This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft File: t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json) Hash identifier: EwJsqwYy9lQstt1uWjYazUjvbcXBdTKR6XISRa/E+H8= Subject key identifier: 08:DA:37:DD:36:38:F0:14:DF:10:1D:84:30:8A:49:23:15:4B:97:C4 Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7 Certificate issuer: /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7 Certificate serial: 019B3D597D195DC2E89754ABBC79E34D2B17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft Manifest number: 068B Signing time: Sat 20 Dec 2025 20:00:33 +0000 Manifest this update: Sat 20 Dec 2025 20:00:33 +0000 Manifest next update: Sun 21 Dec 2025 20:00:33 +0000 Files and hashes: 1: CrtWfCL7i9NVihI1TfWhriARtZk.roa (hash: GvkPNrJjcp+5LqZSEnG2rMaRPFf5goGwB+oAHuiRPHA=) 2: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: OvN0Moki/AesqjpQUqLk6I9/yqTDf/Oyl6dwEBK/Ze8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:7d:19:5d:c2:e8:97:54:ab:bc:79:e3:4d:2b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7 Validity Not Before: Dec 20 20:00:33 2025 GMT Not After : Dec 21 20:00:33 2025 GMT Subject: CN=08da37dd3638f014df101d84308a4923154b97c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:84:07:99:3e:a9:f0:31:76:7d:4b:2d:4d:5b: 45:e9:d3:02:78:4f:b2:ed:ad:2b:4d:6e:71:3f:16: 99:62:ff:52:d2:37:9b:55:53:5b:f1:29:fb:f7:a5: 63:d4:b3:ba:56:e5:61:ae:e5:36:76:35:34:2a:54: 53:b9:16:eb:cc:c5:58:20:11:1e:eb:d7:74:a2:86: 32:98:b2:d4:54:4b:0f:2b:18:4b:45:35:50:7d:32: b8:8b:85:fb:2b:98:85:ee:2b:8a:db:30:ab:78:45: d5:04:86:18:a9:87:7f:ef:10:25:5d:c3:7f:70:5a: 13:30:82:8a:2f:6e:cb:63:a0:25:43:76:d3:d7:ed: 3d:2e:b5:75:59:78:37:0c:c7:06:5f:31:9c:31:86: 88:33:da:b2:df:a5:33:29:2e:6a:37:bb:04:40:af: 37:be:0e:fb:68:3a:b1:f5:1a:81:28:c2:4d:68:3a: e9:bf:b0:79:8c:f3:7f:1e:b0:fc:eb:ad:51:9a:4e: 6d:78:30:20:4d:1f:71:98:cd:83:6f:3b:35:4e:7f: ca:3c:50:f3:8c:f1:c7:7b:a5:92:c0:66:bc:4a:4f: 55:7e:9a:2f:e1:a8:0b:59:9a:da:fd:0c:f5:39:66: 1a:cf:f0:c2:ae:2d:25:cb:6c:ce:94:07:1b:ea:2d: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DA:37:DD:36:38:F0:14:DF:10:1D:84:30:8A:49:23:15:4B:97:C4 X509v3 Authority Key Identifier: keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:f0:50:d0:73:20:a1:c5:1b:28:8f:9f:89:35:58:0d:58:53: 7a:f0:89:a4:47:f1:e0:0e:42:72:9d:34:94:73:f3:06:c6:7f: 24:a3:18:33:fb:c4:31:0c:57:9c:a7:2a:d0:ba:27:7c:5f:fb: 1d:e4:a1:54:b9:aa:8a:cc:38:61:bb:8d:4f:55:80:95:3f:91: 66:8a:08:7f:14:5a:0d:46:5b:30:43:95:86:c5:ad:04:e2:3c: 71:c2:2b:6b:30:ed:cc:c9:14:67:8a:bf:6d:25:80:46:e7:9e: 31:d2:14:8e:67:95:c0:01:cb:10:ea:25:4b:c8:0c:c6:01:9a: b0:67:94:46:09:fb:ef:79:bc:32:f8:7c:b0:d0:1e:57:28:e6: 5b:43:f6:fd:28:13:5f:ce:07:9c:93:64:0b:29:c3:00:4d:05: 4a:bf:b3:3d:ec:c3:5d:f5:aa:00:dc:b8:6a:d0:4a:18:32:2a: b3:cc:72:e6:31:ea:75:a5:e1:81:0d:03:96:e6:f6:4a:fb:1b: 71:1c:06:bc:9a:e1:bb:89:ac:62:c8:41:c9:64:27:a8:60:5f: 03:04:85:41:fa:b6:18:2b:1d:dc:c4:8e:55:57:c9:c7:38:bd: 54:52:ba:9f:36:58:79:64:3f:42:9a:14:77:78:e6:e4:03:bd: f1:b8:a6:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WX0ZXcLol1SrvHnjTSsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NzMwYzgzMjIxMThjODFjYTg0YmFiMWI3ZTA4OTBhOWM4 NWU5ZjcwHhcNMjUxMjIwMjAwMDMzWhcNMjUxMjIxMjAwMDMzWjAzMTEwLwYDVQQD EygwOGRhMzdkZDM2MzhmMDE0ZGYxMDFkODQzMDhhNDkyMzE1NGI5N2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoQHmT6p8DF2fUstTVtF6dMCeE+y 7a0rTW5xPxaZYv9S0jebVVNb8Sn796Vj1LO6VuVhruU2djU0KlRTuRbrzMVYIBEe 69d0ooYymLLUVEsPKxhLRTVQfTK4i4X7K5iF7iuK2zCreEXVBIYYqYd/7xAlXcN/ cFoTMIKKL27LY6AlQ3bT1+09LrV1WXg3DMcGXzGcMYaIM9qy36UzKS5qN7sEQK83 vg77aDqx9RqBKMJNaDrpv7B5jPN/HrD8661Rmk5teDAgTR9xmM2Dbzs1Tn/KPFDz jPHHe6WSwGa8Sk9Vfpov4agLWZra/Qz1OWYaz/DCri0ly2zOlAcb6i1fOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjaN902OPAU3xAdhDCKSSMVS5fEMB8GA1UdIwQY MBaAFLdzDIMiEYyByoS6sbfgiQqchen3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMzhmZDctOWU2OC00MjZiLWExMDAt MWMwZmQ4OWRiY2I0LzEvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iMzhmZDctOWU2OC00MjZiLWExMDAtMWMwZmQ4OWRiY2I0 LzEvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPBQ0HMg ocUbKI+fiTVYDVhTevCJpEfx4A5Ccp00lHPzBsZ/JKMYM/vEMQxXnKcq0LonfF/7 HeShVLmqisw4YbuNT1WAlT+RZooIfxRaDUZbMEOVhsWtBOI8ccIrazDtzMkUZ4q/ bSWARueeMdIUjmeVwAHLEOolS8gMxgGasGeURgn773m8Mvh8sNAeVyjmW0P2/SgT X84HnJNkCynDAE0FSr+zPezDXfWqANy4atBKGDIqs8xy5jHqdaXhgQ0Dlub2Svsb cRwGvJrhu4msYshByWQnqGBfAwSFQfq2GCsd3MSOVVfJxzi9VFK6nzZYeWQ/QpoU d3jm5AO98bimeg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:35:30 2025 by rpki-client