This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json) Hash identifier: BaQR0L4HCi1OiaXFIcj/dyKHITlU2XPNexwLPEW8BlM= Subject key identifier: 6F:59:5F:2D:4E:52:30:EF:6A:47:A0:20:12:21:A2:1D:E1:E9:9A:B1 Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82 Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82 Certificate serial: 019B142693BABF7A44F6C88E357136F1E126 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft Manifest number: 1778 Signing time: Fri 12 Dec 2025 20:00:30 +0000 Manifest this update: Fri 12 Dec 2025 20:00:30 +0000 Manifest next update: Sat 13 Dec 2025 20:00:30 +0000 Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: ov5cxjXHlZM7RVbNB6KumYwiPUczmA7d/jK/AGoAxkU=) 2: CgFc8x26QM3VY1KiLgccdsxhrXo.roa (hash: P9EWdQX/EOCp7WZ5gfsQmoM4qU0udbuMuOqDFw597IY=) 3: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:26:93:ba:bf:7a:44:f6:c8:8e:35:71:36:f1:e1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82 Validity Not Before: Dec 12 20:00:30 2025 GMT Not After : Dec 13 20:00:30 2025 GMT Subject: CN=6f595f2d4e5230ef6a47a0201221a21de1e99ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:27:30:d1:2a:ec:db:bf:3e:ff:2c:f1:8d: 7f:39:1d:9c:3c:32:95:4e:00:a2:7d:c3:e2:e4:8e: 09:e4:3e:8f:19:f3:d3:08:80:b9:e7:a8:9c:4d:ba: d6:34:24:70:47:28:5d:09:ac:6b:2d:98:6a:2d:dc: 33:c4:55:d0:a8:28:85:ae:29:2a:e1:7c:08:e1:68: 28:85:18:0e:8e:31:6c:04:f4:b9:ea:7d:b6:cb:c9: 64:b3:ed:d8:b3:8d:8f:49:53:ec:3b:ff:ee:7f:e4: 09:8e:7a:35:fa:62:e8:b2:98:3c:48:9e:b1:c7:1a: cd:03:d0:73:f5:14:3e:54:d2:82:f0:f0:96:a8:22: b9:2c:ee:cf:fa:6f:d9:67:26:dd:47:cc:6e:d0:f5: 2a:f4:86:cd:40:5f:42:d0:5f:0f:ec:30:88:87:88: 90:d5:da:28:2a:5f:ca:60:e0:55:8c:ac:81:d3:9a: d6:0d:98:67:fb:cf:d8:96:14:35:92:80:c0:b6:8c: d1:ee:37:6a:ed:2c:d3:c2:50:aa:e7:28:58:e4:26: e4:a8:1a:80:8b:53:52:31:a2:22:1a:43:88:2c:dd: 11:ec:1e:4d:a1:9f:05:a2:c7:19:29:d4:3f:9a:45: e1:08:63:ec:9c:1c:40:15:4a:81:99:a9:71:02:f0: 49:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:59:5F:2D:4E:52:30:EF:6A:47:A0:20:12:21:A2:1D:E1:E9:9A:B1 X509v3 Authority Key Identifier: keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:13:bc:44:d3:fb:3f:a0:91:26:2e:92:21:ce:59:c0:c6:02: a9:3e:2f:40:c0:8a:b0:37:f5:e6:89:24:2b:24:d0:90:17:28: 5a:06:98:33:29:d0:b0:98:d3:90:89:c3:b7:0f:65:b6:57:cb: 82:58:c6:ab:35:c3:b3:95:b4:c2:aa:4c:d1:d5:65:c4:e5:aa: ab:62:62:2a:18:5c:e7:d0:77:db:d5:17:c4:1f:5d:3d:b8:ab: 47:bb:ee:6e:f9:7b:b7:ae:44:08:98:1e:50:ca:0f:13:02:6b: 88:82:d6:9c:bf:42:f5:40:8a:4c:bb:b3:12:f9:30:ce:76:05: e9:b2:51:60:f6:6f:74:26:0f:26:47:63:12:e3:3f:86:35:cf: ef:40:90:11:ea:db:e4:6e:0d:61:b1:a3:53:c3:9f:9f:26:80: 44:2b:94:a6:73:96:38:55:09:7e:ad:25:c0:72:e2:00:91:af: b8:fa:a7:35:49:8f:89:cd:e4:49:b7:ee:c4:e4:5c:38:73:e2: c8:03:68:4c:c9:fc:ae:6a:43:a0:4a:b4:79:17:51:a9:41:e2: fb:6c:b2:86:75:3a:80:d5:52:ed:4d:42:56:76:cd:28:8d:23: b0:7f:45:64:29:69:57:8e:89:03:a8:7c:7c:df:87:59:0a:4d: f9:74:67:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsUJpO6v3pE9siONXE28eEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMGJhNGY1NmU2ZjAzNzcyNTI4NjAzN2FmYzNjMTRjMjkz YjliODIwHhcNMjUxMjEyMjAwMDMwWhcNMjUxMjEzMjAwMDMwWjAzMTEwLwYDVQQD Eyg2ZjU5NWYyZDRlNTIzMGVmNmE0N2EwMjAxMjIxYTIxZGUxZTk5YWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlEnMNEq7Nu/Pv8s8Y1/OR2cPDKV TgCifcPi5I4J5D6PGfPTCIC556icTbrWNCRwRyhdCaxrLZhqLdwzxFXQqCiFrikq 4XwI4WgohRgOjjFsBPS56n22y8lks+3Ys42PSVPsO//uf+QJjno1+mLospg8SJ6x xxrNA9Bz9RQ+VNKC8PCWqCK5LO7P+m/ZZybdR8xu0PUq9IbNQF9C0F8P7DCIh4iQ 1dooKl/KYOBVjKyB05rWDZhn+8/YlhQ1koDAtozR7jdq7SzTwlCq5yhY5CbkqBqA i1NSMaIiGkOILN0R7B5NoZ8FoscZKdQ/mkXhCGPsnBxAFUqBmalxAvBJ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9ZXy1OUjDvakegIBIhoh3h6ZqxMB8GA1UdIwQY MBaAFN8LpPVubwN3JShgN6/DwUwpO5uCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTIt MzZjNjc4OTAwZjc5LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTItMzZjNjc4OTAwZjc5 LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxO8RNP7 P6CRJi6SIc5ZwMYCqT4vQMCKsDf15okkKyTQkBcoWgaYMynQsJjTkInDtw9ltlfL gljGqzXDs5W0wqpM0dVlxOWqq2JiKhhc59B329UXxB9dPbirR7vubvl7t65ECJge UMoPEwJriILWnL9C9UCKTLuzEvkwznYF6bJRYPZvdCYPJkdjEuM/hjXP70CQEerb 5G4NYbGjU8OfnyaARCuUpnOWOFUJfq0lwHLiAJGvuPqnNUmPic3kSbfuxORcOHPi yANoTMn8rmpDoEq0eRdRqUHi+2yyhnU6gNVS7U1CVnbNKI0jsH9FZClpV46JA6h8 fN+HWQpN+XRnMg== -----END CERTIFICATE-----Generated at Sat Dec 13 01:57:03 2025 by rpki-client