This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft File: 3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json) Hash identifier: 79+Z53ZZYblbXsNdX+zAiQdNBNO6TmCLLkxqbcZUKgo= Subject key identifier: E4:00:58:07:A3:52:32:0D:CB:76:68:8C:55:45:22:2F:0F:EF:AE:D4 Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE Certificate issuer: /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae Certificate serial: 019B5A88CAFC62185A1C40D8968862F7D6C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft Manifest number: 0C18 Signing time: Fri 26 Dec 2025 12:01:12 +0000 Manifest this update: Fri 26 Dec 2025 12:01:12 +0000 Manifest next update: Sat 27 Dec 2025 12:01:12 +0000 Files and hashes: 1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: m9mnlB3umkMMizyAFbxKtJlE2fjE9w9iHTExhun2OxE=) 2: t2IAGMSzk4-7dntYHVtGoSAvw3E.roa (hash: MFygbsGgjd41JH2HTdeF0MRaBb6hffk9LejkFMw08aY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:ca:fc:62:18:5a:1c:40:d8:96:88:62:f7:d6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae Validity Not Before: Dec 26 12:01:12 2025 GMT Not After : Dec 27 12:01:12 2025 GMT Subject: CN=e4005807a352320dcb76688c5545222f0fefaed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a6:d1:c9:a8:75:ab:a0:d2:46:46:b2:10:a3: 87:d1:b4:0e:9d:37:38:ea:46:14:d4:97:bf:ab:88: 6b:ce:dc:49:92:d6:7f:d8:c8:e8:b9:85:65:e9:ac: 05:fb:a4:57:b4:7f:d0:d0:a4:20:c9:54:80:a7:bd: 86:27:d3:67:22:1e:97:be:1a:d5:23:a8:10:66:fe: 10:bd:dd:23:2b:0d:90:6b:f4:45:a7:96:f5:e2:b1: cd:06:93:04:54:5f:57:0c:24:99:d5:f8:8a:70:96: a2:c2:7c:2c:44:ef:06:38:7c:40:26:d9:c7:a9:dc: 8e:16:6a:cc:f1:3c:c7:af:3d:7b:6d:f4:a1:9a:a1: 85:4f:c9:4d:05:70:a6:e3:ea:98:59:f5:0a:2c:ab: df:0a:70:53:10:8a:f0:b5:10:90:b2:62:bd:64:9c: 0a:99:0f:37:31:0d:a5:23:82:bb:22:d4:78:a3:4a: cb:e3:37:cb:24:eb:bd:ea:b4:a6:2a:bc:4f:c1:50: 12:d3:92:e2:56:7e:ec:5e:58:60:09:f8:14:52:f7: bd:82:74:8f:fb:88:c0:34:a4:12:78:52:71:dd:a4: eb:2c:60:ac:5f:13:a1:eb:6e:95:0b:0c:20:95:8d: 26:12:f7:49:e0:d8:8b:1d:0e:70:ce:2c:53:bf:33: 8b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:00:58:07:A3:52:32:0D:CB:76:68:8C:55:45:22:2F:0F:EF:AE:D4 X509v3 Authority Key Identifier: keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f5:8b:22:a1:f2:b5:1f:e5:b7:b5:08:08:a2:ab:94:8c:28: 6f:03:15:79:d4:1b:31:94:28:1b:6c:f1:b5:76:f7:eb:1e:7f: d0:bc:de:4a:d5:1a:4a:54:64:e4:da:49:43:fb:bd:b1:cc:30: 23:e7:70:75:6f:dc:b5:4f:d2:66:2c:54:1f:c9:7e:7c:98:b5: 70:57:67:57:2f:a0:ae:96:b6:bd:79:9e:c1:ed:98:46:70:9b: 8a:56:41:40:32:99:6e:cb:ff:6a:b8:e5:34:88:60:33:ab:ad: 4e:16:6c:1c:ba:2a:c1:16:e8:ea:0d:64:87:c0:dc:c5:f6:3d: 08:7c:83:da:c6:91:6a:31:f4:35:b8:60:b4:d3:33:54:6d:4d: 0d:d8:1d:84:c6:32:04:6e:cc:b9:f7:41:b9:d5:7c:93:5a:de: 7d:65:88:3b:7d:68:1a:3e:6d:c9:1e:2e:3c:1d:5e:f6:20:e9: 3b:5b:c0:8b:b0:7b:fb:85:3a:4f:e8:5e:93:f8:95:50:c5:73: e2:70:b7:b7:e0:a7:8a:88:c4:03:2c:0d:9b:51:56:fb:a6:af: ba:70:d4:c9:56:ad:da:d2:94:a2:a9:aa:52:48:9c:35:3d:01: 33:64:42:b8:67:36:01:2b:86:3a:50:b1:84:b5:b1:ec:80:e2: 14:12:cc:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiMr8YhhaHEDYlohi99bHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWQyY2ZiZGI5ZDU4ZDU3NDBmZjM3NWEzMTViMzgyNTQ0 YTk0YWUwHhcNMjUxMjI2MTIwMTEyWhcNMjUxMjI3MTIwMTEyWjAzMTEwLwYDVQQD EyhlNDAwNTgwN2EzNTIzMjBkY2I3NjY4OGM1NTQ1MjIyZjBmZWZhZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6bRyah1q6DSRkayEKOH0bQOnTc4 6kYU1Je/q4hrztxJktZ/2MjouYVl6awF+6RXtH/Q0KQgyVSAp72GJ9NnIh6XvhrV I6gQZv4Qvd0jKw2Qa/RFp5b14rHNBpMEVF9XDCSZ1fiKcJaiwnwsRO8GOHxAJtnH qdyOFmrM8TzHrz17bfShmqGFT8lNBXCm4+qYWfUKLKvfCnBTEIrwtRCQsmK9ZJwK mQ83MQ2lI4K7ItR4o0rL4zfLJOu96rSmKrxPwVAS05LiVn7sXlhgCfgUUve9gnSP +4jANKQSeFJx3aTrLGCsXxOh626VCwwglY0mEvdJ4NiLHQ5wzixTvzOL4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQAWAejUjINy3ZojFVFIi8P767UMB8GA1UdIwQY MBaAFNxdLPvbnVjVdA/zdaMVs4JUSpSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMt MTg0MjM0OGY1YzZjLzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMtMTg0MjM0OGY1YzZj LzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPWLIqHy tR/lt7UICKKrlIwobwMVedQbMZQoG2zxtXb36x5/0LzeStUaSlRk5NpJQ/u9scww I+dwdW/ctU/SZixUH8l+fJi1cFdnVy+grpa2vXmewe2YRnCbilZBQDKZbsv/arjl NIhgM6utThZsHLoqwRbo6g1kh8DcxfY9CHyD2saRajH0NbhgtNMzVG1NDdgdhMYy BG7MufdBudV8k1refWWIO31oGj5tyR4uPB1e9iDpO1vAi7B7+4U6T+hek/iVUMVz 4nC3t+CniojEAywNm1FW+6avunDUyVat2tKUoqmqUkicNT0BM2RCuGc2ASuGOlCx hLWx7IDiFBLMyg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:24 2025 by rpki-client