This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json) Hash identifier: Xl1C+XRk9xrpbVMLzOUUiErKrXfXA57KPiU+igIDdto= Subject key identifier: A0:A7:D2:48:7B:A1:C4:09:B9:A4:92:D2:76:0C:9B:51:54:CF:F2:82 Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff Certificate serial: 019B386A01046FC7B713F8F90E96BEED4AF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft Manifest number: 0539 Signing time: Fri 19 Dec 2025 21:00:29 +0000 Manifest this update: Fri 19 Dec 2025 21:00:29 +0000 Manifest next update: Sat 20 Dec 2025 21:00:29 +0000 Files and hashes: 1: KJwvgElTVvzSDkiiLVbk2sY499A.roa (hash: kKy6TJRdTCOke9YuiLb9jXp15SOk9kOvN+LVFTH7qS0=) 2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: 9ncurh43MShyGG4LErbUbwQAylT7tU3+2oy3CeigcEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:01:04:6f:c7:b7:13:f8:f9:0e:96:be:ed:4a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff Validity Not Before: Dec 19 21:00:29 2025 GMT Not After : Dec 20 21:00:29 2025 GMT Subject: CN=a0a7d2487ba1c409b9a492d2760c9b5154cff282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:72:1c:67:7a:48:1a:9e:08:a5:56:80:98:b3: 33:62:da:40:5b:b8:23:1d:cc:3e:62:cc:e0:0c:3c: 4c:d2:3b:94:79:21:bd:82:d8:35:e0:22:9c:5e:73: b1:89:26:7a:09:35:1f:a0:2c:ab:92:1f:08:7f:85: d3:c2:d5:d4:ad:e4:4d:21:d3:b2:17:60:cf:6d:dd: 62:eb:79:8b:59:d1:0e:b4:18:70:46:78:30:fa:1b: 47:9d:ec:1d:97:22:de:11:d6:03:1c:49:8c:ee:50: 79:78:0a:bb:b3:f9:7d:15:53:f2:a6:47:ff:6b:4f: be:e3:81:c4:33:6f:a8:1a:7a:28:8c:e5:65:70:6e: c8:9b:84:d9:f7:a2:9a:17:27:af:de:5d:ab:ed:15: c9:23:2e:36:52:d0:ed:c2:54:cc:28:c8:87:8e:ca: dc:0a:af:54:dd:f3:34:04:ea:f7:98:29:5e:44:35: 51:ba:4c:79:30:b9:40:09:2b:50:26:44:f4:42:e4: 0d:e0:74:fd:17:9e:6f:3a:de:95:2f:f2:5b:38:27: 6b:0c:f5:fd:be:21:b6:81:77:ab:cd:2f:73:76:4e: 05:e2:b8:3b:8e:8d:1c:3d:cd:28:14:f9:2f:2e:e6: 80:04:f1:78:95:20:34:0a:28:a0:e5:87:e0:1a:67: 7d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A7:D2:48:7B:A1:C4:09:B9:A4:92:D2:76:0C:9B:51:54:CF:F2:82 X509v3 Authority Key Identifier: keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:06:98:5d:c7:e4:74:86:19:ee:57:e6:85:62:a4:25:f2:c0: e2:26:0e:f2:3d:7b:86:77:5f:7a:dd:33:ed:31:c7:34:6c:c7: e2:72:82:ec:58:97:58:43:e1:d8:b7:e6:b6:f0:cc:0b:3f:9d: 2a:c6:91:62:fb:e7:b8:fb:c1:ce:8a:e8:38:1b:73:73:db:e6: 4d:a3:70:27:05:08:56:ff:f1:36:bf:de:8e:17:e5:ad:66:e5: c1:db:7e:c7:95:4a:58:a6:d2:71:10:ac:56:07:6a:f4:a0:20: d2:de:08:15:74:a3:45:17:72:ea:c4:06:41:0b:5e:c2:ff:2b: 3c:66:20:2d:a1:15:dd:2f:73:01:60:70:de:d7:56:c4:9d:40: 21:e1:dc:f4:14:af:3e:1a:a9:73:07:3b:43:51:10:5a:8e:9b: 07:b7:90:54:8a:14:27:97:fe:68:00:63:a1:fe:66:08:2e:99: 3b:be:68:eb:b2:eb:10:42:6d:78:e2:1c:6d:9d:49:93:d1:a9: 14:7a:09:00:47:2e:d6:f9:3d:54:58:e0:ef:0b:70:30:66:1f: a9:63:76:3e:58:1e:64:53:8f:1a:65:0a:30:5b:35:38:27:82: 38:0a:94:30:b3:08:f4:cf:19:f1:f7:f9:94:88:07:02:8d:8e: 42:23:1c:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4agEEb8e3E/j5Dpa+7UryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNzExMDU0YTg5NDQ2YTc2ZjQ5M2NlMmMxMjdhOTQ4ZWJh NGE4ZmYwHhcNMjUxMjE5MjEwMDI5WhcNMjUxMjIwMjEwMDI5WjAzMTEwLwYDVQQD EyhhMGE3ZDI0ODdiYTFjNDA5YjlhNDkyZDI3NjBjOWI1MTU0Y2ZmMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33IcZ3pIGp4IpVaAmLMzYtpAW7gj Hcw+YszgDDxM0juUeSG9gtg14CKcXnOxiSZ6CTUfoCyrkh8If4XTwtXUreRNIdOy F2DPbd1i63mLWdEOtBhwRngw+htHnewdlyLeEdYDHEmM7lB5eAq7s/l9FVPypkf/ a0++44HEM2+oGnoojOVlcG7Im4TZ96KaFyev3l2r7RXJIy42UtDtwlTMKMiHjsrc Cq9U3fM0BOr3mCleRDVRukx5MLlACStQJkT0QuQN4HT9F55vOt6VL/JbOCdrDPX9 viG2gXerzS9zdk4F4rg7jo0cPc0oFPkvLuaABPF4lSA0Ciig5YfgGmd9ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCn0kh7ocQJuaSS0nYMm1FUz/KCMB8GA1UdIwQY MBaAFP9xEFSolEanb0k84sEnqUjrpKj/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAt NDdhYzM4OWQzMjYxLzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAtNDdhYzM4OWQzMjYx LzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgaYXcfk dIYZ7lfmhWKkJfLA4iYO8j17hndfet0z7THHNGzH4nKC7FiXWEPh2LfmtvDMCz+d KsaRYvvnuPvBzoroOBtzc9vmTaNwJwUIVv/xNr/ejhflrWblwdt+x5VKWKbScRCs Vgdq9KAg0t4IFXSjRRdy6sQGQQtewv8rPGYgLaEV3S9zAWBw3tdWxJ1AIeHc9BSv Phqpcwc7Q1EQWo6bB7eQVIoUJ5f+aABjof5mCC6ZO75o67LrEEJteOIcbZ1Jk9Gp FHoJAEcu1vk9VFjg7wtwMGYfqWN2PlgeZFOPGmUKMFs1OCeCOAqUMLMI9M8Z8ff5 lIgHAo2OQiMcLQ== -----END CERTIFICATE-----Generated at Fri Dec 19 22:41:06 2025 by rpki-client