This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json) Hash identifier: UEvB7OVn/pDrGwfyyDzoxsGFxjj/Ey82OUeq0eLWoHI= Subject key identifier: 65:0E:7F:94:4A:4F:41:ED:FB:DD:D6:A0:23:D4:8F:B3:F1:7C:AA:B0 Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5 Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5 Certificate serial: 019B698D6D7D5441F7B2B70E48C293B2BC42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft Manifest number: 0DC8 Signing time: Mon 29 Dec 2025 10:00:34 +0000 Manifest this update: Mon 29 Dec 2025 10:00:34 +0000 Manifest next update: Tue 30 Dec 2025 10:00:34 +0000 Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: Oo3naOctCjzYPrX0yvO2uTlJZR6NUz9N9kBOtfbVooY=) 2: Iq-f1EnfL9Yhl-QlX-qFh7tpN7I.roa (hash: WJuJSZpxmjSdIh4Z1HVT6GKRflZm//sdti8VMNi88hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:8d:6d:7d:54:41:f7:b2:b7:0e:48:c2:93:b2:bc:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5 Validity Not Before: Dec 29 10:00:34 2025 GMT Not After : Dec 30 10:00:34 2025 GMT Subject: CN=650e7f944a4f41edfbddd6a023d48fb3f17caab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e1:8d:d9:73:c3:59:e3:8d:e4:f1:0d:65:72: 2d:7f:1b:d5:f0:ac:8e:f8:d1:c0:3c:57:a4:28:bc: c7:43:96:ef:cd:8e:1b:cd:aa:8b:1a:40:45:7d:6e: 1b:c5:ca:53:6f:22:82:9a:fc:e2:84:8a:05:67:16: 90:71:0b:42:9a:7f:23:66:99:24:88:29:e9:dd:d6: 34:22:55:3c:ae:db:77:a4:87:71:e5:eb:19:b0:9b: cf:b7:8b:92:aa:31:d9:f6:f9:d4:01:1b:31:60:c8: 34:47:36:4a:21:34:53:61:1e:5f:af:d2:f7:ea:42: a2:b0:a8:d1:f0:95:49:07:43:40:40:f6:c3:11:7d: f5:a1:4a:1c:28:f1:9e:55:ee:c5:3e:b8:5b:10:98: 3c:a8:19:95:08:fb:3c:24:51:ac:73:e0:bd:71:7a: 6e:7e:96:c8:78:ae:4b:76:46:f5:1a:71:e6:b7:60: 90:d5:e7:92:db:d5:63:04:48:e3:29:5b:1b:de:6c: c1:74:86:ad:aa:4f:3c:7b:33:30:56:de:11:3e:d7: d1:3c:b6:96:f8:18:1e:71:6a:f8:b0:26:9b:d1:f1: f4:ff:c4:66:b2:46:4a:ca:8f:1f:f1:f0:05:3a:99: 96:13:01:de:36:1b:60:e4:b6:f9:ef:1f:52:48:52: 8d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0E:7F:94:4A:4F:41:ED:FB:DD:D6:A0:23:D4:8F:B3:F1:7C:AA:B0 X509v3 Authority Key Identifier: keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cd:44:7e:2a:5d:74:b6:99:51:52:53:2a:86:d6:88:5e:d5: aa:03:9b:10:e6:8d:a7:4a:d9:dd:4e:7d:50:f1:85:ed:02:ac: af:27:e1:fe:b8:fc:9a:cb:64:d3:ca:1a:e3:b8:8c:13:11:1b: 84:61:33:5d:79:28:c2:b0:46:95:93:f0:fe:5d:97:7b:d5:49: 1c:10:35:e6:8f:32:50:32:a6:26:ee:12:95:67:e0:7c:59:bb: c7:9c:22:0e:7d:b7:2f:7d:66:5c:af:c6:c6:62:75:2b:f3:ee: 0e:48:97:98:85:f5:41:3a:95:37:22:5d:b3:13:62:14:7f:b9: 6e:e1:f9:27:76:d1:ce:d1:36:25:b9:c7:05:f7:e0:56:2d:ba: c5:0f:fe:60:0d:b7:4e:c9:c1:90:f9:bd:2d:ef:4e:d3:08:51: b7:83:a2:c9:14:11:3b:b4:5c:a6:66:25:da:85:83:f0:2a:ff: 4d:a1:3c:78:c3:75:0d:a5:73:bf:56:16:47:e3:86:fc:3f:e4: a3:cf:43:de:33:a3:7c:0e:33:4c:70:f9:9c:37:60:7a:7d:04: 73:d1:88:cd:e0:e9:ea:f0:0b:0b:c3:4f:e5:e6:63:b8:e1:61: a3:1b:8c:e8:71:b3:40:7c:6f:ae:56:f2:28:76:6b:26:8c:f9: 28:38:47:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpjW19VEH3srcOSMKTsrxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2 NGZhYTUwHhcNMjUxMjI5MTAwMDM0WhcNMjUxMjMwMTAwMDM0WjAzMTEwLwYDVQQD Eyg2NTBlN2Y5NDRhNGY0MWVkZmJkZGQ2YTAyM2Q0OGZiM2YxN2NhYWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+GN2XPDWeON5PENZXItfxvV8KyO +NHAPFekKLzHQ5bvzY4bzaqLGkBFfW4bxcpTbyKCmvzihIoFZxaQcQtCmn8jZpkk iCnp3dY0IlU8rtt3pIdx5esZsJvPt4uSqjHZ9vnUARsxYMg0RzZKITRTYR5fr9L3 6kKisKjR8JVJB0NAQPbDEX31oUocKPGeVe7FPrhbEJg8qBmVCPs8JFGsc+C9cXpu fpbIeK5Ldkb1GnHmt2CQ1eeS29VjBEjjKVsb3mzBdIatqk88ezMwVt4RPtfRPLaW +BgecWr4sCab0fH0/8RmskZKyo8f8fAFOpmWEwHeNhtg5Lb57x9SSFKNFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUOf5RKT0Ht+93WoCPUj7PxfKqwMB8GA1UdIwQY MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3 LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm81Efipd dLaZUVJTKobWiF7VqgObEOaNp0rZ3U59UPGF7QKsryfh/rj8mstk08oa47iMExEb hGEzXXkowrBGlZPw/l2Xe9VJHBA15o8yUDKmJu4SlWfgfFm7x5wiDn23L31mXK/G xmJ1K/PuDkiXmIX1QTqVNyJdsxNiFH+5buH5J3bRztE2JbnHBffgVi26xQ/+YA23 TsnBkPm9Le9O0whRt4OiyRQRO7RcpmYl2oWD8Cr/TaE8eMN1DaVzv1YWR+OG/D/k o89D3jOjfA4zTHD5nDdgen0Ec9GIzeDp6vALC8NP5eZjuOFhoxuM6HGzQHxvrlby KHZrJoz5KDhHXA== -----END CERTIFICATE-----Generated at Mon Dec 29 13:40:27 2025 by rpki-client