This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json) Hash identifier: 0ye14MjIFGCBrUNc5W4oMkmzU08nAKKVwGN6ca5atpE= Subject key identifier: 3B:E9:8D:9B:ED:AD:9D:8E:F2:4B:AD:88:B7:ED:B7:61:1C:C8:BE:22 Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb Certificate serial: 019B3B34AAAF6FF3F854A4EB8A1D44CDC576 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft Manifest number: 09CF Signing time: Sat 20 Dec 2025 10:01:05 +0000 Manifest this update: Sat 20 Dec 2025 10:01:05 +0000 Manifest next update: Sun 21 Dec 2025 10:01:05 +0000 Files and hashes: 1: 4ZVhrpuB1IHBXfe6fTnFzmbNef0.roa (hash: FuraICrae+dlC4EwK8Mlwdgne0MzMhtiCSQ/Z77/tTA=) 2: 5cQ1B8qaCGZjX6eh03Gxbe2gyAs.roa (hash: UnXYlFiyJBM2cbEBf2cCAcTXlYLcyD51tGVhPbgsuJM=) 3: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: 6nbk0jfbgO+4szkCkgXQttcrgW8nuvwIZ2xF/IzHqr8=) 4: lVXMGaXCeYAS9UTzuCTj9xPIgOs.roa (hash: ACZLuIV4fCglmS12ajGiBEyZ0FBoWBDoJRm4zWyNSbY=) 5: x-3D4SyWxTWtE8fU6h7K761mso0.roa (hash: KVo2GWCkNTOgM8bW+F4avHQXlq7DnsAvg8lQU9Oqt1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:aa:af:6f:f3:f8:54:a4:eb:8a:1d:44:cd:c5:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb Validity Not Before: Dec 20 10:01:05 2025 GMT Not After : Dec 21 10:01:05 2025 GMT Subject: CN=3be98d9bedad9d8ef24bad88b7edb7611cc8be22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:26:81:53:ad:bf:7c:26:20:c2:f3:e6:c8:c3: ff:83:c1:1b:6b:86:ab:b0:21:b5:17:72:90:81:ff: df:12:4d:c9:51:1c:1b:01:e9:e8:35:b3:a5:56:c4: a2:92:e0:43:86:d2:7a:a8:b7:ee:fb:2c:e5:89:65: 62:25:b4:55:9c:9a:3b:77:39:ee:55:c3:b1:ad:3e: 56:84:78:e2:0f:50:35:a6:1b:b0:38:79:f2:33:32: a4:53:76:f1:61:f0:8a:71:74:30:f9:eb:d2:52:c8: fd:bc:45:ab:ed:8b:9e:da:b2:33:60:80:80:43:d5: fe:05:eb:69:95:b9:23:30:7e:d0:87:24:88:06:22: 28:99:bc:9b:a9:a8:77:44:44:df:a1:4d:98:cc:f9: d1:96:ce:f1:6b:67:34:54:75:9e:17:15:33:ba:cb: 83:56:3d:53:1e:6a:20:d7:fc:1a:e8:fa:80:b1:99: f5:c3:a8:75:5a:3a:ee:81:96:08:18:93:d5:8e:f8: ee:c1:8c:b4:0e:4e:d6:41:da:33:5f:37:e3:58:94: 8e:08:3d:30:8e:67:81:02:16:6a:86:2c:f0:70:8e: 16:c9:62:4d:49:5e:a6:96:48:a7:c7:a2:c7:4e:b0: 1e:ae:c4:09:9e:fd:e0:ba:14:35:1d:00:b3:8e:1a: 31:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E9:8D:9B:ED:AD:9D:8E:F2:4B:AD:88:B7:ED:B7:61:1C:C8:BE:22 X509v3 Authority Key Identifier: keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:68:6b:11:6f:f1:5d:dd:00:65:71:91:ab:5d:55:c2:e9:a6: ea:ab:42:22:b5:6a:cf:10:5b:76:db:11:b0:df:d1:a9:f9:ee: 6b:11:64:46:22:ff:50:47:a9:f7:15:1e:5c:66:15:b3:89:1b: 85:b2:de:27:ce:71:90:4a:cf:8d:23:55:ea:9e:f8:c3:93:3c: 28:e7:77:b2:50:4e:10:f4:95:3b:2a:18:40:48:47:b1:4a:d8: ff:48:2c:cc:49:c5:11:15:2e:97:bd:0f:df:06:1e:bc:22:0d: 9f:06:84:16:ee:5c:67:e4:1c:d0:3c:e3:77:44:de:66:77:31: 90:65:b3:bc:cd:63:7a:80:3b:f6:90:57:17:9a:de:f1:89:71: ef:5f:1b:58:4d:88:ba:79:b0:9b:4d:2b:d7:9d:9e:e4:e4:37: 2c:0d:01:05:50:96:f4:62:3a:d9:f4:d0:9c:9d:cc:d3:b1:e1: 97:7b:c4:ad:fd:45:6c:8a:d5:ff:99:0b:db:5e:10:51:ce:4b: 29:60:74:d0:65:ae:d1:1d:ba:9d:d9:60:7a:de:3f:b1:4d:96: bf:a4:e0:14:7f:c0:43:14:9a:d0:94:77:4d:54:73:95:d8:52: 6c:86:01:2e:ca:f7:37:fc:6b:1f:2e:93:fd:bd:b7:57:f4:79: 02:c8:3d:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NKqvb/P4VKTrih1EzcV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzN2I0ODQ0OWJhMWNhZTE1YmRlMmMyZjA4NmQ5NDIxOGUw NzIwYmIwHhcNMjUxMjIwMTAwMTA1WhcNMjUxMjIxMTAwMTA1WjAzMTEwLwYDVQQD EygzYmU5OGQ5YmVkYWQ5ZDhlZjI0YmFkODhiN2VkYjc2MTFjYzhiZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyaBU62/fCYgwvPmyMP/g8Eba4ar sCG1F3KQgf/fEk3JURwbAenoNbOlVsSikuBDhtJ6qLfu+yzliWViJbRVnJo7dznu VcOxrT5WhHjiD1A1phuwOHnyMzKkU3bxYfCKcXQw+evSUsj9vEWr7Yue2rIzYICA Q9X+BetplbkjMH7QhySIBiIombybqah3RETfoU2YzPnRls7xa2c0VHWeFxUzusuD Vj1THmog1/wa6PqAsZn1w6h1WjrugZYIGJPVjvjuwYy0Dk7WQdozXzfjWJSOCD0w jmeBAhZqhizwcI4WyWJNSV6mlkinx6LHTrAersQJnv3guhQ1HQCzjhox/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvpjZvtrZ2O8kutiLftt2EcyL4iMB8GA1UdIwQY MBaAFAN7SESbocrhW94sLwhtlCGOByC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYt NzQwM2UxMzY3NWFiLzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYtNzQwM2UxMzY3NWFi LzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2hrEW/x Xd0AZXGRq11Vwumm6qtCIrVqzxBbdtsRsN/RqfnuaxFkRiL/UEep9xUeXGYVs4kb hbLeJ85xkErPjSNV6p74w5M8KOd3slBOEPSVOyoYQEhHsUrY/0gszEnFERUul70P 3wYevCINnwaEFu5cZ+Qc0Dzjd0TeZncxkGWzvM1jeoA79pBXF5re8Ylx718bWE2I unmwm00r152e5OQ3LA0BBVCW9GI62fTQnJ3M07Hhl3vErf1FbIrV/5kL214QUc5L KWB00GWu0R26ndlget4/sU2Wv6TgFH/AQxSa0JR3TVRzldhSbIYBLsr3N/xrHy6T /b23V/R5Asg97w== -----END CERTIFICATE-----Generated at Sat Dec 20 13:53:31 2025 by rpki-client