This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json) Hash identifier: 93Of1PUcSTTVaXRCAZXX7XxzXgn2C1p1Bof472nX6k0= Subject key identifier: CD:B0:B0:81:9D:F5:A1:B8:C7:7C:D0:04:9F:6A:28:1A:86:3F:AE:A2 Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Certificate serial: 019B3FB5BE96B3606A64A70BB999D2FD54C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 07:00:33 +0000 Manifest this update: Sun 21 Dec 2025 07:00:33 +0000 Manifest next update: Mon 22 Dec 2025 07:00:33 +0000 Files and hashes: 1: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: ph9Tbo3XR6Znakx6RRDjpjlpoRioumEkk1Z6gIaSdHk=) 2: I2pncAJfzNdJmYYh59kVF5OSpUs.roa (hash: lHfLeGadLKnQRU2ejGfcyZ67n8h62UJ2WQIx9Gm+axg=) 3: MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa (hash: XgLOcASonVn7TWXy+ktIGTPZ2UgFdKpsifVTE/uxOB0=) 4: UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa (hash: DVPLZ7QtHdhq6Tawu/C5Hzz46ZghvtTkOTNBcz5aL5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:be:96:b3:60:6a:64:a7:0b:b9:99:d2:fd:54:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Validity Not Before: Dec 21 07:00:33 2025 GMT Not After : Dec 22 07:00:33 2025 GMT Subject: CN=cdb0b0819df5a1b8c77cd0049f6a281a863faea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:b4:da:08:15:1a:5d:eb:7c:4b:b4:b9:be: 69:64:b4:c0:2d:3b:f8:5b:e6:2a:d5:76:a3:b5:9c: 99:5e:70:ef:18:94:1f:07:85:54:48:4f:e7:5d:35: 6f:35:53:4d:dd:99:24:f3:09:35:bb:55:cd:cf:84: 9a:2b:f1:8d:73:72:34:cd:6a:fd:9c:c6:96:2d:f0: 83:2f:69:b4:a9:c1:0e:48:e8:df:c6:2a:56:fc:64: 2f:1c:2c:ac:f2:a1:30:84:31:72:c5:58:49:e3:a3: f3:2b:f7:d5:27:68:0b:98:d8:25:fa:f0:c7:5f:7b: 8c:d9:76:1e:d5:1f:9f:3f:0f:4c:5f:6c:23:c8:fd: 0e:da:7d:47:19:b4:f2:65:67:8f:e8:94:da:6a:9d: 05:e0:dc:1f:4f:3b:cc:f2:66:83:29:c7:d9:33:12: ea:52:19:05:60:dd:58:2d:fa:87:e8:19:99:be:3a: 56:78:fc:b8:53:63:1a:9d:58:ea:4b:bc:88:3d:b6: c1:76:31:6f:26:d4:79:94:56:2c:e8:84:ae:68:6f: 61:69:d5:8f:33:28:02:9b:7d:60:4a:cc:33:a4:a6: 1f:17:e9:85:60:60:a9:06:fd:a2:fc:bc:11:10:dd: 10:dd:6e:2b:e0:ec:7a:7b:f6:db:30:be:b1:15:eb: fe:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B0:B0:81:9D:F5:A1:B8:C7:7C:D0:04:9F:6A:28:1A:86:3F:AE:A2 X509v3 Authority Key Identifier: keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:92:72:07:6a:e3:e9:a8:f3:f1:00:e4:65:55:e1:b5:d3:36: 93:26:3f:c1:8a:6c:f2:a8:4a:8c:a8:9d:ff:b2:a8:31:a2:23: 69:7c:16:4f:94:b6:83:ee:ce:a6:71:16:55:2b:af:17:a3:31: 86:71:87:ed:d1:50:7b:03:0a:80:72:46:c2:10:1d:d7:3c:3f: 59:b5:26:ab:ed:84:e0:81:4d:80:ca:47:f0:d6:ea:cb:e6:23: 59:34:20:1b:56:e0:f4:76:23:39:9a:69:f5:d2:9f:2b:93:18: 8c:10:38:74:ac:72:c4:fa:5d:6a:df:52:a7:a9:2a:3a:51:aa: f1:59:01:64:bc:2b:22:b7:dc:d3:52:73:e2:44:2a:fd:22:7f: 19:40:aa:82:7c:66:e6:00:b2:0d:31:c9:42:3d:9d:04:26:0d: bc:fb:f9:b0:21:32:57:06:5a:ae:ab:24:a6:05:e6:10:54:1c: ee:2c:03:13:d8:d7:20:63:d9:fe:c7:42:1b:df:27:3c:15:d1: 04:73:23:1c:60:cf:8d:58:8f:78:44:9d:19:73:aa:45:e8:2e: 01:00:f4:e8:58:8a:27:89:54:c3:aa:cf:82:f2:11:c9:70:1d: 29:bb:91:77:08:9a:db:ba:76:60:d9:02:0d:18:a9:46:20:07: 49:56:f7:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tb6Ws2BqZKcLuZnS/VTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODk5YzI4NjY0ZWU4MTk0YTY0MDQ4ZTQ2YzYwYzZlNWYx OTBjNTMwHhcNMjUxMjIxMDcwMDMzWhcNMjUxMjIyMDcwMDMzWjAzMTEwLwYDVQQD EyhjZGIwYjA4MTlkZjVhMWI4Yzc3Y2QwMDQ5ZjZhMjgxYTg2M2ZhZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBa02ggVGl3rfEu0ub5pZLTALTv4 W+Yq1XajtZyZXnDvGJQfB4VUSE/nXTVvNVNN3Zkk8wk1u1XNz4SaK/GNc3I0zWr9 nMaWLfCDL2m0qcEOSOjfxipW/GQvHCys8qEwhDFyxVhJ46PzK/fVJ2gLmNgl+vDH X3uM2XYe1R+fPw9MX2wjyP0O2n1HGbTyZWeP6JTaap0F4NwfTzvM8maDKcfZMxLq UhkFYN1YLfqH6BmZvjpWePy4U2ManVjqS7yIPbbBdjFvJtR5lFYs6ISuaG9hadWP MygCm31gSswzpKYfF+mFYGCpBv2i/LwREN0Q3W4r4Ox6e/bbML6xFev+SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2wsIGd9aG4x3zQBJ9qKBqGP66iMB8GA1UdIwQY MBaAFNyJnChmTugZSmQEjkbGDG5fGQxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUt NTJmZTEwNTEzMTI5LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUtNTJmZTEwNTEzMTI5 LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5JyB2rj 6ajz8QDkZVXhtdM2kyY/wYps8qhKjKid/7KoMaIjaXwWT5S2g+7OpnEWVSuvF6Mx hnGH7dFQewMKgHJGwhAd1zw/WbUmq+2E4IFNgMpH8Nbqy+YjWTQgG1bg9HYjOZpp 9dKfK5MYjBA4dKxyxPpdat9Sp6kqOlGq8VkBZLwrIrfc01Jz4kQq/SJ/GUCqgnxm 5gCyDTHJQj2dBCYNvPv5sCEyVwZarqskpgXmEFQc7iwDE9jXIGPZ/sdCG98nPBXR BHMjHGDPjViPeESdGXOqReguAQD06FiKJ4lUw6rPgvIRyXAdKbuRdwia27p2YNkC DRipRiAHSVb3Zg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:35:08 2025 by rpki-client