This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft File: 3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json) Hash identifier: v776Wnb+gwL+hAg3z5zYuBznN91lkYCm55BXd1QIwTc= Subject key identifier: 07:70:9F:8B:E3:3E:BE:29:7D:55:5D:25:D2:93:1F:69:9F:E7:B4:4A Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64 Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64 Certificate serial: 019B3C7ECBEBBFE6F01BB8F9DEB2FB4133A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft Manifest number: 1799 Signing time: Sat 20 Dec 2025 16:01:41 +0000 Manifest this update: Sat 20 Dec 2025 16:01:41 +0000 Manifest next update: Sun 21 Dec 2025 16:01:41 +0000 Files and hashes: 1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: WvrcQxguuKcgQ3zQUMKZN0/1HZpVYZJidWCOu3VaVMY=) 2: I3GFCz8gt6Rki8DJxRT45IEltuo.roa (hash: uBBouPhKhyaXIv9GSGFn2zrE6uv7a/jKMDEUQeG9Dfo=) 3: RoNUSsRbSgnW76cSNeAr425YYHY.roa (hash: ty/WAAmbUm3G9276dnnVRYAsJCuw7HHC84siWPb6a6o=) 4: j06EmkksF4YrV0BvXtZ5BQd7X_0.roa (hash: W1w1cQpGhDndwAuyI1OFa9FFiGMVh7oMpQVYkrYTonk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:cb:eb:bf:e6:f0:1b:b8:f9:de:b2:fb:41:33:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64 Validity Not Before: Dec 20 16:01:41 2025 GMT Not After : Dec 21 16:01:41 2025 GMT Subject: CN=07709f8be33ebe297d555d25d2931f699fe7b44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:85:b5:02:c8:ba:6e:66:a3:bd:b9:21:c9:96: 53:f8:b2:55:f1:ff:2a:c6:f1:1d:46:0d:e0:4f:d7: 1c:5c:07:4e:8b:7b:eb:23:55:d6:0f:e7:8d:72:05: 6c:e3:0b:c0:2f:67:6b:a9:23:cf:e5:a4:39:ea:bc: bd:90:66:b1:40:ef:66:2f:63:18:02:3e:30:1f:f8: 45:b9:ed:6f:e2:93:98:92:c4:80:44:a0:c7:f8:0d: 39:a1:f4:58:d9:0d:b4:84:9c:d9:c7:08:48:d5:f7: e9:03:fa:3c:e0:08:7c:91:27:da:e9:f5:75:45:5b: 33:1b:74:e2:02:4b:fb:62:45:b8:86:82:26:44:47: 21:74:c1:39:41:f5:28:1c:df:b9:3b:63:34:de:a8: 5f:97:3b:74:22:2d:f9:15:f3:fa:b5:3c:67:dd:ad: 2b:31:1f:1b:9d:45:a1:fd:4a:96:af:04:d1:69:a7: d2:a6:5f:22:05:95:5e:63:8a:d2:db:a8:dd:31:bf: e6:c1:50:d2:7d:9b:6d:ba:f0:b1:83:a3:87:e2:43: 2f:33:29:5f:7f:fb:d1:b0:4d:b4:44:de:26:b9:d0: 00:71:27:ed:12:1f:b6:26:ca:14:ce:87:78:f1:e6: 49:ec:c5:3c:e6:91:f2:7e:39:fd:d6:56:f1:95:22: 43:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:70:9F:8B:E3:3E:BE:29:7D:55:5D:25:D2:93:1F:69:9F:E7:B4:4A X509v3 Authority Key Identifier: keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:06:13:da:08:7b:3c:49:32:3f:81:43:8e:8c:3c:4a:3d:26: 86:7d:10:43:e9:fa:73:8c:9c:0e:8d:2c:5c:79:af:f6:5a:42: 18:19:fb:3b:c4:b7:fb:6d:ac:fe:9a:05:27:80:ba:69:38:53: 31:22:7c:52:21:0d:b5:a7:1a:4c:3b:13:f5:1a:c0:fe:09:61: cf:3b:36:b0:87:a8:c7:4f:41:b3:31:9b:79:50:10:36:cf:26: 5a:6c:7b:fd:e8:b7:b2:a5:81:0e:30:1f:d1:ce:bf:51:8c:99: 6e:a1:e7:33:be:7f:f8:86:66:2c:9a:03:af:66:d2:64:3f:01: 50:d3:21:98:1d:2e:d6:11:a3:12:08:66:12:e5:37:2f:c4:62: ab:5e:5c:3f:ee:65:4c:18:a2:f9:c5:45:da:4f:5c:24:39:71: b1:7b:4a:b8:55:83:26:f4:76:b7:3f:12:7f:9a:d0:5e:51:6f: 80:23:7b:bd:09:1d:8d:8d:68:ee:d8:67:2a:ea:c3:f2:a4:51: ef:31:ea:e4:bb:97:3c:7c:0b:8c:b0:bd:8f:c5:d4:d0:40:5e: f4:eb:96:8b:40:eb:c3:89:07:4e:1b:07:49:2b:50:65:cb:60: 25:c3:2f:0c:27:01:9a:fe:73:14:c6:50:68:3d:d5:5f:07:ff: 3a:d2:70:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fsvrv+bwG7j53rL7QTOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNWYyZTdjYzJjNjg3ZjU4YzBkMWY2MTMyYmIyZGNmZGYz OGNiNjQwHhcNMjUxMjIwMTYwMTQxWhcNMjUxMjIxMTYwMTQxWjAzMTEwLwYDVQQD EygwNzcwOWY4YmUzM2ViZTI5N2Q1NTVkMjVkMjkzMWY2OTlmZTdiNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIW1Asi6bmajvbkhyZZT+LJV8f8q xvEdRg3gT9ccXAdOi3vrI1XWD+eNcgVs4wvAL2drqSPP5aQ56ry9kGaxQO9mL2MY Aj4wH/hFue1v4pOYksSARKDH+A05ofRY2Q20hJzZxwhI1ffpA/o84Ah8kSfa6fV1 RVszG3TiAkv7YkW4hoImREchdME5QfUoHN+5O2M03qhflzt0Ii35FfP6tTxn3a0r MR8bnUWh/UqWrwTRaafSpl8iBZVeY4rS26jdMb/mwVDSfZttuvCxg6OH4kMvMylf f/vRsE20RN4mudAAcSftEh+2JsoUzod48eZJ7MU85pHyfjn91lbxlSJDjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdwn4vjPr4pfVVdJdKTH2mf57RKMB8GA1UdIwQY MBaAFN1fLnzCxof1jA0fYTK7Lc/fOMtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iYzBhMjUtOTMzYS00ZjVhLWE1ZjMt OWRjZmQyZWYzMDIzLzEvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iYzBhMjUtOTMzYS00ZjVhLWE1ZjMtOWRjZmQyZWYzMDIz LzEvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQYT2gh7 PEkyP4FDjow8Sj0mhn0QQ+n6c4ycDo0sXHmv9lpCGBn7O8S3+22s/poFJ4C6aThT MSJ8UiENtacaTDsT9RrA/glhzzs2sIeox09BszGbeVAQNs8mWmx7/ei3sqWBDjAf 0c6/UYyZbqHnM75/+IZmLJoDr2bSZD8BUNMhmB0u1hGjEghmEuU3L8Riq15cP+5l TBii+cVF2k9cJDlxsXtKuFWDJvR2tz8Sf5rQXlFvgCN7vQkdjY1o7thnKurD8qRR 7zHq5LuXPHwLjLC9j8XU0EBe9OuWi0Drw4kHThsHSStQZctgJcMvDCcBmv5zFMZQ aD3VXwf/OtJwmw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:35:57 2025 by rpki-client