This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json) Hash identifier: gX2bzqYgqbV6qsa4fqlwBqcjemxvaWplaRBl35ODCRI= Subject key identifier: 6F:6C:30:B0:55:9E:31:CF:A0:F2:46:A8:D9:FF:27:A0:F4:6E:20:30 Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58 Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058 Certificate serial: 019B3AC643814A61C6A1D9AF59ACDA6747B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft Manifest number: 1668 Signing time: Sat 20 Dec 2025 08:00:30 +0000 Manifest this update: Sat 20 Dec 2025 08:00:30 +0000 Manifest next update: Sun 21 Dec 2025 08:00:30 +0000 Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: mzj9GfMAkZk2Lv30umdfaZOwEDYwaLnDsutVPo5RMKQ=) 2: EoONLCC0uBU4UnkK6hGEDKnLwOs.roa (hash: BvTXgf3VZmemwuiX/6PvTlFRYmGF/FW7bb7KGQyaCiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:43:81:4a:61:c6:a1:d9:af:59:ac:da:67:47:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058 Validity Not Before: Dec 20 08:00:30 2025 GMT Not After : Dec 21 08:00:30 2025 GMT Subject: CN=6f6c30b0559e31cfa0f246a8d9ff27a0f46e2030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9e:a3:68:9e:21:fc:05:43:f0:0c:be:43:be: 3b:4f:76:dd:fa:48:5a:e0:9d:bb:c3:ed:b1:0f:a0: 9a:00:74:a8:35:b0:5f:b8:ea:2b:49:49:4a:3a:79: 51:51:3f:6f:b1:07:de:53:15:c8:bb:9e:17:e5:3a: 6a:0f:79:65:37:8c:c1:dc:5b:b9:90:4d:45:10:05: 29:3a:54:a8:26:c5:23:19:0d:a3:4b:32:e7:34:f2: df:95:77:69:0b:7f:cf:98:13:59:02:3c:3d:47:e8: 28:2c:53:5e:62:8a:07:47:b3:fc:6d:c7:0c:53:14: b2:0f:ee:34:4e:55:64:29:5d:f3:5a:0f:e8:b0:88: 07:ef:05:10:71:ae:0e:bd:ec:b2:03:9f:d2:5f:6e: 02:00:2c:85:a9:4f:2a:3e:d8:30:3f:9d:88:4b:bb: 82:c7:b7:6f:5a:45:2b:54:de:b7:4a:cc:09:5b:72: ed:4d:14:6a:92:8d:50:e8:9c:0e:4d:cb:7a:8e:b9: 33:61:f0:b2:7e:bb:97:ab:38:cb:45:17:03:c2:14: 9d:a8:56:37:19:ac:e8:0e:68:7c:20:fa:bd:34:f2: 77:19:c1:88:02:ad:1f:e2:54:cc:e2:96:c5:47:0b: 02:b5:de:f3:93:ae:4c:27:2e:95:5d:46:43:e5:f2: 3d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6C:30:B0:55:9E:31:CF:A0:F2:46:A8:D9:FF:27:A0:F4:6E:20:30 X509v3 Authority Key Identifier: keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a4:a4:21:c8:f5:82:4b:e3:f8:a8:b3:47:1a:89:f0:bb:4a: 08:ee:36:8f:c1:16:63:58:bb:34:dd:a9:34:e4:2a:ed:84:32: dd:d0:e9:32:0f:57:e0:41:b7:01:2f:5c:12:fb:7d:74:d3:07: 97:28:b1:58:bc:be:db:88:bd:e0:59:2f:52:30:d6:e7:bb:6e: 5b:63:1a:8a:cc:ad:0b:50:d3:62:99:97:ef:b2:91:6d:e5:58: 1c:b6:86:0b:3d:89:e7:5c:33:a3:13:28:89:8f:4b:57:e8:32: 3f:11:c2:d5:e0:dc:9e:6b:07:b3:92:4c:08:f5:ad:39:c2:aa: c4:6d:7e:db:aa:73:aa:ea:70:03:37:7f:7e:f3:2d:7e:fb:86: 5f:f8:2e:70:9c:4d:94:53:7f:02:a4:b7:34:55:ca:66:fc:9c: 99:e1:53:11:30:d5:34:ae:df:8e:0b:d8:93:ee:9e:79:f0:a2: b1:f3:88:d6:76:d0:0c:3f:61:85:de:56:7c:b1:3d:ef:d6:e3: 33:89:d8:4a:a5:89:d1:1f:16:23:93:61:fe:fd:4c:be:ee:03: 91:b4:1c:34:61:b3:16:a0:d5:45:08:a4:f9:ab:93:75:b8:5f: 53:43:b9:cb:37:95:d3:9f:5a:30:ab:a5:6b:6b:8b:66:2a:06: 6d:63:7b:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xkOBSmHGodmvWazaZ0e4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNDY3MGMyYTZmZDcyMjMzMjdmNjhiYWRiZTZkMDgzMjJi NzgwNTgwHhcNMjUxMjIwMDgwMDMwWhcNMjUxMjIxMDgwMDMwWjAzMTEwLwYDVQQD Eyg2ZjZjMzBiMDU1OWUzMWNmYTBmMjQ2YThkOWZmMjdhMGY0NmUyMDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ6jaJ4h/AVD8Ay+Q747T3bd+kha 4J27w+2xD6CaAHSoNbBfuOorSUlKOnlRUT9vsQfeUxXIu54X5TpqD3llN4zB3Fu5 kE1FEAUpOlSoJsUjGQ2jSzLnNPLflXdpC3/PmBNZAjw9R+goLFNeYooHR7P8bccM UxSyD+40TlVkKV3zWg/osIgH7wUQca4OveyyA5/SX24CACyFqU8qPtgwP52IS7uC x7dvWkUrVN63SswJW3LtTRRqko1Q6JwOTct6jrkzYfCyfruXqzjLRRcDwhSdqFY3 GazoDmh8IPq9NPJ3GcGIAq0f4lTM4pbFRwsCtd7zk65MJy6VXUZD5fI9wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9sMLBVnjHPoPJGqNn/J6D0biAwMB8GA1UdIwQY MBaAFN1GcMKm/XIjMn9outvm0IMit4BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUt OWNkM2M2YTE4ODY2LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUtOWNkM2M2YTE4ODY2 LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKSkIcj1 gkvj+KizRxqJ8LtKCO42j8EWY1i7NN2pNOQq7YQy3dDpMg9X4EG3AS9cEvt9dNMH lyixWLy+24i94FkvUjDW57tuW2MaisytC1DTYpmX77KRbeVYHLaGCz2J51wzoxMo iY9LV+gyPxHC1eDcnmsHs5JMCPWtOcKqxG1+26pzqupwAzd/fvMtfvuGX/gucJxN lFN/AqS3NFXKZvycmeFTETDVNK7fjgvYk+6eefCisfOI1nbQDD9hhd5WfLE979bj M4nYSqWJ0R8WI5Nh/v1Mvu4DkbQcNGGzFqDVRQik+auTdbhfU0O5yzeV059aMKul a2uLZioGbWN7EA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:13:08 2025 by rpki-client