This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft File: r3WOiP6vjWcFnch4ei5fMaBqwek.mft (raw, json) Hash identifier: 5t1SYV0L8QQpKGQhYzL/sIvx+ME+T++ekYMFmMOoy1E= Subject key identifier: 74:8D:14:FC:21:F1:DB:51:55:7F:96:42:46:14:79:DA:13:1C:46:0E Authority key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9 Certificate issuer: /CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9 Certificate serial: 019B51855625795275AFC0B94D0E854CECC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft Manifest number: 0E14 Signing time: Wed 24 Dec 2025 18:00:51 +0000 Manifest this update: Wed 24 Dec 2025 18:00:51 +0000 Manifest next update: Thu 25 Dec 2025 18:00:51 +0000 Files and hashes: 1: jtxnMC6eCVYwIh8IyueFT2QEZ64.roa (hash: 9ndfbLnfP9lol8NT3K6+lPqG6lGo+1E6jKyJb1FexVw=) 2: r3WOiP6vjWcFnch4ei5fMaBqwek.crl (hash: ZgfeGqBZAGhQoo7bSk09s6xkTXCz8Km3soMytP8kT64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:85:56:25:79:52:75:af:c0:b9:4d:0e:85:4c:ec:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9 Validity Not Before: Dec 24 18:00:51 2025 GMT Not After : Dec 25 18:00:51 2025 GMT Subject: CN=748d14fc21f1db51557f9642461479da131c460e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:39:f1:fb:29:14:ac:a7:e7:00:10:0e:23:80: 3e:c4:a6:ad:da:a6:88:07:1d:47:05:3a:2b:05:56: d1:91:e9:32:37:a3:3b:8d:59:48:68:cf:72:91:3e: be:53:5b:33:b7:be:1f:6a:12:6b:72:34:4d:30:87: 70:11:63:6e:fb:99:95:25:e1:5c:0b:d4:3c:26:34: 0f:fb:85:79:32:5c:ec:07:a6:4f:e5:e7:81:8d:ba: b8:17:f3:ab:55:4c:08:89:93:ef:00:16:f2:9e:24: 45:71:ae:0f:ab:6e:9c:68:3c:66:47:ea:13:c4:33: 68:7d:0a:0e:82:e4:9a:2e:3c:c3:0e:ac:f4:ae:8d: 22:43:c5:80:c3:d4:e5:b7:e8:46:49:1e:eb:eb:59: 7a:16:83:5c:70:d2:80:be:02:73:cb:fe:75:55:cf: 47:bf:36:99:7d:b9:79:38:7a:37:33:08:26:df:68: 85:f3:50:eb:d8:8c:a7:02:d3:85:6b:69:f9:d8:eb: 59:4d:1d:1b:5b:88:49:33:21:70:73:89:49:0b:cf: bf:60:6b:78:d5:c5:cf:74:fe:f3:8c:30:8a:27:6a: 00:c2:47:3b:43:c2:46:9e:83:2d:3e:b5:24:02:eb: 46:76:93:c8:de:e2:d9:71:26:5b:d6:c0:bb:d0:a0: 59:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8D:14:FC:21:F1:DB:51:55:7F:96:42:46:14:79:DA:13:1C:46:0E X509v3 Authority Key Identifier: keyid:AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:06:59:d4:4e:94:6d:b7:4c:73:30:59:91:47:84:bd:c8:86: 05:da:31:17:37:ad:3b:f3:5c:fa:e3:4d:01:61:0e:89:d8:8a: 41:3e:c0:32:2b:11:4e:c2:42:9f:4f:59:e9:a7:30:e1:bf:3d: a6:b1:b3:fc:03:5b:19:c2:2a:64:97:df:78:af:91:d8:91:1a: bb:b7:ed:df:56:42:c2:ec:e9:cd:00:13:6e:64:ca:3a:49:62: 25:3f:f8:93:cb:e6:56:cd:a4:5a:14:1b:b8:c5:b7:df:c6:1f: e1:c3:f5:60:c4:c8:4e:69:9b:5b:5d:90:97:47:db:6c:67:39: 5a:ff:96:e4:60:c0:00:15:cb:e8:f1:24:e3:3f:7f:1f:8b:a2: 5e:c4:8c:45:a9:d6:ad:ad:0e:14:56:40:87:1b:49:65:24:4d: 3d:2c:09:f9:f7:a7:98:43:b2:ac:fe:d7:29:c1:03:79:72:50: 64:b5:18:f8:2b:c4:05:3b:4d:a5:30:10:47:69:01:80:e3:ca: 6e:4e:7f:7b:c8:e7:2e:85:58:85:af:53:03:01:b3:73:59:dd: 52:4b:bb:9a:a9:45:ff:eb:dc:24:b1:af:a0:df:c5:b5:74:23: c5:bd:c3:88:ab:1b:d2:67:2d:fa:99:eb:55:e6:fc:16:39:65: 17:ae:4b:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRhVYleVJ1r8C5TQ6FTOzGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzU4ZTg4ZmVhZjhkNjcwNTlkYzg3ODdhMmU1ZjMxYTA2 YWMxZTkwHhcNMjUxMjI0MTgwMDUxWhcNMjUxMjI1MTgwMDUxWjAzMTEwLwYDVQQD Eyg3NDhkMTRmYzIxZjFkYjUxNTU3Zjk2NDI0NjE0NzlkYTEzMWM0NjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTnx+ykUrKfnABAOI4A+xKat2qaI Bx1HBTorBVbRkekyN6M7jVlIaM9ykT6+U1szt74fahJrcjRNMIdwEWNu+5mVJeFc C9Q8JjQP+4V5MlzsB6ZP5eeBjbq4F/OrVUwIiZPvABbyniRFca4Pq26caDxmR+oT xDNofQoOguSaLjzDDqz0ro0iQ8WAw9Tlt+hGSR7r61l6FoNccNKAvgJzy/51Vc9H vzaZfbl5OHo3Mwgm32iF81Dr2IynAtOFa2n52OtZTR0bW4hJMyFwc4lJC8+/YGt4 1cXPdP7zjDCKJ2oAwkc7Q8JGnoMtPrUkAutGdpPI3uLZcSZb1sC70KBZ3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSNFPwh8dtRVX+WQkYUedoTHEYOMB8GA1UdIwQY MBaAFK91joj+r41nBZ3IeHouXzGgasHpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81NThjMzktNzUxMC00YjYzLWFhNTct MWUyMjMwZGYwNzQ2LzEvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81NThjMzktNzUxMC00YjYzLWFhNTctMWUyMjMwZGYwNzQ2 LzEvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwZZ1E6U bbdMczBZkUeEvciGBdoxFzetO/Nc+uNNAWEOidiKQT7AMisRTsJCn09Z6acw4b89 prGz/ANbGcIqZJffeK+R2JEau7ft31ZCwuzpzQATbmTKOkliJT/4k8vmVs2kWhQb uMW338Yf4cP1YMTITmmbW12Ql0fbbGc5Wv+W5GDAABXL6PEk4z9/H4uiXsSMRanW ra0OFFZAhxtJZSRNPSwJ+fenmEOyrP7XKcEDeXJQZLUY+CvEBTtNpTAQR2kBgOPK bk5/e8jnLoVYha9TAwGzc1ndUku7mqlF/+vcJLGvoN/FtXQjxb3DiKsb0mct+pnr Veb8FjllF65Lig== -----END CERTIFICATE-----Generated at Thu Dec 25 03:34:00 2025 by rpki-client