This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json) Hash identifier: 03EF8zMnByB9ErXJcnlwJsJaVjBN28z5pv42ASaO7Aw= Subject key identifier: 8F:27:75:09:D5:66:5F:C7:6D:6D:DA:D9:F9:2A:06:09:D6:E0:FC:0F Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96 Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596 Certificate serial: 019B2E54CD8234162220D7A7C593AEB7C718 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft Manifest number: 0DDB Signing time: Wed 17 Dec 2025 22:01:08 +0000 Manifest this update: Wed 17 Dec 2025 22:01:08 +0000 Manifest next update: Thu 18 Dec 2025 22:01:08 +0000 Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: CKUndYjqWA4r4C175Ak4/MLaUBy6eJ/4tt3FoiF0JqU=) 2: Fu2SG4loZ2malz9WaofXCDUPGUQ.roa (hash: v34bq7itFiS09euDmLvsea1XPjuasihGiJjC++WIBUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:cd:82:34:16:22:20:d7:a7:c5:93:ae:b7:c7:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596 Validity Not Before: Dec 17 22:01:08 2025 GMT Not After : Dec 18 22:01:08 2025 GMT Subject: CN=8f277509d5665fc76d6ddad9f92a0609d6e0fc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f0:ee:07:b9:70:8d:fb:09:b2:c7:e3:0a:01: ec:c9:07:95:de:ef:04:6f:34:ad:10:7b:06:76:3c: 0c:8e:37:5d:44:53:49:78:ce:9c:01:c1:09:59:42: 93:1e:86:f4:17:49:80:af:9f:64:57:54:78:c3:02: 0a:93:5e:f9:18:10:fc:37:78:2f:da:e2:bb:2c:60: 2d:95:ca:9b:2d:a0:b8:1f:74:bf:8c:af:0d:bb:1d: 4a:61:c1:2e:43:c3:44:98:90:39:8f:84:6e:69:cd: c2:c6:a9:c1:99:b3:d7:d4:b4:c5:1a:c5:9f:09:55: a4:1d:45:02:ff:58:8c:79:7e:a8:d7:3d:7f:90:53: 7f:07:ec:c4:b5:d8:5a:5a:a1:02:f5:c5:60:a9:93: 9f:de:3e:cd:66:eb:92:da:56:64:60:be:83:38:da: af:e4:1e:40:1f:cb:4a:89:25:36:fe:49:fb:8e:9e: 96:af:d8:63:8e:2b:78:17:b9:aa:b6:3f:9c:06:f3: 10:12:d9:e4:3f:50:55:8c:a3:f7:78:68:fa:5e:64: 70:65:a9:50:49:38:c8:87:9e:e5:1e:36:98:5f:d9: b2:b2:77:db:b9:15:ab:08:87:37:f4:94:f6:e7:3a: 4f:27:77:54:5c:29:8c:77:b9:3f:d8:5a:9c:4f:f6: a9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:27:75:09:D5:66:5F:C7:6D:6D:DA:D9:F9:2A:06:09:D6:E0:FC:0F X509v3 Authority Key Identifier: keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:4e:b5:0c:fd:ca:94:0f:4a:a9:1d:7b:dc:a9:9d:a2:33:98: 25:98:fc:f0:59:15:dc:a7:c7:ae:e2:1e:67:9f:ac:27:3a:08: fa:1a:e1:be:e5:4b:83:71:ab:ca:1c:91:84:e6:81:cf:fe:56: 36:5b:44:b6:3d:f8:43:7f:ae:ce:ed:60:00:d4:16:f3:99:46: e6:ca:47:5d:d2:16:8b:b6:62:96:c6:ea:4f:a1:f4:5e:08:c3: 7c:df:47:86:7e:ae:f7:2a:c3:61:20:2f:5f:fb:d7:f9:8c:75: 17:3c:52:17:d4:18:56:7d:9a:21:43:63:db:84:44:18:29:3e: 35:9b:12:f5:cf:04:a9:8a:08:ad:67:20:85:69:59:6d:be:75: 5b:47:7c:af:45:bd:f9:11:b8:7b:c6:f4:10:bf:f2:e1:71:0b: 1d:f3:48:1c:59:ff:a8:9d:fd:bc:ad:7a:13:5a:60:89:06:af: 72:39:2a:02:6f:9e:bb:32:93:e8:14:41:d4:1f:db:3d:a5:83: 9f:b2:2f:3f:df:de:9a:37:8a:fe:f5:17:0d:77:57:6a:e8:24: d6:4a:ed:46:c2:ef:72:72:fd:ae:b8:11:eb:20:5c:86:7f:66: 3b:f6:fe:4a:96:05:a8:80:9c:c0:a6:42:6d:48:f6:b5:81:7d: 69:ec:9e:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVM2CNBYiINenxZOut8cYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNWVlNjViYTM2OGFkNzRkOWEwM2ZmMjgyNDQwYzg1Nzdh MjE1OTYwHhcNMjUxMjE3MjIwMTA4WhcNMjUxMjE4MjIwMTA4WjAzMTEwLwYDVQQD Eyg4ZjI3NzUwOWQ1NjY1ZmM3NmQ2ZGRhZDlmOTJhMDYwOWQ2ZTBmYzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vDuB7lwjfsJssfjCgHsyQeV3u8E bzStEHsGdjwMjjddRFNJeM6cAcEJWUKTHob0F0mAr59kV1R4wwIKk175GBD8N3gv 2uK7LGAtlcqbLaC4H3S/jK8Nux1KYcEuQ8NEmJA5j4Ruac3CxqnBmbPX1LTFGsWf CVWkHUUC/1iMeX6o1z1/kFN/B+zEtdhaWqEC9cVgqZOf3j7NZuuS2lZkYL6DONqv 5B5AH8tKiSU2/kn7jp6Wr9hjjit4F7mqtj+cBvMQEtnkP1BVjKP3eGj6XmRwZalQ STjIh57lHjaYX9mysnfbuRWrCIc39JT25zpPJ3dUXCmMd7k/2FqcT/apjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8ndQnVZl/HbW3a2fkqBgnW4PwPMB8GA1UdIwQY MBaAFN1e5lujaK102aA/8oJEDIV3ohWWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Y3bVc2Tm9yWFRab0RfeWdrUU1oWGVpRlpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kYzY4ZGQtMWRjOC00ODg4LWEzZWQt ZWJkNzNiMTllYWU0LzEvM1Y3bVc2Tm9yWFRab0RfeWdrUU1oWGVpRlpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kYzY4ZGQtMWRjOC00ODg4LWEzZWQtZWJkNzNiMTllYWU0 LzEvM1Y3bVc2Tm9yWFRab0RfeWdrUU1oWGVpRlpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEk61DP3K lA9KqR173KmdojOYJZj88FkV3KfHruIeZ5+sJzoI+hrhvuVLg3GryhyRhOaBz/5W NltEtj34Q3+uzu1gANQW85lG5spHXdIWi7ZilsbqT6H0XgjDfN9Hhn6u9yrDYSAv X/vX+Yx1FzxSF9QYVn2aIUNj24REGCk+NZsS9c8EqYoIrWcghWlZbb51W0d8r0W9 +RG4e8b0EL/y4XELHfNIHFn/qJ39vK16E1pgiQavcjkqAm+euzKT6BRB1B/bPaWD n7IvP9/emjeK/vUXDXdXaugk1krtRsLvcnL9rrgR6yBchn9mO/b+SpYFqICcwKZC bUj2tYF9aeyeyQ== -----END CERTIFICATE-----Generated at Thu Dec 18 06:53:36 2025 by rpki-client