This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft File: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft (raw, json) Hash identifier: QUltLUbJIKy42Ayd3z2StAU5Kxw1f1We6mmORjPfLW8= Subject key identifier: AD:4F:8F:C1:D6:00:FF:55:DF:A9:0D:77:40:45:72:79:D8:82:1C:39 Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49 Certificate issuer: /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49 Certificate serial: 019B5AF688ADAB3E0A6E9D5EA9B8816710DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 14:01:04 +0000 Manifest this update: Fri 26 Dec 2025 14:01:04 +0000 Manifest next update: Sat 27 Dec 2025 14:01:04 +0000 Files and hashes: 1: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl (hash: 8x1nR6P8Q0UBo9bIt2725Fnqz0fespt6cy0uKCkMDDc=) 2: BgyYhjdlX54FNLBOgRi8uw75ivU.roa (hash: zzLTHJ8bOyhzXoEVwavpxvrPBboJmkVXfTzNirwZrsg=) 3: Hpy8N_-5qbg4r5UvdSXzVzdiWx4.roa (hash: 2QUmH1Q4U8nkWLgbGItfFRsuYPfdbrlhi1xdBt64+Zw=) 4: ImxZW674_5fXdmlZfvGnuAIzuOY.roa (hash: 9/kVoJM9dkwpP3u46CBs9jfgtCbtD6Yrvc+TFbbmgkw=) 5: h81MQCGUH4YWhsU7_noNE9t-6Ag.roa (hash: B55fQoBAEqhRk0fmuOYVFDE0A21yTHmBQBoOyLnBQrM=) 6: zOCoutq8Gy1Lt87HTs8qxIiEU1c.roa (hash: ArwgLJQHWcGLaYYEnlnuKPp35zrbwjR5bDSmhIZ/pcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:88:ad:ab:3e:0a:6e:9d:5e:a9:b8:81:67:10:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49 Validity Not Before: Dec 26 14:01:04 2025 GMT Not After : Dec 27 14:01:04 2025 GMT Subject: CN=ad4f8fc1d600ff55dfa90d7740457279d8821c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d5:92:a9:85:67:ff:aa:1a:98:6c:0f:14:fc: 08:55:66:71:0c:8c:15:11:81:c2:3f:b2:32:6d:3b: 9f:6a:eb:f1:e2:20:f1:a2:17:81:47:9c:a4:41:29: ee:db:ea:87:34:57:29:a0:13:30:b2:79:e3:ce:ce: fc:e9:94:30:fb:8a:ab:13:58:fa:57:5f:c4:95:46: 62:18:5e:79:e0:61:e1:04:83:92:01:a4:9c:fe:f9: 47:89:89:db:3f:14:e4:0c:96:1c:a7:f8:75:c5:6d: 26:67:7c:48:a0:7b:59:7d:98:12:ab:e9:0e:50:65: 8e:a7:51:33:3c:15:6a:bd:9a:6a:eb:1f:9f:b9:19: fd:81:47:e9:dd:10:61:d5:ef:0c:2f:e8:fc:44:0c: 12:52:fe:1f:43:19:35:49:60:a4:f7:78:f7:ac:b5: e4:f6:b0:6a:f2:dd:72:dc:d9:d4:99:76:39:0f:94: 92:08:88:f8:c4:95:32:4a:5b:46:d3:ad:48:fe:d9: c5:27:ee:19:0f:86:c4:92:28:f2:20:ca:62:4a:a5: f8:20:99:43:80:92:2e:15:b9:91:6e:c5:f1:46:54: aa:04:50:1a:75:ba:19:4c:de:51:65:6a:5c:c4:fe: 13:90:a9:16:65:df:b7:54:d0:f8:56:90:0b:ac:57: ce:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4F:8F:C1:D6:00:FF:55:DF:A9:0D:77:40:45:72:79:D8:82:1C:39 X509v3 Authority Key Identifier: keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a0:ba:9c:b2:88:a6:53:f7:0b:6f:75:6b:ff:35:50:24:e2: 70:31:36:dc:81:3a:6d:56:99:d6:e7:1d:6d:28:78:7d:02:3d: c0:e6:c6:0d:45:87:a4:57:8d:50:39:4c:4f:ba:03:9d:3a:0c: 29:65:a8:4d:6b:ef:02:8f:33:9e:a3:43:fb:22:1c:2e:63:92: a9:66:57:19:2f:74:a7:89:de:58:6f:e3:65:38:51:7d:ce:0b: fb:8d:0d:fc:f0:df:de:c7:77:f7:b2:31:13:06:6e:a8:00:77: 2a:44:18:bf:9d:8b:b9:c6:ab:b1:06:3c:9f:a0:0f:f1:73:4b: 44:54:23:e0:17:54:8b:09:49:06:9f:22:7f:08:ce:c6:62:f1: 11:9c:05:d3:71:cd:f0:14:f5:6a:b3:bc:f6:ed:d4:ae:91:ab: fe:ab:68:0b:83:88:6e:e2:84:9e:76:be:6e:82:c5:5e:d0:b6: c6:0a:af:0e:ca:fe:d9:d1:8e:13:2b:5d:c2:70:10:9e:86:a5: 86:7e:3b:3c:e7:09:40:ef:17:df:e0:bb:c8:2e:30:38:e1:23: eb:94:37:3a:ed:bf:59:20:d3:38:73:a1:e6:81:1e:9c:82:bf: 9e:2e:31:da:b4:0a:56:a6:b6:4c:d3:84:b2:47:8d:2a:a9:90: 1b:cd:67:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9oitqz4Kbp1eqbiBZxDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlN2M4MmIyMjc2Y2JkZjEzMGNjYWQwNDZiNjVmZWFiMmMy N2VkNDkwHhcNMjUxMjI2MTQwMTA0WhcNMjUxMjI3MTQwMTA0WjAzMTEwLwYDVQQD EyhhZDRmOGZjMWQ2MDBmZjU1ZGZhOTBkNzc0MDQ1NzI3OWQ4ODIxYzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9WSqYVn/6oamGwPFPwIVWZxDIwV EYHCP7IybTufauvx4iDxoheBR5ykQSnu2+qHNFcpoBMwsnnjzs786ZQw+4qrE1j6 V1/ElUZiGF554GHhBIOSAaSc/vlHiYnbPxTkDJYcp/h1xW0mZ3xIoHtZfZgSq+kO UGWOp1EzPBVqvZpq6x+fuRn9gUfp3RBh1e8ML+j8RAwSUv4fQxk1SWCk93j3rLXk 9rBq8t1y3NnUmXY5D5SSCIj4xJUySltG061I/tnFJ+4ZD4bEkijyIMpiSqX4IJlD gJIuFbmRbsXxRlSqBFAadboZTN5RZWpcxP4TkKkWZd+3VND4VpALrFfOQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1Pj8HWAP9V36kNd0BFcnnYghw5MB8GA1UdIwQY MBaAFN58grInbL3xMMytBGtl/qssJ+1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM255Q3NpZHN2ZkV3ekswRWEyWC1xeXduN1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi82ZmE1ZGYtZmI5Zi00YWU1LWJhODkt N2ZhZjdjMWRlN2IwLzEvM255Q3NpZHN2ZkV3ekswRWEyWC1xeXduN1VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi82ZmE1ZGYtZmI5Zi00YWU1LWJhODktN2ZhZjdjMWRlN2Iw LzEvM255Q3NpZHN2ZkV3ekswRWEyWC1xeXduN1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqC6nLKI plP3C291a/81UCTicDE23IE6bVaZ1ucdbSh4fQI9wObGDUWHpFeNUDlMT7oDnToM KWWoTWvvAo8znqND+yIcLmOSqWZXGS90p4neWG/jZThRfc4L+40N/PDf3sd397Ix EwZuqAB3KkQYv52LucarsQY8n6AP8XNLRFQj4BdUiwlJBp8ifwjOxmLxEZwF03HN 8BT1arO89u3UrpGr/qtoC4OIbuKEnna+boLFXtC2xgqvDsr+2dGOEytdwnAQnoal hn47POcJQO8X3+C7yC4wOOEj65Q3Ou2/WSDTOHOh5oEenIK/ni4x2rQKVqa2TNOE skeNKqmQG81nEQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:28 2025 by rpki-client