This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json) Hash identifier: PHaJ002Efeh0r1fWXM/yNmJhl6bgGaBUJJCVt7rdTjc= Subject key identifier: 9A:A4:BD:EB:98:F3:CC:80:60:54:54:B8:DF:69:51:1E:41:73:77:6A Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c Certificate serial: 019B3F7F00E29EADD84493C379FDB94428A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 06:00:46 +0000 Manifest this update: Sun 21 Dec 2025 06:00:46 +0000 Manifest next update: Mon 22 Dec 2025 06:00:46 +0000 Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: DLao3lHt1vFQl9XdBbR39GS0NdW6XnLnFxM9t2ZLk34=) 2: 5395RGU-O7_Y-Wk8o5ckF03TEl8.roa (hash: 2x9LkbbQVmDZR4+CDqZEC8HuaScYKr9cs6YHpuOZlvY=) 3: JRT-ehjK87EWSX2wN_VxdPNgZVU.roa (hash: FFbMq3Jl0t/JwkKVVNHldSFfVrz4m+b2CW8bGskb98A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:00:e2:9e:ad:d8:44:93:c3:79:fd:b9:44:28:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c Validity Not Before: Dec 21 06:00:46 2025 GMT Not After : Dec 22 06:00:46 2025 GMT Subject: CN=9aa4bdeb98f3cc80605454b8df69511e4173776a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:18:1a:0a:a3:07:0b:09:69:e3:38:ce:98:cb: 1f:f1:ea:4a:a9:ec:86:96:e7:af:00:22:95:b6:69: a9:16:ab:db:63:8e:d1:9f:a4:a9:d7:f9:8e:58:38: e1:92:f5:15:b6:c6:cf:6c:9d:8e:69:5d:f1:9c:04: 4e:23:ed:c9:6a:78:de:d2:4d:8e:4a:00:bb:1f:00: 25:3a:06:9f:f7:97:02:8c:57:24:bb:06:31:95:09: 8c:18:8d:c2:58:2b:74:d8:08:ad:70:a1:63:84:b5: 52:7f:e5:95:ff:47:f6:75:16:8d:ad:10:77:a4:3f: ae:62:94:a6:bf:58:21:5b:c3:aa:87:fd:2a:0c:e2: 4f:6c:51:b9:80:f7:9a:57:46:55:27:3b:42:a3:3a: 24:16:c3:b5:ed:4c:db:ed:b3:81:ab:0a:ca:a7:70: 43:93:43:47:8c:79:4b:95:81:cd:ac:64:df:4c:61: cb:bd:b1:ff:2e:7d:c6:40:01:65:60:30:52:49:bd: 97:d7:78:35:78:af:a4:4c:28:2d:87:08:78:50:3b: 5f:95:dc:05:85:89:7f:a9:84:0f:24:11:5a:df:07: 33:71:9e:ca:0e:19:6b:f5:78:bc:56:d8:8d:b7:99: b5:a9:80:54:b8:72:2d:bc:13:98:9a:f7:5c:83:02: 4a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A4:BD:EB:98:F3:CC:80:60:54:54:B8:DF:69:51:1E:41:73:77:6A X509v3 Authority Key Identifier: keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:84:92:d9:b9:d6:b7:d2:27:23:78:06:12:79:87:7b:a1:2f: 87:7c:66:5b:c6:4e:f0:e1:5d:c0:42:9f:76:ec:f6:94:74:b1: 25:82:c7:16:c2:ec:2c:b0:e0:36:2d:60:18:44:54:db:82:b1: 41:22:2c:f4:68:32:8f:fc:99:d4:76:95:8f:75:8d:0d:f7:ae: b0:1f:02:48:23:c2:49:a8:24:a6:04:ba:9d:0b:1b:a6:d2:91: bd:62:b0:86:37:ad:7a:b2:3c:f6:2f:e0:03:d5:c7:a3:84:53: 69:f0:99:24:58:43:08:65:0f:31:b7:42:c2:b0:fb:57:d4:52: 1f:75:8a:f1:55:c5:6e:89:d8:62:e1:42:65:4a:ea:87:5c:ad: f8:ba:19:9c:a5:bb:32:d9:55:f2:96:ea:3a:63:dc:ac:7a:60: d1:2e:5b:0e:8a:b0:19:82:43:1e:78:37:77:69:39:29:bd:f7: de:9e:f8:59:1d:08:79:72:cf:d6:eb:8d:df:cb:26:97:33:02: 76:0a:55:07:a4:af:b1:8b:5f:ac:a2:29:1a:86:c3:2e:9e:f9: ea:b0:f4:8b:83:8b:7f:eb:e7:52:17:d5:cb:26:3a:70:fb:84: 51:85:67:d0:8a:af:c9:1a:a4:a7:19:fa:f4:ae:0d:dd:fe:2f: e5:b4:55:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fwDinq3YRJPDef25RCikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjFkZjU5OGY0YThmM2EyZDA3NGNjYjZmNmQxNmI1NGQx ZDExMWMwHhcNMjUxMjIxMDYwMDQ2WhcNMjUxMjIyMDYwMDQ2WjAzMTEwLwYDVQQD Eyg5YWE0YmRlYjk4ZjNjYzgwNjA1NDU0YjhkZjY5NTExZTQxNzM3NzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hgaCqMHCwlp4zjOmMsf8epKqeyG luevACKVtmmpFqvbY47Rn6Sp1/mOWDjhkvUVtsbPbJ2OaV3xnAROI+3Janje0k2O SgC7HwAlOgaf95cCjFckuwYxlQmMGI3CWCt02AitcKFjhLVSf+WV/0f2dRaNrRB3 pD+uYpSmv1ghW8Oqh/0qDOJPbFG5gPeaV0ZVJztCozokFsO17Uzb7bOBqwrKp3BD k0NHjHlLlYHNrGTfTGHLvbH/Ln3GQAFlYDBSSb2X13g1eK+kTCgthwh4UDtfldwF hYl/qYQPJBFa3wczcZ7KDhlr9Xi8VtiNt5m1qYBUuHItvBOYmvdcgwJKxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqkveuY88yAYFRUuN9pUR5Bc3dqMB8GA1UdIwQY MBaAFN3x31mPSo86LQdMy29tFrVNHREcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YjhiY2UtNTg0Yy00OTJjLWJkN2Ut ZDBmMzFiYzkzMDc5LzEvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82YjhiY2UtNTg0Yy00OTJjLWJkN2UtZDBmMzFiYzkzMDc5 LzEvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoSS2bnW t9InI3gGEnmHe6Evh3xmW8ZO8OFdwEKfduz2lHSxJYLHFsLsLLDgNi1gGERU24Kx QSIs9Ggyj/yZ1HaVj3WNDfeusB8CSCPCSagkpgS6nQsbptKRvWKwhjeterI89i/g A9XHo4RTafCZJFhDCGUPMbdCwrD7V9RSH3WK8VXFbonYYuFCZUrqh1yt+LoZnKW7 MtlV8pbqOmPcrHpg0S5bDoqwGYJDHng3d2k5Kb333p74WR0IeXLP1uuN38smlzMC dgpVB6SvsYtfrKIpGobDLp756rD0i4OLf+vnUhfVyyY6cPuEUYVn0IqvyRqkpxn6 9K4N3f4v5bRVWw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:22:38 2025 by rpki-client