This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft File: 0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json) Hash identifier: dvK6Jf8E5rESOw2N/nvSoGI1MdToL0pBVJcxSja+B1Q= Subject key identifier: 05:64:75:8F:A1:8B:43:4D:B6:74:54:A7:A6:89:DF:7D:A0:F5:68:A5 Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Certificate serial: 019B5C08C77ACC029265ECAC70A1607CBB8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft Manifest number: 17A8 Signing time: Fri 26 Dec 2025 19:00:37 +0000 Manifest this update: Fri 26 Dec 2025 19:00:37 +0000 Manifest next update: Sat 27 Dec 2025 19:00:37 +0000 Files and hashes: 1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: cDFuyFF0zxiaj9741BCJ+/RL3JNnqYyMrjCAYdXr9Yo=) 2: JOdkDpvp0vkWhvJ9lV0dWUTL_74.roa (hash: Yn5hV+sSL6Zg2EJjKD6GZsY1cY5bsq3d8VKm7ARDueo=) 3: Mx0tomllVsmkxbnh1iU8_2PCyj0.roa (hash: 7kB7d7CTYtow392lbDCXYANcYe1E5mU3cWH2302D1Ck=) 4: TiEyxKmyiS65-0wzRPZF8VUxgEI.roa (hash: O61YlumzohkeBoQeKX9n1/69jzfPg7pNTilEHThyZVQ=) 5: UZGcM2ffX81NtAhfATE7LMKcmU0.roa (hash: IHojeJZnyEKNZzsFj36mgVJwIZkRWe7Nk65gWxDYXn0=) 6: gWauuati_t4mDyHK5P6-vGRw5tI.roa (hash: 8Gg051rcVEVxLbKS4zWCYakDmEwjk+i+o+ush3e3CSQ=) 7: rtkk5gT-jAJhBoaE_BQPXocOEfU.roa (hash: v/MP7pEa6ZGIvq0Wu6Fpus/nOHl8IEXjbt8QwhltqFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:08:c7:7a:cc:02:92:65:ec:ac:70:a1:60:7c:bb:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Validity Not Before: Dec 26 19:00:37 2025 GMT Not After : Dec 27 19:00:37 2025 GMT Subject: CN=0564758fa18b434db67454a7a689df7da0f568a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:81:5a:67:3c:aa:a5:27:5d:10:6d:12:07: 2c:78:01:6b:c4:e9:a6:a9:9b:f8:d6:39:ec:93:9d: b1:38:89:d9:7b:e2:24:e3:7c:06:51:06:3b:fe:c0: 6a:c5:84:0e:02:68:b5:91:ba:ff:2e:6e:f6:a4:b9: c1:04:52:0c:e1:98:e0:d7:c1:e4:47:ed:b1:85:8c: 1e:13:80:d2:e3:cd:37:ab:96:89:d9:44:7d:d2:d3: aa:ec:c4:ae:a2:0f:0b:fd:e5:a8:8f:36:ae:7a:e2: e0:8c:2c:87:dc:bc:19:65:e1:aa:c3:af:26:92:50: 3e:60:60:3c:00:2a:73:4c:1a:e3:36:cd:ed:a2:9a: da:27:78:24:b0:05:0e:f3:3b:8c:25:dc:62:36:25: 87:5e:04:fe:ae:fe:8b:f1:21:cb:c9:96:45:f6:7e: d9:1b:88:47:5d:a2:ee:00:5f:d6:dd:01:29:15:59: c3:b5:b4:f3:28:da:e9:13:cc:ce:6b:de:f7:b6:09: 68:64:66:fb:5f:4d:88:9b:59:be:04:79:fb:6a:f6: f8:0b:fb:fb:89:dc:2d:12:e5:be:be:6f:d4:c4:99: ce:b9:0e:1c:87:e1:64:61:67:ab:be:1f:a0:45:dc: c5:0d:7a:ab:66:16:82:f9:5b:d8:ef:54:bd:94:23: 94:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:64:75:8F:A1:8B:43:4D:B6:74:54:A7:A6:89:DF:7D:A0:F5:68:A5 X509v3 Authority Key Identifier: keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:10:ff:cf:f9:a8:33:a4:f8:cd:a5:40:1b:b9:23:f1:f4:76: fe:b0:90:4b:c1:f1:51:a2:67:31:f3:eb:d4:5c:cf:82:e4:fc: e7:e9:de:96:c3:28:9f:ba:ea:76:6a:01:e5:e1:15:89:64:3d: 31:98:0c:78:43:e1:fb:43:4f:ef:e9:01:6f:e5:fb:b5:b3:51: 00:96:09:90:33:c6:ec:f0:38:1f:50:0f:e5:0b:be:f9:d7:08: 4f:57:9e:53:91:ab:2a:eb:16:08:d6:3f:6a:24:c7:b4:56:bc: 50:d6:7b:fd:5c:06:22:ea:e6:31:d7:dc:57:72:eb:2e:12:be: 8d:d0:18:68:65:e5:e2:21:e4:7f:e1:0e:cd:4a:66:ad:24:41: 0c:97:8e:a5:d7:a3:75:f4:be:ae:30:5d:ce:ae:c1:d2:ff:aa: 6a:b9:e6:ac:7d:15:2f:74:64:32:08:36:7d:92:f3:5f:2e:ac: 27:d0:23:c7:e9:46:08:8d:75:4f:a2:db:34:e1:f5:ba:3f:64: 1d:42:94:56:bc:89:d9:9a:7e:3b:dc:68:c6:16:02:4c:39:18: b7:14:a1:e3:e2:26:d8:97:94:21:03:0c:31:fd:d5:d6:c5:76: 42:6b:ef:b9:39:56:96:67:c5:f9:99:5c:5c:29:50:35:58:65: 57:3e:e3:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCMd6zAKSZeyscKFgfLuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMWRkMWE1MTRkM2E3ZTNkZmRiOGJmYjc1ZDdkMjRlZDk4 ZDQ3OWYwHhcNMjUxMjI2MTkwMDM3WhcNMjUxMjI3MTkwMDM3WjAzMTEwLwYDVQQD EygwNTY0NzU4ZmExOGI0MzRkYjY3NDU0YTdhNjg5ZGY3ZGEwZjU2OGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjqBWmc8qqUnXRBtEgcseAFrxOmm qZv41jnsk52xOInZe+Ik43wGUQY7/sBqxYQOAmi1kbr/Lm72pLnBBFIM4Zjg18Hk R+2xhYweE4DS4803q5aJ2UR90tOq7MSuog8L/eWojzaueuLgjCyH3LwZZeGqw68m klA+YGA8ACpzTBrjNs3topraJ3gksAUO8zuMJdxiNiWHXgT+rv6L8SHLyZZF9n7Z G4hHXaLuAF/W3QEpFVnDtbTzKNrpE8zOa973tgloZGb7X02Im1m+BHn7avb4C/v7 idwtEuW+vm/UxJnOuQ4ch+FkYWervh+gRdzFDXqrZhaC+VvY71S9lCOUDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVkdY+hi0NNtnRUp6aJ332g9WilMB8GA1UdIwQY MBaAFNMd0aUU06fj39uL+3XX0k7ZjUefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjIt YjE2NmFlMmVmMjg3LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjItYjE2NmFlMmVmMjg3 LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRD/z/mo M6T4zaVAG7kj8fR2/rCQS8HxUaJnMfPr1FzPguT85+nelsMon7rqdmoB5eEViWQ9 MZgMeEPh+0NP7+kBb+X7tbNRAJYJkDPG7PA4H1AP5Qu++dcIT1eeU5GrKusWCNY/ aiTHtFa8UNZ7/VwGIurmMdfcV3LrLhK+jdAYaGXl4iHkf+EOzUpmrSRBDJeOpdej dfS+rjBdzq7B0v+qarnmrH0VL3RkMgg2fZLzXy6sJ9Ajx+lGCI11T6LbNOH1uj9k HUKUVryJ2Zp+O9xoxhYCTDkYtxSh4+Im2JeUIQMMMf3V1sV2QmvvuTlWlmfF+Zlc XClQNVhlVz7jHA== -----END CERTIFICATE-----Generated at Fri Dec 26 21:08:57 2025 by rpki-client