This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft File: 3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json) Hash identifier: FSv+n6ct62n/QnV6XgM7wFJdAOg8m/cx2NKqrsFMDFU= Subject key identifier: DF:A5:32:A1:5B:FB:26:D8:FF:F3:1A:C0:53:0F:94:E4:42:02:47:1E Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7 Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7 Certificate serial: 019B0FA58CBCA8888DA4701ED015A2B8A36A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft Manifest number: 046A Signing time: Thu 11 Dec 2025 23:01:06 +0000 Manifest this update: Thu 11 Dec 2025 23:01:06 +0000 Manifest next update: Fri 12 Dec 2025 23:01:06 +0000 Files and hashes: 1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: SCEmy+3m9jUYSgP7iNmd+xbnleuTjZ5LGAdzVMdRw+8=) 2: hjp9r4jkfdcWh8tb4IbJ8JLqvhg.roa (hash: rpnDBu2YggoyGIw/C4Ub9AMkAXEhq0st1VH7UXhjugk=) 3: oyehTC9fC3RxVNTxQ-3Nace4xCo.roa (hash: 6amsBM8Jkzid3Hbf3NCrvWV5lgaxarQNmZ7omOl4H1Y=) 4: tWWoO6Q9xW9qzxs1LTkk9o7qkwc.roa (hash: dIS2lAatvIYTUHXvxYqBBEq9rurmrnQiuE0cglSeBdY=) 5: zdvIB-MX7mBXxPXY9Gvkyg4DaIA.roa (hash: JzeLYwYOJtUYF4eEhrs8y3e0iaiCpHB7RqKZXjFT6qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:8c:bc:a8:88:8d:a4:70:1e:d0:15:a2:b8:a3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7 Validity Not Before: Dec 11 23:01:06 2025 GMT Not After : Dec 12 23:01:06 2025 GMT Subject: CN=dfa532a15bfb26d8fff31ac0530f94e44202471e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:48:a4:4f:ab:84:f2:3f:74:06:eb:3e:69: da:c2:18:74:13:b1:40:6c:af:bb:72:fb:69:01:d1: b6:80:73:66:54:a4:cc:15:09:12:4e:1c:27:1f:8b: cd:a9:3a:f8:ce:4b:21:38:16:0a:db:d4:c1:90:25: 49:02:e7:ee:69:db:f7:bc:8b:f3:54:65:cc:6b:0d: 36:40:fc:ae:10:6c:55:d6:0f:48:7b:60:f9:5f:7d: fc:10:30:8a:32:9b:3c:1a:dd:70:b7:42:41:fe:51: 48:7a:87:10:f6:5c:2f:ca:54:8a:84:7d:c7:91:81: b1:cf:3e:6f:05:89:b1:e4:16:29:73:20:ca:34:e6: 11:c7:be:64:c3:fa:1c:e8:3a:0d:d5:ad:12:84:dc: 45:a8:36:e1:9d:f0:09:96:61:96:c2:46:29:87:5c: 46:d8:e2:db:fb:2c:65:8b:8b:cb:21:03:5f:89:57: de:16:7f:5c:c2:b1:77:91:6a:e8:1a:94:56:6e:23: d1:dd:75:2b:a0:2f:fb:cc:4a:83:8d:d9:07:ee:53: 8a:1b:a4:b1:7c:06:04:37:36:c9:75:0c:71:00:7c: d8:0a:8b:cb:2d:34:be:3e:43:3d:49:b0:36:b4:f2: 63:1b:9f:4a:0e:ab:1a:d2:4b:23:9f:47:f2:d0:be: e3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A5:32:A1:5B:FB:26:D8:FF:F3:1A:C0:53:0F:94:E4:42:02:47:1E X509v3 Authority Key Identifier: keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:31:43:a7:de:b1:4c:ee:2f:51:17:1b:ee:00:42:5d:c3:37: 00:c2:c0:e9:f1:82:d0:f8:c9:c4:82:eb:d5:da:44:24:56:a2: cb:a8:7c:f0:f8:e7:ce:b3:40:53:3e:ce:de:b9:23:49:f3:91: 09:25:7d:ca:8b:9e:32:f3:ec:d0:47:f1:f8:7e:a0:4e:f5:60: a9:16:37:ca:d7:77:1f:32:f2:39:52:ec:97:43:0a:d6:4c:64: 15:ed:8a:6d:b1:ac:96:53:0f:aa:00:66:30:24:72:b5:8b:bf: a3:bd:e3:55:bd:aa:5c:ff:82:6a:92:65:3d:3b:7f:da:6e:42: 1e:ba:63:3d:5e:68:f2:4c:a3:38:0b:5b:5d:05:b7:2f:8f:a9: b1:53:ca:92:8b:2a:7b:d4:60:1e:4b:1b:a2:85:9a:a8:7a:6b: 4e:28:cc:5e:b8:13:e6:cc:c6:5c:fd:f0:78:cf:d8:fb:94:b8: 0c:13:2e:b3:cb:2b:69:8d:cf:8b:af:68:cb:b1:4e:bd:9e:08: 59:48:71:04:83:85:be:bc:d6:2f:79:c0:83:51:7d:4a:e8:e5: 1c:a4:8a:c7:cd:5f:3b:78:42:80:0c:4c:3a:75:99:2a:75:d0: ed:56:b1:a0:2d:87:89:c6:05:0d:fb:bc:a1:72:b5:2d:6b:8c: f8:e3:37:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpYy8qIiNpHAe0BWiuKNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMTU4YTBkYTAzMjY2ZGYxNDRjODlhN2I2ZTM1YTc2MWM0 OTk4ZjcwHhcNMjUxMjExMjMwMTA2WhcNMjUxMjEyMjMwMTA2WjAzMTEwLwYDVQQD EyhkZmE1MzJhMTViZmIyNmQ4ZmZmMzFhYzA1MzBmOTRlNDQyMDI0NzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso5IpE+rhPI/dAbrPmnawhh0E7FA bK+7cvtpAdG2gHNmVKTMFQkSThwnH4vNqTr4zkshOBYK29TBkCVJAufuadv3vIvz VGXMaw02QPyuEGxV1g9Ie2D5X338EDCKMps8Gt1wt0JB/lFIeocQ9lwvylSKhH3H kYGxzz5vBYmx5BYpcyDKNOYRx75kw/oc6DoN1a0ShNxFqDbhnfAJlmGWwkYph1xG 2OLb+yxli4vLIQNfiVfeFn9cwrF3kWroGpRWbiPR3XUroC/7zEqDjdkH7lOKG6Sx fAYENzbJdQxxAHzYCovLLTS+PkM9SbA2tPJjG59KDqsa0ksjn0fy0L7jCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+lMqFb+ybY//MawFMPlORCAkceMB8GA1UdIwQY MBaAFN0Vig2gMmbfFEyJp7bjWnYcSZj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAt ZThmMjBhYWRkZTk5LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAtZThmMjBhYWRkZTk5 LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzFDp96x TO4vURcb7gBCXcM3AMLA6fGC0PjJxILr1dpEJFaiy6h88PjnzrNAUz7O3rkjSfOR CSV9youeMvPs0Efx+H6gTvVgqRY3ytd3HzLyOVLsl0MK1kxkFe2KbbGsllMPqgBm MCRytYu/o73jVb2qXP+CapJlPTt/2m5CHrpjPV5o8kyjOAtbXQW3L4+psVPKkosq e9RgHksbooWaqHprTijMXrgT5szGXP3weM/Y+5S4DBMus8sraY3Pi69oy7FOvZ4I WUhxBIOFvrzWL3nAg1F9SujlHKSKx81fO3hCgAxMOnWZKnXQ7VaxoC2HicYFDfu8 oXK1LWuM+OM3jQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:33:29 2025 by rpki-client