This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json) Hash identifier: 4A1XCR7HYRoBQr5Plkym8rxOJUgYhOC/dhRQggT79hg= Subject key identifier: 7D:8D:D5:CC:5B:22:76:A3:D7:25:AD:5C:5C:3D:F9:16:9D:A4:AC:58 Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c Certificate serial: 019B6DD888FF0557E0A2E2526AC2E03D8D35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft Manifest number: 17A0 Signing time: Tue 30 Dec 2025 06:01:05 +0000 Manifest this update: Tue 30 Dec 2025 06:01:05 +0000 Manifest next update: Wed 31 Dec 2025 06:01:05 +0000 Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: b06aSBsUqJMmAPJ4+Q1mnQ+HePS14yBAv220lzhnbYo=) 2: 5395RGU-O7_Y-Wk8o5ckF03TEl8.roa (hash: 2x9LkbbQVmDZR4+CDqZEC8HuaScYKr9cs6YHpuOZlvY=) 3: JRT-ehjK87EWSX2wN_VxdPNgZVU.roa (hash: FFbMq3Jl0t/JwkKVVNHldSFfVrz4m+b2CW8bGskb98A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:d8:88:ff:05:57:e0:a2:e2:52:6a:c2:e0:3d:8d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c Validity Not Before: Dec 30 06:01:05 2025 GMT Not After : Dec 31 06:01:05 2025 GMT Subject: CN=7d8dd5cc5b2276a3d725ad5c5c3df9169da4ac58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:a2:0e:df:93:c4:39:33:31:30:55:94:b1: 85:fa:88:da:1f:85:b0:83:8b:04:91:00:66:79:cb: fb:53:bf:06:45:16:b1:d5:4d:97:49:83:42:5c:88: 9d:75:9f:74:7d:ab:a9:d1:7e:95:87:8e:57:e2:3a: e8:19:b5:1c:c4:9d:b1:18:8d:8a:3a:dd:d0:6a:1c: 6a:8e:b9:71:14:5f:2e:c7:87:05:c4:3e:84:29:d6: de:53:e8:71:92:a3:2c:16:e5:d5:97:a4:14:cf:ad: 5d:7e:73:33:6d:7c:db:73:13:c4:01:ca:5a:9b:d3: 47:ed:e2:de:b3:f9:c7:90:ab:6f:c2:a5:c3:38:27: 9f:65:cb:60:4a:ac:18:47:a5:18:eb:a5:ea:2c:8b: 53:20:15:1a:49:ea:98:06:4c:3a:04:c5:aa:54:cd: 9d:78:35:7c:2a:00:54:dc:fd:ff:2b:70:1f:a5:6f: 9c:ba:c3:1a:80:e4:fe:c5:47:6b:ec:de:20:41:bb: 82:05:f2:6b:ad:cd:04:e6:79:72:5a:ad:68:d7:41: e9:e5:a7:23:f5:b2:f7:57:6b:f2:1a:31:1a:3d:11: 0e:66:dc:72:24:71:e9:b5:5b:65:7a:64:08:1d:0e: 35:07:1f:af:7b:9e:2d:96:22:23:7f:b2:e9:62:9b: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8D:D5:CC:5B:22:76:A3:D7:25:AD:5C:5C:3D:F9:16:9D:A4:AC:58 X509v3 Authority Key Identifier: keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:47:38:54:02:a1:4d:9a:06:54:1f:39:3a:40:cf:66:a6:32: e5:72:21:e2:4b:e3:44:f7:af:2c:79:09:e1:45:09:59:1b:d1: f4:41:21:c5:e2:91:d3:22:f4:a6:5c:f6:eb:bb:bb:af:06:0f: d7:9b:84:af:47:b0:11:5a:2a:2c:4f:4e:13:bb:e5:df:f5:3a: f7:74:97:bf:fc:ac:42:ac:2d:10:71:c1:99:22:4b:51:c3:58: a8:2e:a8:1c:d8:fd:12:04:31:e8:16:27:f4:ac:c7:2e:30:a1: ab:73:12:c9:42:5e:38:aa:04:e1:b2:b8:7e:7d:1e:42:b4:6a: 62:69:19:4e:a1:f5:c6:73:28:ce:d0:c7:99:98:f6:e8:7d:ff: 96:7a:e2:48:48:56:2e:3b:68:3f:d2:63:2d:ed:08:e3:7f:31: b3:99:01:9f:f8:2d:9e:cd:17:74:2d:2b:b2:b3:0f:2a:93:48: 27:80:e7:2c:ca:38:e8:3f:89:c8:40:8f:b6:0b:c2:72:49:93: de:29:2b:0f:24:aa:da:54:98:79:cb:c3:13:c0:4b:9b:d7:63: a9:95:8a:77:d8:aa:54:55:a6:bb:53:7a:ad:a7:69:e3:b5:e2: 88:56:2a:27:d3:e2:1f:99:02:83:89:f4:9e:f9:52:39:82:1f: b1:ef:03:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtt2Ij/BVfgouJSasLgPY01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjFkZjU5OGY0YThmM2EyZDA3NGNjYjZmNmQxNmI1NGQx ZDExMWMwHhcNMjUxMjMwMDYwMTA1WhcNMjUxMjMxMDYwMTA1WjAzMTEwLwYDVQQD Eyg3ZDhkZDVjYzViMjI3NmEzZDcyNWFkNWM1YzNkZjkxNjlkYTRhYzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8GiDt+TxDkzMTBVlLGF+ojaH4Ww g4sEkQBmecv7U78GRRax1U2XSYNCXIiddZ90faup0X6Vh45X4jroGbUcxJ2xGI2K Ot3QahxqjrlxFF8ux4cFxD6EKdbeU+hxkqMsFuXVl6QUz61dfnMzbXzbcxPEAcpa m9NH7eLes/nHkKtvwqXDOCefZctgSqwYR6UY66XqLItTIBUaSeqYBkw6BMWqVM2d eDV8KgBU3P3/K3AfpW+cusMagOT+xUdr7N4gQbuCBfJrrc0E5nlyWq1o10Hp5acj 9bL3V2vyGjEaPREOZtxyJHHptVtlemQIHQ41Bx+ve54tliIjf7LpYpuE/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2N1cxbInaj1yWtXFw9+RadpKxYMB8GA1UdIwQY MBaAFN3x31mPSo86LQdMy29tFrVNHREcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YjhiY2UtNTg0Yy00OTJjLWJkN2Ut ZDBmMzFiYzkzMDc5LzEvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82YjhiY2UtNTg0Yy00OTJjLWJkN2UtZDBmMzFiYzkzMDc5 LzEvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEc4VAKh TZoGVB85OkDPZqYy5XIh4kvjRPevLHkJ4UUJWRvR9EEhxeKR0yL0plz267u7rwYP 15uEr0ewEVoqLE9OE7vl3/U693SXv/ysQqwtEHHBmSJLUcNYqC6oHNj9EgQx6BYn 9KzHLjChq3MSyUJeOKoE4bK4fn0eQrRqYmkZTqH1xnMoztDHmZj26H3/lnriSEhW LjtoP9JjLe0I438xs5kBn/gtns0XdC0rsrMPKpNIJ4DnLMo46D+JyECPtgvCckmT 3ikrDySq2lSYecvDE8BLm9djqZWKd9iqVFWmu1N6radp47XiiFYqJ9PiH5kCg4n0 nvlSOYIfse8Dnw== -----END CERTIFICATE-----Generated at Tue Dec 30 13:56:44 2025 by rpki-client