This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft File: 3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json) Hash identifier: zuKbM70vZ7PGyRFfbqv+pI7AcZ9izSlmLVRWsGVGkWg= Subject key identifier: 8D:C3:C3:2A:CE:18:52:E8:8B:E4:43:A8:61:AD:9F:93:9B:F2:4A:AF Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB Certificate issuer: /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb Certificate serial: 019B5A1A888F5147D8343F759008FB7AA1B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft Manifest number: 025D Signing time: Fri 26 Dec 2025 10:00:46 +0000 Manifest this update: Fri 26 Dec 2025 10:00:46 +0000 Manifest next update: Sat 27 Dec 2025 10:00:46 +0000 Files and hashes: 1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: UPWE+fjklIUGzVWFcg+wcFnkHM/3M5XvuDMXs1X3x54=) 2: xlhZPy2tgq9KnJAF-W8wAfARZ5I.roa (hash: gkGnuQfXZLAxpDNGgxfjG9Qut5Hb3M/1cK2A/dmc9SY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:88:8f:51:47:d8:34:3f:75:90:08:fb:7a:a1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb Validity Not Before: Dec 26 10:00:46 2025 GMT Not After : Dec 27 10:00:46 2025 GMT Subject: CN=8dc3c32ace1852e88be443a861ad9f939bf24aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f9:d6:b4:eb:c6:5a:bf:d0:f1:ed:00:a9:ef: 4a:73:3f:1e:0f:76:a0:30:81:68:5d:cd:67:87:bd: a9:ef:70:2c:40:a5:58:51:ae:9a:f6:f3:f8:d5:45: 1c:29:21:71:bd:99:25:56:0a:4a:d8:cf:75:15:60: db:1e:ef:b4:3a:82:ee:3b:9c:8a:00:6e:2f:15:98: 89:98:90:0e:02:19:2f:03:43:01:3f:e0:38:aa:be: a8:8b:b9:16:cb:30:32:84:b0:ba:62:34:5a:54:4d: 00:4e:a3:32:1b:82:99:32:07:fa:ac:b2:5c:7e:47: ff:f1:70:44:ca:a0:50:79:cd:a3:85:f9:b0:03:44: d9:ec:f6:37:00:5d:e3:0d:ce:8c:99:be:bf:03:3e: 42:6d:b4:8a:fa:68:60:1e:08:e5:9b:40:56:5a:a4: de:36:48:fb:5d:d4:2b:e6:1e:92:d0:16:33:fb:56: ec:2f:47:a7:7b:95:ca:f4:58:2a:20:41:e4:56:0a: 6f:27:00:4f:11:af:bf:2d:11:63:53:95:24:c8:3a: 3b:d2:d0:a3:6c:ea:1a:72:7a:15:ab:42:17:12:49: c4:3d:46:25:5b:f7:cf:5d:e7:34:b1:7f:39:61:fe: f0:6b:5c:f6:09:3d:3c:fe:46:92:66:23:bf:48:47: c1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C3:C3:2A:CE:18:52:E8:8B:E4:43:A8:61:AD:9F:93:9B:F2:4A:AF X509v3 Authority Key Identifier: keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:88:29:50:ff:85:9f:5c:4d:df:29:84:e2:93:2a:76:b1:41: 15:2b:04:9e:30:8f:39:04:23:9d:18:fa:f1:24:15:dc:e1:26: 87:ba:81:0a:17:46:c8:b3:d0:9f:30:07:83:91:c3:45:1b:22: ab:3a:37:78:b0:5d:e8:7d:0c:a6:44:31:66:33:1c:18:0e:14: a9:e7:54:65:24:6d:08:04:e0:a9:ec:24:f9:43:28:ad:68:37: 5e:fd:51:d1:87:73:39:eb:00:15:0e:c8:da:6a:b9:1f:4c:c1: 37:2c:fa:eb:0a:02:ef:c7:85:71:62:09:89:42:9f:5a:e6:e6: 96:49:65:93:22:bc:bb:71:19:1d:be:6a:8e:18:24:2e:fd:96: 59:21:8f:0b:9a:de:61:a9:6e:33:8a:94:e3:13:2a:8b:1b:40: dd:38:37:3a:4f:dc:c4:44:5c:44:fa:a4:05:0a:eb:5b:e7:df: 1c:9d:a6:0f:9d:3f:cf:a6:b5:b0:38:8c:fd:25:eb:f5:b6:5f: 0c:af:d0:01:36:7f:49:50:6c:54:53:8c:9c:f6:e8:be:1a:6f: 06:70:e1:b8:c9:fd:0e:cd:0c:9d:f9:5b:57:c9:6b:bb:67:5e: c5:10:4c:97:84:cc:52:49:1e:02:eb:99:91:19:32:a6:88:2e: 33:3c:15:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGoiPUUfYND91kAj7eqG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMDA2ZWQ4NzFhNWNlMDBkMmJiZjk2OGJjMDk0MGVlNTg2 YTNjZWIwHhcNMjUxMjI2MTAwMDQ2WhcNMjUxMjI3MTAwMDQ2WjAzMTEwLwYDVQQD Eyg4ZGMzYzMyYWNlMTg1MmU4OGJlNDQzYTg2MWFkOWY5MzliZjI0YWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PnWtOvGWr/Q8e0Aqe9Kcz8eD3ag MIFoXc1nh72p73AsQKVYUa6a9vP41UUcKSFxvZklVgpK2M91FWDbHu+0OoLuO5yK AG4vFZiJmJAOAhkvA0MBP+A4qr6oi7kWyzAyhLC6YjRaVE0ATqMyG4KZMgf6rLJc fkf/8XBEyqBQec2jhfmwA0TZ7PY3AF3jDc6Mmb6/Az5CbbSK+mhgHgjlm0BWWqTe Nkj7XdQr5h6S0BYz+1bsL0ene5XK9FgqIEHkVgpvJwBPEa+/LRFjU5UkyDo70tCj bOoacnoVq0IXEknEPUYlW/fPXec0sX85Yf7wa1z2CT08/kaSZiO/SEfBVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3DwyrOGFLoi+RDqGGtn5Ob8kqvMB8GA1UdIwQY MBaAFN8Abthxpc4A0rv5aLwJQO5YajzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYt OTViOWUzNjJmMDc3LzEvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYtOTViOWUzNjJmMDc3 LzEvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIgpUP+F n1xN3ymE4pMqdrFBFSsEnjCPOQQjnRj68SQV3OEmh7qBChdGyLPQnzAHg5HDRRsi qzo3eLBd6H0MpkQxZjMcGA4UqedUZSRtCATgqewk+UMorWg3Xv1R0YdzOesAFQ7I 2mq5H0zBNyz66woC78eFcWIJiUKfWubmlkllkyK8u3EZHb5qjhgkLv2WWSGPC5re YaluM4qU4xMqixtA3Tg3Ok/cxERcRPqkBQrrW+ffHJ2mD50/z6a1sDiM/SXr9bZf DK/QATZ/SVBsVFOMnPbovhpvBnDhuMn9Ds0MnflbV8lru2dexRBMl4TMUkkeAuuZ kRkypoguMzwVBQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:33 2025 by rpki-client