This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json) Hash identifier: OxoQaS4QaVL7vI8DcWWIZENHVd3NQRNOBmeKWT7lklA= Subject key identifier: DD:9B:FD:3B:87:FD:8C:2C:84:33:52:8F:F3:71:E6:63:FA:C6:A6:31 Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49 Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49 Certificate serial: 019B1D29E4B39F2FD7DC57994E798F362078 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft Manifest number: 0A9E Signing time: Sun 14 Dec 2025 14:00:43 +0000 Manifest this update: Sun 14 Dec 2025 14:00:43 +0000 Manifest next update: Mon 15 Dec 2025 14:00:43 +0000 Files and hashes: 1: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: n/KVYq9fVwxlc9rRcdt/XWX3Dri78ij4h1kNpQ4ef3Y=) 2: 3jwAJkscmhb8NSw4un_w0ZUqE_E.roa (hash: /Q2oG/fmxx/4QlsXXEqOyxHV9Ye6s1RkScscquc109A=) 3: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (hash: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=) 4: CXGUOccTDu6x1YyIQfa-qjSpPdk.roa (hash: r4qpBtId2VEmuyzWlIPXdikWdV98Yneiil1e7VOsia4=) 5: IlOsEMD7ILB9j5FhhZ10NN6XXx0.roa (hash: gwOuiCu86d+6YjbDxDzDd3u72bl4nQy8FzU+NPDlo3k=) 6: cMeqdhzIVxayTI5Te-oZwPQzjz0.roa (hash: opO/yGSPCMGlHiRXXAkyr0DveRWYRoFkmjqGZrYYDFc=) 7: dsfkSXYJLfZWJjDQMc0Y0owm7FA.roa (hash: W0p5k/KWht0yDd7EzO060gDAd+rVO0Q+Y0m/UDAfM10=) 8: z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa (hash: hGK3SDsyu3nnm6fMnZyOrn3oCumiT/HHk1hSsPcxxpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:29:e4:b3:9f:2f:d7:dc:57:99:4e:79:8f:36:20:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49 Validity Not Before: Dec 14 14:00:43 2025 GMT Not After : Dec 15 14:00:43 2025 GMT Subject: CN=dd9bfd3b87fd8c2c8433528ff371e663fac6a631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:1f:37:6b:de:74:0f:8b:c4:64:8b:f0:87: 33:8b:a6:7a:82:c1:3b:da:e9:22:dd:f9:37:84:fa: 11:98:2d:86:7d:ab:cc:17:2a:60:1a:e3:a8:fd:9e: a0:6a:c0:bc:43:cd:83:10:57:95:b8:c2:6a:38:c0: ba:d8:8f:71:ea:67:e8:9c:54:d0:70:9a:64:ac:a5: 6d:7b:08:e0:84:9f:47:ea:54:c3:62:44:98:86:27: aa:e0:bb:17:46:13:9e:18:5c:33:ef:d6:1c:7f:05: f3:bb:31:eb:01:da:15:16:e2:47:7e:cf:a4:e0:02: 3a:79:6e:dd:9f:a1:8f:d9:8b:59:6b:11:53:e4:2b: 6a:4d:3f:d8:6d:6d:98:fc:fd:24:fd:61:a9:d8:a2: bf:d9:a9:c2:e7:fb:f2:6e:e0:36:d7:5a:61:f9:97: e7:a2:25:ea:9a:df:c6:2b:4c:2a:d7:bb:1b:04:d9: 16:d1:91:27:c6:a8:c6:7d:18:b4:75:cb:c9:09:6b: 40:e9:dd:32:43:b7:a5:01:f2:ea:1f:33:93:29:97: 91:9c:e4:6b:18:6c:91:85:e7:c8:1b:f5:30:82:bb: 09:b2:15:26:cd:59:05:d1:a9:ee:e2:5b:b5:a6:54: bd:0e:22:07:b4:62:98:c3:b7:05:98:7f:f8:27:9e: 57:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9B:FD:3B:87:FD:8C:2C:84:33:52:8F:F3:71:E6:63:FA:C6:A6:31 X509v3 Authority Key Identifier: keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:b7:80:14:ee:54:3f:0a:b4:32:03:cf:02:19:68:27:94:51: 90:94:50:9a:62:64:fb:0e:8f:67:d9:a1:43:b5:e7:eb:f4:d8: 7b:30:4b:c9:73:27:a2:c8:25:63:97:40:e8:8d:74:93:38:37: e2:1d:1e:e4:b6:7f:81:93:34:75:00:79:06:11:b0:f6:a8:ea: 36:3c:65:03:6f:68:d1:36:d5:92:41:18:59:a4:03:eb:23:17: 6f:a7:6c:3c:2b:35:e2:4b:84:f1:f9:a4:89:c6:15:ec:75:f9: 03:66:35:22:6e:c4:eb:a1:c0:ce:22:89:6c:c3:45:55:d5:36: 64:aa:b1:92:a8:21:72:35:3e:a7:38:81:e3:b3:c7:e4:99:d0: 9f:aa:b7:c4:ba:c9:df:cf:85:42:84:80:53:e4:ea:ab:3a:c2: d9:68:03:db:f3:97:6f:32:40:79:a0:f3:e0:dd:7f:57:34:e1: 0c:e3:49:54:ea:0c:1c:f5:a1:86:56:21:91:08:40:2e:07:64: c0:ea:ea:66:fa:90:ae:8a:34:6b:38:4c:55:2f:c5:0f:5a:c2: af:fa:74:f1:1a:e7:84:a1:1a:cb:72:18:ef:02:11:e9:fa:a1: 1a:80:50:22:7f:a2:40:b8:b4:46:f3:6b:bd:c1:5c:3a:7c:a5: 01:ac:1a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKeSzny/X3FeZTnmPNiB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMWRhZWNkMzBhZWI3NDY1MmJiZGRhNWRhZDk2NzZjZTQ4 OGFhNDkwHhcNMjUxMjE0MTQwMDQzWhcNMjUxMjE1MTQwMDQzWjAzMTEwLwYDVQQD EyhkZDliZmQzYjg3ZmQ4YzJjODQzMzUyOGZmMzcxZTY2M2ZhYzZhNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBsfN2vedA+LxGSL8Iczi6Z6gsE7 2uki3fk3hPoRmC2GfavMFypgGuOo/Z6gasC8Q82DEFeVuMJqOMC62I9x6mfonFTQ cJpkrKVtewjghJ9H6lTDYkSYhieq4LsXRhOeGFwz79YcfwXzuzHrAdoVFuJHfs+k 4AI6eW7dn6GP2YtZaxFT5CtqTT/YbW2Y/P0k/WGp2KK/2anC5/vybuA211ph+Zfn oiXqmt/GK0wq17sbBNkW0ZEnxqjGfRi0dcvJCWtA6d0yQ7elAfLqHzOTKZeRnORr GGyRhefIG/UwgrsJshUmzVkF0anu4lu1plS9DiIHtGKYw7cFmH/4J55XSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2b/TuH/YwshDNSj/Nx5mP6xqYxMB8GA1UdIwQY MBaAFN0drs0wrrdGUrvdpdrZZ2zkiKpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct MDYwYWMwODkwOTY2LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2 LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELeAFO5U Pwq0MgPPAhloJ5RRkJRQmmJk+w6PZ9mhQ7Xn6/TYezBLyXMnosglY5dA6I10kzg3 4h0e5LZ/gZM0dQB5BhGw9qjqNjxlA29o0TbVkkEYWaQD6yMXb6dsPCs14kuE8fmk icYV7HX5A2Y1Im7E66HAziKJbMNFVdU2ZKqxkqghcjU+pziB47PH5JnQn6q3xLrJ 38+FQoSAU+TqqzrC2WgD2/OXbzJAeaDz4N1/VzThDONJVOoMHPWhhlYhkQhALgdk wOrqZvqQroo0azhMVS/FD1rCr/p08RrnhKEay3IY7wIR6fqhGoBQIn+iQLi0RvNr vcFcOnylAawafA== -----END CERTIFICATE-----Generated at Sun Dec 14 21:59:48 2025 by rpki-client