This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft File: 3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json) Hash identifier: 205thIzbwmT0S4ASXdQVZa6RR2ljkhlLIHNNHYPJ5No= Subject key identifier: 7A:52:FA:AF:91:92:85:75:03:E3:28:5A:2E:10:C3:6F:3E:55:D9:CF Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB Certificate issuer: /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb Certificate serial: 019B6F58FE97621F6EB59FCCE5303666C38A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft Manifest number: 0268 Signing time: Tue 30 Dec 2025 13:01:01 +0000 Manifest this update: Tue 30 Dec 2025 13:01:01 +0000 Manifest next update: Wed 31 Dec 2025 13:01:01 +0000 Files and hashes: 1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: vJkU72zdS8MlY31HtM0bG0symeUXrSw8Q2L5V65tWXo=) 2: xlhZPy2tgq9KnJAF-W8wAfARZ5I.roa (hash: gkGnuQfXZLAxpDNGgxfjG9Qut5Hb3M/1cK2A/dmc9SY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:58:fe:97:62:1f:6e:b5:9f:cc:e5:30:36:66:c3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb Validity Not Before: Dec 30 13:01:01 2025 GMT Not After : Dec 31 13:01:01 2025 GMT Subject: CN=7a52faaf9192857503e3285a2e10c36f3e55d9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:3f:07:a1:09:7c:7d:3b:f0:36:3f:90:d1: 1e:1f:7e:63:18:2e:85:b7:be:6e:d0:a7:ae:7f:a2: 19:75:8d:5a:79:6c:be:3a:be:00:d8:9c:32:bb:c0: 2e:cb:e0:4c:ec:d2:f5:9c:c4:f8:6c:64:72:c1:81: 9b:5f:3a:d8:3c:0a:39:79:f9:24:99:6f:92:ac:87: 03:bf:1c:03:c4:1d:1c:a9:fa:f6:c4:58:86:3a:f2: 67:18:b4:4f:9b:12:5f:0e:4f:e9:24:64:c8:3f:6d: 6b:cb:88:fd:53:19:34:91:d2:b7:86:a1:19:11:4a: 15:3c:2e:0b:63:ba:96:6c:10:86:57:b8:c0:66:06: 5d:48:97:b4:2f:69:d4:20:44:65:70:c6:a5:15:2d: cf:a3:2a:a8:78:cd:03:b3:ea:1c:75:2c:35:eb:eb: 37:88:6a:e4:49:1e:a0:ee:bb:ea:4e:ff:65:af:83: b0:9f:a3:2d:af:47:5f:0b:32:ba:35:d9:91:6b:45: 01:f6:3b:92:a5:7d:90:5a:e4:94:c5:69:99:09:72: 9c:29:a3:62:16:0f:f8:8e:52:5d:6c:77:96:ca:66: 2e:a2:4f:3d:33:c7:d4:79:1b:f0:a1:37:90:c5:7a: 26:71:e5:5a:dd:f7:9f:6a:81:07:86:7a:54:c6:8c: 7e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:52:FA:AF:91:92:85:75:03:E3:28:5A:2E:10:C3:6F:3E:55:D9:CF X509v3 Authority Key Identifier: keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:bc:cc:d6:8b:d9:bc:a8:19:b0:62:22:ce:b6:5f:87:cd:de: 1f:40:91:12:df:38:10:5e:10:4f:50:65:30:63:1f:96:54:40: 28:fd:d1:17:50:46:09:d1:43:62:10:ac:a4:3c:7e:c2:c8:64: 94:10:a8:23:21:10:c6:42:b3:1c:15:f3:6f:24:49:6d:86:c1: 04:81:73:5a:5e:3a:27:ce:44:87:f2:55:db:f4:0a:ea:5a:04: f0:03:03:8d:c0:5a:dd:7c:57:36:20:26:dd:6c:77:7d:bc:c2: ef:bc:cc:74:4e:d7:52:ca:13:6a:c5:94:53:59:3e:6e:65:5e: bb:c1:bf:51:4a:2c:9d:3e:76:8a:1a:b9:4e:80:42:af:b6:85: d4:4a:d9:a3:7a:72:d7:da:65:28:fb:b8:bd:79:e1:cb:c2:a8: 6e:9d:f1:75:78:d7:1f:20:da:e9:24:de:3c:04:fd:96:1d:cf: 91:fa:6d:12:63:6f:97:88:61:81:cc:7b:05:25:db:8f:9c:62: 5d:69:9d:dc:13:4a:fa:77:de:b2:ab:11:d2:c0:21:c0:30:b5: da:ea:d4:fa:4e:05:7a:45:67:a7:2c:be:a1:14:ad:d2:25:48: 50:13:36:31:be:ad:40:be:3e:68:32:4a:e3:83:97:a8:12:83: 3c:49:9e:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvWP6XYh9utZ/M5TA2ZsOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMDA2ZWQ4NzFhNWNlMDBkMmJiZjk2OGJjMDk0MGVlNTg2 YTNjZWIwHhcNMjUxMjMwMTMwMTAxWhcNMjUxMjMxMTMwMTAxWjAzMTEwLwYDVQQD Eyg3YTUyZmFhZjkxOTI4NTc1MDNlMzI4NWEyZTEwYzM2ZjNlNTVkOWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQo/B6EJfH078DY/kNEeH35jGC6F t75u0Keuf6IZdY1aeWy+Or4A2Jwyu8Auy+BM7NL1nMT4bGRywYGbXzrYPAo5efkk mW+SrIcDvxwDxB0cqfr2xFiGOvJnGLRPmxJfDk/pJGTIP21ry4j9Uxk0kdK3hqEZ EUoVPC4LY7qWbBCGV7jAZgZdSJe0L2nUIERlcMalFS3PoyqoeM0Ds+ocdSw16+s3 iGrkSR6g7rvqTv9lr4Own6Mtr0dfCzK6NdmRa0UB9juSpX2QWuSUxWmZCXKcKaNi Fg/4jlJdbHeWymYuok89M8fUeRvwoTeQxXomceVa3fefaoEHhnpUxox+oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpS+q+RkoV1A+MoWi4Qw28+VdnPMB8GA1UdIwQY MBaAFN8Abthxpc4A0rv5aLwJQO5YajzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYt OTViOWUzNjJmMDc3LzEvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9jOGY2ZTEtNDZjOC00ZTEyLThjZTYtOTViOWUzNjJmMDc3 LzEvM3dCdTJIR2x6Z0RTdV9sb3ZBbEE3bGhxUE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrzM1ovZ vKgZsGIizrZfh83eH0CREt84EF4QT1BlMGMfllRAKP3RF1BGCdFDYhCspDx+wshk lBCoIyEQxkKzHBXzbyRJbYbBBIFzWl46J85Eh/JV2/QK6loE8AMDjcBa3XxXNiAm 3Wx3fbzC77zMdE7XUsoTasWUU1k+bmVeu8G/UUosnT52ihq5ToBCr7aF1ErZo3py 19plKPu4vXnhy8Kobp3xdXjXHyDa6STePAT9lh3PkfptEmNvl4hhgcx7BSXbj5xi XWmd3BNK+nfesqsR0sAhwDC12urU+k4FekVnpyy+oRSt0iVIUBM2Mb6tQL4+aDJK 44OXqBKDPEme0Q== -----END CERTIFICATE-----Generated at Tue Dec 30 17:11:29 2025 by rpki-client