This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json) Hash identifier: AivnLPh13APDMT0LloUpncCo37bipAkYQegMukvZZHg= Subject key identifier: 60:2D:45:9E:4A:1B:B4:3B:EC:E4:77:CE:75:0D:41:FD:2F:F2:C7:00 Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f Certificate serial: 019B4B1561C2A9267E4CCD02596F8F61782D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft Manifest number: 067E Signing time: Tue 23 Dec 2025 12:00:50 +0000 Manifest this update: Tue 23 Dec 2025 12:00:50 +0000 Manifest next update: Wed 24 Dec 2025 12:00:50 +0000 Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: IKjxm4ipMjVgoXQEyFu8PqSB6ALoRLrdJZjBlfJhVas=) 2: wLvB8cGiUEUZNSS38jCt0kGtb0w.roa (hash: m3dcBbH2bIeKi8Ap8eHL2CuPz3vf7Stl96ekMV6tjIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:61:c2:a9:26:7e:4c:cd:02:59:6f:8f:61:78:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f Validity Not Before: Dec 23 12:00:50 2025 GMT Not After : Dec 24 12:00:50 2025 GMT Subject: CN=602d459e4a1bb43bece477ce750d41fd2ff2c700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:e1:06:97:5c:d3:12:f2:9f:00:30:ee:fa: 71:2e:d7:1b:0f:9a:cd:82:3c:53:ec:0b:44:12:2f: 35:72:2b:43:d8:7b:d8:fb:30:2d:1e:49:b7:e1:27: 9e:36:d5:2e:b1:e9:d0:d0:8e:9f:19:e4:af:84:8e: 4e:c9:bf:5c:0b:d0:d4:81:4a:6f:5a:72:e5:d3:8f: f5:84:b6:e0:c5:df:18:55:1f:52:1a:66:39:c4:1e: a6:72:5e:09:49:3d:ef:c4:9e:19:0a:10:17:94:bc: 59:70:ff:5e:6a:0f:3f:c9:1c:f7:ba:86:9d:ca:b2: 3c:b8:21:1a:fb:d5:10:42:9c:80:24:d7:42:2e:d1: e1:47:7e:b0:1b:5d:94:a4:df:26:6f:78:60:56:54: 9b:29:14:e3:43:24:41:f1:f9:0f:f4:ba:68:8a:b5: 35:fc:06:22:d3:81:6c:9f:a2:17:72:46:b4:50:f4: a6:14:e6:3e:34:19:53:f2:88:e3:26:a6:cd:22:5b: c7:68:72:ea:ce:26:3d:1c:df:04:26:8a:37:eb:9e: 87:67:03:34:3c:52:3e:89:53:2d:f0:57:a8:28:ab: 50:a7:a4:e3:ca:ff:66:2a:d2:74:c8:e4:9b:4f:ce: 25:5b:94:95:5c:82:ea:e6:f0:4d:92:8a:90:0e:97: e3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2D:45:9E:4A:1B:B4:3B:EC:E4:77:CE:75:0D:41:FD:2F:F2:C7:00 X509v3 Authority Key Identifier: keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:1a:6d:48:1f:da:ab:a8:a5:57:f5:5f:36:c1:7b:b9:70:6e: bb:13:7b:2d:2e:fa:15:53:dd:b6:fa:29:94:55:e0:34:df:ee: 49:f2:f7:72:c8:d3:fb:0e:ea:2e:ac:0f:99:8b:5b:59:1b:35: 4f:75:fa:b7:ae:3a:b5:8a:94:51:ae:0c:db:b0:d7:43:fd:70: b6:8c:28:fb:f2:46:2a:59:52:27:0c:05:b2:7d:b3:dd:5b:6e: 0e:3d:73:eb:c4:08:70:9e:11:4a:50:e1:8d:cb:34:0c:a7:a0: c5:db:d4:1f:50:a3:ba:04:34:40:85:bc:fb:da:b5:15:e8:7b: 37:db:4f:7a:57:14:7b:59:ef:d6:20:cc:d3:26:5a:68:14:b3: 8d:49:8e:ac:2a:f8:bc:d0:48:f2:7b:c4:44:39:c9:b5:a1:5d: 50:59:56:ac:fa:7c:ef:9d:c4:1a:95:5c:e2:36:e9:5e:47:b1: 22:36:a6:ba:55:b7:20:3b:cd:96:7e:16:de:c7:cc:6f:3c:9c: 76:a8:46:60:be:31:57:cc:31:e8:7d:48:be:12:34:79:c4:78: 83:af:3b:d9:13:3b:63:bc:40:62:56:14:ce:11:29:91:8c:0d: 36:d0:4b:26:31:81:9f:0d:8d:19:40:78:3c:4d:c4:d9:e5:85: a4:7f:fc:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFWHCqSZ+TM0CWW+PYXgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYWZhZGExMGUyY2UyMGUxYzk2Zjg5NWJiOGVjMzJhNTgw OGY2M2YwHhcNMjUxMjIzMTIwMDUwWhcNMjUxMjI0MTIwMDUwWjAzMTEwLwYDVQQD Eyg2MDJkNDU5ZTRhMWJiNDNiZWNlNDc3Y2U3NTBkNDFmZDJmZjJjNzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSXhBpdc0xLynwAw7vpxLtcbD5rN gjxT7AtEEi81citD2HvY+zAtHkm34SeeNtUusenQ0I6fGeSvhI5Oyb9cC9DUgUpv WnLl04/1hLbgxd8YVR9SGmY5xB6mcl4JST3vxJ4ZChAXlLxZcP9eag8/yRz3uoad yrI8uCEa+9UQQpyAJNdCLtHhR36wG12UpN8mb3hgVlSbKRTjQyRB8fkP9LpoirU1 /AYi04Fsn6IXcka0UPSmFOY+NBlT8ojjJqbNIlvHaHLqziY9HN8EJoo3656HZwM0 PFI+iVMt8FeoKKtQp6Tjyv9mKtJ0yOSbT84lW5SVXILq5vBNkoqQDpfjswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAtRZ5KG7Q77OR3znUNQf0v8scAMB8GA1UdIwQY MBaAFNyvraEOLOIOHJb4lbuOwypYCPY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQt YTY2Zjg0ZWRiZDZkLzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQtYTY2Zjg0ZWRiZDZk LzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1RptSB/a q6ilV/VfNsF7uXBuuxN7LS76FVPdtvoplFXgNN/uSfL3csjT+w7qLqwPmYtbWRs1 T3X6t646tYqUUa4M27DXQ/1wtowo+/JGKllSJwwFsn2z3VtuDj1z68QIcJ4RSlDh jcs0DKegxdvUH1CjugQ0QIW8+9q1Feh7N9tPelcUe1nv1iDM0yZaaBSzjUmOrCr4 vNBI8nvERDnJtaFdUFlWrPp8753EGpVc4jbpXkexIjamulW3IDvNln4W3sfMbzyc dqhGYL4xV8wx6H1IvhI0ecR4g6872RM7Y7xAYlYUzhEpkYwNNtBLJjGBnw2NGUB4 PE3E2eWFpH/83g== -----END CERTIFICATE-----Generated at Tue Dec 23 20:39:14 2025 by rpki-client