This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json) Hash identifier: jltNV4R1R7wMMbIM0AuRpkpFa3JWDlAlfD+u4xKEh6Q= Subject key identifier: A1:D2:70:39:C1:33:73:2E:8C:A0:F9:50:C9:DD:2C:9A:EF:66:AF:B4 Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06 Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06 Certificate serial: 019B597649D730D9B4CA59ADA99C488973FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft Manifest number: 0ED1 Signing time: Fri 26 Dec 2025 07:01:22 +0000 Manifest this update: Fri 26 Dec 2025 07:01:22 +0000 Manifest next update: Sat 27 Dec 2025 07:01:22 +0000 Files and hashes: 1: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (hash: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=) 2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: UT5mbrtJuGBA4KYm7HIBHDnpwz1GFqMyaqtqg2F4hUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:49:d7:30:d9:b4:ca:59:ad:a9:9c:48:89:73:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06 Validity Not Before: Dec 26 07:01:22 2025 GMT Not After : Dec 27 07:01:22 2025 GMT Subject: CN=a1d27039c133732e8ca0f950c9dd2c9aef66afb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:37:69:73:0f:f7:ce:9c:05:95:1e:80:01: bd:6e:9b:4a:aa:56:f5:b6:2a:05:0d:cd:53:2a:d8: 0a:a2:e5:ed:51:27:d4:27:65:73:48:d8:2f:71:39: 01:3d:76:f7:c7:78:67:6f:c9:89:53:e4:c5:e2:e4: 2e:1f:d6:8d:92:e9:b2:dc:5e:fb:24:a0:69:68:6f: 49:ac:4d:54:60:9d:90:05:aa:bc:3d:fa:1d:7d:d5: 3a:26:1d:5d:39:a4:dd:52:75:95:be:5b:7a:5b:00: de:4a:d4:e8:a7:df:5c:75:b7:bd:90:c9:c2:ec:be: f5:64:8f:dc:e2:a2:c9:7b:b5:72:ef:7e:2a:b0:78: ce:5a:75:f7:c4:74:1a:e4:91:1c:86:80:1a:15:00: fe:55:ed:7f:a6:72:ad:2d:24:ba:82:5e:f7:d7:e7: 3e:4b:d7:55:10:4d:7e:49:5e:8b:51:6d:3b:2b:e0: 7e:12:90:af:40:bb:d8:68:4a:a2:e7:05:ae:49:90: c1:0f:37:db:90:20:07:83:aa:17:e2:e0:bc:43:1d: db:53:d7:89:93:4d:fd:5f:98:0f:15:4e:c9:2e:e4: 31:6a:2c:fc:9e:27:49:22:57:12:96:34:25:e8:e9: 0c:cb:da:95:bb:1c:e1:7b:2b:93:c9:86:b8:7d:44: b8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D2:70:39:C1:33:73:2E:8C:A0:F9:50:C9:DD:2C:9A:EF:66:AF:B4 X509v3 Authority Key Identifier: keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:4d:98:aa:41:90:d1:b2:5d:ce:90:d5:25:fa:fe:37:a3:23: 8b:62:f7:c3:7a:1e:33:28:c9:8b:89:56:a9:82:3d:c7:f6:97: 73:b5:dc:2c:45:c7:ad:48:e7:ff:96:8e:d4:e3:23:f0:84:3f: fb:4a:b3:2e:9b:e2:84:1d:9a:38:68:06:f1:e6:2e:38:a2:ef: be:dd:1c:24:61:2b:a2:0d:21:07:0d:8a:a0:45:40:e3:1e:5e: 63:1b:f8:d5:70:0e:05:30:de:c8:d9:a0:e0:31:36:d9:89:02: cb:c3:9c:4b:c4:94:11:55:e7:95:ce:61:0e:3f:95:9d:34:2a: 79:49:73:82:f5:d6:fd:b7:81:1d:cc:1b:c9:bf:af:ee:b4:39: a0:f3:bb:75:77:08:d5:cb:6b:c9:1e:68:e5:72:ab:1f:eb:af: 23:c1:e5:17:6e:05:27:ba:b0:90:f2:38:a7:58:17:86:24:5d: b2:c8:7e:1f:bd:5c:28:ae:eb:ab:a8:a3:e8:0c:d0:12:8d:d8: 50:82:95:cb:ec:21:06:a2:39:94:5e:fa:96:eb:a5:af:06:94: cf:d0:ae:ab:78:6d:02:a0:16:41:08:cb:52:02:b2:4b:6d:50: b3:52:4f:59:c8:a4:d2:7a:c4:0e:23:2a:09:96:8b:f7:ce:60: e5:6f:b9:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdknXMNm0ylmtqZxIiXP8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNzA4NjhmMGMyYzIxODc2NWZhNmI1M2FiOWFmMDY1ZmYz MzlmMDYwHhcNMjUxMjI2MDcwMTIyWhcNMjUxMjI3MDcwMTIyWjAzMTEwLwYDVQQD EyhhMWQyNzAzOWMxMzM3MzJlOGNhMGY5NTBjOWRkMmM5YWVmNjZhZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoA3aXMP986cBZUegAG9bptKqlb1 tioFDc1TKtgKouXtUSfUJ2VzSNgvcTkBPXb3x3hnb8mJU+TF4uQuH9aNkumy3F77 JKBpaG9JrE1UYJ2QBaq8PfodfdU6Jh1dOaTdUnWVvlt6WwDeStTop99cdbe9kMnC 7L71ZI/c4qLJe7Vy734qsHjOWnX3xHQa5JEchoAaFQD+Ve1/pnKtLSS6gl731+c+ S9dVEE1+SV6LUW07K+B+EpCvQLvYaEqi5wWuSZDBDzfbkCAHg6oX4uC8Qx3bU9eJ k039X5gPFU7JLuQxaiz8nidJIlcSljQl6OkMy9qVuxzheyuTyYa4fUS4BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHScDnBM3MujKD5UMndLJrvZq+0MB8GA1UdIwQY MBaAFP9who8MLCGHZfprU6ua8GX/M58GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNTRiM2ItNWQ3Ni00OWQ1LWE1NmMt MDA3YzRlNTg1MjdlLzEvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8zNTRiM2ItNWQ3Ni00OWQ1LWE1NmMtMDA3YzRlNTg1Mjdl LzEvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJE2YqkGQ 0bJdzpDVJfr+N6Mji2L3w3oeMyjJi4lWqYI9x/aXc7XcLEXHrUjn/5aO1OMj8IQ/ +0qzLpvihB2aOGgG8eYuOKLvvt0cJGErog0hBw2KoEVA4x5eYxv41XAOBTDeyNmg 4DE22YkCy8OcS8SUEVXnlc5hDj+VnTQqeUlzgvXW/beBHcwbyb+v7rQ5oPO7dXcI 1ctryR5o5XKrH+uvI8HlF24FJ7qwkPI4p1gXhiRdssh+H71cKK7rq6ij6AzQEo3Y UIKVy+whBqI5lF76luulrwaUz9Cuq3htAqAWQQjLUgKyS21Qs1JPWcik0nrEDiMq CZaL985g5W+5eg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:54 2025 by rpki-client