This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft File: k3WPkqf9c1m6KEgSWoTfzELRS2w.mft (raw, json) Hash identifier: NV0Et3+4LuYJ3PGNHtSI+9Wy/ZOaaJbs/rB5Bq9PUX4= Subject key identifier: BE:CF:4B:59:92:8F:61:B1:2E:9B:0B:3F:53:A0:57:45:83:55:80:FF Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c Certificate serial: 019B43C9BD6F2E26082A7356DB4E3F3F309C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 02:00:53 +0000 Manifest this update: Mon 22 Dec 2025 02:00:53 +0000 Manifest next update: Tue 23 Dec 2025 02:00:53 +0000 Files and hashes: 1: 3eljxNVJVZAst96YnbvE652QheI.roa (hash: 945B3Tb82Y1r4mEfNvlyjYkVtkNkGVILFWSmWev6li0=) 2: k3WPkqf9c1m6KEgSWoTfzELRS2w.crl (hash: OKJDNvcZZ2od/ctVtZGTmKwmOOPF5XQUvSz1dnHqL80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:bd:6f:2e:26:08:2a:73:56:db:4e:3f:3f:30:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c Validity Not Before: Dec 22 02:00:53 2025 GMT Not After : Dec 23 02:00:53 2025 GMT Subject: CN=becf4b59928f61b12e9b0b3f53a05745835580ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:53:ab:68:e0:57:a9:13:b0:1c:f9:62:7b: b5:39:7b:b4:1c:6b:99:16:95:94:83:e3:d4:cb:11: 02:c2:32:ce:65:a1:dd:37:91:71:d2:d0:9a:b7:8b: 7c:00:e5:c8:75:f9:a2:d7:d4:f2:c3:10:e9:4f:e7: 46:97:f3:28:2e:42:36:a6:b0:09:c5:ff:a3:3c:6e: 09:3a:24:02:1f:3a:c3:7d:d6:fb:ed:70:ce:0a:5a: 3c:2d:c6:d7:76:4c:0c:94:05:0c:12:61:94:8a:3d: 84:cb:de:14:22:20:d8:d6:5f:05:6c:ac:74:ca:88: 30:fb:f5:82:cd:9c:a6:06:f8:87:f8:f0:1d:4c:4b: fd:ce:e0:ac:e9:80:ee:29:76:7a:b5:1a:1e:1a:2a: 60:9c:3e:31:af:89:8d:cd:5f:81:1b:e1:5f:9e:8f: 8d:c9:93:fa:35:83:9f:de:11:d7:20:aa:25:fd:e4: df:f2:83:35:86:e3:3f:ed:19:dc:ea:7b:ba:f2:ae: 2d:bb:56:45:c6:88:16:a5:49:72:83:54:e6:83:fd: 3d:08:b6:ee:5c:ac:f8:46:b4:c6:5b:03:bc:16:80: 6d:c9:89:5f:51:66:56:a6:fa:91:34:5d:3c:72:66: eb:e2:27:cc:d8:a8:33:f1:0b:1d:c4:1d:c9:86:1b: a1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CF:4B:59:92:8F:61:B1:2E:9B:0B:3F:53:A0:57:45:83:55:80:FF X509v3 Authority Key Identifier: keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:42:96:0f:6d:17:e8:59:77:d2:2d:f5:5d:a9:b4:40:a4:3a: 31:dc:d8:1c:f1:6f:20:a3:c5:f0:08:94:64:9d:ce:9b:a5:e3: d8:7d:8d:01:c9:d2:63:63:50:21:aa:ae:d8:66:e3:ee:96:5d: b3:54:37:5d:c4:41:94:fa:af:e1:4a:6b:bd:18:18:5d:6c:f8: a2:08:6b:2c:9a:e7:16:ce:e8:11:69:8b:fc:3d:ec:39:0f:e7: c6:67:77:d3:f6:89:27:df:63:7b:f5:1f:79:cb:d6:a0:13:f2: 8a:3e:2c:5d:d2:41:ed:a7:ec:96:f8:d0:0b:15:d9:f6:32:90: ba:c2:d6:1f:50:67:07:dd:f3:7f:17:04:20:62:77:78:d5:f4: df:45:b4:c7:47:c6:11:97:a4:2b:43:02:c0:4b:0c:d8:c8:e8: 3a:36:b9:05:1c:56:4d:07:bb:99:7c:1a:92:16:1c:57:91:4d: 0a:93:7a:8d:c4:a9:9a:c9:ce:08:b9:16:16:1c:5d:29:63:c2: 17:bc:11:9e:76:e5:ae:d7:87:37:70:54:fe:93:06:26:c9:c1: db:14:f3:66:31:91:37:71:04:56:74:b3:0d:e9:3f:eb:d9:18: cb:4c:e1:9b:77:a7:28:28:6b:40:49:93:36:97:18:e0:a8:08: 10:95:52:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyb1vLiYIKnNW204/PzCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNzU4ZjkyYTdmZDczNTliYTI4NDgxMjVhODRkZmNjNDJk MTRiNmMwHhcNMjUxMjIyMDIwMDUzWhcNMjUxMjIzMDIwMDUzWjAzMTEwLwYDVQQD EyhiZWNmNGI1OTkyOGY2MWIxMmU5YjBiM2Y1M2EwNTc0NTgzNTU4MGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDtTq2jgV6kTsBz5Ynu1OXu0HGuZ FpWUg+PUyxECwjLOZaHdN5Fx0tCat4t8AOXIdfmi19TywxDpT+dGl/MoLkI2prAJ xf+jPG4JOiQCHzrDfdb77XDOClo8LcbXdkwMlAUMEmGUij2Ey94UIiDY1l8FbKx0 yogw+/WCzZymBviH+PAdTEv9zuCs6YDuKXZ6tRoeGipgnD4xr4mNzV+BG+Ffno+N yZP6NYOf3hHXIKol/eTf8oM1huM/7Rnc6nu68q4tu1ZFxogWpUlyg1Tmg/09CLbu XKz4RrTGWwO8FoBtyYlfUWZWpvqRNF08cmbr4ifM2Kgz8QsdxB3JhhuhoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7PS1mSj2GxLpsLP1OgV0WDVYD/MB8GA1UdIwQY MBaAFJN1j5Kn/XNZuihIElqE38xC0UtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZjZkNGEtMTE2Ni00ZDJkLWE5MjEt ZTE0M2ZhYWEwYjgyLzEvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wZjZkNGEtMTE2Ni00ZDJkLWE5MjEtZTE0M2ZhYWEwYjgy LzEvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUKWD20X 6Fl30i31Xam0QKQ6MdzYHPFvIKPF8AiUZJ3Om6Xj2H2NAcnSY2NQIaqu2Gbj7pZd s1Q3XcRBlPqv4UprvRgYXWz4oghrLJrnFs7oEWmL/D3sOQ/nxmd30/aJJ99je/Uf ecvWoBPyij4sXdJB7afslvjQCxXZ9jKQusLWH1BnB93zfxcEIGJ3eNX030W0x0fG EZekK0MCwEsM2MjoOja5BRxWTQe7mXwakhYcV5FNCpN6jcSpmsnOCLkWFhxdKWPC F7wRnnblrteHN3BU/pMGJsnB2xTzZjGRN3EEVnSzDek/69kYy0zhm3enKChrQEmT NpcY4KgIEJVSgQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:43:59 2025 by rpki-client