This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft File: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft (raw, json) Hash identifier: ff09DbgDCNAC1fSWXf4uc2/hxkzeDz+8IX6ao7GG/r0= Subject key identifier: 73:F0:90:2C:6A:64:1B:74:DA:A1:8F:95:C0:F0:72:10:EB:B0:94:CD Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35 Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135 Certificate serial: 019B390FA861022CD11AE41E1A3EE1BEA81F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft Manifest number: 15AD Signing time: Sat 20 Dec 2025 00:01:25 +0000 Manifest this update: Sat 20 Dec 2025 00:01:25 +0000 Manifest next update: Sun 21 Dec 2025 00:01:25 +0000 Files and hashes: 1: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl (hash: rGGwjkMXjvuUhcdh8c3Wfg7r4fFFvzMcoa/rmNSx9GQ=) 2: 7iR9W4MA5fEoG9NRWf9E-32Ma5Q.roa (hash: osSdmDl/G/dF/W3n4ltU1jPl+UamVuVRPceUmIJCb+c=) 3: _WS_KUWo5VlHoso4BGtRKVhHyHo.roa (hash: EHMdLaq+K6Q6inb3xq+fso0i3zQ47TR+r4l4lfO+5pU=) 4: sRARFo8h99_3G186d4SLHxMo4NM.roa (hash: Ta0KosuiHLazmKN+JXD0BdhBvoFm09Df65X9K+SWVyw=) 5: uLirnnwX72a0N3OriOBn_DEyQSk.roa (hash: 6+Yqbp1RGXrWNzgrWITGoM7VyJxkBiJJi44XDI1jM7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:a8:61:02:2c:d1:1a:e4:1e:1a:3e:e1:be:a8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135 Validity Not Before: Dec 20 00:01:25 2025 GMT Not After : Dec 21 00:01:25 2025 GMT Subject: CN=73f0902c6a641b74daa18f95c0f07210ebb094cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:76:ab:63:51:e2:10:10:ee:d1:29:99:d8: b1:f5:e2:13:2f:cc:98:a5:0a:08:f8:b5:cb:2c:b4: 7c:65:91:0e:a9:8d:12:5f:94:7f:64:17:24:b1:2f: 84:63:59:41:b4:36:83:65:85:24:22:0f:84:56:4a: 66:0c:6b:15:90:da:c4:27:44:4f:a2:a1:a6:39:f0: d1:f5:19:01:ca:30:2e:a3:ea:b3:d6:39:c5:7c:35: fd:d5:cb:fe:8c:8d:3d:b6:10:d9:1f:53:eb:0c:d5: bb:4d:49:a0:04:9a:b8:62:87:7e:59:22:d3:c8:58: 2d:18:c2:7c:f9:7f:b9:f0:d1:8b:01:79:6d:95:a4: 10:cd:b6:1f:df:85:2f:aa:92:c6:fe:d8:11:38:fd: 19:b8:bc:84:06:12:e0:55:1e:ba:b6:6d:f0:58:e8: 25:c7:e5:55:59:34:01:75:89:3b:be:c6:7f:b0:6e: e3:03:88:03:0b:01:0d:4e:87:44:40:d5:aa:e1:a8: 6a:d8:50:bf:98:8f:12:3f:61:41:60:9b:64:2d:f7: 5b:5f:3d:0d:01:d3:66:c6:06:d2:01:46:3a:0f:1a: 86:56:bd:b6:c8:50:44:b6:5e:d9:0c:b2:dd:9c:22: 2f:2c:5e:23:46:35:bf:d6:00:37:5d:ff:d9:fa:e0: 58:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F0:90:2C:6A:64:1B:74:DA:A1:8F:95:C0:F0:72:10:EB:B0:94:CD X509v3 Authority Key Identifier: keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:6b:8a:a5:1c:3e:f2:3d:c5:50:26:fd:b9:f2:51:94:63:ab: 6c:82:57:24:34:36:17:1c:09:8e:b7:f5:f9:3c:5c:ea:0f:91: 98:29:0a:d8:01:91:db:f9:f2:6a:70:7b:b4:4a:77:33:81:9b: ad:58:bf:4c:b2:e4:3f:4e:f4:b1:4c:a3:b2:26:4b:9f:1a:9c: 13:2e:76:a4:dd:8f:1e:08:17:16:8a:ce:18:73:3c:f3:b2:b0: 4f:e0:ce:68:ad:c7:32:c6:22:39:de:cb:96:d5:b0:d8:dd:08: 11:d3:24:b6:1c:1e:49:3b:0a:66:0a:31:14:bf:da:d1:42:37: a1:e3:fb:6a:04:9b:86:90:60:7a:61:ea:3d:0d:95:7f:4a:cc: 60:f3:1e:b5:8e:d7:1b:53:d5:01:ab:a2:96:71:ee:23:5d:80: ca:a7:b7:5e:18:a4:d3:7e:bf:b1:49:42:f7:f4:93:22:94:de: 6f:90:5b:5c:f6:35:a3:48:bc:e7:ed:18:b8:a8:30:48:14:60: c7:61:ae:f4:16:a8:a6:81:a2:16:7f:34:95:9d:11:89:27:b8: 98:46:7f:92:34:62:1d:64:4d:89:66:68:23:5c:87:a9:8a:8f: 00:b1:92:18:f9:a5:1b:7b:bd:64:41:2c:76:c0:2d:b6:0a:89: e0:01:00:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D6hhAizRGuQeGj7hvqgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDM1M2UyZjVkMzE4YzM0ODc3MmE4ZmYxMDVhYTcwNzE5 ZTQxMzUwHhcNMjUxMjIwMDAwMTI1WhcNMjUxMjIxMDAwMTI1WjAzMTEwLwYDVQQD Eyg3M2YwOTAyYzZhNjQxYjc0ZGFhMThmOTVjMGYwNzIxMGViYjA5NGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSF2q2NR4hAQ7tEpmdix9eITL8yY pQoI+LXLLLR8ZZEOqY0SX5R/ZBcksS+EY1lBtDaDZYUkIg+EVkpmDGsVkNrEJ0RP oqGmOfDR9RkByjAuo+qz1jnFfDX91cv+jI09thDZH1PrDNW7TUmgBJq4Yod+WSLT yFgtGMJ8+X+58NGLAXltlaQQzbYf34UvqpLG/tgROP0ZuLyEBhLgVR66tm3wWOgl x+VVWTQBdYk7vsZ/sG7jA4gDCwENTodEQNWq4ahq2FC/mI8SP2FBYJtkLfdbXz0N AdNmxgbSAUY6DxqGVr22yFBEtl7ZDLLdnCIvLF4jRjW/1gA3Xf/Z+uBYiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPwkCxqZBt02qGPlcDwchDrsJTNMB8GA1UdIwQY MBaAFN7TU+L10xjDSHcqj/EFqnBxnkE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jYmFjY2UtZWZiZi00ZjMyLThkODgt NGU4NWRhYmQ2NDc0LzEvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jYmFjY2UtZWZiZi00ZjMyLThkODgtNGU4NWRhYmQ2NDc0 LzEvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGuKpRw+ 8j3FUCb9ufJRlGOrbIJXJDQ2FxwJjrf1+Txc6g+RmCkK2AGR2/nyanB7tEp3M4Gb rVi/TLLkP070sUyjsiZLnxqcEy52pN2PHggXForOGHM887KwT+DOaK3HMsYiOd7L ltWw2N0IEdMkthweSTsKZgoxFL/a0UI3oeP7agSbhpBgemHqPQ2Vf0rMYPMetY7X G1PVAauilnHuI12Ayqe3Xhik036/sUlC9/STIpTeb5BbXPY1o0i85+0YuKgwSBRg x2Gu9BaopoGiFn80lZ0RiSe4mEZ/kjRiHWRNiWZoI1yHqYqPALGSGPmlG3u9ZEEs dsAttgqJ4AEAmg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:34:46 2025 by rpki-client