This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json) Hash identifier: 2hqCDSJtLVIOvPIl6AfHrGZTlltnU1LVEFegGpRuJ3k= Subject key identifier: C6:E9:9E:F1:84:87:3E:45:24:36:D0:92:EF:2C:E9:B1:3A:16:6E:5A Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf Certificate serial: 019B3EA3370CF96E520BB5619335797A4D6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft Manifest number: 0882 Signing time: Sun 21 Dec 2025 02:00:42 +0000 Manifest this update: Sun 21 Dec 2025 02:00:42 +0000 Manifest next update: Mon 22 Dec 2025 02:00:42 +0000 Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: nA2HEhVHjFqXfrqGNVhAz2iJ6r4BZ2zNTip+eZjbP0E=) 2: xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa (hash: wP9kQODXoT56dWOB0bEFnWVWD/Y0ndzO5Fzna/QZSuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:37:0c:f9:6e:52:0b:b5:61:93:35:79:7a:4d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf Validity Not Before: Dec 21 02:00:42 2025 GMT Not After : Dec 22 02:00:42 2025 GMT Subject: CN=c6e99ef184873e452436d092ef2ce9b13a166e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a0:48:f6:e6:6e:24:24:7d:f4:e1:3b:70:d0: bc:6c:b3:f5:c8:74:ef:ff:d1:65:de:42:73:ba:48: de:0d:b9:6d:46:11:a0:b0:91:5a:45:53:a3:85:70: 2d:55:7d:dc:89:74:c4:ff:ea:98:88:84:30:bd:ea: e6:8a:10:45:0d:94:75:11:a8:16:b1:38:f5:b4:99: 38:52:2e:4e:ca:6e:56:74:af:9f:96:41:21:2a:63: fc:bd:3d:13:73:56:b3:35:80:d6:b4:81:f3:6e:56: 21:6f:a3:9b:2b:d1:7b:d4:93:1b:37:36:ea:34:21: 3c:c5:95:41:d1:b5:17:d8:88:f3:cb:87:0e:ae:1d: eb:40:78:d6:89:3b:48:82:a0:d7:b1:9d:d2:22:cb: f6:a8:af:53:27:a4:9e:c1:e2:dc:b2:6f:ec:2c:00: f3:b7:70:e8:f1:61:52:75:db:a3:ae:55:5f:fa:d6: ce:e7:0f:f7:6e:db:57:00:e3:18:f7:2b:77:f0:4c: 15:a6:49:50:4b:84:be:3c:e0:6f:c5:3c:e5:77:eb: 3b:f7:ef:8b:2d:fb:0a:29:0c:39:85:62:1f:be:47: 71:b5:ed:8d:bb:15:fb:ef:ed:5d:83:55:02:98:c4: 9d:30:9a:69:4c:ed:3a:6b:17:88:f0:18:86:44:6a: 4f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E9:9E:F1:84:87:3E:45:24:36:D0:92:EF:2C:E9:B1:3A:16:6E:5A X509v3 Authority Key Identifier: keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:46:02:e8:d6:a0:21:16:db:cd:20:80:e2:a3:68:f1:a7:b5: 10:a3:78:83:0e:ed:71:cb:ef:ae:17:34:c7:55:69:83:10:ca: c0:81:12:26:7b:96:8d:2f:57:f6:cb:a0:ce:f9:c8:76:f3:31: ef:b1:d5:cc:e0:65:fa:b9:81:20:c6:bd:c9:36:0f:58:0d:c4: 1e:12:17:6a:77:d8:6b:8c:50:25:bf:d4:a7:1e:3f:27:66:95: b8:72:c2:f4:d1:86:d0:33:9b:06:98:0f:d8:a3:39:2e:84:b7: ec:ba:62:04:64:10:c4:b7:72:03:47:98:31:bd:8e:f8:90:74: 4e:99:50:29:3c:70:ed:7f:37:ef:80:d7:e0:ac:9f:e4:23:e0: ce:30:ce:5c:08:c8:fc:61:c3:f2:fe:c8:b5:bd:eb:d9:9b:54: 60:d8:78:07:ff:d8:f4:6a:78:80:26:15:a2:bf:35:50:fb:66: eb:37:ff:9b:1e:ed:3e:00:70:af:0b:84:fc:1e:15:a7:49:2d: 0e:87:4a:07:77:f7:86:03:48:58:7a:61:a3:1d:7a:7f:79:d7: 17:3b:b9:3a:40:48:f3:d3:c2:07:17:2f:31:ed:55:79:07:04: 1a:ef:a1:b5:9c:50:37:7d:57:8b:44:f7:16:f9:2a:83:98:bf: 4c:00:e5:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+ozcM+W5SC7VhkzV5ek1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOGEzYTQzMzAxY2QyYzgwNDdlYjg1NDRmODBhYjRmZmNm ZTlhY2YwHhcNMjUxMjIxMDIwMDQyWhcNMjUxMjIyMDIwMDQyWjAzMTEwLwYDVQQD EyhjNmU5OWVmMTg0ODczZTQ1MjQzNmQwOTJlZjJjZTliMTNhMTY2ZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqBI9uZuJCR99OE7cNC8bLP1yHTv /9Fl3kJzukjeDbltRhGgsJFaRVOjhXAtVX3ciXTE/+qYiIQwvermihBFDZR1EagW sTj1tJk4Ui5Oym5WdK+flkEhKmP8vT0Tc1azNYDWtIHzblYhb6ObK9F71JMbNzbq NCE8xZVB0bUX2Ijzy4cOrh3rQHjWiTtIgqDXsZ3SIsv2qK9TJ6SeweLcsm/sLADz t3Do8WFSddujrlVf+tbO5w/3bttXAOMY9yt38EwVpklQS4S+POBvxTzld+s79++L LfsKKQw5hWIfvkdxte2NuxX77+1dg1UCmMSdMJppTO06axeI8BiGRGpPkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbpnvGEhz5FJDbQku8s6bE6Fm5aMB8GA1UdIwQY MBaAFNyKOkMwHNLIBH64VE+Aq0/8/prPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kZjBmZjMtNTYxZS00Zjc3LWE3ZGQt ZmU4NDQwNjBhNDZkLzEvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9kZjBmZjMtNTYxZS00Zjc3LWE3ZGQtZmU4NDQwNjBhNDZk LzEvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUYC6Nag IRbbzSCA4qNo8ae1EKN4gw7tccvvrhc0x1VpgxDKwIESJnuWjS9X9sugzvnIdvMx 77HVzOBl+rmBIMa9yTYPWA3EHhIXanfYa4xQJb/Upx4/J2aVuHLC9NGG0DObBpgP 2KM5LoS37LpiBGQQxLdyA0eYMb2O+JB0TplQKTxw7X8374DX4Kyf5CPgzjDOXAjI /GHD8v7Itb3r2ZtUYNh4B//Y9Gp4gCYVor81UPtm6zf/mx7tPgBwrwuE/B4Vp0kt DodKB3f3hgNIWHphox16f3nXFzu5OkBI89PCBxcvMe1VeQcEGu+htZxQN31Xi0T3 Fvkqg5i/TADlAA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:49:09 2025 by rpki-client