This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft File: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json) Hash identifier: eJQjHFESX40qs0RIzSpg+PaRTfSZ9TGDypcbnb7HTFw= Subject key identifier: 6A:18:33:FD:5D:CA:E7:7C:85:49:20:97:ED:7B:28:39:D5:EA:78:53 Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64 Certificate issuer: /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64 Certificate serial: 019B3C101DF2BFB8056895DDF82329639EA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft Manifest number: 134D Signing time: Sat 20 Dec 2025 14:00:47 +0000 Manifest this update: Sat 20 Dec 2025 14:00:47 +0000 Manifest next update: Sun 21 Dec 2025 14:00:47 +0000 Files and hashes: 1: TImGbHFcysH3yKCENp7I2KDKakw.roa (hash: wV738mzWH7BpaMNjeVJLX60iXYrXwr7zU2chvPIlwaE=) 2: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: 1SYfkCuDgx93EEAs1nugi4FctSXL20qWcyYehPOus9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:1d:f2:bf:b8:05:68:95:dd:f8:23:29:63:9e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64 Validity Not Before: Dec 20 14:00:47 2025 GMT Not After : Dec 21 14:00:47 2025 GMT Subject: CN=6a1833fd5dcae77c85492097ed7b2839d5ea7853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:48:1c:ce:49:69:d3:62:93:6e:14:d7:74:d9: 30:6c:4a:b0:92:84:c5:ac:a4:48:52:6f:e6:48:a2: b2:a1:53:ea:ab:19:64:f2:a2:d7:44:15:57:83:2e: 49:09:b3:76:4d:ad:ef:36:b9:63:b9:b4:56:26:4b: 9f:cb:bd:24:3b:9c:29:bd:16:c1:e8:91:44:b7:72: 83:2b:ce:05:46:16:79:c8:00:ae:a2:11:62:24:37: 7c:5f:ca:fa:27:b7:34:33:be:aa:a1:5a:ba:02:b2: a1:18:46:a7:46:9a:f5:0e:67:4d:73:f6:7b:1c:ab: c0:5c:47:35:bb:71:eb:05:67:53:8f:66:00:16:f5: b0:f0:90:c1:05:6c:22:88:dd:2a:ef:a1:8a:20:f7: 9f:ec:05:e9:f2:93:a9:c5:37:f2:af:84:b1:0b:f9: ab:30:4f:5a:52:a6:4d:ba:81:d3:72:d6:47:00:d1: b3:4f:de:b9:18:aa:a8:a4:24:02:c8:2d:ef:a1:35: 56:e6:ce:a7:1a:de:70:e6:99:ee:9d:ba:f1:09:50: 41:b8:53:7d:1f:21:1c:02:41:4a:fe:19:72:be:33: 8b:8f:1c:88:99:73:e4:6d:6a:ae:3a:59:d6:de:b8: c9:60:2e:b5:e8:5e:29:62:a4:7e:73:77:02:84:25: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:18:33:FD:5D:CA:E7:7C:85:49:20:97:ED:7B:28:39:D5:EA:78:53 X509v3 Authority Key Identifier: keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a6:7c:c5:7f:e8:48:40:57:fd:1a:19:81:42:d9:df:2f:b5: 73:c3:7f:90:3b:32:19:f9:3a:1a:48:ff:49:f2:96:63:89:29: 37:4f:69:fc:dc:60:b8:f7:36:bf:b6:4a:10:cf:bd:f9:62:61: 88:d2:17:87:4e:48:12:eb:e0:ce:f0:f5:be:a1:af:64:0d:d0: fa:f3:2e:bb:4e:f3:bf:4b:43:8a:2f:69:0c:76:11:f8:e0:f4: c6:4e:3c:f9:ed:b1:0c:86:c4:8b:c0:75:3a:22:e6:48:a7:32: bd:87:7a:6a:f8:6e:b1:fd:b9:b7:2d:4a:31:4b:90:7b:53:ab: bb:7f:2f:16:ae:41:2b:9b:f0:3d:7e:ae:b1:4d:1c:5a:39:22: 1c:fa:08:ca:0b:f5:2e:72:3e:86:21:c3:76:ea:08:2e:d4:c5: 4a:9c:aa:6b:cd:dd:b0:b6:27:35:60:38:cb:8e:4a:ca:ab:25: ad:94:63:33:5d:dd:da:e1:5b:81:5e:5d:a0:f2:3e:41:cb:57: cf:43:83:5c:70:7c:b1:a9:d0:f1:e8:08:56:57:4d:0a:16:29: c6:ec:17:fb:ff:5e:83:1c:fe:ac:94:02:3b:0f:17:ca:3a:4a: 2f:c2:10:c2:eb:3d:f0:46:8c:27:a6:4f:46:92:2e:49:f9:d1: 70:f1:ef:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EB3yv7gFaJXd+CMpY56kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkM2RkOGQzMmNmYzcxN2E2ZTY5MGViZTNlMWRiNDM4NmQ4 ZjZjNjQwHhcNMjUxMjIwMTQwMDQ3WhcNMjUxMjIxMTQwMDQ3WjAzMTEwLwYDVQQD Eyg2YTE4MzNmZDVkY2FlNzdjODU0OTIwOTdlZDdiMjgzOWQ1ZWE3ODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Egczklp02KTbhTXdNkwbEqwkoTF rKRIUm/mSKKyoVPqqxlk8qLXRBVXgy5JCbN2Ta3vNrljubRWJkufy70kO5wpvRbB 6JFEt3KDK84FRhZ5yACuohFiJDd8X8r6J7c0M76qoVq6ArKhGEanRpr1DmdNc/Z7 HKvAXEc1u3HrBWdTj2YAFvWw8JDBBWwiiN0q76GKIPef7AXp8pOpxTfyr4SxC/mr ME9aUqZNuoHTctZHANGzT965GKqopCQCyC3voTVW5s6nGt5w5pnunbrxCVBBuFN9 HyEcAkFK/hlyvjOLjxyImXPkbWquOlnW3rjJYC616F4pYqR+c3cChCWkoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoYM/1dyud8hUkgl+17KDnV6nhTMB8GA1UdIwQY MBaAFK092NMs/HF6bmkOvj4dtDhtj2xkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQt M2JjZDIzOTllZTY0LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQtM2JjZDIzOTllZTY0 LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaZ8xX/o SEBX/RoZgULZ3y+1c8N/kDsyGfk6Gkj/SfKWY4kpN09p/NxguPc2v7ZKEM+9+WJh iNIXh05IEuvgzvD1vqGvZA3Q+vMuu07zv0tDii9pDHYR+OD0xk48+e2xDIbEi8B1 OiLmSKcyvYd6avhusf25ty1KMUuQe1Oru38vFq5BK5vwPX6usU0cWjkiHPoIygv1 LnI+hiHDduoILtTFSpyqa83dsLYnNWA4y45KyqslrZRjM13d2uFbgV5doPI+QctX z0ODXHB8sanQ8egIVldNChYpxuwX+/9egxz+rJQCOw8XyjpKL8IQwus98EaMJ6ZP RpIuSfnRcPHvkw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:11:24 2025 by rpki-client