This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft File: r3WOiP6vjWcFnch4ei5fMaBqwek.mft (raw, json) Hash identifier: +/bGAaticDiLix6C8M/k+KUXJI5F0fx6Uu+jNnAdjXw= Subject key identifier: CB:61:03:4C:2F:8A:1F:13:5E:13:DC:C5:28:23:5D:60:1C:BD:34:AF Authority key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9 Certificate issuer: /CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9 Certificate serial: 019B64D517C0D9441B692F59450BC06448DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft Manifest number: 0E1E Signing time: Sun 28 Dec 2025 12:00:45 +0000 Manifest this update: Sun 28 Dec 2025 12:00:45 +0000 Manifest next update: Mon 29 Dec 2025 12:00:45 +0000 Files and hashes: 1: jtxnMC6eCVYwIh8IyueFT2QEZ64.roa (hash: 9ndfbLnfP9lol8NT3K6+lPqG6lGo+1E6jKyJb1FexVw=) 2: r3WOiP6vjWcFnch4ei5fMaBqwek.crl (hash: z/LTe74CLTtDlFa9Y+f0o2AMkzsSEYCI3WlzM1gYtrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:d5:17:c0:d9:44:1b:69:2f:59:45:0b:c0:64:48:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9 Validity Not Before: Dec 28 12:00:45 2025 GMT Not After : Dec 29 12:00:45 2025 GMT Subject: CN=cb61034c2f8a1f135e13dcc528235d601cbd34af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:65:77:96:87:29:c1:c4:a2:c7:32:9d:2d: e8:a8:9b:47:5a:00:0a:ae:c0:a2:f0:c9:90:9d:a7: e1:b1:88:bb:e7:07:89:a7:92:3d:bc:32:89:10:39: 93:6c:14:dd:61:ab:c5:d0:45:dd:c5:dd:6f:ca:0d: 71:20:25:60:72:73:5d:4c:fb:f1:0d:32:7b:1f:dc: 04:dc:14:45:4d:b2:dd:35:40:32:47:0d:07:b8:78: ca:c9:01:69:19:24:30:f4:bf:01:73:94:e8:9d:ef: c2:6e:8c:38:8b:63:45:aa:e7:8a:3d:0b:1e:64:8b: 83:86:09:fb:24:51:73:ba:0f:b2:17:e2:c5:54:7a: f7:75:92:67:03:e2:41:aa:36:91:2e:a1:93:a5:c5: f3:bd:f7:fd:b5:ce:77:ef:53:89:e7:f5:56:81:d0: 5f:cb:bf:57:8f:76:34:89:f1:e4:a3:54:c0:c4:48: f3:9b:8e:ec:12:f9:9e:89:8a:5c:8c:c9:da:85:72: de:9a:25:3f:4b:18:48:64:d4:c5:4e:b8:90:c6:94: ea:a1:10:b4:d2:ab:2a:ba:d7:7a:b6:90:cd:36:40: 05:f1:da:68:25:95:84:4e:c1:8c:40:fd:ce:03:d8: d4:1c:1e:7d:b1:fa:29:00:9e:0c:d9:c7:29:30:88: 57:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:61:03:4C:2F:8A:1F:13:5E:13:DC:C5:28:23:5D:60:1C:BD:34:AF X509v3 Authority Key Identifier: keyid:AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:13:f5:d0:76:16:06:b5:93:61:43:f8:cf:ea:1d:48:48:a7: 7c:ba:bc:ff:1e:6f:99:56:c1:bb:ac:d0:99:01:75:75:f6:84: 02:ee:94:e1:eb:1a:8f:63:8f:31:1d:83:8a:0f:0d:10:f4:4c: a8:e7:50:23:54:35:c4:2b:d6:a2:ad:12:c9:fd:1a:67:23:6d: 56:49:b3:7d:48:58:f5:3b:89:da:02:ac:3d:7e:84:68:98:18: e2:7d:1e:15:2f:d8:74:f6:bc:3b:d3:ce:83:97:5c:4b:91:dd: 8f:a7:13:c4:15:81:08:c7:5e:d7:ec:29:21:fe:94:4a:6b:1f: 55:14:8b:a2:ce:97:1e:a7:48:76:f6:9e:63:bf:96:92:86:90: 5d:07:61:b6:db:3a:6a:9b:fa:4c:ed:47:a5:0e:e7:2e:71:a0: 5a:2b:7b:93:49:f9:b6:f2:21:e8:d6:b1:96:17:e2:72:e3:60: f6:4a:ab:95:40:55:74:ed:ec:46:bf:b6:b2:72:d4:45:59:23: 4a:a4:6b:30:cc:8c:90:75:c1:6b:75:94:71:8a:47:19:ad:df: 14:6d:bc:e1:5d:58:d2:14:ab:c4:c9:94:e6:9d:b0:d8:9e:f0: c7:38:01:8e:75:30:be:e6:3f:64:10:48:a1:5b:42:75:65:1e: 65:b9:51:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtk1RfA2UQbaS9ZRQvAZEjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzU4ZTg4ZmVhZjhkNjcwNTlkYzg3ODdhMmU1ZjMxYTA2 YWMxZTkwHhcNMjUxMjI4MTIwMDQ1WhcNMjUxMjI5MTIwMDQ1WjAzMTEwLwYDVQQD EyhjYjYxMDM0YzJmOGExZjEzNWUxM2RjYzUyODIzNWQ2MDFjYmQzNGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB1ld5aHKcHEoscynS3oqJtHWgAK rsCi8MmQnafhsYi75weJp5I9vDKJEDmTbBTdYavF0EXdxd1vyg1xICVgcnNdTPvx DTJ7H9wE3BRFTbLdNUAyRw0HuHjKyQFpGSQw9L8Bc5Tone/Cbow4i2NFqueKPQse ZIuDhgn7JFFzug+yF+LFVHr3dZJnA+JBqjaRLqGTpcXzvff9tc5371OJ5/VWgdBf y79Xj3Y0ifHko1TAxEjzm47sEvmeiYpcjMnahXLemiU/SxhIZNTFTriQxpTqoRC0 0qsqutd6tpDNNkAF8dpoJZWETsGMQP3OA9jUHB59sfopAJ4M2ccpMIhXtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMthA0wvih8TXhPcxSgjXWAcvTSvMB8GA1UdIwQY MBaAFK91joj+r41nBZ3IeHouXzGgasHpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81NThjMzktNzUxMC00YjYzLWFhNTct MWUyMjMwZGYwNzQ2LzEvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81NThjMzktNzUxMC00YjYzLWFhNTctMWUyMjMwZGYwNzQ2 LzEvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxP10HYW BrWTYUP4z+odSEinfLq8/x5vmVbBu6zQmQF1dfaEAu6U4esaj2OPMR2Dig8NEPRM qOdQI1Q1xCvWoq0Syf0aZyNtVkmzfUhY9TuJ2gKsPX6EaJgY4n0eFS/YdPa8O9PO g5dcS5Hdj6cTxBWBCMde1+wpIf6USmsfVRSLos6XHqdIdvaeY7+WkoaQXQdhtts6 apv6TO1HpQ7nLnGgWit7k0n5tvIh6NaxlhficuNg9kqrlUBVdO3sRr+2snLURVkj SqRrMMyMkHXBa3WUcYpHGa3fFG284V1Y0hSrxMmU5p2w2J7wxzgBjnUwvuY/ZBBI oVtCdWUeZblRaQ== -----END CERTIFICATE-----Generated at Sun Dec 28 18:54:07 2025 by rpki-client