This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json) Hash identifier: ziMZF+rzfR0mCKVQsoTAFxUw7VoxdLnSgmiejeV3L7g= Subject key identifier: 8C:DA:6F:31:6E:7C:91:F2:EE:BD:55:DC:CB:25:9E:E5:C1:2F:06:B1 Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6 Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6 Certificate serial: 019B3D59D6E7DAD589CA44DAF3E75DAE7A8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 20:00:56 +0000 Manifest this update: Sat 20 Dec 2025 20:00:56 +0000 Manifest next update: Sun 21 Dec 2025 20:00:56 +0000 Files and hashes: 1: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: 0A+vaG/lEhdRMVhUF78oE3qJxJpCacTysxQdFCellV0=) 2: I9GqI9GxRbg5gyNw2oYeQXtgJJg.roa (hash: IdZbo1C2DnUJiJSpOjjTPKnvp3frNBJygc4FMjTeWHU=) 3: OJHrSjDn0A0xOyeisC7fOP_zy4g.roa (hash: 4mrlovUy+cBI29r4SEJkRQxz3HoEwjM6nDvfGvlxWBU=) 4: ie70DJhDrGYxNNPSAG6BpAZrtxY.roa (hash: HiOIeBO8KrrORXl70BQK8AAzSZ8zCob2hQpjThQB7t8=) 5: tr4Wz-5rQhPo47mTFs_LgvHDl8s.roa (hash: PZGVkTuh77FvBlVCnDa38AVdteMzJ1COvOQXzBoIS0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:d6:e7:da:d5:89:ca:44:da:f3:e7:5d:ae:7a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6 Validity Not Before: Dec 20 20:00:56 2025 GMT Not After : Dec 21 20:00:56 2025 GMT Subject: CN=8cda6f316e7c91f2eebd55dccb259ee5c12f06b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:34:7d:d6:00:bf:1f:c2:4e:6b:23:08:b9:84: fd:a9:b1:4d:e8:46:25:b3:56:1d:24:4b:c4:ba:47: 7f:fd:4d:e6:6d:91:bf:0f:8a:33:66:2f:5b:26:55: bd:c9:42:2e:44:81:e0:ad:c5:60:b7:c3:77:59:05: d8:54:47:d4:c8:11:a9:6d:f9:b9:7e:17:44:ae:29: 8d:34:45:79:d8:64:f5:ed:36:5c:fb:75:c4:f9:8c: 9d:1d:88:fa:c6:f0:74:fe:18:31:cd:4e:a8:6b:82: 64:70:e8:4d:95:45:72:fa:6c:1f:fc:b8:79:13:ec: af:e6:76:2a:02:d5:67:5c:83:ab:40:2e:72:8f:ea: 40:da:70:37:d0:5d:9c:13:6f:60:55:e2:7d:e9:3f: 1d:69:1a:b0:02:be:12:56:e8:43:8e:66:9a:4a:18: c9:11:32:3c:f2:4f:bf:ed:6e:e0:2e:3c:6b:35:f3: 67:0b:41:29:f3:06:b1:ff:b3:26:13:87:52:52:c5: 00:4d:52:fb:06:29:36:68:26:ea:95:01:75:4f:00: 8b:98:c4:23:a5:88:b4:c9:c8:35:ef:7e:73:a0:d3: 3a:d8:35:b5:78:90:39:95:57:53:e2:40:e2:29:0f: bd:f4:a9:4b:21:15:1b:93:ad:8b:5f:73:0e:ef:95: 5d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DA:6F:31:6E:7C:91:F2:EE:BD:55:DC:CB:25:9E:E5:C1:2F:06:B1 X509v3 Authority Key Identifier: keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:51:9d:b9:bb:53:53:70:11:29:14:e7:9a:de:19:5e:c3:29: 99:64:6c:16:fb:52:4a:ef:9f:47:61:d1:74:93:46:d8:13:29: e5:87:96:75:09:58:fc:2c:2c:d9:71:ec:b7:d1:57:bb:aa:53: 28:6e:a0:7a:a0:ed:a9:e3:20:d3:1e:4f:fa:b4:ff:32:a6:29: 69:d4:e7:d1:34:b0:db:57:e0:67:e9:ec:d8:65:9e:b6:d6:36: 49:27:19:c9:7f:ac:a6:3a:31:1d:26:c7:1e:a1:42:48:1c:01: d9:13:14:eb:c0:9e:6b:16:37:95:cb:6c:73:c9:cd:6b:be:ee: e1:29:2c:8e:44:74:3f:14:58:59:3d:58:54:89:ac:bf:37:dc: 82:07:4d:fe:0e:cd:4a:94:44:e1:a0:97:32:8f:a2:2e:6b:84: 71:d4:8f:65:94:e1:27:63:34:20:80:da:8e:76:1d:8f:8b:a1: 83:3d:a2:af:8c:ae:26:44:0c:75:5d:a5:14:d8:65:27:7f:cb: f4:82:6a:52:f1:1f:68:98:29:a3:ce:6c:74:e0:46:55:64:67: a6:20:38:8a:32:a9:46:f8:88:76:13:22:b2:a0:31:ad:8e:bb: b1:ad:ed:60:0d:b4:75:a4:c5:56:f6:be:00:49:c4:77:43:74: d1:b6:15:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wdbn2tWJykTa8+ddrnqLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMGI2NjNjNDVkN2JjMjcyNGQxNjg0ODUwODc1ODFlMTQ0 NDhmYjYwHhcNMjUxMjIwMjAwMDU2WhcNMjUxMjIxMjAwMDU2WjAzMTEwLwYDVQQD Eyg4Y2RhNmYzMTZlN2M5MWYyZWViZDU1ZGNjYjI1OWVlNWMxMmYwNmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TR91gC/H8JOayMIuYT9qbFN6EYl s1YdJEvEukd//U3mbZG/D4ozZi9bJlW9yUIuRIHgrcVgt8N3WQXYVEfUyBGpbfm5 fhdErimNNEV52GT17TZc+3XE+YydHYj6xvB0/hgxzU6oa4JkcOhNlUVy+mwf/Lh5 E+yv5nYqAtVnXIOrQC5yj+pA2nA30F2cE29gVeJ96T8daRqwAr4SVuhDjmaaShjJ ETI88k+/7W7gLjxrNfNnC0Ep8wax/7MmE4dSUsUATVL7Bik2aCbqlQF1TwCLmMQj pYi0ycg1735zoNM62DW1eJA5lVdT4kDiKQ+99KlLIRUbk62LX3MO75VdqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzabzFufJHy7r1V3MslnuXBLwaxMB8GA1UdIwQY MBaAFN0LZjxF17wnJNFoSFCHWB4URI+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQt M2I5ZTNjOGEyZmNhLzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQtM2I5ZTNjOGEyZmNh LzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlGdubtT U3ARKRTnmt4ZXsMpmWRsFvtSSu+fR2HRdJNG2BMp5YeWdQlY/Cws2XHst9FXu6pT KG6geqDtqeMg0x5P+rT/MqYpadTn0TSw21fgZ+ns2GWettY2SScZyX+spjoxHSbH HqFCSBwB2RMU68CeaxY3lctsc8nNa77u4SksjkR0PxRYWT1YVImsvzfcggdN/g7N SpRE4aCXMo+iLmuEcdSPZZThJ2M0IIDajnYdj4uhgz2ir4yuJkQMdV2lFNhlJ3/L 9IJqUvEfaJgpo85sdOBGVWRnpiA4ijKpRviIdhMisqAxrY67sa3tYA20daTFVva+ AEnEd0N00bYVZQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:54:11 2025 by rpki-client