This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json) Hash identifier: 49OvbKrWoaFW6neoaR2iUa8VFNmTUpkFCpYJMP5Y/m8= Subject key identifier: 2D:CE:5B:7D:B6:28:34:F1:93:63:E6:F3:22:93:50:4E:3B:B9:A1:8E Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b Certificate serial: 019B435BA049470915695D44F3DC25CA4BA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 00:00:36 +0000 Manifest this update: Mon 22 Dec 2025 00:00:36 +0000 Manifest next update: Tue 23 Dec 2025 00:00:36 +0000 Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: s4bVj21dU5oKGQxvdYoXGFvq1hobh9WEP6HHBIWcMJ0=) 2: ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa (hash: bVgUBiwiMttSarotQ+bYBGzvg0m/rWkM8yb5LV2CZwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:a0:49:47:09:15:69:5d:44:f3:dc:25:ca:4b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b Validity Not Before: Dec 22 00:00:36 2025 GMT Not After : Dec 23 00:00:36 2025 GMT Subject: CN=2dce5b7db62834f19363e6f32293504e3bb9a18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a6:e1:0d:f9:c2:9e:80:6a:4f:e0:7d:98:26: c5:12:41:98:8f:4d:6c:38:e6:76:b8:e0:7b:93:5d: 1f:fa:39:3f:4a:92:af:2d:73:3d:a2:82:94:78:c6: 24:8a:7d:77:0c:bb:0f:2f:90:aa:3a:41:32:7f:0e: db:dd:29:1d:b0:a9:2a:a2:4a:42:23:71:74:ab:f4: f3:c5:2e:dc:3f:63:54:90:6e:e6:36:cb:51:0d:7f: 2d:8d:c9:05:24:15:cf:a4:f7:af:c2:a1:10:a6:0a: 20:25:68:ce:c8:cf:13:9f:64:1c:62:46:a6:60:e1: 50:7a:49:dd:0e:90:88:8e:31:80:e0:25:93:05:cf: 5c:7c:3f:ed:fc:24:24:b8:f5:44:4f:8a:46:8f:65: 87:2b:60:94:ed:81:ac:cb:68:e0:9f:17:ef:91:5b: e9:2e:7b:5a:5d:4c:79:35:af:e6:bc:df:7f:b6:dd: ed:60:5c:1e:a0:d0:00:ec:0e:98:ba:65:f1:14:5d: 85:d4:4f:13:fe:4f:06:85:fd:2e:1d:38:3c:0a:da: 57:ec:11:8b:65:ea:69:e0:24:96:1c:a3:99:dc:7c: 0e:50:92:f0:23:84:c9:85:32:1a:d5:47:ad:34:52: b1:5e:e1:cb:6f:bd:8f:07:52:0e:7f:6c:f4:be:c9: f4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CE:5B:7D:B6:28:34:F1:93:63:E6:F3:22:93:50:4E:3B:B9:A1:8E X509v3 Authority Key Identifier: keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1b:b1:b0:ac:f3:46:9e:28:90:90:11:c3:97:da:ca:b7:c8: 3c:d1:d5:51:75:50:ff:2e:d2:a2:31:03:67:92:9f:82:7c:d7: 66:db:a3:57:c9:5d:2f:7d:26:51:3f:28:c1:b0:76:f0:dc:7c: a8:a6:99:d9:5c:6f:4d:f0:6e:17:71:45:74:82:1e:43:f0:98: 1e:9f:90:03:af:0e:cf:98:56:5c:77:b8:ba:a7:14:4e:88:58: 61:a3:22:ca:11:0d:4d:f5:4b:65:40:c7:22:0e:fa:9f:d1:eb: e7:5c:0b:f2:77:0e:0a:47:48:34:36:c2:05:dd:4d:7d:6b:10: 87:4b:29:17:f6:a1:f4:12:dd:ae:6f:f9:90:5f:5f:23:15:8d: 79:09:98:bb:70:3d:f7:47:fe:fd:a4:27:13:6f:e2:00:35:1b: 5d:6e:c7:ee:b3:b6:8e:ae:86:32:4d:3f:2d:dc:28:a6:53:3f: 0d:d9:01:02:d8:7c:3c:b6:16:29:ee:c6:5a:5b:b9:f9:d5:95: 34:bd:e8:28:6b:3f:d8:67:87:0d:88:91:67:99:c4:87:11:87: bc:62:bf:3f:68:82:42:26:99:33:8c:a0:7a:2b:74:a0:b4:7c: d6:ed:e9:ab:f8:0f:18:38:31:19:52:29:e3:db:42:05:5c:56: d3:62:98:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW6BJRwkVaV1E89wlykulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMmE2OTVjNDEyMjFkZDhlZGRjZmM1YzRiNWNjMGI3ODlj Yjk1M2IwHhcNMjUxMjIyMDAwMDM2WhcNMjUxMjIzMDAwMDM2WjAzMTEwLwYDVQQD EygyZGNlNWI3ZGI2MjgzNGYxOTM2M2U2ZjMyMjkzNTA0ZTNiYjlhMThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKbhDfnCnoBqT+B9mCbFEkGYj01s OOZ2uOB7k10f+jk/SpKvLXM9ooKUeMYkin13DLsPL5CqOkEyfw7b3SkdsKkqokpC I3F0q/TzxS7cP2NUkG7mNstRDX8tjckFJBXPpPevwqEQpgogJWjOyM8Tn2QcYkam YOFQekndDpCIjjGA4CWTBc9cfD/t/CQkuPVET4pGj2WHK2CU7YGsy2jgnxfvkVvp LntaXUx5Na/mvN9/tt3tYFweoNAA7A6YumXxFF2F1E8T/k8Ghf0uHTg8CtpX7BGL Zepp4CSWHKOZ3HwOUJLwI4TJhTIa1UetNFKxXuHLb72PB1IOf2z0vsn0NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3OW322KDTxk2Pm8yKTUE47uaGOMB8GA1UdIwQY MBaAFN0qaVxBIh3Y7dz8XEtcwLeJy5U7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85NGFjMTctZjlkZC00OWY2LWE4OGEt MjA4ZGMwNjhkNTNjLzEvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85NGFjMTctZjlkZC00OWY2LWE4OGEtMjA4ZGMwNjhkNTNj LzEvM1NwcFhFRWlIZGp0M1B4Y1MxekF0NG5MbFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORuxsKzz Rp4okJARw5fayrfIPNHVUXVQ/y7SojEDZ5KfgnzXZtujV8ldL30mUT8owbB28Nx8 qKaZ2VxvTfBuF3FFdIIeQ/CYHp+QA68Oz5hWXHe4uqcUTohYYaMiyhENTfVLZUDH Ig76n9Hr51wL8ncOCkdINDbCBd1NfWsQh0spF/ah9BLdrm/5kF9fIxWNeQmYu3A9 90f+/aQnE2/iADUbXW7H7rO2jq6GMk0/LdwoplM/DdkBAth8PLYWKe7GWlu5+dWV NL3oKGs/2GeHDYiRZ5nEhxGHvGK/P2iCQiaZM4ygeit0oLR81u3pq/gPGDgxGVIp 49tCBVxW02KY0w== -----END CERTIFICATE-----Generated at Mon Dec 22 04:41:12 2025 by rpki-client