This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft File: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json) Hash identifier: vTu42XjVD8jUtFgH1JcRGsHdbx+QLoWRcNROL5HNRPY= Subject key identifier: 35:63:15:B9:1E:37:43:EA:5C:D8:96:18:16:40:27:55:3F:3D:C6:C6 Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Certificate serial: 019B2EFA92817EA6519B15DE1E153A2DACEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft Manifest number: 154C Signing time: Thu 18 Dec 2025 01:02:12 +0000 Manifest this update: Thu 18 Dec 2025 01:02:12 +0000 Manifest next update: Fri 19 Dec 2025 01:02:12 +0000 Files and hashes: 1: 29TbMLufIPxRE020kIvBxrijcXE.roa (hash: yaWCKyUE+f0tiisSqvZhHpxJTfa3UwVcLIOHWKNCXpA=) 2: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: 3dHraoq/tAydzAZFZvCFdW150q5elY0FFHqPBUINYQo=) 3: EpG6DN4aBjhttZAw1Q1XQqE7-1s.roa (hash: l6KmPb3Emr7cpoLQVZzViHX9jNPkSHPfBrkC7M4zEOg=) 4: bCHjuq-GwNDHZjsTd3pAyP2Si4w.roa (hash: M+Njn6Jry+REmQlQYvUz0vQnUhP0EbBt8o0lYes6W+o=) 5: hn5_PzzfTec18eIUGShu0x__N3w.roa (hash: +8CUvj+aURe4BOcdllxHMI3BGLO88+PbI/02n/kq4Ik=) 6: pYZCrMGmxkKgeeR3OB7Sabq_PhY.roa (hash: xXgcQpyaaoiy7n7zCgLujfBrckf/0cL3u4clvozeQMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:92:81:7e:a6:51:9b:15:de:1e:15:3a:2d:ac:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Validity Not Before: Dec 18 01:02:12 2025 GMT Not After : Dec 19 01:02:12 2025 GMT Subject: CN=356315b91e3743ea5cd89618164027553f3dc6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:65:c0:d8:1d:20:af:17:83:94:7b:04:a5: 11:b8:07:08:82:60:db:b9:95:fb:21:87:e5:62:ba: 99:93:4a:31:d1:2e:92:66:04:48:e3:66:d1:1b:0e: 17:4d:63:59:46:92:32:aa:cc:c5:e2:43:f7:cd:e3: 1f:d5:7f:b2:f1:ee:42:4c:1e:0e:48:d2:9d:06:11: ad:d4:a9:9e:03:fb:e6:dd:4f:58:77:35:f8:61:7e: 57:67:1d:77:84:e1:e5:f7:0f:25:35:eb:e0:f1:3e: a8:1a:64:da:e4:34:d7:5b:ca:fe:ee:05:a4:a1:a8: ab:54:16:7e:d2:20:de:40:eb:a6:45:04:3d:7c:fc: a6:00:a8:41:b9:94:d4:e7:f0:43:ff:f0:8d:06:69: cb:6a:8d:d5:e7:73:92:89:db:8c:31:fc:ac:95:f2: cf:da:f8:87:cc:dc:0b:5c:89:c0:ce:62:e0:9c:2a: b1:51:32:12:c6:54:d9:1c:82:cf:5a:5d:76:fd:18: e9:b6:9a:1b:3a:66:ad:15:14:4e:0c:17:90:9c:bc: 7f:74:f9:6f:e0:01:bd:f5:3d:56:07:a8:f2:b6:62: 19:a1:45:1d:f7:17:fc:d0:eb:4d:02:24:58:2e:78: 3c:29:6f:7e:4f:7d:c7:e7:05:1e:a6:c5:73:2d:16: 4f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:63:15:B9:1E:37:43:EA:5C:D8:96:18:16:40:27:55:3F:3D:C6:C6 X509v3 Authority Key Identifier: keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:1d:ca:fa:b4:93:a8:2f:b2:68:40:dc:2d:72:e9:ff:6d:3b: dd:00:51:e3:95:2f:fc:2e:2c:78:87:45:2f:5f:be:61:e0:ff: 3f:32:6f:8d:5c:c1:67:f0:a2:e8:fa:ab:61:59:c7:03:c7:6d: cc:13:24:46:6c:a6:69:15:bf:09:a9:3c:2f:7b:91:01:de:c7: d2:aa:d7:da:1a:60:ab:05:95:d8:81:10:f9:42:06:29:45:16: 5c:7f:7e:b6:bb:46:9f:a0:62:12:1e:93:dc:e3:3a:86:a4:f5: 9e:a2:23:c0:49:b3:20:b0:58:dd:6a:bc:2e:98:5b:ea:5c:0a: 63:45:11:0e:b8:7d:fa:b7:62:e3:68:fc:c3:72:9d:e0:ef:4e: d1:4f:74:85:d8:cf:07:7b:04:f7:68:50:9f:26:f7:0d:79:25: 5c:c2:8e:49:22:9c:8f:cf:e7:49:3b:af:f4:a6:84:78:92:64: d1:b0:7a:5d:7a:f9:6e:e4:89:cd:64:ad:75:b2:2c:e5:49:91: 7d:b9:5e:f5:da:62:17:85:0c:4b:b2:a1:cd:3e:00:90:ff:1f: 17:d7:1d:39:6b:3f:bc:29:54:8f:53:4b:02:d9:7b:45:cc:c7: 7a:18:cc:2a:ae:23:55:7e:93:ec:1f:6d:e9:e1:c2:e2:95:8d: 31:8f:cc:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+pKBfqZRmxXeHhU6LazqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl ZTQzYzAwHhcNMjUxMjE4MDEwMjEyWhcNMjUxMjE5MDEwMjEyWjAzMTEwLwYDVQQD EygzNTYzMTViOTFlMzc0M2VhNWNkODk2MTgxNjQwMjc1NTNmM2RjNmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3NlwNgdIK8Xg5R7BKURuAcIgmDb uZX7IYflYrqZk0ox0S6SZgRI42bRGw4XTWNZRpIyqszF4kP3zeMf1X+y8e5CTB4O SNKdBhGt1KmeA/vm3U9YdzX4YX5XZx13hOHl9w8lNevg8T6oGmTa5DTXW8r+7gWk oairVBZ+0iDeQOumRQQ9fPymAKhBuZTU5/BD//CNBmnLao3V53OSiduMMfyslfLP 2viHzNwLXInAzmLgnCqxUTISxlTZHILPWl12/RjptpobOmatFRRODBeQnLx/dPlv 4AG99T1WB6jytmIZoUUd9xf80OtNAiRYLng8KW9+T33H5wUepsVzLRZPQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVjFbkeN0PqXNiWGBZAJ1U/PcbGMB8GA1UdIwQY MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt OWM4ZTU5YzI3NzFjLzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkx3K+rST qC+yaEDcLXLp/2073QBR45Uv/C4seIdFL1++YeD/PzJvjVzBZ/Ci6PqrYVnHA8dt zBMkRmymaRW/Cak8L3uRAd7H0qrX2hpgqwWV2IEQ+UIGKUUWXH9+trtGn6BiEh6T 3OM6hqT1nqIjwEmzILBY3Wq8Lphb6lwKY0URDrh9+rdi42j8w3Kd4O9O0U90hdjP B3sE92hQnyb3DXklXMKOSSKcj8/nSTuv9KaEeJJk0bB6XXr5buSJzWStdbIs5UmR fble9dpiF4UMS7KhzT4AkP8fF9cdOWs/vClUj1NLAtl7RczHehjMKq4jVX6T7B9t 6eHC4pWNMY/MEg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:30:53 2025 by rpki-client