This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: DEzYkcExnr+0UPdjsX0mQ02Le0R03sc6zGtPzHRNHwk= Subject key identifier: AB:FB:D7:62:4A:92:D7:58:46:46:30:67:C6:DC:A0:F3:06:BB:E4:51 Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019B71472AE66C0C22547A89A589B059D8BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 136C Signing time: Tue 30 Dec 2025 22:00:47 +0000 Manifest this update: Tue 30 Dec 2025 22:00:47 +0000 Manifest next update: Wed 31 Dec 2025 22:00:47 +0000 Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: l/BUhqFQBbEKxjehqyWf5zTdxeoU8QdjEG52AsoYHOg=) 3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=) 4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=) 5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=) 6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=) 7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=) 8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:47:2a:e6:6c:0c:22:54:7a:89:a5:89:b0:59:d8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Dec 30 22:00:47 2025 GMT Not After : Dec 31 22:00:47 2025 GMT Subject: CN=abfbd7624a92d75846463067c6dca0f306bbe451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:99:98:89:28:52:ee:b4:e0:9a:19:1b:5c:d4: aa:e4:5a:e2:c5:8c:b5:8e:4a:c1:f4:fe:a0:b5:99: ba:f4:de:b7:c4:39:04:f5:2e:b1:79:a8:26:db:b3: 39:d8:36:40:cf:50:14:0a:95:09:9e:6a:06:5c:81: 03:c7:ef:10:36:a4:aa:2e:5a:be:50:f3:88:52:65: 88:32:c7:a3:d4:fa:6e:28:10:91:de:ac:dc:99:7a: c1:39:11:ca:a2:fb:04:c3:95:d7:43:b5:ec:6a:74: f0:21:3f:44:19:ac:a4:f4:69:f3:c7:72:72:9f:f9: 0f:83:ca:20:83:85:3b:32:ed:4e:41:6e:16:47:db: bc:a6:f6:2d:73:54:41:3b:09:c8:78:96:67:b5:f7: ae:d2:30:61:82:35:5a:e1:95:09:02:28:32:cf:35: eb:b8:dc:0d:5d:c8:25:54:2e:b8:de:51:83:d5:fb: f3:74:e1:6a:5e:cf:23:aa:08:a0:79:8f:40:e2:d4: 91:75:cc:6b:b4:0a:91:77:8f:d4:31:50:60:ce:2e: 33:70:72:19:56:80:44:09:62:8f:d3:75:a1:a9:0d: 53:de:62:0f:b0:49:4f:ed:56:85:b4:d5:5a:b3:80: ef:f6:5c:19:d5:ae:7b:79:02:d7:21:47:90:07:ad: 4f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FB:D7:62:4A:92:D7:58:46:46:30:67:C6:DC:A0:F3:06:BB:E4:51 X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:5d:db:a5:f9:f8:59:4b:a9:6a:3c:81:d3:49:50:d5:35:5a: 61:1b:4f:55:c2:6e:1e:d4:91:7e:ef:b3:51:5e:7a:f9:b5:74: da:99:f8:61:2c:4d:ab:e1:04:56:0f:34:99:b8:ac:7a:34:7d: 71:44:2f:a7:72:cc:b7:9e:88:89:75:df:2d:aa:76:34:8d:3a: 8c:b4:df:44:88:1a:2b:1a:08:67:df:bd:06:51:66:5d:af:00: 97:df:72:be:a2:b7:59:55:e8:95:1d:b3:8b:2a:1d:22:28:19: f4:b9:05:a0:64:89:d5:27:bc:d6:67:fc:55:63:b7:3d:6c:9b: aa:2c:41:ef:50:1a:fc:cb:a7:c7:4d:2b:c1:44:8e:03:78:9a: 5c:1f:75:5c:81:c7:61:d5:7b:b2:fa:0f:ff:8a:b2:3f:e7:2d: fe:31:42:26:c3:c4:45:4d:78:26:d2:5c:c0:5b:f4:65:0d:9c: ce:0a:a3:72:db:5b:97:9b:55:9c:18:dd:ff:b5:35:25:6c:a5: 2f:1f:fb:3c:0e:6f:35:98:be:fa:0b:c5:4a:fd:bf:fd:6c:27: 4a:fe:b2:41:e7:e1:b3:14:52:c8:94:7f:a6:1f:42:2c:26:99: 5b:53:b3:5a:1a:eb:ea:00:02:d5:6a:28:47:84:ba:0c:52:d3: e1:42:06:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxRyrmbAwiVHqJpYmwWdi+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjUxMjMwMjIwMDQ3WhcNMjUxMjMxMjIwMDQ3WjAzMTEwLwYDVQQD EyhhYmZiZDc2MjRhOTJkNzU4NDY0NjMwNjdjNmRjYTBmMzA2YmJlNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZmYiShS7rTgmhkbXNSq5FrixYy1 jkrB9P6gtZm69N63xDkE9S6xeagm27M52DZAz1AUCpUJnmoGXIEDx+8QNqSqLlq+ UPOIUmWIMsej1PpuKBCR3qzcmXrBORHKovsEw5XXQ7XsanTwIT9EGayk9Gnzx3Jy n/kPg8ogg4U7Mu1OQW4WR9u8pvYtc1RBOwnIeJZntfeu0jBhgjVa4ZUJAigyzzXr uNwNXcglVC643lGD1fvzdOFqXs8jqgigeY9A4tSRdcxrtAqRd4/UMVBgzi4zcHIZ VoBECWKP03WhqQ1T3mIPsElP7VaFtNVas4Dv9lwZ1a57eQLXIUeQB61PEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKv712JKktdYRkYwZ8bcoPMGu+RRMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo13bpfn4 WUupajyB00lQ1TVaYRtPVcJuHtSRfu+zUV56+bV02pn4YSxNq+EEVg80mbisejR9 cUQvp3LMt56IiXXfLap2NI06jLTfRIgaKxoIZ9+9BlFmXa8Al99yvqK3WVXolR2z iyodIigZ9LkFoGSJ1Se81mf8VWO3PWybqixB71Aa/Munx00rwUSOA3iaXB91XIHH YdV7svoP/4qyP+ct/jFCJsPERU14JtJcwFv0ZQ2czgqjcttbl5tVnBjd/7U1JWyl Lx/7PA5vNZi++gvFSv2//WwnSv6yQefhsxRSyJR/ph9CLCaZW1OzWhrr6gAC1Woo R4S6DFLT4UIG6g== -----END CERTIFICATE-----Generated at Wed Dec 31 03:59:58 2025 by rpki-client