This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json) Hash identifier: T9NDR0gYSp60E1zpoPh1d62DWjSZb3r6TfoTRWtJ+TA= Subject key identifier: E2:00:EA:08:F6:57:A5:3A:D5:56:1F:15:6A:83:5D:E3:59:50:CA:67 Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6 Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6 Certificate serial: 019B5977472FE8C68154A91402D6C8068B55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft Manifest number: 0D93 Signing time: Fri 26 Dec 2025 07:02:27 +0000 Manifest this update: Fri 26 Dec 2025 07:02:27 +0000 Manifest next update: Sat 27 Dec 2025 07:02:27 +0000 Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: WefMHniRJ2l90+ANEcp6Y6z5N6wH3xPHUR6VGibi+dI=) 2: XaWBl1pdgCEAOtWYlDnABozWGpY.roa (hash: NkTYxkGxoFs3l9oUz9ZXBu6um1xVsgaeI44+mBnF24s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:47:2f:e8:c6:81:54:a9:14:02:d6:c8:06:8b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6 Validity Not Before: Dec 26 07:02:27 2025 GMT Not After : Dec 27 07:02:27 2025 GMT Subject: CN=e200ea08f657a53ad5561f156a835de35950ca67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cb:01:ff:26:4d:42:0b:94:d5:63:9c:57:68: 25:6d:be:bb:67:af:3f:85:12:33:83:46:19:3e:e0: b2:76:25:76:be:40:68:ca:a4:95:98:93:51:86:4a: 26:9f:b7:f1:cf:b3:47:33:10:1f:32:42:12:c1:2f: 27:cb:0c:87:ac:ba:6d:f6:f5:18:79:9c:61:72:35: ce:9d:f8:c6:17:f5:cb:52:b9:4c:20:5b:ba:a7:a7: 2c:35:ba:86:fa:ad:a9:91:fc:7f:47:0e:7a:c8:7f: 5f:f2:1f:a2:a7:63:12:b0:ce:c0:41:55:8b:73:0b: 1d:84:a8:6f:a0:9f:ad:6e:51:82:d6:94:91:b0:91: bc:51:91:9c:25:03:a7:66:35:f7:53:23:8b:3f:d4: 85:d1:07:fd:1e:b0:85:5f:d7:3f:3a:4f:af:28:3c: 0c:87:ee:1e:20:56:94:ec:78:00:ab:05:83:7f:e8: 02:92:18:22:20:8d:af:c5:2c:1b:97:66:c3:a5:2d: 5f:5e:8d:9e:21:17:d1:40:53:3b:43:e6:32:87:dd: 8c:cd:4f:7f:e7:15:f5:69:25:cd:76:f4:0e:bd:88: 23:72:58:13:a7:5a:32:c2:e7:f7:85:34:e1:90:0e: b2:db:0e:5c:7e:6b:46:dc:4e:2e:8b:e9:b7:7c:4c: fb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:00:EA:08:F6:57:A5:3A:D5:56:1F:15:6A:83:5D:E3:59:50:CA:67 X509v3 Authority Key Identifier: keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:8e:4d:02:6a:ef:75:3e:5d:47:c8:50:4a:80:da:48:5a:db: c0:58:22:68:d3:66:a5:83:b5:22:81:15:8f:d8:43:73:cd:c2: 25:81:11:ec:16:1d:05:33:09:b5:af:ea:0f:08:29:87:64:f4: a1:8f:8a:0d:c0:b7:9c:74:df:5c:ea:96:50:fa:56:61:ef:dd: c6:2c:07:55:9d:a3:8b:c7:a4:63:f4:9d:41:64:53:9a:97:4d: f6:9b:16:79:92:ac:ee:60:6e:54:3c:10:1c:a7:d8:e8:d9:d5: ad:3f:36:11:e7:41:02:77:df:83:10:e1:03:26:7c:3f:83:54: 1f:4f:0a:e7:21:70:2b:c6:e8:e6:f1:85:e2:e5:0d:86:cc:38: 77:0c:cd:c8:60:e3:ad:62:04:93:8f:d7:1d:9b:75:a8:43:c4: be:3a:6c:c4:7b:ea:b2:de:75:89:91:9d:01:e3:8a:fa:5b:12: b6:31:74:5f:06:c0:2e:c4:de:30:21:db:e6:41:4f:23:a2:32: 5f:6d:3c:4a:91:db:bd:87:8a:2a:fe:61:00:b6:c6:f5:50:ad: ee:c0:8a:ec:7f:8d:8f:67:aa:3d:15:d0:9f:32:69:c1:52:cd: c8:d6:c5:12:6a:03:00:03:28:66:84:93:9e:da:34:8e:0d:a3: 89:09:eb:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd0cv6MaBVKkUAtbIBotVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYTVhMjIyYWNiOTlhYjIzOTg0MzllZGVkNzc3MGE2NWVl NjZkZTYwHhcNMjUxMjI2MDcwMjI3WhcNMjUxMjI3MDcwMjI3WjAzMTEwLwYDVQQD EyhlMjAwZWEwOGY2NTdhNTNhZDU1NjFmMTU2YTgzNWRlMzU5NTBjYTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ssB/yZNQguU1WOcV2glbb67Z68/ hRIzg0YZPuCydiV2vkBoyqSVmJNRhkomn7fxz7NHMxAfMkISwS8nywyHrLpt9vUY eZxhcjXOnfjGF/XLUrlMIFu6p6csNbqG+q2pkfx/Rw56yH9f8h+ip2MSsM7AQVWL cwsdhKhvoJ+tblGC1pSRsJG8UZGcJQOnZjX3UyOLP9SF0Qf9HrCFX9c/Ok+vKDwM h+4eIFaU7HgAqwWDf+gCkhgiII2vxSwbl2bDpS1fXo2eIRfRQFM7Q+Yyh92MzU9/ 5xX1aSXNdvQOvYgjclgTp1oywuf3hTThkA6y2w5cfmtG3E4ui+m3fEz75QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIA6gj2V6U61VYfFWqDXeNZUMpnMB8GA1UdIwQY MBaAFN2loiKsuZqyOYQ57e13cKZe5m3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQt NzUzYWIxOTY4N2Q4LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQtNzUzYWIxOTY4N2Q4 LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV45NAmrv dT5dR8hQSoDaSFrbwFgiaNNmpYO1IoEVj9hDc83CJYER7BYdBTMJta/qDwgph2T0 oY+KDcC3nHTfXOqWUPpWYe/dxiwHVZ2ji8ekY/SdQWRTmpdN9psWeZKs7mBuVDwQ HKfY6NnVrT82EedBAnffgxDhAyZ8P4NUH08K5yFwK8bo5vGF4uUNhsw4dwzNyGDj rWIEk4/XHZt1qEPEvjpsxHvqst51iZGdAeOK+lsStjF0XwbALsTeMCHb5kFPI6Iy X208SpHbvYeKKv5hALbG9VCt7sCK7H+Nj2eqPRXQnzJpwVLNyNbFEmoDAAMoZoST nto0jg2jiQnriQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:19 2025 by rpki-client