This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json) Hash identifier: W9Saaiae8QL4eNpn77vwLSKbKa6H+kKBp++bMUdlKt8= Subject key identifier: F4:95:4D:8A:C3:0F:21:0E:37:05:79:B4:3B:82:BE:CA:69:EF:FE:13 Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e Certificate serial: 019B6BE9875C8CAE39CD03B44FD10C3065EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft Manifest number: 179D Signing time: Mon 29 Dec 2025 21:00:25 +0000 Manifest this update: Mon 29 Dec 2025 21:00:25 +0000 Manifest next update: Tue 30 Dec 2025 21:00:25 +0000 Files and hashes: 1: 1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa (hash: eIRoaJMdc/l4AU70hG0PC/LPtYaLw4xgou2xPhRFPhE=) 2: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: kkYZq8Yzd6AQhMG0oQ3jvtRB3Ggn7RwHYLo4y7AsHp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:e9:87:5c:8c:ae:39:cd:03:b4:4f:d1:0c:30:65:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e Validity Not Before: Dec 29 21:00:25 2025 GMT Not After : Dec 30 21:00:25 2025 GMT Subject: CN=f4954d8ac30f210e370579b43b82beca69effe13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5f:6b:04:c5:3e:a5:b2:6c:53:90:7f:c4:d6: a8:ff:df:53:33:79:f9:1f:c2:3c:b8:57:d6:50:c0: 49:c9:a1:98:23:55:b5:20:76:d4:08:8f:80:87:6a: 94:c8:d9:14:26:99:88:f3:e6:31:0f:11:fb:ee:19: e2:c1:5d:10:3e:fa:2c:17:fa:28:57:4e:84:1a:47: fc:71:d2:58:fa:ce:75:0d:0d:41:28:72:a6:2b:ce: fd:e5:d4:39:41:68:fe:f1:22:02:40:17:a2:9d:7e: c9:2a:db:1f:0d:d0:88:f4:e2:9f:52:5b:c6:2d:ca: 48:3c:e8:08:21:61:65:df:9d:ba:50:73:a9:29:1b: b3:f2:60:70:28:e1:49:fe:e6:de:f8:1a:d5:62:dc: 3d:39:c9:f1:4d:ca:53:a8:a7:3c:cb:e2:c5:bd:a4: 4f:2e:40:7c:f0:05:67:56:eb:c6:38:87:dc:4f:ce: ea:1e:c2:ec:7f:e9:62:cd:af:1d:11:bf:3b:47:8b: 97:e6:92:b6:8c:a3:a3:03:51:18:d4:ea:7f:52:6a: e0:5c:42:ee:86:70:c2:fa:e6:06:13:ba:c4:0b:b3: f7:d8:58:01:5b:c6:3a:c0:51:04:bd:53:aa:d7:d4: 20:c3:d2:e9:e0:f1:dc:f4:cd:51:12:d0:70:e8:e4: 3b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:95:4D:8A:C3:0F:21:0E:37:05:79:B4:3B:82:BE:CA:69:EF:FE:13 X509v3 Authority Key Identifier: keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:06:82:53:fa:52:7f:8b:dd:3f:0d:c0:a2:70:ee:16:d3:22: b8:e8:cd:01:64:66:d4:48:64:fb:77:9b:58:6a:27:eb:98:2e: 92:11:c1:ad:47:93:77:22:50:4a:b4:59:ab:2d:70:af:1c:33: 2b:aa:67:25:e6:e4:25:b6:89:56:0c:25:c7:a6:04:18:26:53: d0:e2:c4:65:b2:26:46:30:1f:5c:fc:98:a5:7c:05:32:1e:57: b4:53:87:ad:2e:1c:57:48:3a:e6:61:f0:a0:83:21:a2:63:c5: 9f:b6:41:fc:32:6f:09:d2:dc:75:91:d7:64:fe:00:1f:ff:dd: b3:07:13:02:88:72:4b:99:3c:93:eb:11:6d:09:9d:1c:5e:42: 9b:66:25:ee:79:1a:68:c2:b7:c5:2a:22:ed:03:cd:a0:ec:44: 7a:c3:85:32:13:90:76:a0:df:26:71:45:a3:81:1e:21:05:f6: 7e:ac:d9:39:4d:6b:8a:d1:9b:da:7e:ca:48:af:58:c8:3d:bb: 5b:cb:7e:00:c6:5f:df:8d:a2:3e:77:e4:47:be:65:10:4d:95: 4a:70:61:54:4d:48:66:61:01:2d:64:c4:f6:26:50:da:5f:89: 4e:99:15:0a:1d:8c:6e:4c:c6:bd:bc:c2:a9:84:ec:04:87:43: 89:a6:6e:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6YdcjK45zQO0T9EMMGXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2I0YTA1NGE3MjFhMGZkYTYwMTI5MDdjYzViNTZlODEy MGE3M2UwHhcNMjUxMjI5MjEwMDI1WhcNMjUxMjMwMjEwMDI1WjAzMTEwLwYDVQQD EyhmNDk1NGQ4YWMzMGYyMTBlMzcwNTc5YjQzYjgyYmVjYTY5ZWZmZTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm19rBMU+pbJsU5B/xNao/99TM3n5 H8I8uFfWUMBJyaGYI1W1IHbUCI+Ah2qUyNkUJpmI8+YxDxH77hniwV0QPvosF/oo V06EGkf8cdJY+s51DQ1BKHKmK8795dQ5QWj+8SICQBeinX7JKtsfDdCI9OKfUlvG LcpIPOgIIWFl3526UHOpKRuz8mBwKOFJ/ube+BrVYtw9OcnxTcpTqKc8y+LFvaRP LkB88AVnVuvGOIfcT87qHsLsf+liza8dEb87R4uX5pK2jKOjA1EY1Op/UmrgXELu hnDC+uYGE7rEC7P32FgBW8Y6wFEEvVOq19Qgw9Lp4PHc9M1REtBw6OQ7XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSVTYrDDyEONwV5tDuCvspp7/4TMB8GA1UdIwQY MBaAFGt7SgVKchoP2mASkHzFtW6BIKc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YWJlMWQtMzAzNi00MmI4LWJlMzYt ZTc5OWVmNTRmMGM0LzEvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80YWJlMWQtMzAzNi00MmI4LWJlMzYtZTc5OWVmNTRmMGM0 LzEvYTN0S0JVcHlHZ19hWUJLUWZNVzFib0VncHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwaCU/pS f4vdPw3AonDuFtMiuOjNAWRm1Ehk+3ebWGon65gukhHBrUeTdyJQSrRZqy1wrxwz K6pnJebkJbaJVgwlx6YEGCZT0OLEZbImRjAfXPyYpXwFMh5XtFOHrS4cV0g65mHw oIMhomPFn7ZB/DJvCdLcdZHXZP4AH//dswcTAohyS5k8k+sRbQmdHF5Cm2Yl7nka aMK3xSoi7QPNoOxEesOFMhOQdqDfJnFFo4EeIQX2fqzZOU1ritGb2n7KSK9YyD27 W8t+AMZf342iPnfkR75lEE2VSnBhVE1IZmEBLWTE9iZQ2l+JTpkVCh2MbkzGvbzC qYTsBIdDiaZu4Q== -----END CERTIFICATE-----Generated at Mon Dec 29 22:46:25 2025 by rpki-client