This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: V/zAfNN/Rtp4hbecwm+uQmqbp8dljZAUFXznsgM2cfA= Subject key identifier: 8C:07:5B:44:06:E1:A6:8A:CD:5D:86:30:D7:9D:39:76:80:77:10:C9 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019B3D2317760C59875A4BE69C9BEB16417C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 05B3 Signing time: Sat 20 Dec 2025 19:01:08 +0000 Manifest this update: Sat 20 Dec 2025 19:01:08 +0000 Manifest next update: Sun 21 Dec 2025 19:01:08 +0000 Files and hashes: 1: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (hash: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=) 2: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: 4BfGEXD3wUyF+0eT9/1IcYn3uZSYZ6IN3vrKk2y0rsA=) 3: 3jZyUpaNiuxwzYQ21tChGVq7yOY.roa (hash: rlRJ/UNIhVQKGyw4Wr/cDFs+VO81jRk6SUephZD3g4o=) 4: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (hash: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=) 5: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (hash: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=) 6: ILbeank0F3xhLsgBl0NZfpBZFig.roa (hash: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=) 7: KBQWtgPCMeq_IbONzoF64FnlzwE.roa (hash: EZ3seNeYjAQFpAfGwhXlV+Wya2vQO7lfYcVB84EkqA4=) 8: PBiom43THD1F1SBGVmDFN9WwnMo.roa (hash: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=) 9: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (hash: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=) 10: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (hash: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=) 11: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (hash: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=) 12: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (hash: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=) 13: oQk2rT9-TmTMiTawX34MBI0QTrc.roa (hash: 6J7fvMBzz5wnq8Q655iOLvmHY5jKT0LznvTL3IrQ8Xw=) 14: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (hash: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=) 15: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (hash: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:17:76:0c:59:87:5a:4b:e6:9c:9b:eb:16:41:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Dec 20 19:01:08 2025 GMT Not After : Dec 21 19:01:08 2025 GMT Subject: CN=8c075b4406e1a68acd5d8630d79d3976807710c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:f6:e9:70:3a:a7:a7:c2:12:52:bd:83:fb: 08:01:66:43:69:c5:b8:3a:fb:b4:f5:fc:4f:5a:35: 94:98:11:9a:fb:74:18:85:9f:6c:f2:5e:32:2d:3d: 3f:e7:0b:0e:88:6e:6c:70:92:8a:45:ff:1c:be:19: b9:00:f6:a8:8e:2a:6e:f0:27:f8:14:62:b0:65:2c: 35:c5:85:f4:11:32:59:ae:75:94:a3:78:cc:41:e0: 65:82:7a:61:0a:9b:7b:d4:5b:46:e8:ea:52:6b:89: c6:7a:2c:b3:1e:2e:71:a3:54:61:64:18:1c:6f:cc: 36:03:14:60:cd:6d:22:b7:b0:72:5f:1c:d1:f1:7e: 6c:12:81:92:92:cc:4f:bd:ee:12:78:13:eb:c3:83: e7:30:0e:92:3e:16:ce:5f:c1:e4:3e:6d:89:bd:f0: 66:a6:6b:77:99:17:b3:69:de:8e:1c:0f:09:af:b5: 8a:6a:ce:22:44:0c:d5:9d:86:37:f8:c9:9c:5d:32: dd:02:07:a6:83:d0:03:ec:2b:57:f3:db:1d:73:b2: d6:3b:2c:9b:18:39:02:8d:6f:b4:7e:a6:03:68:aa: 23:75:71:3c:af:ee:dc:13:83:1c:ec:f7:70:95:fb: 1d:43:a6:ef:9f:9c:65:f8:43:a9:82:05:23:11:31: 35:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:07:5B:44:06:E1:A6:8A:CD:5D:86:30:D7:9D:39:76:80:77:10:C9 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a3:ba:3f:a1:19:75:ad:0a:ad:55:d1:2d:ea:21:18:48:fb: ed:e0:22:fe:34:93:cd:54:fa:a5:f2:5e:67:1f:64:6d:6e:4e: 8a:1b:c8:6e:5d:f0:f2:b4:db:c6:ba:61:f8:cc:f2:9d:25:64: cb:08:e2:c1:73:95:a6:da:c6:9a:a1:67:0f:67:af:c2:12:dd: 19:56:ce:a4:13:1e:e9:d0:23:eb:b8:b7:f8:ca:f6:59:8c:1e: 6f:61:31:ce:2d:19:ce:56:fd:0d:5b:63:85:b6:a8:e0:27:fe: 2a:d2:24:59:6b:db:b1:4d:56:d4:1e:42:8d:9f:de:96:8b:ad: 44:c6:97:4b:1c:c4:b0:90:17:71:dd:bd:b3:e8:1e:06:01:45: 5b:0f:37:cf:94:2f:a2:92:4c:27:f1:0e:29:48:c4:8c:da:c6: 10:9f:c8:41:7d:39:8b:d8:f6:ee:79:e2:98:c7:56:ef:3a:b5: dd:6f:72:5e:5a:bc:c8:f1:39:50:55:4f:0c:77:c0:cf:42:16: 22:9a:76:9b:f4:4d:21:ab:69:11:86:82:95:03:7f:47:98:41: ce:45:08:c7:64:ea:67:bd:72:ea:c1:1c:f9:d8:b2:66:78:aa: 7b:85:45:00:22:0b:b2:7e:44:01:9c:67:f3:e1:cb:4f:be:4b: 8a:f0:e9:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Ixd2DFmHWkvmnJvrFkF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjUxMjIwMTkwMTA4WhcNMjUxMjIxMTkwMTA4WjAzMTEwLwYDVQQD Eyg4YzA3NWI0NDA2ZTFhNjhhY2Q1ZDg2MzBkNzlkMzk3NjgwNzcxMGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVj26XA6p6fCElK9g/sIAWZDacW4 Ovu09fxPWjWUmBGa+3QYhZ9s8l4yLT0/5wsOiG5scJKKRf8cvhm5APaojipu8Cf4 FGKwZSw1xYX0ETJZrnWUo3jMQeBlgnphCpt71FtG6OpSa4nGeiyzHi5xo1RhZBgc b8w2AxRgzW0it7ByXxzR8X5sEoGSksxPve4SeBPrw4PnMA6SPhbOX8HkPm2JvfBm pmt3mRezad6OHA8Jr7WKas4iRAzVnYY3+MmcXTLdAgemg9AD7CtX89sdc7LWOyyb GDkCjW+0fqYDaKojdXE8r+7cE4Mc7PdwlfsdQ6bvn5xl+EOpggUjETE1IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwHW0QG4aaKzV2GMNedOXaAdxDJMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqO6P6EZ da0KrVXRLeohGEj77eAi/jSTzVT6pfJeZx9kbW5OihvIbl3w8rTbxrph+MzynSVk ywjiwXOVptrGmqFnD2evwhLdGVbOpBMe6dAj67i3+Mr2WYweb2Exzi0Zzlb9DVtj hbao4Cf+KtIkWWvbsU1W1B5CjZ/eloutRMaXSxzEsJAXcd29s+geBgFFWw83z5Qv opJMJ/EOKUjEjNrGEJ/IQX05i9j27nnimMdW7zq13W9yXlq8yPE5UFVPDHfAz0IW Ipp2m/RNIatpEYaClQN/R5hBzkUIx2TqZ71y6sEc+diyZniqe4VFACILsn5EAZxn 8+HLT75LivDpoQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:42:59 2025 by rpki-client