This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json) Hash identifier: Twt+URQX5zP4eFE5rwd7u2zhcd63fyZQ2ebHThYrQsc= Subject key identifier: 8F:CE:BA:87:57:22:03:BA:80:19:A6:44:35:67:A0:2B:57:E5:BA:34 Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02 Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302 Certificate serial: 019B59ACD981CF3601E1569CE3D8003A7B62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft Manifest number: 041F Signing time: Fri 26 Dec 2025 08:00:58 +0000 Manifest this update: Fri 26 Dec 2025 08:00:58 +0000 Manifest next update: Sat 27 Dec 2025 08:00:58 +0000 Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: IuUmUeCGyMmJ75reKEg0eBGbx3Mnpf+uKm5fuBV6Aaw=) 2: wSO8Qf5_v1p-oNDifbsTI9tUaPY.roa (hash: t8VFb4R1YuauyoB16s9G5smfDaNXuP879i5idHgDRZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:d9:81:cf:36:01:e1:56:9c:e3:d8:00:3a:7b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302 Validity Not Before: Dec 26 08:00:58 2025 GMT Not After : Dec 27 08:00:58 2025 GMT Subject: CN=8fceba87572203ba8019a6443567a02b57e5ba34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:f1:97:a4:f3:51:0f:c9:ad:46:f1:12:c4: e8:1e:ff:24:35:0c:63:d3:08:f9:3f:17:b5:a8:be: a8:d8:94:a5:3f:2e:b3:22:8a:f8:95:0e:92:74:2a: 69:57:c1:b0:7c:fe:d3:24:94:b6:a4:ee:73:10:83: 21:d5:fd:26:cf:3d:50:0e:4f:24:b2:e7:bf:5b:25: ab:13:c8:2f:8d:68:18:e0:8c:9c:44:a5:ed:c8:2e: b0:ac:03:e6:47:1f:b7:55:13:f0:25:4c:17:d9:48: a7:90:65:67:c7:e7:dc:ec:95:da:48:ca:1b:fb:a7: fb:59:7b:fa:09:e0:d5:0c:92:54:84:1a:03:50:ae: 88:bb:7d:04:7f:fa:24:37:90:39:18:09:95:ad:6f: 65:02:d0:75:ad:24:bf:4a:bf:13:5c:e4:d4:9f:59: 18:b9:7f:a1:52:16:48:21:f7:fe:09:71:56:ed:4f: c1:a9:cc:ad:03:74:d8:a0:ab:dc:5c:e3:a7:14:da: a9:62:76:7b:b0:22:a9:74:ea:ad:32:39:84:cf:20: 7e:65:4f:ae:c9:4e:8a:2f:7b:e4:37:c1:4b:92:ee: 70:6c:e4:91:71:da:42:40:72:4d:16:f4:69:a4:32: e9:f0:55:d7:2e:45:3e:fb:e3:13:13:16:db:d0:49: 48:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CE:BA:87:57:22:03:BA:80:19:A6:44:35:67:A0:2B:57:E5:BA:34 X509v3 Authority Key Identifier: keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5b:95:45:3a:bb:68:84:97:15:7a:56:f9:b3:85:b4:32:e5: c1:60:32:31:3f:25:c4:8c:e8:d0:0d:38:1f:05:a0:5c:14:f2: 7c:7f:2a:bc:30:47:3e:1c:76:f9:49:9a:63:e8:f9:b9:44:e2: 0a:3f:c5:01:aa:98:d4:51:84:c0:7c:5f:3c:e5:2e:53:b4:48: c6:84:c4:ce:38:77:d1:0b:92:2e:4d:86:68:ee:3f:72:f5:37: 09:8f:dd:e7:7c:3a:e3:77:af:9e:44:3a:4f:1c:ff:e1:8a:e9: e3:69:57:5e:6d:07:79:7c:65:7e:bb:02:66:b5:bf:6c:e5:f3: 8d:2e:6a:f0:c3:a2:9d:9b:42:ae:3c:49:bc:93:cf:8b:1f:64: 9d:f9:40:13:0e:9a:3f:9e:71:80:5b:e1:40:12:61:48:c0:17: f6:c3:a6:c0:bd:7e:a8:79:3b:1d:e8:5a:d6:d5:b0:11:d7:15: 8b:c7:15:c9:53:d5:34:64:09:6a:e1:4f:68:ab:ad:53:8e:11: 87:66:3b:0a:f0:bc:04:70:98:51:62:d6:f4:43:60:f0:49:e7: 80:8a:61:e9:f6:13:81:ed:08:26:93:47:f1:cf:f3:98:df:63: fb:13:5a:7f:72:c2:0b:ec:e8:63:b7:9a:7c:a3:39:aa:0d:60: 96:6c:a5:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrNmBzzYB4Vac49gAOntiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOGUzODE4N2FlNzBjYmM3YmVkNjk1NzU5ZjBlMDMyOTlm YmIzMDIwHhcNMjUxMjI2MDgwMDU4WhcNMjUxMjI3MDgwMDU4WjAzMTEwLwYDVQQD Eyg4ZmNlYmE4NzU3MjIwM2JhODAxOWE2NDQzNTY3YTAyYjU3ZTViYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriLxl6TzUQ/JrUbxEsToHv8kNQxj 0wj5Pxe1qL6o2JSlPy6zIor4lQ6SdCppV8GwfP7TJJS2pO5zEIMh1f0mzz1QDk8k sue/WyWrE8gvjWgY4IycRKXtyC6wrAPmRx+3VRPwJUwX2UinkGVnx+fc7JXaSMob +6f7WXv6CeDVDJJUhBoDUK6Iu30Ef/okN5A5GAmVrW9lAtB1rSS/Sr8TXOTUn1kY uX+hUhZIIff+CXFW7U/BqcytA3TYoKvcXOOnFNqpYnZ7sCKpdOqtMjmEzyB+ZU+u yU6KL3vkN8FLku5wbOSRcdpCQHJNFvRppDLp8FXXLkU+++MTExbb0ElI6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/OuodXIgO6gBmmRDVnoCtX5bo0MB8GA1UdIwQY MBaAFN6OOBh65wy8e+1pV1nw4DKZ+7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMt NWIxZjQ4YjNlMjE0LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMtNWIxZjQ4YjNlMjE0 LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVuVRTq7 aISXFXpW+bOFtDLlwWAyMT8lxIzo0A04HwWgXBTyfH8qvDBHPhx2+UmaY+j5uUTi Cj/FAaqY1FGEwHxfPOUuU7RIxoTEzjh30QuSLk2GaO4/cvU3CY/d53w643evnkQ6 Txz/4Yrp42lXXm0HeXxlfrsCZrW/bOXzjS5q8MOinZtCrjxJvJPPix9knflAEw6a P55xgFvhQBJhSMAX9sOmwL1+qHk7Heha1tWwEdcVi8cVyVPVNGQJauFPaKutU44R h2Y7CvC8BHCYUWLW9ENg8EnngIph6fYTge0IJpNH8c/zmN9j+xNaf3LCC+zoY7ea fKM5qg1glmylNw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:52 2025 by rpki-client