This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft File: 3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json) Hash identifier: TX1Dw34psFMPngMDxq9gkXFwP/9kypYKonFTGhA+7is= Subject key identifier: F4:4D:0F:7A:AA:BB:46:D8:84:AF:15:30:5E:3F:A9:C7:52:06:61:36 Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31 Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31 Certificate serial: 019B077E126385ABD7A20A84B466C68577C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft Manifest number: 1771 Signing time: Wed 10 Dec 2025 09:01:01 +0000 Manifest this update: Wed 10 Dec 2025 09:01:01 +0000 Manifest next update: Thu 11 Dec 2025 09:01:01 +0000 Files and hashes: 1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: utC/tWsI1t+0vxN5fqw6ITLV784bHVECLQTRSY5TUvg=) 2: Fv3sE2iVskV-mDIZ6tC2kUlGAaA.roa (hash: H3F5XuYvkLtvyyyPb3WNBs3Jib+ztvm2aFiyN79ql3U=) 3: Lf6gNW4pB2_3G8WJ1gs4diM2dp4.roa (hash: KsApADDkWth8orQKJUtme8wDWNYjMSX9ur5fZXW4Ab8=) 4: MC2jKTT_qt4dQPRJuzCLJkn3dIY.roa (hash: 690YFNoA6dF93SoBbsIHXRbUtNVseAW76vFSFSdgmtM=) 5: Y7R0jQTyur7PS79n24V95dokJ1E.roa (hash: kBuKXhAOJMq8DqLXajUVs2ZVCA0WRxqfHOvHHVdd1e0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7e:12:63:85:ab:d7:a2:0a:84:b4:66:c6:85:77:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31 Validity Not Before: Dec 10 09:01:01 2025 GMT Not After : Dec 11 09:01:01 2025 GMT Subject: CN=f44d0f7aaabb46d884af15305e3fa9c752066136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fe:dc:58:72:fa:b8:22:c2:07:4f:96:9b:70: 68:05:15:68:4b:30:c5:e2:b6:8f:cd:0b:bd:15:94: 24:9a:52:62:3b:46:19:fb:eb:8e:64:29:b2:e3:b1: 6d:17:b7:8e:32:4d:da:a8:19:1a:a9:98:76:54:dc: 3d:a1:fc:6e:7a:af:a9:7a:8a:62:9e:2c:65:6f:68: ed:86:23:c8:22:c6:b6:9a:c4:cb:8d:e8:75:a7:48: 54:49:17:c5:aa:c1:86:8c:1b:dd:b7:6d:6b:ca:0b: a1:ca:e7:12:4d:16:46:0a:c9:f8:bb:c0:37:37:58: 2f:a3:4d:d6:d6:e9:f7:58:e3:f3:48:e8:24:8e:26: 9b:a6:d9:5f:67:7e:5f:82:f8:af:68:87:28:06:5c: 2a:d6:a3:21:7a:3a:f8:cc:53:0d:67:c3:6a:ad:82: 6f:f0:81:a8:56:fe:2e:40:d6:ad:95:71:7e:3d:8f: 52:0a:47:22:f7:61:36:e0:d6:4f:8c:97:b3:b2:2c: cf:b4:b7:37:5a:62:e0:0c:54:3d:d0:c4:f4:db:66: 8d:05:88:c1:d6:b8:aa:b1:d5:f5:07:11:a0:a8:76: a5:33:db:6e:7a:4d:26:89:05:fe:72:cb:fb:5a:14: d8:60:1d:23:88:de:2b:d8:14:c9:1a:a5:6c:74:23: fb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4D:0F:7A:AA:BB:46:D8:84:AF:15:30:5E:3F:A9:C7:52:06:61:36 X509v3 Authority Key Identifier: keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d8:4c:e9:77:63:4c:f9:11:73:44:9c:38:e2:31:88:8d:58: 8c:25:e3:53:2a:34:a9:48:42:67:c1:64:ce:8a:63:e0:ed:5a: e3:70:44:fa:e6:e6:b6:01:11:1b:86:ad:ab:d7:53:ef:d9:7f: 0b:9f:e2:d8:4f:12:53:65:2d:8d:c8:e5:2b:e2:a4:ca:ec:40: d5:16:0a:db:28:27:63:d8:20:5a:41:ac:71:11:5a:2d:d3:50: 31:1d:58:f2:49:d1:85:f5:14:d2:44:40:97:39:54:69:ec:87: 5f:e5:96:62:60:4e:eb:95:19:39:ce:14:06:f2:86:62:d7:e2: 01:29:0f:ce:59:f7:b7:47:22:42:e9:4a:a4:6d:84:e1:de:98: 0e:6b:2e:f0:52:da:ef:33:3a:43:aa:1c:80:34:74:75:a9:72: f5:62:0f:c5:60:f0:9d:4d:34:f5:3f:05:94:17:ff:d9:de:09: 29:f4:09:8e:68:e9:f5:d8:77:eb:5d:ce:fd:24:d1:b1:de:e8: f6:ce:d2:08:a4:5f:d1:d2:3d:4e:b6:db:50:a7:3e:d1:61:29: fa:e7:47:46:2f:5b:75:1a:ae:7c:9d:1a:d7:c3:cc:7f:f7:6e: f0:30:c4:31:35:87:44:bc:9c:32:d2:6e:56:fa:34:1b:b6:55: 6a:48:93:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfhJjhavXogqEtGbGhXfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMzg4NDAyMWQxYjAyZThjMTZiNTU1NzQzZGZlYjlkYThl NDhlMzEwHhcNMjUxMjEwMDkwMTAxWhcNMjUxMjExMDkwMTAxWjAzMTEwLwYDVQQD EyhmNDRkMGY3YWFhYmI0NmQ4ODRhZjE1MzA1ZTNmYTljNzUyMDY2MTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv7cWHL6uCLCB0+Wm3BoBRVoSzDF 4raPzQu9FZQkmlJiO0YZ++uOZCmy47FtF7eOMk3aqBkaqZh2VNw9ofxueq+peopi nixlb2jthiPIIsa2msTLjeh1p0hUSRfFqsGGjBvdt21ryguhyucSTRZGCsn4u8A3 N1gvo03W1un3WOPzSOgkjiabptlfZ35fgvivaIcoBlwq1qMhejr4zFMNZ8NqrYJv 8IGoVv4uQNatlXF+PY9SCkci92E24NZPjJezsizPtLc3WmLgDFQ90MT022aNBYjB 1riqsdX1BxGgqHalM9tuek0miQX+csv7WhTYYB0jiN4r2BTJGqVsdCP7ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRND3qqu0bYhK8VMF4/qcdSBmE2MB8GA1UdIwQY MBaAFNw4hAIdGwLowWtVV0Pf652o5I4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEt ZDhiNGUwZDBkNmQ1LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEtZDhiNGUwZDBkNmQ1 LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9hM6Xdj TPkRc0ScOOIxiI1YjCXjUyo0qUhCZ8Fkzopj4O1a43BE+ubmtgERG4atq9dT79l/ C5/i2E8SU2UtjcjlK+KkyuxA1RYK2ygnY9ggWkGscRFaLdNQMR1Y8knRhfUU0kRA lzlUaeyHX+WWYmBO65UZOc4UBvKGYtfiASkPzln3t0ciQulKpG2E4d6YDmsu8FLa 7zM6Q6ocgDR0daly9WIPxWDwnU009T8FlBf/2d4JKfQJjmjp9dh3613O/STRsd7o 9s7SCKRf0dI9TrbbUKc+0WEp+udHRi9bdRqufJ0a18PMf/du8DDEMTWHRLycMtJu Vvo0G7ZVakiTVw== -----END CERTIFICATE-----Generated at Wed Dec 10 11:40:10 2025 by rpki-client