This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json) Hash identifier: EgGOJZtIIcVUHtLBY+i7YFYyEMKHqJICrc3Ck2LKLtE= Subject key identifier: B1:CC:48:12:16:F1:5B:FE:29:1F:2A:39:3F:0D:DA:FA:2A:B5:53:2E Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Certificate serial: 019B3A8FD03CDAC12D6718CE3A373EE00B20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft Manifest number: 1228 Signing time: Sat 20 Dec 2025 07:01:02 +0000 Manifest this update: Sat 20 Dec 2025 07:01:02 +0000 Manifest next update: Sun 21 Dec 2025 07:01:02 +0000 Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: Go1U4chRkJPDui0gsVhhxJQHZveJj16Anfinqn+WAME=) 2: FmBFQOhNzhtYDdGU28d2mOWYxkg.roa (hash: AVAVJ+z2q5E9uU0vpHh6beNWBbBTBuDWNk3vwtJ8KHM=) 3: a8dfbuD_49og8AJXwHhNJcwaxsI.roa (hash: W1ipPbq868Ly393rgOf3eds1bM0F3aTAdVR1mM1YvM4=) 4: ebI6lo6FFyrxH7BnniqczSoCpEU.roa (hash: VWIQku3g+eu08iWePk/+zF+lAvowuzYaw8AhxuX9/iY=) 5: h_jTHer5Aq23wlLkPIW1wlKNXPE.roa (hash: nVtfZn1IYIFfisIxpB4xff8+atfWV/QRp+DmC3kUKFE=) 6: iEjwphsnsCkTvYcagBPKufnt2-g.roa (hash: exQmAtQ6POft9PaSsq76nVkrM+e0e7z6aqVk5GRVWO8=) 7: rhaUzcqQYW4tC3EdQCdaNLWOPbA.roa (hash: PvCUNKVTR3gGQiqq6yWqtNwJ314FXo4VLynnYKTFbJo=) 8: uEehilTaJNTK6wTZHHdxxqFauYo.roa (hash: tRIraXpN8mX3nJ3uL7fIgHQ/edV3rhiXldnw6ddpk0I=) 9: x6Fr-1VeTypvMg38CuYZL6Aoelo.roa (hash: ajAlNUJcOgM2msZH/aiPOA3cqagu5/2Oq4Xgzqwcm3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:d0:3c:da:c1:2d:67:18:ce:3a:37:3e:e0:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Validity Not Before: Dec 20 07:01:02 2025 GMT Not After : Dec 21 07:01:02 2025 GMT Subject: CN=b1cc481216f15bfe291f2a393f0ddafa2ab5532e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:99:59:ee:ee:d0:50:48:0f:1f:c4:8d:14:63: c3:ba:fc:72:91:e6:c7:fd:fc:e8:68:49:5f:c9:c9: 4a:58:b0:0f:35:4e:97:dc:b4:18:24:20:cc:9c:ca: a4:0b:75:cc:1e:24:63:39:0b:b1:06:c7:ac:57:c8: 37:de:d9:ea:4e:52:e4:08:4d:b1:93:d4:76:81:47: 11:c8:9d:10:4c:c2:13:38:b6:ca:5d:6d:bc:84:6f: a0:42:41:cc:77:cc:11:85:d3:0f:d3:40:2e:e2:91: af:8c:e2:a9:fc:31:e9:80:9f:97:36:f2:77:28:4f: d9:7e:6b:34:b7:18:50:1a:8f:74:2d:b1:e4:22:3d: c4:55:55:4c:5e:88:d5:9c:b3:b2:fb:12:00:71:ce: 25:56:7f:d2:0a:37:5b:75:4f:09:b0:91:da:6e:34: 66:03:3b:0d:0a:82:14:36:29:4d:f3:28:fc:36:b5: 94:be:c1:0d:f6:f4:0d:85:19:31:14:6e:d3:42:35: dd:82:3b:cf:48:de:16:27:98:5c:8f:45:63:4b:80: f1:c7:06:76:04:c8:23:2a:fb:d1:e5:10:a2:6f:03: 14:df:f1:5e:02:43:7f:df:41:34:a8:6a:a0:af:b2: a7:49:0d:5b:84:78:4c:41:22:f4:f6:fa:16:06:27: 19:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CC:48:12:16:F1:5B:FE:29:1F:2A:39:3F:0D:DA:FA:2A:B5:53:2E X509v3 Authority Key Identifier: keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:66:36:ea:2f:58:0a:59:58:04:a8:26:14:a7:c5:14:16:ce: 66:66:89:26:70:26:ab:28:98:08:db:df:4d:f9:d8:6c:55:9c: a7:ca:86:57:a5:7a:c8:fb:96:bf:07:7a:ef:be:74:24:06:2c: a5:7f:b1:d2:ce:0e:18:79:ea:0d:c6:42:18:1a:78:9e:66:58: ed:aa:f5:00:a4:c2:1c:88:41:e3:a6:0a:d4:e8:28:99:66:56: 9d:16:52:3f:05:74:7e:75:b3:16:68:9f:10:79:e6:20:b2:af: 2d:d4:33:7a:37:5c:91:ed:cf:9e:c8:d3:c9:29:0f:60:eb:f1: 0e:fa:74:b2:86:19:8b:28:a8:ca:a6:8e:17:5b:6e:93:0e:a4: 5d:ad:5e:c6:8a:6d:46:e2:3e:a5:b3:35:51:a0:ce:d9:4d:4f: 1f:fb:bb:27:bd:72:12:e9:71:cf:80:16:bb:77:2e:e0:4b:aa: dc:0f:0c:96:6b:9a:0b:96:a0:f2:86:cb:f8:c9:73:31:bd:92: 69:0b:db:99:67:7e:0e:e6:d3:9c:38:14:6c:0e:e7:a0:e1:0f: bc:5b:80:16:57:0f:04:72:f2:0b:46:b7:81:41:61:de:13:fd: cc:59:e0:7e:70:66:cf:f0:b5:c8:a2:06:40:cb:90:41:49:44: b6:cb:d9:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j9A82sEtZxjOOjc+4AsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3 NGNjYjcwHhcNMjUxMjIwMDcwMTAyWhcNMjUxMjIxMDcwMTAyWjAzMTEwLwYDVQQD EyhiMWNjNDgxMjE2ZjE1YmZlMjkxZjJhMzkzZjBkZGFmYTJhYjU1MzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65lZ7u7QUEgPH8SNFGPDuvxykebH /fzoaElfyclKWLAPNU6X3LQYJCDMnMqkC3XMHiRjOQuxBsesV8g33tnqTlLkCE2x k9R2gUcRyJ0QTMITOLbKXW28hG+gQkHMd8wRhdMP00Au4pGvjOKp/DHpgJ+XNvJ3 KE/Zfms0txhQGo90LbHkIj3EVVVMXojVnLOy+xIAcc4lVn/SCjdbdU8JsJHabjRm AzsNCoIUNilN8yj8NrWUvsEN9vQNhRkxFG7TQjXdgjvPSN4WJ5hcj0VjS4DxxwZ2 BMgjKvvR5RCibwMU3/FeAkN/30E0qGqgr7KnSQ1bhHhMQSL09voWBicZRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHMSBIW8Vv+KR8qOT8N2voqtVMuMB8GA1UdIwQY MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt NmJhYTNiNTQ4ZDIzLzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2Y26i9Y CllYBKgmFKfFFBbOZmaJJnAmqyiYCNvfTfnYbFWcp8qGV6V6yPuWvwd67750JAYs pX+x0s4OGHnqDcZCGBp4nmZY7ar1AKTCHIhB46YK1OgomWZWnRZSPwV0fnWzFmif EHnmILKvLdQzejdcke3PnsjTySkPYOvxDvp0soYZiyioyqaOF1tukw6kXa1exopt RuI+pbM1UaDO2U1PH/u7J71yEulxz4AWu3cu4Euq3A8MlmuaC5ag8obL+MlzMb2S aQvbmWd+DubTnDgUbA7noOEPvFuAFlcPBHLyC0a3gUFh3hP9zFngfnBmz/C1yKIG QMuQQUlEtsvZeQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:01:22 2025 by rpki-client