This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json) Hash identifier: tbWv1ee9Vz9MEK39zFS8SM5dx92oKZxO1hiy2hh1MBc= Subject key identifier: E5:04:CF:23:FD:D7:C6:52:04:4E:7B:48:21:FD:62:1F:D6:CC:61:3D Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Certificate serial: 019B6B7C6AADF6C454EB78E7D44D5C636160 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft Manifest number: 17A2 Signing time: Mon 29 Dec 2025 19:01:14 +0000 Manifest this update: Mon 29 Dec 2025 19:01:14 +0000 Manifest next update: Tue 30 Dec 2025 19:01:14 +0000 Files and hashes: 1: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: atfT2WdA+eOGZhXlUZ1m1My0fDnjnGLZ4HVvGHUFXBI=) 2: Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa (hash: jrXo/rmKfJlmke1E58p0Fv3ALUTTjd9LLG6tbA+jiaw=) 3: V04OCx0o1Bg0TgD8MO6kNsFMhog.roa (hash: 3a02UAIxWYHpz8tUKE7mHvONTRM/Wnqwu/RQszMGhpw=) 4: js9oNFtAP6uoXkguET2ifOtGxFk.roa (hash: xlI8bBSGf/iOY2KLlBGfTCvLGclFsfTElrxGe6FfxvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:7c:6a:ad:f6:c4:54:eb:78:e7:d4:4d:5c:63:61:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Validity Not Before: Dec 29 19:01:14 2025 GMT Not After : Dec 30 19:01:14 2025 GMT Subject: CN=e504cf23fdd7c652044e7b4821fd621fd6cc613d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:7c:98:3b:87:fa:71:3d:b4:0e:8d:4d:53: 53:d2:d0:0b:29:b1:cd:24:b2:62:2f:5f:e9:9e:72: 3a:d2:a2:66:1e:a6:05:96:9c:ff:5a:c2:0a:32:90: 5b:1e:d2:0a:2e:e6:6f:21:ae:df:ff:4e:f3:c7:cb: 70:f9:f7:16:4f:1e:38:7d:e8:c2:fc:56:83:8b:e7: b4:c9:eb:1b:03:9f:1e:a7:96:aa:43:b0:63:8b:be: 4e:78:04:3f:58:60:48:08:92:3a:5c:43:fd:cc:82: 72:89:c8:17:8c:82:aa:03:04:1a:78:6d:35:56:aa: 55:9b:3b:1f:09:22:8f:18:83:40:b1:6d:17:2d:09: 0d:cd:a5:92:6f:5e:f0:08:49:3d:71:dd:b8:08:57: af:ed:3a:59:33:35:59:e4:82:7d:6f:4e:17:80:18: f5:1c:17:71:48:87:02:5a:28:9a:69:2f:bc:f6:e4: 5d:1b:ce:62:6a:b3:22:63:2f:ea:c6:d2:b5:b9:c1: a1:4a:4e:24:f3:9c:b3:05:9b:b4:b2:c6:91:c6:55: a1:d0:67:5f:8e:30:9d:d4:dc:d0:75:6a:fd:6d:db: 88:db:2d:d3:ad:db:18:c7:a8:b6:48:20:49:cb:f3: b1:60:b0:cb:b9:de:d3:07:d8:71:4e:0c:d6:63:cc: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:04:CF:23:FD:D7:C6:52:04:4E:7B:48:21:FD:62:1F:D6:CC:61:3D X509v3 Authority Key Identifier: keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:4b:49:c4:ab:e0:62:02:58:85:53:b6:c6:0a:bc:9f:10:8d: 40:ba:d9:eb:f7:54:89:89:a5:3e:02:c1:74:07:04:b1:36:79: b5:d7:37:bf:c1:f5:96:45:72:67:a8:1e:bc:e1:02:c2:23:ed: 51:c7:de:52:4c:d4:01:1b:af:18:d8:05:bb:86:44:8a:3b:e4: 13:6b:96:c2:5a:65:9f:1b:40:d8:a8:61:36:c6:a8:e1:a2:4a: 4f:46:25:e5:08:00:13:78:c3:97:58:71:80:0f:0e:bc:de:30: 7b:fd:c8:46:c8:3b:02:77:95:a5:da:8e:d4:dd:fb:c6:4c:e0: b2:28:bc:08:7d:7f:23:55:e7:48:54:e9:a5:fe:fc:38:29:27: 67:c4:05:c2:fb:e8:81:e0:5a:62:83:d0:0e:6a:6f:09:24:2c: 6d:19:e4:2a:2a:b8:97:7d:53:fa:6b:81:d6:58:60:8e:86:a9: 75:79:18:43:f9:ec:de:66:d8:ee:c7:88:39:dc:bd:c7:11:89: b4:ef:ab:73:25:52:87:79:1c:98:04:25:0f:ce:78:0c:0e:79: fb:35:71:33:6d:6b:b8:5c:80:ca:65:53:0d:c1:47:38:b5:0d: b9:82:61:f3:60:22:8a:1a:46:db:c5:71:aa:b0:6e:61:7d:a3: f2:67:2f:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrfGqt9sRU63jn1E1cY2FgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGRlM2FkMThkZDBhZTE0MzYyZDBlODRkZWMwNDNkMzc5 Y2MyNDIwHhcNMjUxMjI5MTkwMTE0WhcNMjUxMjMwMTkwMTE0WjAzMTEwLwYDVQQD EyhlNTA0Y2YyM2ZkZDdjNjUyMDQ0ZTdiNDgyMWZkNjIxZmQ2Y2M2MTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPd8mDuH+nE9tA6NTVNT0tALKbHN JLJiL1/pnnI60qJmHqYFlpz/WsIKMpBbHtIKLuZvIa7f/07zx8tw+fcWTx44fejC /FaDi+e0yesbA58ep5aqQ7Bji75OeAQ/WGBICJI6XEP9zIJyicgXjIKqAwQaeG01 VqpVmzsfCSKPGINAsW0XLQkNzaWSb17wCEk9cd24CFev7TpZMzVZ5IJ9b04XgBj1 HBdxSIcCWiiaaS+89uRdG85iarMiYy/qxtK1ucGhSk4k85yzBZu0ssaRxlWh0Gdf jjCd1NzQdWr9bduI2y3TrdsYx6i2SCBJy/OxYLDLud7TB9hxTgzWY8wRTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUEzyP918ZSBE57SCH9Yh/WzGE9MB8GA1UdIwQY MBaAFCCN460Y3QrhQ2LQ6E3sBD03nMJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjIt YmRmNmU0Mjk0YzJlLzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjItYmRmNmU0Mjk0YzJl LzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArktJxKvg YgJYhVO2xgq8nxCNQLrZ6/dUiYmlPgLBdAcEsTZ5tdc3v8H1lkVyZ6gevOECwiPt UcfeUkzUARuvGNgFu4ZEijvkE2uWwlplnxtA2KhhNsao4aJKT0Yl5QgAE3jDl1hx gA8OvN4we/3IRsg7AneVpdqO1N37xkzgsii8CH1/I1XnSFTppf78OCknZ8QFwvvo geBaYoPQDmpvCSQsbRnkKiq4l31T+muB1lhgjoapdXkYQ/ns3mbY7seIOdy9xxGJ tO+rcyVSh3kcmAQlD854DA55+zVxM21ruFyAymVTDcFHOLUNuYJh82AiihpG28Vx qrBuYX2j8mcvOw== -----END CERTIFICATE-----Generated at Tue Dec 30 04:34:16 2025 by rpki-client