This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: BYaBdsm1OWKfhzORcLiE5j3SK6kEGBAI4HXINPk+swg= Subject key identifier: 53:72:90:54:24:E3:00:E0:3B:61:AD:3F:10:D6:E6:ED:61:6A:20:D2 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 019B1E3D37930980D95AB1C58FC0F3663B30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 19:01:26 +0000 Manifest this update: Sun 14 Dec 2025 19:01:26 +0000 Manifest next update: Mon 15 Dec 2025 19:01:26 +0000 Files and hashes: 1: 1h855CNEVOjEfeY3xJdnjH3udfA.roa (hash: LnReL4xvvQZDIPnpuzGkg0WHy3mNK+PRykuvMTviVRU=) 2: 9TPdAIfPUajUjs2DsbC3GN5w1mM.roa (hash: f998uOYMTFD5RySwHTrfZLXT9MQqC7DQiOZI706CLv0=) 3: BjNcWgFCcgba03gZ00Wn0vEqj3g.roa (hash: U/XRsHv7C+f9dXk91I1pC9Y4HNFCH0uKUdMuFoDViRQ=) 4: BrfY4YW_yXK06U0eOLt-LobfjzY.roa (hash: Hv6+aEBXmMC9XH4TQkng0p4jntb620WSOaHbhPCP9JQ=) 5: Cw1uuAeUBhAelOLTm4Dk1iRffEA.roa (hash: z7x5PkssyE32f3g9waLhPt3Hl1C8H5f4Iw04pNNOOB8=) 6: EcRwtilhZy6tNswg6gPS5OkvUlQ.roa (hash: qBDPjWgpNJxholOTWxrJUnO/kRkTjC8UXjWmpsN+tAc=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: 0oOykRhCdj+O/nMLetziEJo7i6qidp/npKFgY4icAjk=) 8: T8_EmiMUPF83zSf_CWDX1W5xQ1k.roa (hash: d6CAaY4KcSFvMEPDFQGYRUngwvkhFj6iBm1RzRLZ++4=) 9: WUYHmqFyP61kI6BD9sMT7KF9l-U.roa (hash: xFiWBHTwLfZ5M8eQEBathNKsbTc1PcIqXDpV9YTX3G8=) 10: g5kj0c5gIcfXvJMBxVW2-IvShUI.roa (hash: CKgIE1v8ZknTa0F780Va3Q+BXidD3R6HaKXYmqUb3wg=) 11: kKoWp4Lx502DAZ2dTiIEcojnfao.roa (hash: wbMVZciEXcbsx0EhcS9t8+gUwRDnIiXLOoH2KSH13m8=) 12: m0urSftBhVugiQE6mFeNiCtZVI8.roa (hash: xOqBMnBvPEbbfCmZX1QX9FuTGPEracGRpzNmhAwuxVM=) 13: p9BRYnl3EKm9TTth6amvuszGxmw.roa (hash: RclXNVeUwytI6eicBVcxuy79LLzQjb8L+50PtV/MwdU=) 14: rq0QSGPYNrEzw6-22i_TjD_5ytM.roa (hash: GZherMDntzrMQ22JN8aWo0GpEMJ9AqPJdM6Y8aGsT1I=) 15: tWTx91zKwnMqo4ymab78lMSrAv8.roa (hash: ueVp+aZdHi8wvh5xrtibgRIouCvFn7uQziD4gJ74yO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3d:37:93:09:80:d9:5a:b1:c5:8f:c0:f3:66:3b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Dec 14 19:01:26 2025 GMT Not After : Dec 15 19:01:26 2025 GMT Subject: CN=5372905424e300e03b61ad3f10d6e6ed616a20d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:26:5f:ae:fd:25:cb:b7:52:cb:65:f7:20:29: 6b:b3:f7:bc:60:e9:0b:e2:69:a2:1c:39:84:46:0e: 62:ac:e0:ee:f4:b2:ba:e5:3b:59:f0:dd:e5:ef:8c: 38:7f:9c:e2:1f:e2:06:fd:3b:56:7d:05:5b:25:d2: 3c:85:f3:7a:13:52:fa:8f:5f:35:34:75:39:33:ab: 9a:fb:7e:78:48:c6:32:8e:ef:c8:82:15:3e:d9:82: 4c:80:a8:7e:b4:8c:18:06:77:20:d3:02:35:b9:92: c4:3e:2b:51:3d:f4:74:a5:28:63:24:4d:97:3a:f0: 97:09:63:9f:e7:0c:50:8a:17:62:9f:d5:bf:e5:9e: 02:b5:99:e2:d8:75:8e:95:72:5f:d0:58:19:25:b8: f9:4c:17:f6:19:a5:ba:33:67:2e:93:91:6a:2d:c5: 41:d7:16:e2:73:ae:c8:07:d4:2b:aa:ad:bb:da:34: bb:04:7d:bc:b7:e9:17:82:90:9f:d6:e7:83:5a:9f: c1:50:36:7d:aa:62:df:40:fb:af:96:37:40:f8:66: f9:20:bc:f1:79:de:16:a6:b6:63:09:08:82:bd:80: 74:03:7c:f1:45:3b:26:a4:92:dd:4d:21:d7:1c:b1: 9a:e6:db:be:48:a7:28:bc:75:cc:aa:a9:80:44:ec: 21:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:72:90:54:24:E3:00:E0:3B:61:AD:3F:10:D6:E6:ED:61:6A:20:D2 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:00:38:3d:4a:ef:72:c0:d1:d0:05:bd:0f:04:e8:0c:1f:ec: 3c:c2:cb:82:4d:b6:df:ab:cd:05:6b:3a:d0:0e:77:3c:bf:2c: 39:e8:9d:ed:f3:89:17:df:dd:f5:73:6e:fe:40:d2:fb:39:d7: b0:45:5e:c7:a6:8c:e0:5a:98:5d:23:d0:d2:fc:ab:47:18:6f: 5c:45:3b:4d:7b:c6:1c:78:44:ff:1e:50:46:87:e6:5d:85:2f: 6c:63:c0:41:5f:8a:8e:35:39:60:4d:84:03:16:74:6c:a0:33: 7d:f4:97:90:85:a4:d7:1b:60:78:3f:e8:92:1f:fe:c0:6b:84: 21:fe:4d:4b:d4:3f:90:d2:5c:fb:64:a3:77:0e:d5:04:79:3c: be:05:5e:1b:f1:9d:5d:f5:3e:29:8e:f5:37:c1:5b:04:1b:48: 7d:ba:e0:73:f4:83:dc:5f:a2:28:ef:06:ac:db:1d:a2:ae:41: ad:98:33:6f:e0:98:ac:65:47:8c:ce:ae:b2:45:f5:fc:73:a7: dc:0e:d4:e2:b5:a8:4d:d6:c5:9b:3f:02:a5:7a:c5:fb:e4:c3: 56:09:7e:01:b7:07:fe:c8:32:31:41:ce:1b:25:b5:40:c2:52: f9:5c:fa:1a:87:30:75:7e:0c:02:56:2f:b3:f0:28:3b:5a:77: a6:4f:a1:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePTeTCYDZWrHFj8DzZjswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjUxMjE0MTkwMTI2WhcNMjUxMjE1MTkwMTI2WjAzMTEwLwYDVQQD Eyg1MzcyOTA1NDI0ZTMwMGUwM2I2MWFkM2YxMGQ2ZTZlZDYxNmEyMGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yZfrv0ly7dSy2X3IClrs/e8YOkL 4mmiHDmERg5irODu9LK65TtZ8N3l74w4f5ziH+IG/TtWfQVbJdI8hfN6E1L6j181 NHU5M6ua+354SMYyju/IghU+2YJMgKh+tIwYBncg0wI1uZLEPitRPfR0pShjJE2X OvCXCWOf5wxQihdin9W/5Z4CtZni2HWOlXJf0FgZJbj5TBf2GaW6M2cuk5FqLcVB 1xbic67IB9Qrqq272jS7BH28t+kXgpCf1ueDWp/BUDZ9qmLfQPuvljdA+Gb5ILzx ed4WprZjCQiCvYB0A3zxRTsmpJLdTSHXHLGa5tu+SKcovHXMqqmAROwhnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNykFQk4wDgO2GtPxDW5u1haiDSMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQA4PUrv csDR0AW9DwToDB/sPMLLgk2236vNBWs60A53PL8sOeid7fOJF9/d9XNu/kDS+znX sEVex6aM4FqYXSPQ0vyrRxhvXEU7TXvGHHhE/x5QRofmXYUvbGPAQV+KjjU5YE2E AxZ0bKAzffSXkIWk1xtgeD/okh/+wGuEIf5NS9Q/kNJc+2Sjdw7VBHk8vgVeG/Gd XfU+KY71N8FbBBtIfbrgc/SD3F+iKO8GrNsdoq5BrZgzb+CYrGVHjM6uskX1/HOn 3A7U4rWoTdbFmz8CpXrF++TDVgl+AbcH/sgyMUHOGyW1QMJS+Vz6GocwdX4MAlYv s/AoO1p3pk+h1g== -----END CERTIFICATE-----Generated at Sun Dec 14 21:40:36 2025 by rpki-client