This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json) Hash identifier: QWNpiqwcCEv6uwnzVGPqHgz2KMmcjtFQgt7B5WtMTZE= Subject key identifier: D3:11:29:30:EC:02:D1:87:14:8A:AD:A9:D4:6E:17:10:7F:BE:96:49 Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4 Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4 Certificate serial: 019B3CB5681AF6DC54D3BD4152EAD80818AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft Manifest number: 0262 Signing time: Sat 20 Dec 2025 17:01:19 +0000 Manifest this update: Sat 20 Dec 2025 17:01:19 +0000 Manifest next update: Sun 21 Dec 2025 17:01:19 +0000 Files and hashes: 1: 1-zM-AxIs8xBhVggB7kaXu3nKz6g.roa (hash: LftIky1Ihf5BPrdrifEnWJNrxUQ7AoG9kgjyQfCqmf0=) 2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: J8TOpvJ2gxN9nFSU1JJbvWt3jLT7QFOXVuNBA9xpRhw=) 3: g2bIRp1_Ofi7tBEEaDVHCapdwAY.roa (hash: mKK0SH1X7uOReLc+h1naUYfsSMGvNovIT24/wKrbp8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:68:1a:f6:dc:54:d3:bd:41:52:ea:d8:08:18:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4 Validity Not Before: Dec 20 17:01:19 2025 GMT Not After : Dec 21 17:01:19 2025 GMT Subject: CN=d3112930ec02d187148aada9d46e17107fbe9649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:58:1e:00:3d:7e:9b:de:12:43:fb:19:86:83: 5f:c0:78:33:c3:53:22:c2:ca:b5:2a:c1:f3:47:20: ac:e9:5d:c5:b8:b5:ba:ba:cc:48:9f:aa:55:59:b1: ce:f7:10:87:30:02:e6:6f:85:ba:2d:66:7e:3a:36: 3f:fd:37:3d:61:12:8c:07:53:45:aa:4b:0e:81:50: 8b:de:6c:29:ee:99:c2:a1:1b:a2:68:e4:c4:34:59: 0b:f4:1e:95:6b:f0:b9:62:b7:a5:54:c8:42:e4:76: 72:fb:29:83:9a:eb:1a:59:bd:b3:28:9d:8c:b0:59: 67:14:44:58:5e:08:3e:f6:27:6d:62:44:74:12:bd: a3:0d:b8:7b:f0:17:84:e4:f4:03:d0:61:e6:6c:85: 39:48:1b:f9:d8:2b:16:6b:cc:3c:57:18:ea:f8:43: 46:8a:e7:a9:c0:6c:06:bb:b7:c0:f8:bb:92:06:d9: 37:39:5e:0b:91:df:70:f8:12:a9:7d:a9:51:3c:c3: 2e:20:cb:72:42:5f:68:91:a8:b7:05:e6:c5:f3:04: e3:3e:3e:11:7e:93:d4:a8:75:80:66:0f:d5:99:d7: 59:80:48:34:09:8f:68:a1:d0:c4:89:61:38:89:8f: 15:ec:7a:ac:f9:47:da:ea:d8:a5:6c:f7:3c:37:d5: 0a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:11:29:30:EC:02:D1:87:14:8A:AD:A9:D4:6E:17:10:7F:BE:96:49 X509v3 Authority Key Identifier: keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:6b:45:e9:59:b7:86:b6:77:89:90:74:1b:5b:fd:8b:c1:08: 64:3b:91:35:44:55:de:71:c5:31:05:a3:b1:c4:90:a7:f4:e3: f4:00:f6:9b:ec:96:1f:ab:f7:b8:b6:e7:98:21:95:02:61:91: f4:4e:96:4d:df:31:d4:ca:d5:55:f0:a3:5a:71:6f:7b:e8:27: 91:6e:31:0d:35:a1:d2:e3:2d:ce:e1:7f:1e:ec:f1:27:69:05: 72:af:c2:99:3c:1c:56:2d:f8:c1:56:be:ae:94:58:bd:1b:bd: cd:b9:6d:04:f5:d6:6d:05:53:79:e3:96:16:3b:3f:a8:96:d7: 98:65:73:1f:fb:32:a6:83:75:80:96:8d:bf:4c:b6:f7:52:99: d9:1c:b9:f6:f4:5c:64:22:67:85:53:fb:ee:8d:68:0b:f7:60: 1c:a3:5c:b0:89:ad:17:cf:23:98:a9:5a:ed:56:f0:63:c8:9f: 7c:70:0d:51:c6:9f:d5:a6:c0:b1:8a:11:ab:55:aa:4f:91:88: 4f:2f:51:51:22:d7:ec:95:4d:c0:ca:9b:fe:66:3c:e3:7b:1b: f7:61:2a:3c:56:de:9e:01:af:7f:54:a8:73:22:5e:95:ea:60: 13:eb:f7:e6:bf:25:dc:6c:ba:ea:b0:32:1c:bb:d0:b7:72:2c: f6:32:b2:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tWga9txU071BUurYCBivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNzNiMDU2ZjhkMGZhOTk2ZDY4MzNjMzBiMWZkNzhlN2Q5 NzlhYzQwHhcNMjUxMjIwMTcwMTE5WhcNMjUxMjIxMTcwMTE5WjAzMTEwLwYDVQQD EyhkMzExMjkzMGVjMDJkMTg3MTQ4YWFkYTlkNDZlMTcxMDdmYmU5NjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41geAD1+m94SQ/sZhoNfwHgzw1Mi wsq1KsHzRyCs6V3FuLW6usxIn6pVWbHO9xCHMALmb4W6LWZ+OjY//Tc9YRKMB1NF qksOgVCL3mwp7pnCoRuiaOTENFkL9B6Va/C5YrelVMhC5HZy+ymDmusaWb2zKJ2M sFlnFERYXgg+9idtYkR0Er2jDbh78BeE5PQD0GHmbIU5SBv52CsWa8w8Vxjq+ENG iuepwGwGu7fA+LuSBtk3OV4Lkd9w+BKpfalRPMMuIMtyQl9okai3BebF8wTjPj4R fpPUqHWAZg/VmddZgEg0CY9oodDEiWE4iY8V7Hqs+Ufa6tilbPc8N9UKvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMRKTDsAtGHFIqtqdRuFxB/vpZJMB8GA1UdIwQY MBaAFE9zsFb40PqZbWgzwwsf1459l5rEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDNPd1Z2alEtcGx0YURQREN4X1hqbjJYbXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yYWNiOGYtMjIyZi00NDczLTkyMDUt MTM5MGEyZDk5ZTBiLzEvVDNPd1Z2alEtcGx0YURQREN4X1hqbjJYbXNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yYWNiOGYtMjIyZi00NDczLTkyMDUtMTM5MGEyZDk5ZTBi LzEvVDNPd1Z2alEtcGx0YURQREN4X1hqbjJYbXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWtF6Vm3 hrZ3iZB0G1v9i8EIZDuRNURV3nHFMQWjscSQp/Tj9AD2m+yWH6v3uLbnmCGVAmGR 9E6WTd8x1MrVVfCjWnFve+gnkW4xDTWh0uMtzuF/HuzxJ2kFcq/CmTwcVi34wVa+ rpRYvRu9zbltBPXWbQVTeeOWFjs/qJbXmGVzH/sypoN1gJaNv0y291KZ2Ry59vRc ZCJnhVP77o1oC/dgHKNcsImtF88jmKla7VbwY8iffHANUcaf1abAsYoRq1WqT5GI Ty9RUSLX7JVNwMqb/mY843sb92EqPFbengGvf1SocyJelepgE+v35r8l3Gy66rAy HLvQt3Is9jKyOw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:16 2025 by rpki-client