This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json) Hash identifier: zmA/dknZPbwFTu2T6FZ/iyqOnEXRVIk1eh6uSnrCQcI= Subject key identifier: CE:EE:38:36:87:8D:30:76:64:28:4E:1D:93:82:58:CB:C4:F3:9D:DF Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9 Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9 Certificate serial: 019B33B2340FA5C8181CCF6B35F023DA84A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft Manifest number: 05B8 Signing time: Thu 18 Dec 2025 23:01:15 +0000 Manifest this update: Thu 18 Dec 2025 23:01:15 +0000 Manifest next update: Fri 19 Dec 2025 23:01:15 +0000 Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: OFfRAnOsxP+KcWphK+dss3/Fb3ch4m/tOF1J2LG8loI=) 2: R82wyiQ6WGXDZ2qmyfic2Rx16EQ.roa (hash: q3ADHp8TbEdc9vO2jFfoJST4ALm7hMCr9dPnLoGdV9o=) 3: msFkodHiiLA7yYTUvQfg1svzo58.roa (hash: 8maRWfYNuUoSqjA1l1zPbJ9FPRTfD/7OAF7wZnEEN9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:34:0f:a5:c8:18:1c:cf:6b:35:f0:23:da:84:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9 Validity Not Before: Dec 18 23:01:15 2025 GMT Not After : Dec 19 23:01:15 2025 GMT Subject: CN=ceee3836878d307664284e1d938258cbc4f39ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:c8:a6:8f:0e:34:7d:a2:26:95:be:cb:9c: 32:92:1c:54:c3:33:f7:bc:30:d8:da:60:0d:19:12: ec:eb:5d:94:3c:10:57:5a:d1:c6:6c:58:ff:bb:b6: c8:97:15:4c:99:42:16:91:30:0a:3c:f7:5f:06:01: 73:0f:90:9f:e0:1a:54:93:1f:24:a7:dc:1b:7a:0e: 10:43:02:49:29:b2:8d:84:69:a6:14:a4:8d:ad:1e: 80:fa:a5:14:1f:42:1b:bc:a3:6f:06:42:f4:b9:91: 80:47:8a:53:86:e0:42:6d:37:f4:df:4b:e0:05:0f: a1:cd:b9:be:78:e7:43:bd:7f:a3:e3:9c:fe:12:12: 48:2e:80:a9:62:46:a2:79:53:18:1c:32:9d:8d:9d: fb:e3:95:7d:bc:8e:44:1f:d5:b6:3a:be:d4:27:00: d8:4d:80:c1:99:76:98:e6:b1:b6:19:24:d1:75:78: 94:c2:9b:ed:bf:5b:43:5d:99:cb:1d:f8:6d:0c:26: 0b:e4:bc:04:9a:b4:b6:b2:b4:5d:64:e6:e6:eb:2c: 2a:1b:d8:b3:0f:7b:35:24:aa:a5:1f:6c:6e:3b:8f: 45:c2:1a:6a:77:33:f5:54:20:ca:3b:91:4c:e6:59: 9d:cd:84:7b:70:12:5a:53:46:51:4a:b7:e2:c3:3c: 8c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EE:38:36:87:8D:30:76:64:28:4E:1D:93:82:58:CB:C4:F3:9D:DF X509v3 Authority Key Identifier: keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:fc:19:df:7b:db:24:63:63:20:de:63:d8:78:92:77:ae:75: ab:cc:93:8f:d8:35:97:22:67:73:52:7e:d1:b1:94:dd:3e:f6: 20:c4:83:0d:fa:94:2c:26:32:0e:17:dc:a8:f6:03:44:84:62: 92:69:63:91:86:94:7e:b5:20:d8:c0:f4:16:83:fc:2f:00:4e: 99:8b:d5:27:56:e0:22:ef:12:c1:14:a0:40:4e:33:5d:33:80: 0a:48:cb:9d:48:df:99:0d:a1:24:ab:58:17:ee:2e:e2:a8:76: 02:aa:3a:8d:be:95:4c:8f:cb:29:41:e4:c3:35:35:0d:2f:35: 9d:02:4d:7e:8e:01:48:0f:6a:a7:0a:75:a5:d0:56:d3:f4:da: f5:dc:d4:13:f0:60:26:72:c5:96:a2:de:02:73:2e:52:58:b1: f6:fb:1c:39:a0:a4:8f:f7:1e:4d:ae:63:6b:c1:9b:55:e6:32: 79:85:d7:f9:23:7d:c0:c6:d8:86:70:dd:30:0a:6c:18:a3:c9: d7:86:cd:cf:52:7c:50:4b:33:ff:38:92:71:4d:12:e9:00:30: 8c:fb:fd:55:8c:36:7c:94:78:b2:64:3d:36:70:9e:d9:42:16: 31:c8:4f:14:b6:eb:bb:9e:1b:39:2c:4b:56:d2:4c:95:8b:8e: 8c:ce:eb:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsjQPpcgYHM9rNfAj2oSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZDk3NzBjMzA3ZWEzOTYwYzhkYTI2OGE4ODY1YTRhOWZh NjM0YzkwHhcNMjUxMjE4MjMwMTE1WhcNMjUxMjE5MjMwMTE1WjAzMTEwLwYDVQQD EyhjZWVlMzgzNjg3OGQzMDc2NjQyODRlMWQ5MzgyNThjYmM0ZjM5ZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4vIpo8ONH2iJpW+y5wykhxUwzP3 vDDY2mANGRLs612UPBBXWtHGbFj/u7bIlxVMmUIWkTAKPPdfBgFzD5Cf4BpUkx8k p9wbeg4QQwJJKbKNhGmmFKSNrR6A+qUUH0IbvKNvBkL0uZGAR4pThuBCbTf030vg BQ+hzbm+eOdDvX+j45z+EhJILoCpYkaieVMYHDKdjZ3745V9vI5EH9W2Or7UJwDY TYDBmXaY5rG2GSTRdXiUwpvtv1tDXZnLHfhtDCYL5LwEmrS2srRdZObm6ywqG9iz D3s1JKqlH2xuO49FwhpqdzP1VCDKO5FM5lmdzYR7cBJaU0ZRSrfiwzyM6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7uODaHjTB2ZChOHZOCWMvE853fMB8GA1UdIwQY MBaAFN3ZdwwwfqOWDI2iaKiGWkqfpjTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUt ZjJmZTBkMDRiZmJmLzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUtZjJmZTBkMDRiZmJm LzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPwZ33vb JGNjIN5j2HiSd651q8yTj9g1lyJnc1J+0bGU3T72IMSDDfqULCYyDhfcqPYDRIRi kmljkYaUfrUg2MD0FoP8LwBOmYvVJ1bgIu8SwRSgQE4zXTOACkjLnUjfmQ2hJKtY F+4u4qh2Aqo6jb6VTI/LKUHkwzU1DS81nQJNfo4BSA9qpwp1pdBW0/Ta9dzUE/Bg JnLFlqLeAnMuUlix9vscOaCkj/ceTa5ja8GbVeYyeYXX+SN9wMbYhnDdMApsGKPJ 14bNz1J8UEsz/ziScU0S6QAwjPv9VYw2fJR4smQ9NnCe2UIWMchPFLbru54bOSxL VtJMlYuOjM7riA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:49:36 2025 by rpki-client