This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft File: m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft (raw, json) Hash identifier: k0FyPeZohj56sRUrhMm7JkJa3O9sufFFBux3FBpqp6Y= Subject key identifier: 8F:3C:85:D8:9A:22:07:58:69:82:C6:93:BB:25:73:59:76:AA:A8:D9 Authority key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C Certificate issuer: /CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c Certificate serial: 019B3C7F5562E1C05E00D19E05CE03D1A9E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft Manifest number: 153C Signing time: Sat 20 Dec 2025 16:02:16 +0000 Manifest this update: Sat 20 Dec 2025 16:02:16 +0000 Manifest next update: Sun 21 Dec 2025 16:02:16 +0000 Files and hashes: 1: 60W-NBk3253Bk_GEI2gKgd_BE8I.roa (hash: X2dRuZeK2mpNw1Oq8MItS3tX6isys5T0YQbrPJr37XA=) 2: WMfZ9_oSWOFVeUy99ChSUELiYaI.roa (hash: H0ifkv1EEGP8mDtQZpBc/lFwxXIm4L3JwiD9/BcXTyk=) 3: m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl (hash: 4gqMlYqMMm8nFf6yrnoJ5Sq9GyDYNAlpwjhaSilwCZ0=) 4: tXaCAurW2gGTHINoOjZh72dEXKU.roa (hash: y5O02pogDW0jIlJpvO+hAt91pj2qn6goqR2eIeEiFSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:55:62:e1:c0:5e:00:d1:9e:05:ce:03:d1:a9:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c Validity Not Before: Dec 20 16:02:16 2025 GMT Not After : Dec 21 16:02:16 2025 GMT Subject: CN=8f3c85d89a2207586982c693bb25735976aaa8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b0:36:06:8d:e1:fa:c1:b0:83:58:e8:91:1d: ca:fb:f8:9f:36:5e:a5:2d:7e:2e:f1:8e:83:cb:53: a0:0a:89:d4:cc:31:9e:ba:aa:f9:b6:5d:5e:a6:eb: b6:42:fa:56:7b:95:92:a1:bd:8b:3e:a3:cc:d4:f4: c8:00:5f:d5:29:64:fe:ab:8e:67:f0:db:36:c2:b7: ad:d7:fa:a2:a1:d4:d4:9c:46:6f:4d:c6:23:7a:64: 3c:ef:78:a0:7b:34:9a:8b:44:b5:79:19:40:9e:34: 2d:51:d0:ce:67:39:00:c9:00:e0:fe:4b:17:8d:c7: 08:db:ef:3a:13:f5:df:8b:96:ce:1c:58:71:d2:a2: 3c:65:c5:2f:7e:55:6e:9e:99:8a:54:0e:ae:22:dc: 8b:f1:fd:76:86:24:d1:73:95:4d:5b:0f:b9:b0:d0: c3:6e:6d:6d:c5:1c:a1:32:0e:f2:16:ba:5e:6a:a4: 9b:94:2f:28:10:e5:56:b3:33:0f:43:25:76:42:4a: 1e:fd:71:32:c3:02:0d:94:6e:4f:0c:89:02:2d:82: 52:47:66:75:82:87:8c:68:89:e0:83:94:89:cc:1d: b8:8a:2b:7d:2c:cd:ec:22:66:41:1e:e7:86:2d:76: a7:ba:0e:47:28:ae:b2:22:11:d1:45:05:70:e6:77: 91:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3C:85:D8:9A:22:07:58:69:82:C6:93:BB:25:73:59:76:AA:A8:D9 X509v3 Authority Key Identifier: keyid:9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d0:26:1c:95:9a:a6:52:47:b2:fb:39:a0:a1:93:99:66:a1: 33:89:23:fd:bb:c6:2f:8f:f0:cc:46:67:61:e3:fa:a7:bf:26: f9:8e:78:8e:e3:43:94:73:14:e7:43:f5:07:5a:f3:6b:c5:2e: 65:25:d7:cf:fc:58:50:1a:62:6c:7e:54:79:bf:82:e7:0b:4a: 20:b2:eb:76:79:a1:42:0b:3d:b9:ac:c9:80:bb:4b:3a:d1:6e: 51:d0:12:12:5a:f0:be:ae:a8:54:79:5a:88:87:b1:ed:41:35: 94:8f:96:c6:89:c6:9e:19:f1:3b:ff:41:78:4c:f6:22:c1:d6: a0:d9:9c:46:ea:5f:40:3f:3c:cc:a8:d7:a5:5e:65:94:86:c9: 9d:e9:63:3e:bc:1f:05:86:bf:c4:64:39:d9:79:05:49:5a:b8: 7c:3b:ae:87:7e:4e:83:c8:a3:56:b7:6f:51:ea:41:6a:78:05: 25:d8:58:8a:53:d6:e5:26:d6:0b:1a:72:6e:88:98:05:6e:58: 2f:47:75:14:5f:28:67:4f:5e:07:7a:13:a8:1b:4a:13:b0:b6: c4:15:93:c3:11:aa:5d:6d:ef:c1:f8:26:bc:32:c0:dd:de:63: c6:34:35:f6:aa:36:4a:fd:14:21:6d:6d:36:c4:b3:65:3c:bc: 9c:2b:c8:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f1Vi4cBeANGeBc4D0anoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNzU5ZWM5ZmY1NGRlMDNhN2ZmM2E2NWVkYmIyZTA3NThl Njg3OGMwHhcNMjUxMjIwMTYwMjE2WhcNMjUxMjIxMTYwMjE2WjAzMTEwLwYDVQQD Eyg4ZjNjODVkODlhMjIwNzU4Njk4MmM2OTNiYjI1NzM1OTc2YWFhOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbA2Bo3h+sGwg1jokR3K+/ifNl6l LX4u8Y6Dy1OgConUzDGeuqr5tl1epuu2QvpWe5WSob2LPqPM1PTIAF/VKWT+q45n 8Ns2wret1/qiodTUnEZvTcYjemQ873igezSai0S1eRlAnjQtUdDOZzkAyQDg/ksX jccI2+86E/Xfi5bOHFhx0qI8ZcUvflVunpmKVA6uItyL8f12hiTRc5VNWw+5sNDD bm1txRyhMg7yFrpeaqSblC8oEOVWszMPQyV2Qkoe/XEywwINlG5PDIkCLYJSR2Z1 goeMaIngg5SJzB24iit9LM3sImZBHueGLXanug5HKK6yIhHRRQVw5neR/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI88hdiaIgdYaYLGk7slc1l2qqjZMB8GA1UdIwQY MBaAFJt1nsn/VN4Dp/86Ze27LgdY5oeMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNXZXlmOVUzZ09uX3pwbDdic3VCMWptaDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS81YWQ3M2ItZGIxNy00MzIyLWFkZTUt YjlhOWQ4YWU5NDIxLzEvbTNXZXlmOVUzZ09uX3pwbDdic3VCMWptaDR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS81YWQ3M2ItZGIxNy00MzIyLWFkZTUtYjlhOWQ4YWU5NDIx LzEvbTNXZXlmOVUzZ09uX3pwbDdic3VCMWptaDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNAmHJWa plJHsvs5oKGTmWahM4kj/bvGL4/wzEZnYeP6p78m+Y54juNDlHMU50P1B1rza8Uu ZSXXz/xYUBpibH5Ueb+C5wtKILLrdnmhQgs9uazJgLtLOtFuUdASElrwvq6oVHla iIex7UE1lI+WxonGnhnxO/9BeEz2IsHWoNmcRupfQD88zKjXpV5llIbJneljPrwf BYa/xGQ52XkFSVq4fDuuh35Og8ijVrdvUepBangFJdhYilPW5SbWCxpyboiYBW5Y L0d1FF8oZ09eB3oTqBtKE7C2xBWTwxGqXW3vwfgmvDLA3d5jxjQ19qo2Sv0UIW1t NsSzZTy8nCvI+g== -----END CERTIFICATE-----Generated at Sun Dec 21 01:35:47 2025 by rpki-client