This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json) Hash identifier: qmE0xmk7QHFtF9hwoc2M6b8lFcGur/IkQu1Vdz2IVco= Subject key identifier: C0:65:81:8C:74:69:E2:07:09:E4:2B:50:FE:31:5A:FA:29:05:78:BD Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50 Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250 Certificate serial: 019B5ABFA1E47179C04FC567BB5C2AC41EB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft Manifest number: 0B15 Signing time: Fri 26 Dec 2025 13:01:06 +0000 Manifest this update: Fri 26 Dec 2025 13:01:06 +0000 Manifest next update: Sat 27 Dec 2025 13:01:06 +0000 Files and hashes: 1: 05EOtNo-Yw22y8nOEhjh34kR-xs.roa (hash: bx1cLzgI6GeSkKgZhlF0GUx8NZh0BLXhkqY0eigb2zc=) 2: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: CxqYTXO+7eGxocTC4RTBKEtSmqvz5j7gv2v68avbmDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:a1:e4:71:79:c0:4f:c5:67:bb:5c:2a:c4:1e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250 Validity Not Before: Dec 26 13:01:06 2025 GMT Not After : Dec 27 13:01:06 2025 GMT Subject: CN=c065818c7469e20709e42b50fe315afa290578bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e2:4c:06:2f:22:2e:f7:94:b3:9b:af:e9:a6: f9:01:27:21:7d:e6:9f:bd:8d:be:04:70:7e:eb:cf: ad:3e:24:0f:55:ac:94:06:7c:ca:bf:3c:c9:93:f2: 68:cf:07:c2:8c:d9:e1:48:12:7d:95:7b:79:89:0e: 21:f6:08:c5:1a:c7:6d:ae:03:49:92:ce:27:95:26: 5b:0a:f1:7f:33:61:64:32:10:6c:55:85:2c:6e:cd: 95:de:0d:fe:86:56:de:82:ac:34:13:5b:9b:7c:5e: e3:ae:74:58:e7:0e:79:22:58:37:af:d0:18:b2:89: 01:5b:81:09:37:39:4a:73:fc:a7:ce:fd:1a:85:25: 2a:f0:94:6c:58:b3:b6:eb:e5:e6:37:a5:ad:f9:90: fd:93:94:9f:eb:38:b9:f9:9e:e3:37:8f:a3:6a:73: f3:37:26:e1:45:6b:d4:40:ce:77:bb:93:6f:c1:47: 5f:ca:90:4b:68:07:19:f8:cc:05:bb:70:13:1a:97: 02:3c:bc:18:47:97:98:2d:7d:86:aa:a8:f5:b5:c7: 4a:e1:b2:f9:04:c1:20:fd:eb:6d:71:a5:b8:57:4c: 33:e6:71:e5:45:49:12:63:bf:a4:a4:84:d3:f3:03: fe:b5:6d:3a:33:2a:46:33:58:6c:0f:84:1d:b5:94: 04:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:65:81:8C:74:69:E2:07:09:E4:2B:50:FE:31:5A:FA:29:05:78:BD X509v3 Authority Key Identifier: keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4f:27:49:5e:af:97:cf:89:14:f3:bf:a1:96:c8:91:6f:cc: 97:76:56:4d:c2:81:7d:a4:9d:2c:17:ec:ef:35:03:47:0a:86: 6b:ab:f8:59:92:5f:75:0b:11:d0:ae:ca:81:ff:ee:f5:dc:4b: d8:c9:33:80:fd:6d:b7:32:e7:6c:51:d6:26:62:7d:cb:11:b4: 87:6d:c0:80:25:b6:ae:d2:d7:a1:13:e4:35:70:53:1b:bb:ad: fe:01:b3:df:ce:27:4b:b3:00:8c:59:ad:9a:b7:4a:68:c7:13: fa:dd:48:89:d7:e8:c7:37:c3:5d:6d:ac:9e:d0:65:18:4f:e6: 1a:48:0f:36:5a:db:ac:5c:58:2f:8a:a3:45:8f:05:5b:be:96: 52:80:8e:d1:eb:bc:ad:a6:9a:df:85:d0:ce:ae:e0:ad:aa:2b: 44:33:83:63:75:01:27:52:37:4a:6d:24:eb:5c:61:4b:43:a9: 0c:b5:31:84:6b:c0:87:53:99:d6:21:f6:00:e5:4e:ff:87:c2: 51:78:82:42:d8:bc:50:21:17:f6:6f:10:9d:55:cf:30:70:79: dd:8c:d2:ca:ae:17:a2:af:e9:08:66:db:86:f7:2f:a3:37:19: a4:31:45:df:b4:fc:fc:54:be:c2:ca:c5:89:af:b7:d9:25:0b: 31:33:fc:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav6HkcXnAT8Vnu1wqxB63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlY2JlZjM1MmNhYzcxYWQ1YmFlMGU4YjFjMDIyNDZlM2I2 NTAyNTAwHhcNMjUxMjI2MTMwMTA2WhcNMjUxMjI3MTMwMTA2WjAzMTEwLwYDVQQD EyhjMDY1ODE4Yzc0NjllMjA3MDllNDJiNTBmZTMxNWFmYTI5MDU3OGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieJMBi8iLveUs5uv6ab5ASchfeaf vY2+BHB+68+tPiQPVayUBnzKvzzJk/JozwfCjNnhSBJ9lXt5iQ4h9gjFGsdtrgNJ ks4nlSZbCvF/M2FkMhBsVYUsbs2V3g3+hlbegqw0E1ubfF7jrnRY5w55Ilg3r9AY sokBW4EJNzlKc/ynzv0ahSUq8JRsWLO26+XmN6Wt+ZD9k5Sf6zi5+Z7jN4+janPz NybhRWvUQM53u5NvwUdfypBLaAcZ+MwFu3ATGpcCPLwYR5eYLX2Gqqj1tcdK4bL5 BMEg/ettcaW4V0wz5nHlRUkSY7+kpITT8wP+tW06MypGM1hsD4QdtZQEtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBlgYx0aeIHCeQrUP4xWvopBXi9MB8GA1UdIwQY MBaAFN7L7zUsrHGtW64OixwCJG47ZQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWIt NTQxZjlmY2JhNzQyLzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWItNTQxZjlmY2JhNzQy LzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAak8nSV6v l8+JFPO/oZbIkW/Ml3ZWTcKBfaSdLBfs7zUDRwqGa6v4WZJfdQsR0K7Kgf/u9dxL 2MkzgP1ttzLnbFHWJmJ9yxG0h23AgCW2rtLXoRPkNXBTG7ut/gGz384nS7MAjFmt mrdKaMcT+t1IidfoxzfDXW2sntBlGE/mGkgPNlrbrFxYL4qjRY8FW76WUoCO0eu8 raaa34XQzq7graorRDODY3UBJ1I3Sm0k61xhS0OpDLUxhGvAh1OZ1iH2AOVO/4fC UXiCQti8UCEX9m8QnVXPMHB53YzSyq4Xoq/pCGbbhvcvozcZpDFF37T8/FS+wsrF ia+32SULMTP8Aw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:35 2025 by rpki-client