This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json) Hash identifier: /2QE0FVcjFgx5xfzLgaUN5rx2SfSsxhsAZSQx9U72tc= Subject key identifier: 0D:79:EC:56:A6:31:91:CA:6F:C1:08:BD:2A:B4:13:9D:7D:F7:9B:47 Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7 Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7 Certificate serial: 019B4F60068B5A6D898DD327C88ADF38A947 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft Manifest number: 173E Signing time: Wed 24 Dec 2025 08:00:51 +0000 Manifest this update: Wed 24 Dec 2025 08:00:51 +0000 Manifest next update: Thu 25 Dec 2025 08:00:51 +0000 Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: LqQILITKt9Blp0Ph4kS7rZu7wawN9D/eSv/9oi1u/IA=) 2: 6BKOzeR_jkv8Td7naSCpGwK2cbo.roa (hash: NdsdWgq7FNtTGsjv+sGoOHpLX3rHnRlY3SsmvrWzKc4=) 3: gTmhFIzM7If-kzl01cWeEzcqqns.roa (hash: lUpkvjKsmC5D6MNw62q7fvgUR6asOsGbY3c+E0HzKW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:06:8b:5a:6d:89:8d:d3:27:c8:8a:df:38:a9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7 Validity Not Before: Dec 24 08:00:51 2025 GMT Not After : Dec 25 08:00:51 2025 GMT Subject: CN=0d79ec56a63191ca6fc108bd2ab4139d7df79b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:62:bc:ba:6c:83:ee:16:1c:e8:08:00:43:5a: 40:6d:23:6c:85:fa:e4:d5:fc:75:ec:f2:87:a7:6f: d1:cc:9d:10:f7:90:16:62:fa:2f:c1:56:8d:58:25: 9d:8a:87:dd:64:8f:a0:c5:22:cf:4e:25:22:1c:51: b3:93:c2:11:a6:a0:4d:0c:0d:19:7a:34:be:c1:59: 8f:65:b6:9e:24:87:4e:74:87:e0:02:66:5f:a1:ec: 5b:22:8f:37:40:41:9e:8a:fe:23:8a:29:30:3f:c2: 5b:54:87:e8:b5:f0:75:19:bd:65:06:04:94:c5:55: 01:51:08:5f:be:11:b3:9a:b5:09:d7:06:9b:68:ca: 3a:26:7a:b9:d0:36:ee:ad:3a:15:21:21:26:53:01: 6b:6e:d8:df:19:94:9a:fa:5a:61:68:d4:b1:73:fe: 50:24:0c:b9:9a:e1:b6:88:57:04:0c:29:38:d3:c7: 23:6d:ce:49:31:fd:b2:2a:4e:3a:90:9f:0c:dd:07: 57:9d:71:f7:74:d0:c5:82:67:c5:44:59:bc:38:e4: 7f:e8:f1:4b:7c:e0:70:04:5f:9e:bf:44:3d:4e:7d: 6e:9b:9d:f0:d4:21:23:21:59:54:0e:33:a5:4b:9b: 3c:f6:52:4b:64:5e:32:a6:2a:a8:26:a1:7c:18:05: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:79:EC:56:A6:31:91:CA:6F:C1:08:BD:2A:B4:13:9D:7D:F7:9B:47 X509v3 Authority Key Identifier: keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8a:67:62:45:28:20:7a:bd:37:b2:08:d1:b0:48:4b:f4:03: ea:aa:9e:89:59:24:5c:30:1f:ff:76:29:6f:a4:0f:10:55:26: 11:ec:17:d2:78:68:f8:b5:50:33:18:23:d7:17:64:e1:c1:24: fd:0e:5c:a6:35:f0:26:da:49:47:18:eb:9e:eb:1c:ca:c9:dc: d6:13:f9:19:f7:a7:a2:91:7b:df:1e:15:eb:4f:bf:56:8f:2c: 54:50:70:c1:69:9f:aa:af:94:e2:e9:db:d7:fc:10:69:dd:e6: e4:42:c9:aa:7b:4c:16:97:82:7f:80:09:a8:4e:04:b0:00:ac: 1c:fc:42:e3:39:bc:69:ee:10:24:43:85:15:76:7a:5c:36:ef: 84:62:a2:68:f6:2c:c3:62:ca:f4:30:77:05:87:f4:f6:11:2f: 2f:63:83:6e:1c:73:c9:8f:22:4f:e2:cb:b7:53:10:92:e4:bf: da:94:17:17:f3:d3:62:b7:2c:c8:f4:be:d2:cf:47:30:89:e3: 48:4b:41:d3:e4:bc:3d:6d:ac:79:e3:b4:09:a4:b0:de:68:ae: 37:d7:92:16:68:55:48:55:49:af:82:a2:dd:13:c9:be:bc:1c: da:89:cf:b5:30:08:54:a9:77:6e:7b:ee:2c:33:2b:f0:04:7a: 67:66:4c:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYAaLWm2JjdMnyIrfOKlHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTgyZjk3OWEyZDI1ZWJiMmRhYjI2NTRiOGMyN2M5Mjhj ZjVhYzcwHhcNMjUxMjI0MDgwMDUxWhcNMjUxMjI1MDgwMDUxWjAzMTEwLwYDVQQD EygwZDc5ZWM1NmE2MzE5MWNhNmZjMTA4YmQyYWI0MTM5ZDdkZjc5YjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GK8umyD7hYc6AgAQ1pAbSNshfrk 1fx17PKHp2/RzJ0Q95AWYvovwVaNWCWdiofdZI+gxSLPTiUiHFGzk8IRpqBNDA0Z ejS+wVmPZbaeJIdOdIfgAmZfoexbIo83QEGeiv4jiikwP8JbVIfotfB1Gb1lBgSU xVUBUQhfvhGzmrUJ1wabaMo6Jnq50DburToVISEmUwFrbtjfGZSa+lphaNSxc/5Q JAy5muG2iFcEDCk408cjbc5JMf2yKk46kJ8M3QdXnXH3dNDFgmfFRFm8OOR/6PFL fOBwBF+ev0Q9Tn1um53w1CEjIVlUDjOlS5s89lJLZF4ypiqoJqF8GAVD5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA157FamMZHKb8EIvSq0E51995tHMB8GA1UdIwQY MBaAFN2YL5eaLSXrstqyZUuMJ8koz1rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8zN2VhMTktNmYyNS00MmJjLWFkMjct OTg4NmNiMWI2NDBlLzEvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8zN2VhMTktNmYyNS00MmJjLWFkMjctOTg4NmNiMWI2NDBl LzEvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaopnYkUo IHq9N7II0bBIS/QD6qqeiVkkXDAf/3Ypb6QPEFUmEewX0nho+LVQMxgj1xdk4cEk /Q5cpjXwJtpJRxjrnuscysnc1hP5GfenopF73x4V60+/Vo8sVFBwwWmfqq+U4unb 1/wQad3m5ELJqntMFpeCf4AJqE4EsACsHPxC4zm8ae4QJEOFFXZ6XDbvhGKiaPYs w2LK9DB3BYf09hEvL2ODbhxzyY8iT+LLt1MQkuS/2pQXF/PTYrcsyPS+0s9HMInj SEtB0+S8PW2seeO0CaSw3miuN9eSFmhVSFVJr4Ki3RPJvrwc2onPtTAIVKl3bnvu LDMr8AR6Z2ZMvw== -----END CERTIFICATE-----Generated at Wed Dec 24 15:13:41 2025 by rpki-client