This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft File: 3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json) Hash identifier: dsXj1nKfzUkulaSLRaGqkpYJNxlzJrfmJm2PC9xPMfM= Subject key identifier: 6D:80:42:19:B5:E9:4E:83:86:30:B1:42:F7:65:B1:07:AE:4E:5B:F6 Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Certificate serial: 019B68EA40A87BE58CF737499393DF75B96E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft Manifest number: 17A9 Signing time: Mon 29 Dec 2025 07:02:20 +0000 Manifest this update: Mon 29 Dec 2025 07:02:20 +0000 Manifest next update: Tue 30 Dec 2025 07:02:20 +0000 Files and hashes: 1: 0wxplS04ynQiI1r3ArdsiKBCEOI.roa (hash: WDNF73KtUANe5OGg5Z8hCbK6QAlz8jWNq6iQlKA1l4A=) 2: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: UUEKk1fSag3IvCg1OxUnDz2dK6QAkk+HJkI61kmByns=) 3: JIEsiChTD9veiUWmlJ3B4QQpFuc.roa (hash: G8sz8HlJFis3zSSNKaXy4CKewTagYcW3tdUbj5SB5rw=) 4: erY5eOsE13MYDYGdz-7KiRAOTog.roa (hash: NmXI2cVM6emkr8oTXJbXMbKgJl7gRO9hnwaW3QZ2P/k=) 5: g4ZCPviGonmRGPJlO9nSng_S-lo.roa (hash: NBfLnaWFnRjJb4HXfFDgN4fD3VeUZZnkBAnPok8zBDM=) 6: pt0lS1m3NLfN-ZlG6LR_u92_6So.roa (hash: 5VENDpQR+7VNnLE+YBum+RFRq29jqQtAdKpAJMhSuxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:ea:40:a8:7b:e5:8c:f7:37:49:93:93:df:75:b9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Validity Not Before: Dec 29 07:02:20 2025 GMT Not After : Dec 30 07:02:20 2025 GMT Subject: CN=6d804219b5e94e838630b142f765b107ae4e5bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:43:7a:fc:a5:39:80:54:c7:08:59:d4:d9: 8f:c6:5a:1a:69:a9:6c:63:f3:54:c4:df:d9:b4:63: 07:df:50:fb:32:76:fd:40:b3:18:04:60:c5:92:4b: e6:7c:3d:df:4c:24:99:8b:77:7b:48:e6:7d:7c:f5: 75:e3:58:7a:a1:1b:d2:98:51:5a:25:47:8f:05:b6: c6:ee:8f:98:8b:dd:09:73:bc:11:eb:56:91:70:c2: 45:50:39:1c:79:f8:f6:ba:d3:4a:ff:ac:19:39:21: db:b6:64:4d:a5:83:9f:04:47:be:00:f0:8f:b7:31: 3c:4d:2f:e5:84:e2:be:a4:6d:59:9a:7c:1f:fc:7c: b6:36:11:82:de:2a:de:45:38:35:cd:02:c1:73:9e: dd:61:93:4b:f3:0c:4e:59:3c:23:c4:bb:ab:83:f4: a8:e0:24:c8:58:b7:9d:ee:12:7b:6a:05:1f:b0:da: ea:69:57:ed:84:f3:6a:0c:19:b5:88:53:f0:51:fa: ad:fc:39:e2:e2:2e:de:12:48:bd:4c:97:fd:83:3f: 66:92:da:d3:bb:82:91:d1:49:8d:ae:e5:f2:39:f4: 5f:c4:0c:8b:a3:50:73:f8:2c:68:16:63:5e:d5:0d: 2d:cb:c0:b4:09:4c:96:78:33:66:fb:d2:d6:2c:cc: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:80:42:19:B5:E9:4E:83:86:30:B1:42:F7:65:B1:07:AE:4E:5B:F6 X509v3 Authority Key Identifier: keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:89:60:f0:7b:82:aa:e3:17:b8:12:90:eb:d2:ce:02:1e:2c: 6f:6a:89:fc:d9:78:d7:57:20:b9:4f:66:8b:7d:63:80:8f:6d: 90:c3:6b:a6:0a:10:b7:10:49:46:9a:a8:b1:9e:90:a9:dc:45: c2:db:55:f7:35:db:11:f1:a3:50:f9:be:29:4e:04:ea:5a:52: 60:f5:74:09:5a:40:da:0c:bd:9d:b3:42:ce:a7:91:67:29:16: 41:cc:6d:d8:b5:b1:35:de:eb:0a:ea:78:80:4a:8f:c4:5f:4d: 0f:e2:54:72:ee:75:e0:b3:69:56:86:3a:c4:22:b5:48:7e:71: e9:29:a1:d8:64:c8:7f:6d:4c:b9:fb:5f:04:ab:8d:07:8f:90: a0:13:09:94:e5:b6:2d:e7:21:b7:b6:41:ec:94:df:a4:ee:fb: 6a:c3:3f:2d:34:a7:11:f6:ad:80:00:88:e6:2f:f5:62:12:22: 70:d9:8d:f7:55:3a:75:01:b4:5d:22:43:6e:a7:38:fb:53:7d: c9:d4:74:8f:ae:79:49:ed:09:bf:78:ec:d5:82:3a:e1:56:1f: fe:d4:bd:3e:64:4b:9c:32:dd:84:9c:fb:3c:bb:79:f1:6d:d1: 70:c5:0c:79:6f:a9:e8:a4:d1:b5:93:90:42:f7:ec:6e:06:7a: 7e:a4:db:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6kCoe+WM9zdJk5PfdbluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNDU2Y2RiNGQxNDAzNDVjM2RjYWViZmM3NjM0ZDRlN2Nk Y2I5MTMwHhcNMjUxMjI5MDcwMjIwWhcNMjUxMjMwMDcwMjIwWjAzMTEwLwYDVQQD Eyg2ZDgwNDIxOWI1ZTk0ZTgzODYzMGIxNDJmNzY1YjEwN2FlNGU1YmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FdDevylOYBUxwhZ1NmPxloaaals Y/NUxN/ZtGMH31D7Mnb9QLMYBGDFkkvmfD3fTCSZi3d7SOZ9fPV141h6oRvSmFFa JUePBbbG7o+Yi90Jc7wR61aRcMJFUDkcefj2utNK/6wZOSHbtmRNpYOfBEe+APCP tzE8TS/lhOK+pG1Zmnwf/Hy2NhGC3ireRTg1zQLBc57dYZNL8wxOWTwjxLurg/So 4CTIWLed7hJ7agUfsNrqaVfthPNqDBm1iFPwUfqt/Dni4i7eEki9TJf9gz9mktrT u4KR0UmNruXyOfRfxAyLo1Bz+CxoFmNe1Q0ty8C0CUyWeDNm+9LWLMyDrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2AQhm16U6DhjCxQvdlsQeuTlv2MB8GA1UdIwQY MBaAFN5FbNtNFANFw9yuv8djTU583LkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEt OTI4ZTdiYzY5NTcwLzEvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEtOTI4ZTdiYzY5NTcw LzEvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXolg8HuC quMXuBKQ69LOAh4sb2qJ/Nl411cguU9mi31jgI9tkMNrpgoQtxBJRpqosZ6QqdxF wttV9zXbEfGjUPm+KU4E6lpSYPV0CVpA2gy9nbNCzqeRZykWQcxt2LWxNd7rCup4 gEqPxF9ND+JUcu514LNpVoY6xCK1SH5x6Smh2GTIf21MuftfBKuNB4+QoBMJlOW2 Lecht7ZB7JTfpO77asM/LTSnEfatgACI5i/1YhIicNmN91U6dQG0XSJDbqc4+1N9 ydR0j655Se0Jv3js1YI64VYf/tS9PmRLnDLdhJz7PLt58W3RcMUMeW+p6KTRtZOQ QvfsbgZ6fqTbBg== -----END CERTIFICATE-----Generated at Mon Dec 29 08:31:36 2025 by rpki-client