This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json) Hash identifier: uD4apM7okPQbsjVIpwoo2JHU1AcrkoXPiwVPGq+XmG8= Subject key identifier: AD:06:C3:C1:26:E5:60:1F:19:50:C9:51:E0:19:C0:D5:86:03:05:9D Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4 Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4 Certificate serial: 019B66FA97032A02C1D96884FFABCEB395E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft Manifest number: 0AA3 Signing time: Sun 28 Dec 2025 22:00:57 +0000 Manifest this update: Sun 28 Dec 2025 22:00:57 +0000 Manifest next update: Mon 29 Dec 2025 22:00:57 +0000 Files and hashes: 1: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: 9Hm5kxXweQVw8o1XQ1WQKAazzrhiEI1vs3D3INvMzIw=) 2: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (hash: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fa:97:03:2a:02:c1:d9:68:84:ff:ab:ce:b3:95:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4 Validity Not Before: Dec 28 22:00:57 2025 GMT Not After : Dec 29 22:00:57 2025 GMT Subject: CN=ad06c3c126e5601f1950c951e019c0d58603059d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cb:5a:12:af:58:1a:3e:52:fa:32:b1:56:48: 15:c2:95:6e:8f:11:8f:ae:92:48:12:07:6b:2f:18: 87:cf:1e:20:21:f6:02:2d:52:75:2f:4f:d8:71:17: 44:dc:e3:6d:d2:08:cd:80:3b:ce:27:3f:5a:dc:2d: 74:57:c6:98:65:1b:04:f3:23:78:76:ac:2a:4c:5c: a4:e2:1f:e5:5e:59:71:df:aa:9f:2c:42:29:5f:82: e0:f9:32:cb:8c:14:22:c8:b8:e3:1c:1f:01:66:08: a4:e9:51:9c:82:ce:9c:1d:20:b4:d4:8d:8c:92:4c: 18:85:f4:85:d0:84:c1:c6:e2:f9:be:8c:e8:94:1d: 9a:24:7b:6d:06:ec:e5:3a:99:56:30:3f:3f:d0:62: 60:f2:b1:30:d7:5e:f8:5f:9e:e6:55:5c:70:b3:f1: e3:a0:a9:d9:58:47:e8:83:c9:4c:bf:27:4a:87:7d: 85:06:2d:5f:a5:16:ea:66:6f:d4:f3:6d:70:c7:57: 7f:e9:00:5b:d0:03:5a:85:e3:51:38:7b:c5:e8:0c: 74:9c:c9:a7:ee:b6:6f:83:69:a2:79:63:6e:8e:8c: a4:c2:f1:19:7c:cd:80:8d:86:06:90:48:47:c3:66: f6:fb:37:8d:33:f4:04:e8:a0:2f:e0:f2:bc:0f:1e: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:06:C3:C1:26:E5:60:1F:19:50:C9:51:E0:19:C0:D5:86:03:05:9D X509v3 Authority Key Identifier: keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:6d:77:cd:bc:b3:35:c3:d3:eb:56:af:82:d6:0e:39:d4:5a: ee:74:81:21:a9:19:a4:76:0d:2a:55:c5:e8:d7:cc:45:94:0e: 7e:37:d8:60:1b:9e:54:fa:62:4d:10:ab:62:36:e7:6c:2c:bd: b8:4b:90:90:c5:91:bf:f2:36:6a:02:95:48:a5:57:0a:85:01: 49:3a:3d:c0:f5:1e:3d:db:ac:43:44:98:3e:82:0e:57:3f:bc: f2:eb:f1:46:e5:c2:52:9e:c2:61:84:58:4b:65:76:41:ef:36: 80:3c:75:c3:b8:c6:b9:58:95:0b:02:d2:10:5f:db:59:cd:c5: 1c:b0:d7:dc:0d:1d:06:be:c9:fb:7d:be:27:6d:d0:ea:1b:8b: b4:a5:2f:b9:f5:f2:b9:45:54:20:80:c4:56:b9:6d:48:b3:74: 38:49:b0:9c:ea:2d:93:19:c6:ee:a2:e9:be:36:c7:b8:07:f3: 02:ce:80:ba:6d:17:fe:72:6b:83:6f:8c:f7:ad:e7:ee:72:2b: e0:42:da:bf:08:35:da:e5:1e:1c:14:d6:63:5b:10:29:56:c1: 7f:bb:1d:33:5f:7f:96:b3:35:b9:ae:a3:8d:fe:6c:3e:c0:0c: 64:0b:75:e6:dc:8a:06:b8:62:49:2f:26:09:fb:15:1b:01:33: d3:a0:40:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+pcDKgLB2WiE/6vOs5XlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTI5ZmJjYzdhZThmNWI0MDE5ZjA3YTNkNmQyZTE4NDk2 YjVlZTQwHhcNMjUxMjI4MjIwMDU3WhcNMjUxMjI5MjIwMDU3WjAzMTEwLwYDVQQD EyhhZDA2YzNjMTI2ZTU2MDFmMTk1MGM5NTFlMDE5YzBkNTg2MDMwNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqstaEq9YGj5S+jKxVkgVwpVujxGP rpJIEgdrLxiHzx4gIfYCLVJ1L0/YcRdE3ONt0gjNgDvOJz9a3C10V8aYZRsE8yN4 dqwqTFyk4h/lXllx36qfLEIpX4Lg+TLLjBQiyLjjHB8BZgik6VGcgs6cHSC01I2M kkwYhfSF0ITBxuL5vozolB2aJHttBuzlOplWMD8/0GJg8rEw1174X57mVVxws/Hj oKnZWEfog8lMvydKh32FBi1fpRbqZm/U821wx1d/6QBb0ANaheNROHvF6Ax0nMmn 7rZvg2mieWNujoykwvEZfM2AjYYGkEhHw2b2+zeNM/QE6KAv4PK8Dx7BtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0Gw8Em5WAfGVDJUeAZwNWGAwWdMB8GA1UdIwQY MBaAFE4Sn7zHro9bQBnwej1tLhhJa17kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mMjlhNTItMzcyMC00ODBmLTgwZGIt OTFkMmI0ODkwMzY5LzEvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9mMjlhNTItMzcyMC00ODBmLTgwZGItOTFkMmI0ODkwMzY5 LzEvVGhLZnZNZXVqMXRBR2ZCNlBXMHVHRWxyWHVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeW13zbyz NcPT61avgtYOOdRa7nSBIakZpHYNKlXF6NfMRZQOfjfYYBueVPpiTRCrYjbnbCy9 uEuQkMWRv/I2agKVSKVXCoUBSTo9wPUePdusQ0SYPoIOVz+88uvxRuXCUp7CYYRY S2V2Qe82gDx1w7jGuViVCwLSEF/bWc3FHLDX3A0dBr7J+32+J23Q6huLtKUvufXy uUVUIIDEVrltSLN0OEmwnOotkxnG7qLpvjbHuAfzAs6Aum0X/nJrg2+M963n7nIr 4ELavwg12uUeHBTWY1sQKVbBf7sdM19/lrM1ua6jjf5sPsAMZAt15tyKBrhiSS8m CfsVGwEz06BAtQ== -----END CERTIFICATE-----Generated at Mon Dec 29 04:43:31 2025 by rpki-client