This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json) Hash identifier: E6zAOoKGXaHinVQnUSJ2sbBpQu4py7Am+aBSLhBamL0= Subject key identifier: DA:CE:13:58:35:AA:DB:13:C3:24:FA:02:0B:F1:C5:69:BD:E4:20:03 Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79 Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579 Certificate serial: 019B7292581E52517F105B6BA83E05F8668E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft Manifest number: 17A4 Signing time: Wed 31 Dec 2025 04:02:31 +0000 Manifest this update: Wed 31 Dec 2025 04:02:31 +0000 Manifest next update: Thu 01 Jan 2026 04:02:31 +0000 Files and hashes: 1: 2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa (hash: HuLQbolqCGZmiUhvPO/wiFvtWi3Okwmgccu/aBpptuc=) 2: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: 0IYEPgaVSh5s7DOAFr2ERhZTcutZ3ZLsxmrXHzKB5tM=) 3: S87qjShx0Cde64tPkPpF-gZYMZE.roa (hash: KfR58Ep5CQd0S3bEgqtjtqAMWmdjTVJqVmZhBaCwNRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 04:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:92:58:1e:52:51:7f:10:5b:6b:a8:3e:05:f8:66:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579 Validity Not Before: Dec 31 04:02:31 2025 GMT Not After : Jan 1 04:02:31 2026 GMT Subject: CN=dace135835aadb13c324fa020bf1c569bde42003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6d:c7:a3:35:1e:57:c5:47:00:ad:c7:cf:46: ca:88:6c:d2:40:7c:65:28:73:fe:bd:4c:3d:96:e9: da:d9:c2:9b:64:3d:4f:bd:46:3d:a3:87:d2:cb:93: d3:9f:18:60:4d:96:0b:ac:04:ef:5f:18:d1:73:86: 23:67:03:1f:88:c4:6e:36:ec:a4:92:fb:5f:32:af: 23:90:ed:77:4b:90:fe:42:4d:71:77:1a:be:57:0e: 1c:26:93:f9:fa:88:4b:b4:b7:0e:a0:83:85:47:b7: e1:b6:6e:3c:45:dd:27:55:c7:ee:4d:20:5d:74:25: d2:b4:a7:e8:58:29:ab:3a:b9:b0:b8:b5:f4:2d:18: ad:ce:cc:4a:10:21:1a:b9:27:88:20:6f:46:b3:b1: 8d:d0:ce:0e:48:a1:c3:ba:77:52:f7:48:09:9b:64: db:2d:68:3f:f5:12:f8:7d:d0:f1:ce:78:28:68:7c: ab:36:cc:a9:2c:6b:b0:d5:b1:50:ac:23:30:0a:ab: 53:59:ef:7f:bb:39:f9:3a:07:6b:97:12:6f:46:35: a0:43:71:e5:1e:19:0e:e2:a1:a1:d7:7a:77:88:ea: c9:ac:d3:3b:cb:c5:52:43:5b:f4:75:41:89:4b:13: 1d:da:6b:2a:e9:8c:f3:8c:6a:0f:23:2b:01:4b:51: 1e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CE:13:58:35:AA:DB:13:C3:24:FA:02:0B:F1:C5:69:BD:E4:20:03 X509v3 Authority Key Identifier: keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:b3:d0:89:7d:68:c6:4f:74:57:2c:f7:c3:dd:46:77:ad:f0: 8c:eb:84:d0:6e:8f:39:ad:9d:71:11:47:a3:a0:66:ac:23:20: 8a:65:4e:5e:35:a2:4d:19:ff:31:7a:8f:60:e0:a8:24:85:2c: 00:ee:c3:d1:37:b0:ed:9e:f1:11:a1:e8:98:f8:1c:0c:d7:5d: f3:bf:b4:7f:e4:5e:d2:43:f1:97:30:cc:9a:e4:b7:78:c7:19: da:c7:66:d1:01:40:a1:b2:54:8a:c7:99:75:24:7f:69:09:5e: 92:13:b2:d3:19:0d:57:83:b3:4e:cb:8d:06:90:c3:4c:2d:ff: 09:c5:07:15:d4:10:6c:56:26:4c:b8:8b:75:4a:ee:2d:8a:01: 6e:5a:4b:2b:42:3e:15:b5:16:2f:6a:df:b4:4f:41:d1:6f:ad: 02:d2:fc:9c:e7:13:ab:9b:a0:bc:3d:af:23:fa:f5:3b:78:50: fc:dd:d6:64:76:50:93:dc:77:3d:c5:26:1d:a9:99:08:b5:9c: f3:0d:3c:18:17:9f:a2:63:3f:cd:6d:00:75:6a:5f:8f:90:92: da:b3:9a:fc:93:de:6a:5e:3e:cd:34:69:71:85:4d:4c:95:91: b9:00:33:8d:07:fe:1d:98:cd:73:6c:fc:21:66:c8:11:cb:18: c7:72:64:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyklgeUlF/EFtrqD4F+GaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNjUxNjY5MmM2MzgyYjNmODNkYWU5OTFmZDg5ZGQxYjBj ZWY1NzkwHhcNMjUxMjMxMDQwMjMxWhcNMjYwMTAxMDQwMjMxWjAzMTEwLwYDVQQD EyhkYWNlMTM1ODM1YWFkYjEzYzMyNGZhMDIwYmYxYzU2OWJkZTQyMDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G3HozUeV8VHAK3Hz0bKiGzSQHxl KHP+vUw9luna2cKbZD1PvUY9o4fSy5PTnxhgTZYLrATvXxjRc4YjZwMfiMRuNuyk kvtfMq8jkO13S5D+Qk1xdxq+Vw4cJpP5+ohLtLcOoIOFR7fhtm48Rd0nVcfuTSBd dCXStKfoWCmrOrmwuLX0LRitzsxKECEauSeIIG9Gs7GN0M4OSKHDundS90gJm2Tb LWg/9RL4fdDxzngoaHyrNsypLGuw1bFQrCMwCqtTWe9/uzn5OgdrlxJvRjWgQ3Hl HhkO4qGh13p3iOrJrNM7y8VSQ1v0dUGJSxMd2msq6YzzjGoPIysBS1EeeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrOE1g1qtsTwyT6AgvxxWm95CADMB8GA1UdIwQY MBaAFNxlFmksY4Kz+D2umR/YndGwzvV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jZDlmZDMtYTNlZS00ZWM1LThjNTQt MmYzODNlODVlYmMwLzEvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9jZDlmZDMtYTNlZS00ZWM1LThjNTQtMmYzODNlODVlYmMw LzEvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7PQiX1o xk90Vyz3w91Gd63wjOuE0G6POa2dcRFHo6BmrCMgimVOXjWiTRn/MXqPYOCoJIUs AO7D0Tew7Z7xEaHomPgcDNdd87+0f+Re0kPxlzDMmuS3eMcZ2sdm0QFAobJUiseZ dSR/aQlekhOy0xkNV4OzTsuNBpDDTC3/CcUHFdQQbFYmTLiLdUruLYoBblpLK0I+ FbUWL2rftE9B0W+tAtL8nOcTq5ugvD2vI/r1O3hQ/N3WZHZQk9x3PcUmHamZCLWc 8w08GBefomM/zW0AdWpfj5CS2rOa/JPeal4+zTRpcYVNTJWRuQAzjQf+HZjNc2z8 IWbIEcsYx3JkjA== -----END CERTIFICATE-----Generated at Wed Dec 31 10:46:45 2025 by rpki-client