This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json) Hash identifier: gVV2rx+qhm8vdkzIhDu4whBMC7dM/JpG/NSb0BzEidE= Subject key identifier: 47:3D:A9:68:F3:22:C7:62:F0:0C:ED:D3:68:28:EF:E0:67:CE:8D:02 Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8 Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8 Certificate serial: 019B3343F0859060CEA7FA69D9B5E275C5F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft Manifest number: 0D83 Signing time: Thu 18 Dec 2025 21:00:48 +0000 Manifest this update: Thu 18 Dec 2025 21:00:48 +0000 Manifest next update: Fri 19 Dec 2025 21:00:48 +0000 Files and hashes: 1: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: 3SoZhn5/7NCGu581JgZlat34WRWjhn/qi9g2XsZ6+L4=) 2: hfSj4Acr0ZdBdVZF-bmfhSWxDR0.roa (hash: qMvzKdtsac1CrAS5/GB10mnE0HZEb+d2b/OglfbpJc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:f0:85:90:60:ce:a7:fa:69:d9:b5:e2:75:c5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8 Validity Not Before: Dec 18 21:00:48 2025 GMT Not After : Dec 19 21:00:48 2025 GMT Subject: CN=473da968f322c762f00cedd36828efe067ce8d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:72:86:c9:f1:11:a0:db:e5:c4:0b:46:db: 33:64:e1:29:68:61:de:f4:cc:77:b3:09:23:45:59: 65:f9:bb:cc:16:6b:a8:c6:58:80:25:15:f0:76:a2: 7f:08:cd:2e:cf:c9:a9:49:22:8a:ee:0a:8a:7e:22: f7:d9:6f:79:2b:e2:1f:93:c7:7b:5b:ab:81:e9:50: fe:73:d2:58:92:d5:14:ae:f7:31:78:53:7e:3a:8e: 14:9f:99:65:08:0c:c5:73:e9:7f:24:47:4c:47:85: c1:55:46:d2:1a:db:de:35:44:6f:ed:84:25:07:47: 80:81:d9:c7:ea:84:2c:ad:87:a8:a7:2f:13:c7:38: 8c:08:7c:77:c4:3b:7a:81:27:ba:5b:89:df:68:34: 3d:3e:0e:25:c3:5e:dc:97:62:c9:ce:f6:4d:e7:c1: 9a:09:b6:ad:41:ab:28:83:de:7f:f6:22:c7:28:9e: 9f:5d:42:80:fa:06:82:56:3c:31:86:81:7f:bf:4a: de:72:03:09:15:19:d9:f7:1b:9c:a2:ed:0a:d0:72: c3:7f:88:89:64:c0:c5:d2:e5:57:f2:30:63:59:46: 11:d7:68:43:26:33:d6:12:80:9b:bc:3a:c5:1b:1a: fe:8b:e7:90:a4:ba:a2:72:c2:ab:0a:27:89:3a:d2: 6b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3D:A9:68:F3:22:C7:62:F0:0C:ED:D3:68:28:EF:E0:67:CE:8D:02 X509v3 Authority Key Identifier: keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d6:ee:b8:59:2e:cf:30:ed:25:99:fb:45:eb:54:fc:a9:5b: f1:ca:75:0c:af:7a:32:b5:b3:b2:11:11:19:36:0d:d7:e4:ae: 02:f0:26:6a:49:aa:f1:14:b0:77:b1:ad:50:e4:79:5c:65:01: b9:f2:06:c2:33:fe:cf:5c:86:2e:37:ca:ae:a7:75:5c:4a:39: 16:1b:48:f1:c2:c8:dd:80:89:35:f7:ad:ea:30:15:5c:78:bd: 24:fd:29:4f:46:d8:91:60:59:be:b7:49:39:75:a4:a7:38:61: bf:ef:7e:ec:6d:23:e6:fd:4b:f0:a2:9a:35:84:ab:13:41:08: 1d:bb:3c:e1:a8:7c:93:1b:0b:78:4c:63:03:97:71:3f:b3:5e: f5:27:a7:6b:5f:94:49:d8:18:74:14:dd:6c:b3:8d:46:ac:2b: f6:02:08:74:ae:60:b6:3e:a1:de:be:6a:8d:e6:67:13:0b:5f: bd:21:3a:3e:d9:d9:5d:15:0b:a5:44:68:b8:47:f6:df:59:88: d2:c2:a9:ed:74:0a:73:a3:34:a0:4a:c6:81:ed:24:7b:d7:fa: ba:05:7a:62:f9:af:f7:17:65:f7:f9:2a:0e:1a:5e:b7:0e:8f: 07:d5:68:6c:11:a7:00:f1:4f:57:f9:31:e6:0e:cf:18:c8:77: dd:56:02:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ/CFkGDOp/pp2bXidcXwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNTJhZDA5MGI1NDY3OGUwOTY4ZTY5OTU1YzI1MDQ5NDM0 ZDk2YzgwHhcNMjUxMjE4MjEwMDQ4WhcNMjUxMjE5MjEwMDQ4WjAzMTEwLwYDVQQD Eyg0NzNkYTk2OGYzMjJjNzYyZjAwY2VkZDM2ODI4ZWZlMDY3Y2U4ZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmZyhsnxEaDb5cQLRtszZOEpaGHe 9Mx3swkjRVll+bvMFmuoxliAJRXwdqJ/CM0uz8mpSSKK7gqKfiL32W95K+Ifk8d7 W6uB6VD+c9JYktUUrvcxeFN+Oo4Un5llCAzFc+l/JEdMR4XBVUbSGtveNURv7YQl B0eAgdnH6oQsrYeopy8TxziMCHx3xDt6gSe6W4nfaDQ9Pg4lw17cl2LJzvZN58Ga CbatQasog95/9iLHKJ6fXUKA+gaCVjwxhoF/v0recgMJFRnZ9xucou0K0HLDf4iJ ZMDF0uVX8jBjWUYR12hDJjPWEoCbvDrFGxr+i+eQpLqicsKrCieJOtJrbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc9qWjzIsdi8Azt02go7+Bnzo0CMB8GA1UdIwQY MBaAFN1SrQkLVGeOCWjmmVXCUElDTZbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmIt ZDMwNTczMGI1MzY4LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmItZDMwNTczMGI1MzY4 LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNbuuFku zzDtJZn7RetU/Klb8cp1DK96MrWzshERGTYN1+SuAvAmakmq8RSwd7GtUOR5XGUB ufIGwjP+z1yGLjfKrqd1XEo5FhtI8cLI3YCJNfet6jAVXHi9JP0pT0bYkWBZvrdJ OXWkpzhhv+9+7G0j5v1L8KKaNYSrE0EIHbs84ah8kxsLeExjA5dxP7Ne9Sena1+U SdgYdBTdbLONRqwr9gIIdK5gtj6h3r5qjeZnEwtfvSE6PtnZXRULpURouEf231mI 0sKp7XQKc6M0oErGge0ke9f6ugV6Yvmv9xdl9/kqDhpetw6PB9VobBGnAPFPV/kx 5g7PGMh33VYC7A== -----END CERTIFICATE-----Generated at Fri Dec 19 06:59:50 2025 by rpki-client