This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json) Hash identifier: Etbp3uoeBgEJRZPzYY8+SJ9LEk5uqhpBUHv3pIiJ564= Subject key identifier: C8:9C:EF:B9:3F:24:46:9D:D5:C4:A1:1B:63:D3:1D:09:7B:DD:66:0E Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9 Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9 Certificate serial: 019B3B6BBEA30DBBC99021CD17A7F031D6B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft Manifest number: 05BC Signing time: Sat 20 Dec 2025 11:01:15 +0000 Manifest this update: Sat 20 Dec 2025 11:01:15 +0000 Manifest next update: Sun 21 Dec 2025 11:01:15 +0000 Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: VZ8ytofTxKCSS2SIMsvG1KkDZpvioi8GEyFRvXYbEoI=) 2: R82wyiQ6WGXDZ2qmyfic2Rx16EQ.roa (hash: q3ADHp8TbEdc9vO2jFfoJST4ALm7hMCr9dPnLoGdV9o=) 3: msFkodHiiLA7yYTUvQfg1svzo58.roa (hash: 8maRWfYNuUoSqjA1l1zPbJ9FPRTfD/7OAF7wZnEEN9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:be:a3:0d:bb:c9:90:21:cd:17:a7:f0:31:d6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9 Validity Not Before: Dec 20 11:01:15 2025 GMT Not After : Dec 21 11:01:15 2025 GMT Subject: CN=c89cefb93f24469dd5c4a11b63d31d097bdd660e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6c:1a:8d:97:6e:ea:ed:2f:ee:58:76:d6:de: a8:c1:a1:e5:de:2e:5f:bb:a1:1b:ae:a4:79:87:b1: 88:bb:fc:7b:50:92:d0:d4:e2:d7:db:7b:d9:c8:1b: 80:d7:01:c1:00:8f:d9:eb:cb:91:0c:e7:83:44:fc: b8:86:a1:c2:a2:0f:e6:09:95:69:b6:32:a1:7c:3c: 2b:d3:7a:34:a4:53:6b:18:e1:95:ce:f9:4e:e6:68: a7:91:ba:f7:61:b9:b2:14:44:48:a8:2f:e3:33:1b: 95:36:5b:e6:6b:9c:e1:2f:48:eb:71:ad:4b:c1:12: 8d:c9:d5:08:c4:db:09:8d:40:9c:2d:d1:9a:bc:48: 8e:3d:9b:75:5b:cb:01:39:65:b9:3a:0f:5a:24:6b: 8c:8a:b4:85:2e:37:b0:0c:0c:fe:dc:a5:74:f6:0f: 93:0c:8f:26:f7:a5:d1:31:f3:d6:4e:ce:63:df:05: 94:91:ce:45:ab:9b:d2:8b:d9:da:32:4e:4d:c0:9e: 5a:d4:50:e2:3e:6e:d9:18:cd:81:61:09:5c:41:e4: 2e:47:5e:28:7b:83:da:fd:73:b9:96:44:2e:8f:c8: 4f:4a:2b:2c:35:a4:d3:12:10:a8:37:d2:34:18:84: 93:db:45:4f:90:57:e5:17:e5:3e:30:3d:77:3b:d4: ce:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9C:EF:B9:3F:24:46:9D:D5:C4:A1:1B:63:D3:1D:09:7B:DD:66:0E X509v3 Authority Key Identifier: keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:70:08:91:9f:90:42:61:d6:5d:10:6e:88:42:79:d1:eb:d1: f5:1e:d8:70:93:03:49:7d:bf:f9:de:44:0f:c2:d0:de:e5:14: 3b:bb:4a:1b:63:6c:03:3a:42:5f:1e:be:57:fc:b8:c8:25:72: 39:6f:93:76:8a:7b:d3:64:e3:98:8b:24:ab:7d:89:df:87:6e: eb:37:e2:39:c6:1d:50:42:6d:62:3b:ba:43:a6:02:06:c2:55: 35:26:b5:34:63:12:e3:20:07:78:b7:73:12:bc:5e:b6:14:b3: c6:56:a2:a7:60:3f:7a:f8:f4:19:04:bd:24:73:21:4d:0b:93: 9e:62:b9:f4:ae:19:6b:6e:60:14:73:02:a2:1c:1c:4a:62:18: 17:36:a0:8b:61:01:57:d6:c0:16:4a:6d:c5:5e:0b:63:7d:fd: 67:76:5d:7b:c6:78:44:6d:f2:4a:7e:fa:16:2f:49:17:d7:e8: 50:f3:95:5e:3e:8b:5c:19:a0:31:9d:49:5f:39:23:ad:6b:6b: 7b:2f:d4:7d:79:3f:42:24:15:e7:2a:a3:bf:db:14:3b:11:b0: 1a:64:93:e1:90:0d:92:1a:fe:1e:70:25:e2:c8:e3:a2:a0:1c: 9e:75:46:3b:ea:d3:ee:7c:0b:52:ff:6e:14:8a:7d:d6:3a:8d: 26:9d:d4:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a76jDbvJkCHNF6fwMda1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZDk3NzBjMzA3ZWEzOTYwYzhkYTI2OGE4ODY1YTRhOWZh NjM0YzkwHhcNMjUxMjIwMTEwMTE1WhcNMjUxMjIxMTEwMTE1WjAzMTEwLwYDVQQD EyhjODljZWZiOTNmMjQ0NjlkZDVjNGExMWI2M2QzMWQwOTdiZGQ2NjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GwajZdu6u0v7lh21t6owaHl3i5f u6EbrqR5h7GIu/x7UJLQ1OLX23vZyBuA1wHBAI/Z68uRDOeDRPy4hqHCog/mCZVp tjKhfDwr03o0pFNrGOGVzvlO5minkbr3YbmyFERIqC/jMxuVNlvma5zhL0jrca1L wRKNydUIxNsJjUCcLdGavEiOPZt1W8sBOWW5Og9aJGuMirSFLjewDAz+3KV09g+T DI8m96XRMfPWTs5j3wWUkc5Fq5vSi9naMk5NwJ5a1FDiPm7ZGM2BYQlcQeQuR14o e4Pa/XO5lkQuj8hPSissNaTTEhCoN9I0GIST20VPkFflF+U+MD13O9TOVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMic77k/JEad1cShG2PTHQl73WYOMB8GA1UdIwQY MBaAFN3ZdwwwfqOWDI2iaKiGWkqfpjTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUt ZjJmZTBkMDRiZmJmLzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUtZjJmZTBkMDRiZmJm LzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3AIkZ+Q QmHWXRBuiEJ50evR9R7YcJMDSX2/+d5ED8LQ3uUUO7tKG2NsAzpCXx6+V/y4yCVy OW+Tdop702TjmIskq32J34du6zfiOcYdUEJtYju6Q6YCBsJVNSa1NGMS4yAHeLdz ErxethSzxlaip2A/evj0GQS9JHMhTQuTnmK59K4Za25gFHMCohwcSmIYFzagi2EB V9bAFkptxV4LY339Z3Zde8Z4RG3ySn76Fi9JF9foUPOVXj6LXBmgMZ1JXzkjrWtr ey/UfXk/QiQV5yqjv9sUOxGwGmST4ZANkhr+HnAl4sjjoqAcnnVGO+rT7nwLUv9u FIp91jqNJp3UoA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:12:00 2025 by rpki-client