This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft File: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json) Hash identifier: aJlU30CWlVj31cgK/E0I4hdpg27dbfNlBHF5eiESLqw= Subject key identifier: E0:7C:5A:7E:C7:68:0E:D0:54:70:8F:36:63:A6:79:53:3A:CB:86:5F Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71 Certificate issuer: /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71 Certificate serial: 019B3532D49314996D474955A4A3EF2F7603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft Manifest number: 08BF Signing time: Fri 19 Dec 2025 06:01:22 +0000 Manifest this update: Fri 19 Dec 2025 06:01:22 +0000 Manifest next update: Sat 20 Dec 2025 06:01:22 +0000 Files and hashes: 1: 0BpOv7ID4DFMrx668XTbhOenKNs.roa (hash: H36mM6sLdMLgLe3nc9mJCOTiie2y6GYALZ/i/6VFQPQ=) 2: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: XA1kQpOXThwuEI/D0cyTmR8wBwBdSysUgHher2PsiRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:d4:93:14:99:6d:47:49:55:a4:a3:ef:2f:76:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71 Validity Not Before: Dec 19 06:01:22 2025 GMT Not After : Dec 20 06:01:22 2025 GMT Subject: CN=e07c5a7ec7680ed054708f3663a679533acb865f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:0c:92:bf:c5:02:c5:8d:8a:6d:cc:e3:c8: 1b:02:3d:50:61:e3:00:b5:68:42:06:e2:da:31:de: fd:4f:1f:ce:3d:31:89:d5:94:13:07:e8:a4:23:ef: 12:bf:98:27:31:93:1e:1b:7b:63:18:df:eb:1a:96: 1f:32:da:d3:bc:5e:eb:17:d9:b1:ac:bf:bb:b5:a5: 0c:d3:ee:7f:10:43:19:ce:f8:ef:32:9a:69:c8:03: 95:cb:13:72:b2:2f:6c:4d:44:71:13:f7:06:c0:9a: 9d:a4:f6:20:80:09:c8:4e:d5:8f:73:9b:92:17:46: 06:90:1e:30:e1:11:7f:4b:2a:ea:c6:c8:9f:4b:9f: af:6b:dd:93:3c:1f:6b:00:81:b2:d3:65:9a:02:37: 6d:4b:77:fe:9a:ed:7e:fc:74:85:02:67:3e:57:47: 72:b8:cc:6b:fe:1d:11:18:4c:4c:f0:64:ed:01:34: fa:10:4f:e1:91:c4:5e:60:1e:49:f1:9c:d1:ce:b3: a6:1b:01:10:5a:cd:27:6b:d1:c8:3f:7d:66:b6:3f: 36:9d:21:34:67:e9:a2:ed:59:6f:7e:2b:92:e8:9d: cf:72:e3:19:0f:eb:4b:de:fe:78:70:50:9a:b4:22: c6:3a:e2:b6:c7:1a:ee:1b:ea:95:eb:2a:3e:35:c5: 51:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7C:5A:7E:C7:68:0E:D0:54:70:8F:36:63:A6:79:53:3A:CB:86:5F X509v3 Authority Key Identifier: keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:9a:01:5a:bd:9e:51:6a:d6:2d:47:fd:91:d9:c0:90:ba:13: 83:28:a2:82:76:f0:e4:a8:f2:39:f3:b4:46:38:26:fd:41:34: 86:87:17:85:ea:b5:54:de:45:fe:d8:43:c1:15:0d:0d:a7:ac: 94:88:22:3d:c2:71:e6:36:6f:05:f3:f9:b5:fe:05:b7:78:6d: 21:28:ae:f5:67:0c:4e:7a:88:17:cf:93:0d:5d:b7:67:3d:ce: ee:7e:ee:70:bd:96:aa:ef:d0:95:86:ce:11:1a:2f:15:d0:db: 7b:3b:b7:92:84:21:a0:a6:ec:fa:73:f2:7f:dc:06:bc:f7:0a: 38:4e:36:3b:b4:90:1e:de:0c:3e:a1:28:ff:5a:80:f3:90:6f: 81:62:1e:17:28:89:dd:d8:0e:62:18:22:0a:d6:6f:83:49:fe: b3:51:1e:41:c6:38:71:1d:fb:4a:7e:bf:f8:1f:39:d0:75:79: 3c:3f:2a:cf:04:c8:dd:99:37:b5:d3:03:8d:04:74:c9:c8:35: 84:d8:f8:6b:72:cb:be:79:ce:aa:43:33:26:52:40:6b:60:0a: fe:04:06:56:19:95:9d:22:f9:62:5d:27:0e:56:ad:70:e3:1b: 7e:77:07:9d:b7:77:41:38:c7:8d:66:8c:0a:00:53:85:3a:dd: 60:7e:25:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MtSTFJltR0lVpKPvL3YDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNmMzZGQ4ZGRlZmZkOWFlNGM4NTVjNWY5NDgzODA0N2Rj OWFkNzEwHhcNMjUxMjE5MDYwMTIyWhcNMjUxMjIwMDYwMTIyWjAzMTEwLwYDVQQD EyhlMDdjNWE3ZWM3NjgwZWQwNTQ3MDhmMzY2M2E2Nzk1MzNhY2I4NjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCIMkr/FAsWNim3M48gbAj1QYeMA tWhCBuLaMd79Tx/OPTGJ1ZQTB+ikI+8Sv5gnMZMeG3tjGN/rGpYfMtrTvF7rF9mx rL+7taUM0+5/EEMZzvjvMpppyAOVyxNysi9sTURxE/cGwJqdpPYggAnITtWPc5uS F0YGkB4w4RF/SyrqxsifS5+va92TPB9rAIGy02WaAjdtS3f+mu1+/HSFAmc+V0dy uMxr/h0RGExM8GTtATT6EE/hkcReYB5J8ZzRzrOmGwEQWs0na9HIP31mtj82nSE0 Z+mi7VlvfiuS6J3PcuMZD+tL3v54cFCatCLGOuK2xxruG+qV6yo+NcVRUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOB8Wn7HaA7QVHCPNmOmeVM6y4ZfMB8GA1UdIwQY MBaAFN1sPdjd7/2a5MhVxflIOAR9ya1xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMt YTJiYzcyYjE1OWQ3LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMtYTJiYzcyYjE1OWQ3 LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZoBWr2e UWrWLUf9kdnAkLoTgyiignbw5KjyOfO0Rjgm/UE0hocXheq1VN5F/thDwRUNDaes lIgiPcJx5jZvBfP5tf4Ft3htISiu9WcMTnqIF8+TDV23Zz3O7n7ucL2Wqu/QlYbO ERovFdDbezu3koQhoKbs+nPyf9wGvPcKOE42O7SQHt4MPqEo/1qA85BvgWIeFyiJ 3dgOYhgiCtZvg0n+s1EeQcY4cR37Sn6/+B850HV5PD8qzwTI3Zk3tdMDjQR0ycg1 hNj4a3LLvnnOqkMzJlJAa2AK/gQGVhmVnSL5Yl0nDlatcOMbfncHnbd3QTjHjWaM CgBThTrdYH4lzA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:21:53 2025 by rpki-client