This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json) Hash identifier: bjg57pGME5RZSY7MM10oyug5YAZ0iAgZJaVcqmiskcw= Subject key identifier: 6E:FB:0A:A6:34:22:1E:30:97:72:73:8C:6E:35:8E:9C:84:5F:9F:CE Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6 Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6 Certificate serial: 019B601CCC4E3DAA91DC70871AB872B1EBAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 14:00:58 +0000 Manifest this update: Sat 27 Dec 2025 14:00:58 +0000 Manifest next update: Sun 28 Dec 2025 14:00:58 +0000 Files and hashes: 1: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: rNBFIkSiI7GK+/TitRG7C/1UX/eUT+Rz3ftNv2w+JsI=) 2: I9GqI9GxRbg5gyNw2oYeQXtgJJg.roa (hash: IdZbo1C2DnUJiJSpOjjTPKnvp3frNBJygc4FMjTeWHU=) 3: OJHrSjDn0A0xOyeisC7fOP_zy4g.roa (hash: 4mrlovUy+cBI29r4SEJkRQxz3HoEwjM6nDvfGvlxWBU=) 4: ie70DJhDrGYxNNPSAG6BpAZrtxY.roa (hash: HiOIeBO8KrrORXl70BQK8AAzSZ8zCob2hQpjThQB7t8=) 5: tr4Wz-5rQhPo47mTFs_LgvHDl8s.roa (hash: PZGVkTuh77FvBlVCnDa38AVdteMzJ1COvOQXzBoIS0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:1c:cc:4e:3d:aa:91:dc:70:87:1a:b8:72:b1:eb:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6 Validity Not Before: Dec 27 14:00:58 2025 GMT Not After : Dec 28 14:00:58 2025 GMT Subject: CN=6efb0aa634221e309772738c6e358e9c845f9fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:69:0f:32:c4:0c:57:e6:c8:f3:47:27:fe:c1: d0:77:ac:23:25:b5:a2:e4:fe:38:f2:bc:f2:77:01: fd:eb:27:27:e1:b9:1e:db:1f:45:61:a4:f2:fe:2d: c4:e5:b5:db:9e:fb:b3:24:9c:da:5b:1e:70:54:63: 92:66:39:75:37:17:d0:47:64:ec:15:83:28:09:ca: 75:6a:98:d2:b1:4f:ef:71:0c:a9:79:75:18:8d:1b: c5:22:2a:a7:81:09:d0:df:a4:a8:13:01:2e:28:e3: 6f:fa:e1:6c:0d:4d:de:f6:32:83:66:1b:a8:a2:da: 03:c4:f5:18:5d:3c:f1:44:f8:cd:09:29:31:86:93: e1:d2:d8:41:b5:23:c0:2f:ea:68:65:41:75:93:18: 64:a8:44:b0:4d:c7:cb:4f:d2:4c:7c:ef:a8:49:5b: 73:ff:94:6c:87:de:30:70:11:0a:69:3d:ac:27:f5: 33:6f:44:75:98:50:16:6d:a3:36:da:7b:0c:25:86: 8d:c8:f3:b4:4d:4f:57:f5:e5:2f:f6:c8:06:b8:c1: 56:06:a9:77:9c:5a:38:a7:13:08:10:21:17:61:79: 85:de:ff:17:e4:a9:af:47:45:f8:14:db:61:53:34: 58:86:64:e4:fc:94:50:9f:bb:0c:6c:1b:b6:d0:55: 6f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FB:0A:A6:34:22:1E:30:97:72:73:8C:6E:35:8E:9C:84:5F:9F:CE X509v3 Authority Key Identifier: keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:9e:f5:92:7b:42:f5:d2:dc:38:cb:4b:1a:ec:5e:6b:4f:8d: 5f:2f:0d:e3:3a:64:ab:1f:4a:ce:a6:44:a9:97:99:73:a4:99: 18:18:1c:b2:b3:68:98:c8:67:06:38:4b:f6:c5:35:9f:88:b4: c9:3a:1c:56:68:10:13:db:1d:c8:cc:51:55:46:09:b0:c4:22: 81:0b:f7:6b:de:e4:65:a6:03:71:9b:37:8b:5d:09:59:d9:05: 41:25:9e:7e:76:9f:8a:e4:f1:fb:08:a3:a7:1e:71:c6:20:c6: 7c:79:f2:36:31:a9:e1:f2:16:99:04:04:be:23:39:f0:ce:ee: 5b:c3:59:fb:71:76:87:d8:bb:88:a3:80:02:3b:cf:1b:ff:07: 9a:30:98:51:c8:c9:ca:12:d2:3c:1f:79:8d:81:16:28:08:0d: 50:10:54:9b:7a:23:56:75:ef:28:52:94:ae:fc:a1:9e:fe:a2: c1:c3:52:22:27:19:25:dc:7c:10:a1:58:87:ff:98:5e:c4:a5: a0:53:f8:22:87:52:64:27:1c:b1:37:77:e1:13:ef:24:fd:0d: 3b:7b:87:0a:2b:ae:16:77:49:95:cf:4e:2c:ce:52:0c:b6:de: c2:60:69:64:4a:59:0d:4f:46:8f:8a:76:f9:e7:b2:4d:6e:0f: 7b:7a:f9:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgHMxOPaqR3HCHGrhyseuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMGI2NjNjNDVkN2JjMjcyNGQxNjg0ODUwODc1ODFlMTQ0 NDhmYjYwHhcNMjUxMjI3MTQwMDU4WhcNMjUxMjI4MTQwMDU4WjAzMTEwLwYDVQQD Eyg2ZWZiMGFhNjM0MjIxZTMwOTc3MjczOGM2ZTM1OGU5Yzg0NWY5ZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mkPMsQMV+bI80cn/sHQd6wjJbWi 5P448rzydwH96ycn4bke2x9FYaTy/i3E5bXbnvuzJJzaWx5wVGOSZjl1NxfQR2Ts FYMoCcp1apjSsU/vcQypeXUYjRvFIiqngQnQ36SoEwEuKONv+uFsDU3e9jKDZhuo otoDxPUYXTzxRPjNCSkxhpPh0thBtSPAL+poZUF1kxhkqESwTcfLT9JMfO+oSVtz /5Rsh94wcBEKaT2sJ/Uzb0R1mFAWbaM22nsMJYaNyPO0TU9X9eUv9sgGuMFWBql3 nFo4pxMIECEXYXmF3v8X5KmvR0X4FNthUzRYhmTk/JRQn7sMbBu20FVvcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG77CqY0Ih4wl3JzjG41jpyEX5/OMB8GA1UdIwQY MBaAFN0LZjxF17wnJNFoSFCHWB4URI+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQt M2I5ZTNjOGEyZmNhLzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQtM2I5ZTNjOGEyZmNh LzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZ71kntC 9dLcOMtLGuxea0+NXy8N4zpkqx9KzqZEqZeZc6SZGBgcsrNomMhnBjhL9sU1n4i0 yTocVmgQE9sdyMxRVUYJsMQigQv3a97kZaYDcZs3i10JWdkFQSWefnafiuTx+wij px5xxiDGfHnyNjGp4fIWmQQEviM58M7uW8NZ+3F2h9i7iKOAAjvPG/8HmjCYUcjJ yhLSPB95jYEWKAgNUBBUm3ojVnXvKFKUrvyhnv6iwcNSIicZJdx8EKFYh/+YXsSl oFP4IodSZCccsTd34RPvJP0NO3uHCiuuFndJlc9OLM5SDLbewmBpZEpZDU9Gj4p2 +eeyTW4Pe3r5EQ== -----END CERTIFICATE-----Generated at Sat Dec 27 15:49:17 2025 by rpki-client