This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json) Hash identifier: xK4mrxG08jFj2HxqHVmpStHHcqBDTdHxzsAOEuBgyss= Subject key identifier: 80:91:37:9C:56:F7:17:D0:6E:DC:82:8A:9C:A5:2C:F6:3B:D0:FE:21 Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Certificate serial: 019B6655705F0E78856DF1F5F2C633AD7387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft Manifest number: 17A0 Signing time: Sun 28 Dec 2025 19:00:33 +0000 Manifest this update: Sun 28 Dec 2025 19:00:33 +0000 Manifest next update: Mon 29 Dec 2025 19:00:33 +0000 Files and hashes: 1: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: iAWTEJXARQVt878CIz9AbYPhvdIxEqgRkig7GmEMuHU=) 2: I2pncAJfzNdJmYYh59kVF5OSpUs.roa (hash: lHfLeGadLKnQRU2ejGfcyZ67n8h62UJ2WQIx9Gm+axg=) 3: MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa (hash: XgLOcASonVn7TWXy+ktIGTPZ2UgFdKpsifVTE/uxOB0=) 4: UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa (hash: DVPLZ7QtHdhq6Tawu/C5Hzz46ZghvtTkOTNBcz5aL5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:55:70:5f:0e:78:85:6d:f1:f5:f2:c6:33:ad:73:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Validity Not Before: Dec 28 19:00:33 2025 GMT Not After : Dec 29 19:00:33 2025 GMT Subject: CN=8091379c56f717d06edc828a9ca52cf63bd0fe21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:59:c1:5f:f0:eb:e9:18:ca:63:ec:ca:51:82: 81:bd:04:7f:5e:34:e6:4d:b5:f7:6f:b2:17:21:d8: 95:d2:58:18:86:12:07:e4:82:0c:d2:8c:5a:2b:01: dd:44:b5:95:e6:76:5a:34:32:5c:19:f0:86:a1:98: a5:c6:50:f9:ec:41:f8:4e:66:72:39:d8:79:11:d4: 5f:a5:27:63:87:67:d8:e6:48:a3:67:8f:97:15:21: e5:39:91:db:69:8a:6c:13:c5:0f:dc:50:21:92:5e: 99:bc:06:2a:31:3f:28:a4:5e:72:c8:df:aa:34:77: 43:e2:63:08:f6:f9:11:1c:8d:ec:f0:6a:5f:5e:7e: af:b1:62:3e:28:f5:b6:3b:a2:f6:ad:f8:25:85:3f: 00:0d:92:29:28:a8:23:12:43:8b:11:17:d6:69:2e: d1:38:ed:75:f4:02:43:d8:a5:6d:37:58:84:df:3d: 6f:97:a7:22:82:bb:b0:52:8b:1d:77:d3:54:55:1c: 7b:fb:d7:35:52:10:3a:b7:86:30:a7:69:2c:f5:a9: b9:d2:2e:0f:81:6c:c8:1c:bc:79:ba:4a:24:88:7a: b2:5b:a9:72:01:c2:6c:02:a3:83:36:76:a5:fe:81: 60:09:bc:61:8a:e0:13:99:eb:53:df:e9:1e:1e:fe: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:91:37:9C:56:F7:17:D0:6E:DC:82:8A:9C:A5:2C:F6:3B:D0:FE:21 X509v3 Authority Key Identifier: keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c8:9c:8c:82:51:3b:8d:9b:e5:5a:df:b2:7a:00:be:47:74: 87:9a:85:c2:66:6a:4c:3d:56:5c:d6:26:d0:08:d6:54:d7:b1: 66:aa:d0:19:6d:3a:9b:4a:c5:67:bb:fc:ae:24:16:fc:56:dc: ab:08:26:65:c7:a3:32:a5:5c:0b:c8:76:01:60:3f:2e:3a:e3: fe:bf:a0:ec:e7:f6:16:27:ba:2e:25:9b:ff:05:a7:e1:f0:55: cc:0e:ba:97:75:3d:61:44:ca:24:42:34:0f:88:0c:96:01:04: 66:9d:41:e7:f2:2c:b9:db:8e:94:c0:4f:6d:77:06:14:cb:56: 87:66:3c:e8:28:34:bc:20:d6:ea:c5:8f:7b:08:3f:87:54:32: 7a:92:ca:c0:17:a4:10:4c:72:f9:4d:ac:37:bb:a6:30:c1:51: 14:f8:dd:dd:42:6e:a1:0c:83:e0:70:b6:06:dc:7e:53:7e:f7: 59:9b:e6:e1:df:4d:39:9e:20:6c:a5:78:ad:19:29:08:80:22: 1d:26:fb:dd:7c:b2:17:f7:46:ca:46:1b:57:6d:61:26:ff:65: 3c:d3:dc:64:3f:5f:c3:f3:44:59:b0:10:f8:18:45:04:f7:d8: ca:db:23:9b:5e:ab:a2:d8:91:c1:38:57:4d:af:81:58:21:93: 16:fd:df:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVXBfDniFbfH18sYzrXOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODk5YzI4NjY0ZWU4MTk0YTY0MDQ4ZTQ2YzYwYzZlNWYx OTBjNTMwHhcNMjUxMjI4MTkwMDMzWhcNMjUxMjI5MTkwMDMzWjAzMTEwLwYDVQQD Eyg4MDkxMzc5YzU2ZjcxN2QwNmVkYzgyOGE5Y2E1MmNmNjNiZDBmZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1nBX/Dr6RjKY+zKUYKBvQR/XjTm TbX3b7IXIdiV0lgYhhIH5IIM0oxaKwHdRLWV5nZaNDJcGfCGoZilxlD57EH4TmZy Odh5EdRfpSdjh2fY5kijZ4+XFSHlOZHbaYpsE8UP3FAhkl6ZvAYqMT8opF5yyN+q NHdD4mMI9vkRHI3s8GpfXn6vsWI+KPW2O6L2rfglhT8ADZIpKKgjEkOLERfWaS7R OO119AJD2KVtN1iE3z1vl6cigruwUosdd9NUVRx7+9c1UhA6t4Ywp2ks9am50i4P gWzIHLx5ukokiHqyW6lyAcJsAqODNnal/oFgCbxhiuATmetT3+keHv7JHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICRN5xW9xfQbtyCipylLPY70P4hMB8GA1UdIwQY MBaAFNyJnChmTugZSmQEjkbGDG5fGQxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUt NTJmZTEwNTEzMTI5LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUtNTJmZTEwNTEzMTI5 LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsicjIJR O42b5VrfsnoAvkd0h5qFwmZqTD1WXNYm0AjWVNexZqrQGW06m0rFZ7v8riQW/Fbc qwgmZcejMqVcC8h2AWA/Ljrj/r+g7Of2Fie6LiWb/wWn4fBVzA66l3U9YUTKJEI0 D4gMlgEEZp1B5/IsuduOlMBPbXcGFMtWh2Y86Cg0vCDW6sWPewg/h1QyepLKwBek EExy+U2sN7umMMFRFPjd3UJuoQyD4HC2Btx+U373WZvm4d9NOZ4gbKV4rRkpCIAi HSb73XyyF/dGykYbV21hJv9lPNPcZD9fw/NEWbAQ+BhFBPfYytsjm16rotiRwThX Ta+BWCGTFv3f3A== -----END CERTIFICATE-----Generated at Mon Dec 29 00:46:20 2025 by rpki-client