This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json) Hash identifier: R5jkRc/J9Tog+jmVb5yUiQ+DHTwijxXYtILMMj5YCNI= Subject key identifier: 24:FA:41:39:22:1D:D4:35:CF:E3:5D:9F:3D:B4:93:40:56:C8:3A:04 Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Certificate serial: 019B39468CAA3761E0093273B5FACB76F56E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 01:01:23 +0000 Manifest this update: Sat 20 Dec 2025 01:01:23 +0000 Manifest next update: Sun 21 Dec 2025 01:01:23 +0000 Files and hashes: 1: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: QAlmwcmrWDhQ5WYcxoCoGlNRJjzCznBNdi6Ya7af1wU=) 2: Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa (hash: jrXo/rmKfJlmke1E58p0Fv3ALUTTjd9LLG6tbA+jiaw=) 3: V04OCx0o1Bg0TgD8MO6kNsFMhog.roa (hash: 3a02UAIxWYHpz8tUKE7mHvONTRM/Wnqwu/RQszMGhpw=) 4: js9oNFtAP6uoXkguET2ifOtGxFk.roa (hash: xlI8bBSGf/iOY2KLlBGfTCvLGclFsfTElrxGe6FfxvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:8c:aa:37:61:e0:09:32:73:b5:fa:cb:76:f5:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Validity Not Before: Dec 20 01:01:23 2025 GMT Not After : Dec 21 01:01:23 2025 GMT Subject: CN=24fa4139221dd435cfe35d9f3db4934056c83a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4a:32:62:b0:a0:18:8e:ee:0c:0a:ff:65:1b: e1:73:67:ed:a2:a5:35:62:6a:bd:33:bb:ba:f5:d6: 40:49:3d:65:ee:4a:0a:a6:cb:21:d1:f3:49:30:bc: 8e:60:eb:32:42:ee:55:f9:f6:c6:d5:5b:ae:ca:bc: 63:25:3f:00:52:11:d4:ee:b1:bc:e5:92:7b:7f:9b: 48:98:79:73:43:c6:5d:3f:d9:e7:dd:d9:23:19:19: 5f:6a:9c:7d:04:db:a8:62:c0:50:63:89:0a:86:5d: cc:58:8f:d6:51:98:73:ac:10:f1:3f:a0:a2:a7:4d: 49:91:e0:34:ca:42:98:c2:a5:d5:04:78:63:c6:a0: ad:da:1e:19:76:48:56:9c:0b:46:ad:b9:fb:b2:f5: 65:ac:13:b9:55:c9:9f:2f:3a:62:1e:f8:ac:27:a5: b7:0d:14:a8:6b:7c:93:5b:5c:90:3f:83:01:8b:97: 6c:4f:66:fc:82:5a:e5:a8:1e:be:c4:50:22:7c:c5: 60:62:68:4e:30:45:ee:74:90:c5:e6:d4:d8:59:e6: f0:3b:47:a0:13:bc:29:67:d8:b0:3d:a2:78:4e:fd: 68:5a:2f:d1:97:6c:f1:fb:9c:5b:fd:7d:31:4b:23: 90:04:d2:dc:58:4e:b8:76:e7:ea:d2:94:fc:86:8d: 7a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FA:41:39:22:1D:D4:35:CF:E3:5D:9F:3D:B4:93:40:56:C8:3A:04 X509v3 Authority Key Identifier: keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9a:40:06:9f:06:67:11:9d:37:00:ff:d4:f3:5c:55:dd:7f: a7:d0:62:11:97:bb:9e:26:48:36:1d:ac:de:ca:e6:de:73:ae: ae:ba:3c:f5:ce:27:39:5a:a7:63:6d:f4:49:23:a5:19:46:41: 85:bd:18:0e:eb:08:76:87:d5:2a:39:a9:71:38:3c:29:f0:df: c5:4c:c0:c8:84:c3:0d:d8:35:c0:a1:d7:17:dd:7a:81:f2:a5: d6:88:66:fd:c5:12:03:fb:26:22:62:22:61:f9:65:81:de:c6: da:40:c1:3b:21:ca:a6:49:74:b1:fb:1f:1b:a8:9e:ff:e3:36: 40:d4:50:2d:f4:d0:67:a2:37:8c:3a:08:13:12:8b:71:f6:05: 9d:2c:ba:4b:3d:c0:e6:b6:83:f5:02:00:84:41:1f:25:8a:50: d7:4d:9e:c9:e2:e2:77:de:e7:54:8a:9f:d6:40:e3:2d:f1:48: ea:0d:38:89:be:a5:34:7e:c6:8a:97:3f:38:46:81:0b:1e:28: 92:e7:b8:48:06:dd:70:ea:d3:69:57:39:f1:e0:7d:ec:df:38: 1c:4e:d1:22:84:46:1d:71:37:9f:da:cf:f8:62:fa:c7:b9:6a: b1:e5:9f:44:a0:e9:b5:7b:4c:b5:9a:a8:31:12:3e:b0:ec:79: af:03:5a:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RoyqN2HgCTJztfrLdvVuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGRlM2FkMThkZDBhZTE0MzYyZDBlODRkZWMwNDNkMzc5 Y2MyNDIwHhcNMjUxMjIwMDEwMTIzWhcNMjUxMjIxMDEwMTIzWjAzMTEwLwYDVQQD EygyNGZhNDEzOTIyMWRkNDM1Y2ZlMzVkOWYzZGI0OTM0MDU2YzgzYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEoyYrCgGI7uDAr/ZRvhc2ftoqU1 Ymq9M7u69dZAST1l7koKpssh0fNJMLyOYOsyQu5V+fbG1VuuyrxjJT8AUhHU7rG8 5ZJ7f5tImHlzQ8ZdP9nn3dkjGRlfapx9BNuoYsBQY4kKhl3MWI/WUZhzrBDxP6Ci p01JkeA0ykKYwqXVBHhjxqCt2h4ZdkhWnAtGrbn7svVlrBO5VcmfLzpiHvisJ6W3 DRSoa3yTW1yQP4MBi5dsT2b8glrlqB6+xFAifMVgYmhOMEXudJDF5tTYWebwO0eg E7wpZ9iwPaJ4Tv1oWi/Rl2zx+5xb/X0xSyOQBNLcWE64dufq0pT8ho16bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCT6QTkiHdQ1z+Ndnz20k0BWyDoEMB8GA1UdIwQY MBaAFCCN460Y3QrhQ2LQ6E3sBD03nMJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjIt YmRmNmU0Mjk0YzJlLzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjItYmRmNmU0Mjk0YzJl LzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAppABp8G ZxGdNwD/1PNcVd1/p9BiEZe7niZINh2s3srm3nOurro89c4nOVqnY230SSOlGUZB hb0YDusIdofVKjmpcTg8KfDfxUzAyITDDdg1wKHXF916gfKl1ohm/cUSA/smImIi Yfllgd7G2kDBOyHKpkl0sfsfG6ie/+M2QNRQLfTQZ6I3jDoIExKLcfYFnSy6Sz3A 5raD9QIAhEEfJYpQ102eyeLid97nVIqf1kDjLfFI6g04ib6lNH7Gipc/OEaBCx4o kue4SAbdcOrTaVc58eB97N84HE7RIoRGHXE3n9rP+GL6x7lqseWfRKDptXtMtZqo MRI+sOx5rwNa6g== -----END CERTIFICATE-----Generated at Sat Dec 20 09:29:05 2025 by rpki-client