This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft File: 3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json) Hash identifier: 3lIVKZASnuDDFT0w7YuaegaeE1YVi3hdFRNoPGs4QXI= Subject key identifier: B4:54:DE:43:35:9D:C8:47:81:D1:E8:CC:56:8C:71:68:96:CD:3A:60 Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Certificate serial: 019B326838CC7DC61F027C94121EE8D18BB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft Manifest number: 1789 Signing time: Thu 18 Dec 2025 17:00:49 +0000 Manifest this update: Thu 18 Dec 2025 17:00:49 +0000 Manifest next update: Fri 19 Dec 2025 17:00:49 +0000 Files and hashes: 1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: OmWHLMMGs3Wtc/0kLQGXcI/wlhA7dU97awQY647pCvI=) 2: CURhnBTebRtFbuqIF-dFXdwxOsI.roa (hash: N2c5XcgW+AQpVpLwLHbjy6S9Vm1RjK7GXpDlAsFZpfk=) 3: EUX35BVNkJsUjFXuBk75OVm9PCc.roa (hash: K2j+jUDEk3zskvvRatSmoYAxHWdNXJq7sEJx+OMyHQQ=) 4: EpSf_xGsxic86z10zbwqzKmasW8.roa (hash: eSnnnz/WKP7V/MJyjND4ey6FBA8RQok1qLjk+ng6oW4=) 5: P2rbCazRzAecS6cq7qBlJh3ulhk.roa (hash: eS1swdw4PwPA3JuCzPIM9DRGgb8q7vXujdInn+mWiHc=) 6: mld6HE3RapKTIrTK3ARnJwX6Nfo.roa (hash: QckW2u4tae0vEXpqjOByW8q7ybuT0MKIf8YyQZ8Ec7k=) 7: pX4EUgeDNNWi24hGb7Vs1LSwVFU.roa (hash: 8qojOgWb70IVU0ElW5/Sut6REATPavh52G81zhsEHj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:38:cc:7d:c6:1f:02:7c:94:12:1e:e8:d1:8b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Validity Not Before: Dec 18 17:00:49 2025 GMT Not After : Dec 19 17:00:49 2025 GMT Subject: CN=b454de43359dc84781d1e8cc568c716896cd3a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:b7:c0:7c:eb:36:54:d9:f3:11:47:9b:11: 89:0f:f6:86:c9:10:c1:7a:b7:2a:4c:40:0d:da:e6: 51:27:54:10:87:36:eb:77:e6:ae:26:e5:06:76:b4: af:e1:f1:ed:d6:d5:dc:b1:cd:a6:a8:fa:07:64:4a: 47:5e:2c:63:4e:64:70:08:13:d2:8e:e0:37:f0:f7: 10:41:31:77:24:8b:a3:75:37:e6:ff:b1:80:68:24: 15:a8:0f:8b:d8:07:49:c0:dc:19:f1:d7:64:66:90: e1:76:48:19:68:fa:10:c9:fe:8c:22:b6:de:83:c6: 7f:97:5b:69:a6:b3:1d:97:d8:83:c4:b7:ca:e3:29: 9f:b8:d2:c6:91:1a:59:85:eb:19:5f:16:e0:e5:af: 69:57:c0:f7:99:15:c7:42:85:76:6e:a8:75:85:22: 72:85:5d:ab:4d:cd:d5:2e:1a:56:bc:e0:95:c7:91: d4:b1:14:ab:cc:28:e7:f7:08:19:71:33:7d:63:d8: 18:d8:42:da:b9:7e:87:9a:b3:22:c6:1b:39:84:b0: 37:eb:16:24:15:10:55:3c:2b:71:9e:01:5c:1a:af: 8b:32:60:88:37:04:63:ee:55:0f:04:40:c2:9b:3f: 94:75:f6:58:c5:34:a4:47:88:b2:18:18:d3:75:26: 4f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:54:DE:43:35:9D:C8:47:81:D1:E8:CC:56:8C:71:68:96:CD:3A:60 X509v3 Authority Key Identifier: keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:50:6f:5d:c1:ac:13:49:2f:98:86:27:f9:50:56:8a:d4:cd: 37:cb:a7:b9:25:49:14:8a:8c:65:19:f1:d3:c3:57:9f:b7:10: 4d:b5:aa:14:ab:62:cc:57:11:bc:ac:b4:35:ac:e8:b0:12:39: f3:de:5c:87:de:8a:b4:8d:e2:85:d2:73:78:06:8e:4d:b3:a5: e7:25:ac:fb:4d:2a:3d:9e:f6:cb:8f:dc:c1:f5:66:7a:c0:d6: ec:f9:1e:88:7e:72:33:1d:fe:ac:4b:48:f8:6e:37:a7:e5:6f: 33:c1:21:70:e3:3f:59:d8:a9:75:bd:b1:b7:60:74:2b:f1:56: d2:f4:71:43:72:97:fc:cf:94:6e:cd:e5:db:ea:a5:f8:37:af: 8f:a0:4a:e3:87:3a:26:07:d5:cc:4c:47:ed:ab:f5:95:d1:d1: 0d:11:15:2e:48:2c:a1:39:b4:98:3c:a4:4a:5a:99:ac:0f:24: e1:38:6e:73:ce:34:58:be:fa:cb:4f:07:c0:7d:71:4d:45:1f: 80:98:46:55:26:e3:04:9f:e8:19:3a:50:ca:30:0c:3b:3c:10: d2:e7:3b:05:ce:61:60:67:4b:10:c4:8e:cf:89:9d:be:9a:58: 15:9a:bb:74:c5:51:bb:f0:3e:2b:87:cc:5d:9f:71:9c:36:2a: 1a:bc:fe:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaDjMfcYfAnyUEh7o0Yu0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGQ5ZDZiNjk3Y2ExYzg2NTcwYzI1Njg2MmU2ODU4YjQ3 OTljODUwHhcNMjUxMjE4MTcwMDQ5WhcNMjUxMjE5MTcwMDQ5WjAzMTEwLwYDVQQD EyhiNDU0ZGU0MzM1OWRjODQ3ODFkMWU4Y2M1NjhjNzE2ODk2Y2QzYTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4O3wHzrNlTZ8xFHmxGJD/aGyRDB ercqTEAN2uZRJ1QQhzbrd+auJuUGdrSv4fHt1tXcsc2mqPoHZEpHXixjTmRwCBPS juA38PcQQTF3JIujdTfm/7GAaCQVqA+L2AdJwNwZ8ddkZpDhdkgZaPoQyf6MIrbe g8Z/l1tpprMdl9iDxLfK4ymfuNLGkRpZhesZXxbg5a9pV8D3mRXHQoV2bqh1hSJy hV2rTc3VLhpWvOCVx5HUsRSrzCjn9wgZcTN9Y9gY2ELauX6HmrMixhs5hLA36xYk FRBVPCtxngFcGq+LMmCINwRj7lUPBEDCmz+UdfZYxTSkR4iyGBjTdSZP7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRU3kM1nchHgdHozFaMcWiWzTpgMB8GA1UdIwQY MBaAFN4NnWtpfKHIZXDCVoYuaFi0eZyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYt MDFjYmZjMGU5NGU3LzEvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYtMDFjYmZjMGU5NGU3 LzEvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1BvXcGs E0kvmIYn+VBWitTNN8unuSVJFIqMZRnx08NXn7cQTbWqFKtizFcRvKy0NazosBI5 895ch96KtI3ihdJzeAaOTbOl5yWs+00qPZ72y4/cwfVmesDW7PkeiH5yMx3+rEtI +G43p+VvM8EhcOM/Wdipdb2xt2B0K/FW0vRxQ3KX/M+Ubs3l2+ql+Devj6BK44c6 JgfVzExH7av1ldHRDREVLkgsoTm0mDykSlqZrA8k4Thuc840WL76y08HwH1xTUUf gJhGVSbjBJ/oGTpQyjAMOzwQ0uc7Bc5hYGdLEMSOz4mdvppYFZq7dMVRu/A+K4fM XZ9xnDYqGrz+oQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:03:36 2025 by rpki-client