39:94:da: 87:1a:e6:28:c9:84:dd:b8:d4:98:e1:fc:40:c9:4c: 85:74:8c:14:f9:eb:bd:a6:c6:de:3b:74:db:22:90: 73:c6:91:c3:80:71:80:a1:2f:07:10:62:09:d0:23: 27:a6:b4:1b:0f:69:c3:2b:0e:ee:15:92:a1:48:59: 3e:b1:41:79:61:3e:a0:72:8c:ad:92:fa:86:e3:7b: bf:79:8e:44:01:c7:df:ea:fe:99:5a:8b:23:ae:60: 64:53:be:00:e3:09:de:88:56:d7:8b:f8:fa:8e:09: 6d:9d:b3:03:cc:6c:b9:c1:0e:9d:ac:7e:53:16:13: 85:cb:f2:fc:ba:e5:da:88:15:f4:4c:8f:46:e8:94: d2:7c:d7:d9:3a:54:e9:d3:88:3d:98:72:b0:e3:1e: 03:dc:46:77:9f:ad:d2:38:0d:5b:29:b1:b3:2c:0f: b3:0a:7a:95:8f:07:16:9f:a3:a3:57:3a:38:cd:d3: 34:71:ea:4c:3f:0e:02:0e:a9:57:b4:be:e8:04:3b: 8f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:62:D7:11:CC:5D:F8:09:E5:9C:32:C1:D2:89:3A:A2:B2:24:AE:31 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:5d:a1:04:97:0d:9b:26:3b:1a:b3:4f:09:c5:36:ba:63:55: bc:82:a1:d7:2d:0c:97:c8:fb:83:73:3a:f9:5d:19:ad:59:dd: 7e:a4:c2:39:69:31:6f:05:d5:d3:ec:a9:a4:03:d1:75:11:0a: 98:50:1f:25:2c:97:22:f9:df:3c:5f:22:7e:cf:21:81:b9:fc: 33:19:16:af:c3:30:24:41:f5:12:97:ba:10:b2:8f:cc:23:18: 20:57:cf:2e:27:5a:55:d2:f3:c3:48:5b:d9:c8:ef:c1:d9:87: 13:de:43:60:a3:a7:83:2f:39:92:0d:5b:95:bf:d3:36:b7:d3: 19:4d:44:59:32:f1:b3:c6:0c:4d:e1:d3:0f:e7:73:d3:6c:e4: 79:44:f8:4b:4e:72:8c:4c:4a:d4:ab:b9:9f:91:85:25:eb:6f: 0c:49:11:4a:66:07:a1:9e:61:3d:d9:85:d7:bf:f6:10:bc:13: d0:ec:1b:85:bd:42:8e:8b:c8:b3:8c:9e:fc:4b:de:ff:8f:49: 19:48:d7:ef:ed:6d:ed:1f:91:5d:e7:d9:95:cc:8f:ef:67:1c: 2e:6b:fb:a9:29:0e:ec:c4:5a:99:07:9a:74:8a:29:af:c0:41: 06:bb:07:67:98:cc:33:de:bd:75:7f:f1:f5:ca:4b:19:14:76: 3f:97:b7:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsUlK1IjIiEoolbFSl0MsQBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjUxMjEyMjIwMDQ2WhcNMjUxMjEzMjIwMDQ2WjAzMTEwLwYDVQQD EyhkZDYyZDcxMWNjNWRmODA5ZTU5YzMyYzFkMjg5M2FhMmIyMjRhZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNbNijgQ1zC4VbaH5Ml7PjUiBLrR 6cNTaB5vENeGqjXOmGUH0QnDnmO2tQ96hsSF+IsM+KSjCZI5lNqHGuYoyYTduNSY 4fxAyUyFdIwU+eu9psbeO3TbIpBzxpHDgHGAoS8HEGIJ0CMnprQbD2nDKw7uFZKh SFk+sUF5YT6gcoytkvqG43u/eY5EAcff6v6ZWosjrmBkU74A4wneiFbXi/j6jglt nbMDzGy5wQ6drH5TFhOFy/L8uuXaiBX0TI9G6JTSfNfZOlTp04g9mHKw4x4D3EZ3 n63SOA1bKbGzLA+zCnqVjwcWn6OjVzo4zdM0cepMPw4CDqlXtL7oBDuPsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1i1xHMXfgJ5ZwywdKJOqKyJK4xMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxl2hBJcN myY7GrNPCcU2umNVvIKh1y0Ml8j7g3M6+V0ZrVndfqTCOWkxbwXV0+yppAPRdREK mFAfJSyXIvnfPF8ifs8hgbn8MxkWr8MwJEH1Epe6ELKPzCMYIFfPLidaVdLzw0hb 2cjvwdmHE95DYKOngy85kg1blb/TNrfTGU1EWTLxs8YMTeHTD+dz02zkeUT4S05y jExK1Ku5n5GFJetvDEkRSmYHoZ5hPdmF17/2ELwT0Owbhb1CjovIs4ye/Eve/49J GUjX7+1t7R+RXefZlcyP72ccLmv7qSkO7MRamQeadIopr8BBBrsHZ5jMM969dX/x 9cpLGRR2P5e3sw== -----END CERTIFICATE-----Generated at Sat Dec 13 01:57:03 2025 by rpki-client