This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json) Hash identifier: ky+o6XdvCISRsT3+mRPzVqd8IDjqkcNBIq6h8wyhAxU= Subject key identifier: 73:01:DE:57:24:74:43:43:CD:81:B6:FE:7B:8C:D6:09:EE:2D:59:5C Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Certificate serial: 019B3B3451E22C0EC3B091FB33009AEFB91B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft Manifest number: 1350 Signing time: Sat 20 Dec 2025 10:00:42 +0000 Manifest this update: Sat 20 Dec 2025 10:00:42 +0000 Manifest next update: Sun 21 Dec 2025 10:00:42 +0000 Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=) 2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: qqO7nAp02qDUOurZ1+X9QrOWuMLTGMj0+MAmOMdOlKY=) 3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=) 4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=) 5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=) 6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=) 7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=) 8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:51:e2:2c:0e:c3:b0:91:fb:33:00:9a:ef:b9:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59 Validity Not Before: Dec 20 10:00:42 2025 GMT Not After : Dec 21 10:00:42 2025 GMT Subject: CN=7301de5724744343cd81b6fe7b8cd609ee2d595c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:04:97:16:75:e9:b4:b0:20:20:4e:53:40: 8f:d4:17:aa:41:02:ab:73:50:69:1f:db:87:8a:53: d1:f9:af:6e:38:0d:d2:57:67:67:fa:10:84:62:b7: 1b:38:eb:33:27:c5:39:c3:9f:98:8b:0f:0a:11:b6: ec:ed:59:41:99:5b:74:73:81:08:f8:46:74:f0:1b: 6c:54:0e:47:86:b5:8f:8e:e0:52:a5:2d:72:13:42: 56:91:a5:1b:06:67:a8:1c:90:a3:f8:c4:6f:31:31: 0f:46:77:69:21:3e:18:9b:75:36:bf:b8:84:be:97: ad:07:88:69:78:ab:ca:17:89:77:a2:c8:d2:77:10: 23:aa:96:9a:1d:97:a3:aa:31:11:4e:07:d6:96:9e: f8:a3:60:b6:44:d8:da:7a:b8:64:40:37:ac:79:e3: ef:45:ee:69:22:86:3d:e8:5f:ae:6b:40:38:08:68: 70:d2:6f:7e:96:8a:07:a4:7f:46:e2:df:eb:a9:90: 21:92:7b:09:82:f6:b8:93:6d:ca:1e:24:3a:99:39: db:a1:1a:51:3d:42:5a:aa:17:4d:33:b4:9c:90:a5: 3d:e8:34:2d:58:af:66:e8:23:0b:7b:8c:36:e8:69: 6d:01:12:63:d4:63:a0:c1:c0:ea:6f:f3:2d:d8:de: d4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:01:DE:57:24:74:43:43:CD:81:B6:FE:7B:8C:D6:09:EE:2D:59:5C X509v3 Authority Key Identifier: keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:a8:1b:65:3d:9a:34:2a:17:58:da:1c:67:dc:2b:53:12:8b: b5:f7:ce:a7:6e:43:d5:7d:6b:63:cb:6e:41:d6:16:cf:3e:48: 3b:da:25:3c:49:bc:f5:73:63:f6:4d:47:36:8b:ba:5e:cb:79: 59:44:f8:4e:13:a8:e7:1c:42:70:f0:9e:be:5f:a5:ed:76:56: 02:af:85:61:07:82:ae:a8:f1:21:81:db:ff:b3:b1:27:ce:cf: 65:0f:e0:ab:d2:c8:ec:2c:6b:3a:76:32:80:52:a8:a5:6a:d1: f8:ed:33:61:ed:a2:cc:c2:36:be:c2:3c:bf:51:36:66:8f:a6: ca:18:08:66:a5:0e:9a:5f:54:4b:8e:ba:3c:6f:3f:20:73:29: 31:c4:84:90:71:6d:c0:7c:a5:94:bb:f4:2a:19:74:1b:85:df: f7:a4:3d:f6:c7:b1:00:fd:d8:8c:34:d4:38:82:8a:4d:f7:e6: fe:bd:c2:c6:42:51:f0:7b:06:3a:db:2b:53:91:d2:8d:87:35: 69:53:10:54:7b:a0:71:36:da:d8:c8:63:17:77:f2:c4:68:89: ab:e5:6a:cd:3b:4c:43:11:94:f8:c6:6c:7c:7e:96:e3:00:36: d6:04:49:fe:2c:c8:3c:3e:49:fa:1e:91:38:51:2b:44:b4:23: 6d:10:20:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NFHiLA7DsJH7MwCa77kbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz YjVkNTkwHhcNMjUxMjIwMTAwMDQyWhcNMjUxMjIxMTAwMDQyWjAzMTEwLwYDVQQD Eyg3MzAxZGU1NzI0NzQ0MzQzY2Q4MWI2ZmU3YjhjZDYwOWVlMmQ1OTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfAElxZ16bSwICBOU0CP1BeqQQKr c1BpH9uHilPR+a9uOA3SV2dn+hCEYrcbOOszJ8U5w5+Yiw8KEbbs7VlBmVt0c4EI +EZ08BtsVA5HhrWPjuBSpS1yE0JWkaUbBmeoHJCj+MRvMTEPRndpIT4Ym3U2v7iE vpetB4hpeKvKF4l3osjSdxAjqpaaHZejqjERTgfWlp74o2C2RNjaerhkQDeseePv Re5pIoY96F+ua0A4CGhw0m9+looHpH9G4t/rqZAhknsJgva4k23KHiQ6mTnboRpR PUJaqhdNM7SckKU96DQtWK9m6CMLe4w26GltARJj1GOgwcDqb/Mt2N7U7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMB3lckdENDzYG2/nuM1gnuLVlcMB8GA1UdIwQY MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It ODkzOTA2ZmI3ODU4LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4 LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv6gbZT2a NCoXWNocZ9wrUxKLtffOp25D1X1rY8tuQdYWzz5IO9olPEm89XNj9k1HNou6Xst5 WUT4ThOo5xxCcPCevl+l7XZWAq+FYQeCrqjxIYHb/7OxJ87PZQ/gq9LI7CxrOnYy gFKopWrR+O0zYe2izMI2vsI8v1E2Zo+myhgIZqUOml9US466PG8/IHMpMcSEkHFt wHyllLv0Khl0G4Xf96Q99sexAP3YjDTUOIKKTffm/r3CxkJR8HsGOtsrU5HSjYc1 aVMQVHugcTba2MhjF3fyxGiJq+VqzTtMQxGU+MZsfH6W4wA21gRJ/izIPD5J+h6R OFErRLQjbRAgZg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:18:00 2025 by rpki-client