This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft File: 3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json) Hash identifier: VIsLYTG0zCZXbVJKjjsBVLmjJRNdJWKWvkn/O8BTjx4= Subject key identifier: AE:1A:E0:04:B3:FC:E0:9A:C5:93:C0:BB:62:D9:A5:B2:33:F1:94:A1 Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7 Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7 Certificate serial: 019B2C9D5FCD4A1F197AAE1CFDCC42B32F21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft Manifest number: 0479 Signing time: Wed 17 Dec 2025 14:01:09 +0000 Manifest this update: Wed 17 Dec 2025 14:01:09 +0000 Manifest next update: Thu 18 Dec 2025 14:01:09 +0000 Files and hashes: 1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: p2brlFD6RUxcu40J/taYCYlxbSEOgRuEphbQOlkZrA8=) 2: hjp9r4jkfdcWh8tb4IbJ8JLqvhg.roa (hash: rpnDBu2YggoyGIw/C4Ub9AMkAXEhq0st1VH7UXhjugk=) 3: oyehTC9fC3RxVNTxQ-3Nace4xCo.roa (hash: 6amsBM8Jkzid3Hbf3NCrvWV5lgaxarQNmZ7omOl4H1Y=) 4: tWWoO6Q9xW9qzxs1LTkk9o7qkwc.roa (hash: dIS2lAatvIYTUHXvxYqBBEq9rurmrnQiuE0cglSeBdY=) 5: zdvIB-MX7mBXxPXY9Gvkyg4DaIA.roa (hash: JzeLYwYOJtUYF4eEhrs8y3e0iaiCpHB7RqKZXjFT6qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:5f:cd:4a:1f:19:7a:ae:1c:fd:cc:42:b3:2f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7 Validity Not Before: Dec 17 14:01:09 2025 GMT Not After : Dec 18 14:01:09 2025 GMT Subject: CN=ae1ae004b3fce09ac593c0bb62d9a5b233f194a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:d3:89:dc:db:96:3c:33:e6:f5:5a:3e:ae: 8b:b7:8b:54:50:1d:52:8a:be:66:21:c7:47:30:58: c7:29:1f:90:0e:46:f1:dc:74:9a:0f:83:a7:39:44: 27:1d:82:f7:d6:e7:fa:42:ed:9e:4e:c0:12:b1:ef: 09:b4:58:35:e3:15:7d:67:46:60:12:cd:aa:25:ec: 1b:4b:87:4b:c3:de:06:cd:c4:53:88:14:03:93:97: fc:3f:3e:d4:00:1c:70:7e:b5:1c:da:6c:aa:3f:46: 04:8a:1c:bd:12:08:dc:74:0b:ec:15:bf:68:13:fa: fa:56:7c:06:34:87:a1:fa:77:3b:18:b7:20:a6:04: d3:21:4a:7a:47:26:41:5a:94:16:11:79:bf:2f:4c: b8:33:b7:b6:07:be:8a:15:8b:e4:e0:6e:b3:ed:3d: c7:9c:27:9e:c0:1c:05:65:4b:46:39:a0:3d:82:79: 26:64:f7:d4:0e:09:70:9c:78:76:1e:34:1d:75:f0: 25:00:8d:a2:46:ed:6a:4e:b8:be:0d:29:0b:b8:bc: 89:0e:91:3c:20:27:2f:01:c0:4c:88:ab:7c:14:9b: 93:d0:4c:68:8d:9b:1c:ab:ab:c2:a0:fb:86:1a:6d: e4:5a:de:ca:3c:63:a2:b6:a8:a1:6f:82:52:54:0d: 51:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1A:E0:04:B3:FC:E0:9A:C5:93:C0:BB:62:D9:A5:B2:33:F1:94:A1 X509v3 Authority Key Identifier: keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:37:b5:00:7b:31:4b:38:87:c0:19:ed:85:ea:b9:8c:ec:6d: 70:33:f7:6a:16:5e:92:4c:2f:4d:4c:b2:6c:3c:14:00:22:0c: bd:98:e9:db:3a:16:48:85:47:0e:bc:50:31:08:20:60:f4:0b: 2c:6c:d2:e6:06:a5:58:ce:3b:0f:64:ae:46:1a:2e:94:44:c6: 2f:9e:c3:87:52:a8:c1:ef:42:1e:ba:60:45:86:5d:0d:9e:dc: c4:6b:5a:61:08:1e:93:a2:05:fa:c3:2f:1c:0c:e4:63:09:16: 09:3f:a0:51:ab:e2:0b:33:b3:18:d6:0e:62:5c:af:a6:3b:eb: d0:b9:0a:ff:e6:f9:ba:b0:05:ca:04:c8:8c:f6:59:17:97:1c: 25:0e:11:f7:69:74:47:66:35:b4:e8:02:db:37:16:26:c5:0a: e8:5a:5b:02:39:16:53:12:09:cc:9d:e6:43:75:c7:4b:0c:26: ca:47:9e:2d:ec:d8:5e:b1:2a:26:37:16:db:2b:6f:00:c9:ac: b1:29:f1:ba:da:9f:86:78:5f:1c:40:a4:13:5a:93:7a:11:07: 7e:6f:bb:1c:75:b9:85:cc:74:e7:f2:c6:37:8e:2e:7a:52:f4: 0e:f5:c1:ae:5d:9d:95:94:fb:ef:0c:03:03:64:fb:29:0b:2f: 23:55:fe:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnV/NSh8Zeq4c/cxCsy8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMTU4YTBkYTAzMjY2ZGYxNDRjODlhN2I2ZTM1YTc2MWM0 OTk4ZjcwHhcNMjUxMjE3MTQwMTA5WhcNMjUxMjE4MTQwMTA5WjAzMTEwLwYDVQQD EyhhZTFhZTAwNGIzZmNlMDlhYzU5M2MwYmI2MmQ5YTViMjMzZjE5NGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhjTidzbljwz5vVaPq6Lt4tUUB1S ir5mIcdHMFjHKR+QDkbx3HSaD4OnOUQnHYL31uf6Qu2eTsASse8JtFg14xV9Z0Zg Es2qJewbS4dLw94GzcRTiBQDk5f8Pz7UABxwfrUc2myqP0YEihy9EgjcdAvsFb9o E/r6VnwGNIeh+nc7GLcgpgTTIUp6RyZBWpQWEXm/L0y4M7e2B76KFYvk4G6z7T3H nCeewBwFZUtGOaA9gnkmZPfUDglwnHh2HjQddfAlAI2iRu1qTri+DSkLuLyJDpE8 ICcvAcBMiKt8FJuT0ExojZscq6vCoPuGGm3kWt7KPGOitqihb4JSVA1R0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4a4ASz/OCaxZPAu2LZpbIz8ZShMB8GA1UdIwQY MBaAFN0Vig2gMmbfFEyJp7bjWnYcSZj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAt ZThmMjBhYWRkZTk5LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAtZThmMjBhYWRkZTk5 LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDe1AHsx SziHwBntheq5jOxtcDP3ahZekkwvTUyybDwUACIMvZjp2zoWSIVHDrxQMQggYPQL LGzS5galWM47D2SuRhoulETGL57Dh1Kowe9CHrpgRYZdDZ7cxGtaYQgek6IF+sMv HAzkYwkWCT+gUaviCzOzGNYOYlyvpjvr0LkK/+b5urAFygTIjPZZF5ccJQ4R92l0 R2Y1tOgC2zcWJsUK6FpbAjkWUxIJzJ3mQ3XHSwwmykeeLezYXrEqJjcW2ytvAMms sSnxutqfhnhfHECkE1qTehEHfm+7HHW5hcx05/LGN44uelL0DvXBrl2dlZT77wwD A2T7KQsvI1X+BA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:52 2025 by rpki-client