This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json) Hash identifier: qXKCO5uDuQgdiIavGafHlMaIqrCS15701+gapQk4wuA= Subject key identifier: 51:41:80:F6:62:04:53:1D:FB:B4:45:98:5F:1B:37:95:94:A5:BA:E2 Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e Certificate serial: 019B1FBD244D7DB581E68C4E721C78335170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft Manifest number: 0A97 Signing time: Mon 15 Dec 2025 02:00:47 +0000 Manifest this update: Mon 15 Dec 2025 02:00:47 +0000 Manifest next update: Tue 16 Dec 2025 02:00:47 +0000 Files and hashes: 1: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: qrV7AuXtLLPKFkKGbu74rGXW7G7Iofda3c4DzLw/GZA=) 2: vrZbrmq-YLZHy_jTQFADJGPxi-I.roa (hash: SoRxaIEIcm9lF/KB/PtX621zexUgH5AtUpObYQIQZW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:bd:24:4d:7d:b5:81:e6:8c:4e:72:1c:78:33:51:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e Validity Not Before: Dec 15 02:00:47 2025 GMT Not After : Dec 16 02:00:47 2025 GMT Subject: CN=514180f66204531dfbb445985f1b379594a5bae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:21:3b:d7:df:0d:8c:d6:8d:03:99:75:b7:66: 06:46:ea:1b:bc:49:f3:f5:7b:22:26:4b:64:7f:fe: 69:46:04:a2:32:66:39:16:c7:a3:7b:fb:f6:9c:ff: a0:dd:a9:ae:94:5b:dd:23:33:37:41:2f:40:e0:30: b5:92:22:d1:c3:79:98:74:85:2b:9e:d9:8f:94:0d: e3:e4:37:95:56:1f:75:0f:a6:e9:bc:2f:f9:82:f0: b9:b0:f8:5b:84:b0:5f:ff:ff:5f:be:f6:e3:16:66: 04:74:1e:37:78:e2:98:d0:a8:3e:2c:67:ec:fd:79: 20:cd:ef:c0:48:a5:76:b2:10:6f:c7:95:ca:07:be: 9f:f5:b2:5e:6e:38:61:e2:6d:73:9f:b7:b2:9b:88: c3:75:f0:6a:f0:61:b3:c1:f2:2b:6a:36:41:dc:b4: d8:64:32:4b:a5:7d:3a:64:df:64:8f:e7:f2:0d:f0: e6:1a:37:5d:38:cb:37:0f:26:c4:59:2f:9e:8e:b7: b8:de:46:5b:32:ae:de:f8:96:b7:e4:6a:96:6a:f5: 35:4e:24:65:e4:fc:7b:7d:d8:3f:14:b6:38:93:cf: ef:f9:38:83:63:da:22:b3:49:9b:25:39:6d:10:61: 12:f9:ef:6d:9c:8d:60:cf:a2:25:f6:00:e3:2e:5a: 04:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:41:80:F6:62:04:53:1D:FB:B4:45:98:5F:1B:37:95:94:A5:BA:E2 X509v3 Authority Key Identifier: keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:76:68:1c:51:82:28:11:89:1c:a2:96:7e:10:6b:98:ee:97: 80:01:32:8c:cc:76:a1:33:50:51:a8:7f:7d:8c:18:28:e1:43: f6:45:41:78:85:1e:ff:68:81:5b:fd:ea:eb:a5:38:a9:a8:86: f2:96:aa:e4:83:9e:0b:c9:aa:ad:0c:a5:e3:d5:f5:04:cc:a9: cc:61:7e:3b:e3:bd:20:cb:c0:62:98:69:18:43:74:7b:08:6b: ea:d6:7d:7b:e6:ad:3c:55:be:0f:94:83:37:7c:fb:ac:5d:b1: bb:a6:71:97:61:8d:4a:29:a7:c7:b2:1e:0c:fc:6b:22:dd:dd: 9c:df:b3:72:22:24:ee:11:e2:e0:25:6a:d5:2a:b1:e6:9e:20: 19:02:2b:5f:81:8d:5b:e6:90:33:21:f6:b5:2a:ae:1e:74:68: 40:7a:44:6c:ff:68:86:a2:d9:2b:14:06:24:d3:6e:69:02:ae: 07:65:b0:82:91:b7:8e:39:f6:79:69:63:fe:9b:92:4e:1c:b0: 10:2d:dd:09:3e:f1:f7:9a:7e:4f:dd:dc:41:f0:54:28:c4:0e: ea:10:74:62:8f:29:81:21:be:89:15:67:0e:b5:53:9a:7a:bf: 39:93:80:39:26:dd:0f:ae:7a:6a:03:a5:fb:89:1a:b4:91:4d: e2:db:70:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfvSRNfbWB5oxOchx4M1FwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjIwYTA2ODViNmZlOTc1NGNhMjI0ODY3NzViMmQ4YTdl OWMxMWUwHhcNMjUxMjE1MDIwMDQ3WhcNMjUxMjE2MDIwMDQ3WjAzMTEwLwYDVQQD Eyg1MTQxODBmNjYyMDQ1MzFkZmJiNDQ1OTg1ZjFiMzc5NTk0YTViYWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiE7198NjNaNA5l1t2YGRuobvEnz 9XsiJktkf/5pRgSiMmY5Fseje/v2nP+g3amulFvdIzM3QS9A4DC1kiLRw3mYdIUr ntmPlA3j5DeVVh91D6bpvC/5gvC5sPhbhLBf//9fvvbjFmYEdB43eOKY0Kg+LGfs /Xkgze/ASKV2shBvx5XKB76f9bJebjhh4m1zn7eym4jDdfBq8GGzwfIrajZB3LTY ZDJLpX06ZN9kj+fyDfDmGjddOMs3DybEWS+ejre43kZbMq7e+Ja35GqWavU1TiRl 5Px7fdg/FLY4k8/v+TiDY9ois0mbJTltEGES+e9tnI1gz6Il9gDjLloEWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFBgPZiBFMd+7RFmF8bN5WUpbriMB8GA1UdIwQY MBaAFN3yCgaFtv6XVMoiSGd1stin6cEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTRjNzgtNGJkMC00M2Q4LTgxNGYt NTgzNDlmNzQwZTk2LzEvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81OTRjNzgtNGJkMC00M2Q4LTgxNGYtNTgzNDlmNzQwZTk2 LzEvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnZoHFGC KBGJHKKWfhBrmO6XgAEyjMx2oTNQUah/fYwYKOFD9kVBeIUe/2iBW/3q66U4qaiG 8paq5IOeC8mqrQyl49X1BMypzGF+O+O9IMvAYphpGEN0ewhr6tZ9e+atPFW+D5SD N3z7rF2xu6Zxl2GNSimnx7IeDPxrIt3dnN+zciIk7hHi4CVq1Sqx5p4gGQIrX4GN W+aQMyH2tSquHnRoQHpEbP9ohqLZKxQGJNNuaQKuB2WwgpG3jjn2eWlj/puSThyw EC3dCT7x95p+T93cQfBUKMQO6hB0Yo8pgSG+iRVnDrVTmnq/OZOAOSbdD656agOl +4katJFN4ttwfw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:59:26 2025 by rpki-client