This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json) Hash identifier: B3nATuPm4cnWrAwiScME3PmR7MzBatOuvrjRIfW3ocU= Subject key identifier: C0:11:13:A1:8B:50:57:E1:13:5C:7A:37:8B:DE:86:47:90:F7:8B:EC Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51 Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51 Certificate serial: 019B4926B4D9C06300592A332BDF3370A099 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft Manifest number: 0BF8 Signing time: Tue 23 Dec 2025 03:00:31 +0000 Manifest this update: Tue 23 Dec 2025 03:00:31 +0000 Manifest next update: Wed 24 Dec 2025 03:00:31 +0000 Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: kBSwO9e0L3DCdidHY9b1JE9kK6VXVHBrM19uG/4mugc=) 2: dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa (hash: s+UDqFCEg39f4gk9fs9ZUXaGmiKaVpMOQ/J8CYcOuY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:b4:d9:c0:63:00:59:2a:33:2b:df:33:70:a0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51 Validity Not Before: Dec 23 03:00:31 2025 GMT Not After : Dec 24 03:00:31 2025 GMT Subject: CN=c01113a18b5057e1135c7a378bde864790f78bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:6d:c8:68:3c:80:0f:c2:86:5c:b4:58:1f: f3:72:3a:bb:dc:c4:05:e2:4b:a7:03:13:d4:d9:d6: 4f:e0:6c:23:8e:eb:86:17:13:62:ba:0a:9c:9c:45: 17:10:9b:ed:bc:47:fc:be:9e:ce:49:e1:65:61:51: 45:1f:96:23:f6:5a:86:77:6b:df:f2:01:66:53:0a: 6a:83:73:26:41:11:3c:ff:51:e9:78:a5:c3:50:9c: a0:35:90:e3:b1:17:7d:a2:38:b3:08:f6:1c:21:74: 65:a8:11:1c:bd:a2:59:49:9f:0c:72:cd:99:37:05: 38:93:c1:c2:70:e3:94:90:ad:52:8e:3e:2c:c9:f3: a0:25:89:cc:83:12:94:e9:79:1d:32:b9:07:d1:3b: 96:4f:06:d9:7b:21:dd:11:31:be:79:2c:23:6b:78: b5:71:43:19:1e:2b:da:40:12:e4:bc:f8:e8:27:cc: da:24:22:45:5e:ce:78:2f:86:3e:93:fc:f9:f5:3c: 77:ba:f9:02:4a:34:11:45:6d:08:6b:84:9d:d5:ec: 54:51:41:15:aa:c1:45:b9:de:54:a7:e2:b3:da:c0: 05:d2:7a:3c:e6:e7:be:42:16:68:4b:fd:4d:b1:15: f5:1b:fa:b6:f9:bc:6a:46:52:9c:93:37:b3:e1:62: 14:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:11:13:A1:8B:50:57:E1:13:5C:7A:37:8B:DE:86:47:90:F7:8B:EC X509v3 Authority Key Identifier: keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:44:17:66:6e:80:f4:a4:88:05:8d:9c:8c:4b:66:08:16:b7: c6:66:61:cb:7a:90:d2:7e:36:16:78:36:d8:05:f2:a7:44:55: 31:f5:2f:e1:b8:82:e8:25:7b:d4:ae:8b:00:50:c3:72:58:67: 67:e0:8c:09:da:63:b1:27:59:9f:09:37:b5:1b:29:1f:cd:3c: 62:af:09:bf:f9:cc:ef:4b:b9:82:9d:9e:56:d7:be:bd:16:36: af:5e:40:58:0b:14:0f:34:46:38:4d:a1:68:f1:ca:97:cf:a8: 4f:7c:ee:f3:30:89:f3:1e:76:3f:e5:9e:8c:46:9a:a7:28:23: 15:07:63:9e:43:7e:0e:a5:f0:c3:e1:8f:69:3b:9d:79:4b:ff: 06:ac:f2:1d:ca:57:23:2f:2e:7f:5a:db:b4:49:fb:a2:c0:01: e0:c9:04:fe:98:1c:cb:50:8c:1e:05:56:4d:18:40:b6:34:46: 4d:93:a1:4b:c8:fd:5b:29:ea:ab:73:8a:43:d8:53:25:43:21: 80:a0:d2:c7:eb:91:37:5d:f8:03:93:e4:7a:9e:a5:09:ed:66: a5:7a:53:44:5e:52:8e:74:ea:b2:98:20:d2:18:34:9e:c5:11: f4:98:b8:66:56:af:7f:76:02:8f:4e:91:ab:db:13:64:d7:3d: f6:02:d7:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJrTZwGMAWSozK98zcKCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOWMzMDM5OWY2Mzg1NTVmNGMwMmU4ZDFiNTViYzkyNzIy NWNiNTEwHhcNMjUxMjIzMDMwMDMxWhcNMjUxMjI0MDMwMDMxWjAzMTEwLwYDVQQD EyhjMDExMTNhMThiNTA1N2UxMTM1YzdhMzc4YmRlODY0NzkwZjc4YmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXVtyGg8gA/Chly0WB/zcjq73MQF 4kunAxPU2dZP4GwjjuuGFxNiugqcnEUXEJvtvEf8vp7OSeFlYVFFH5Yj9lqGd2vf 8gFmUwpqg3MmQRE8/1HpeKXDUJygNZDjsRd9ojizCPYcIXRlqBEcvaJZSZ8Mcs2Z NwU4k8HCcOOUkK1Sjj4syfOgJYnMgxKU6XkdMrkH0TuWTwbZeyHdETG+eSwja3i1 cUMZHivaQBLkvPjoJ8zaJCJFXs54L4Y+k/z59Tx3uvkCSjQRRW0Ia4Sd1exUUUEV qsFFud5Up+Kz2sAF0no85ue+QhZoS/1NsRX1G/q2+bxqRlKckzez4WIUJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMARE6GLUFfhE1x6N4vehkeQ94vsMB8GA1UdIwQY MBaAFN2cMDmfY4VV9MAujRtVvJJyJctRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTIt MGU1MTQwNjJjNTkwLzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTItMGU1MTQwNjJjNTkw LzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwUQXZm6A 9KSIBY2cjEtmCBa3xmZhy3qQ0n42Fng22AXyp0RVMfUv4biC6CV71K6LAFDDclhn Z+CMCdpjsSdZnwk3tRspH808Yq8Jv/nM70u5gp2eVte+vRY2r15AWAsUDzRGOE2h aPHKl8+oT3zu8zCJ8x52P+WejEaapygjFQdjnkN+DqXww+GPaTudeUv/BqzyHcpX Iy8uf1rbtEn7osAB4MkE/pgcy1CMHgVWTRhAtjRGTZOhS8j9Wynqq3OKQ9hTJUMh gKDSx+uRN134A5Pkep6lCe1mpXpTRF5SjnTqspgg0hg0nsUR9Ji4Zlavf3YCj06R q9sTZNc99gLXPA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:09:24 2025 by rpki-client