This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft File: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json) Hash identifier: IMivXaswRs4dSulLUwemIMX/dPNt0jQc29ZmQB5kaos= Subject key identifier: F3:99:22:83:AF:08:C0:CD:E4:59:62:B5:E5:66:BE:B1:54:4D:A4:F9 Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f Certificate serial: 019B3D2348D487F767D93B65F026E7B55F6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft Manifest number: 0F3B Signing time: Sat 20 Dec 2025 19:01:21 +0000 Manifest this update: Sat 20 Dec 2025 19:01:21 +0000 Manifest next update: Sun 21 Dec 2025 19:01:21 +0000 Files and hashes: 1: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: ho0XjFj1T9JcUMIBJWbyW7ZC3ZFjEbKoxiDmHTcq1LY=) 2: CZnlkiY3og8rtBoo7Koc6sXsHTo.roa (hash: Rvhx0o8KGhpASZKp5ZJ69K1clVCJo2tPstcBWQs04Wk=) 3: INWe7JHY3LSZtRLCNKJA9CyWVj4.roa (hash: Yo4nt69BrN4AQ4hoMVSQ6OOsFPB4EPZWgV8+aVYUE7U=) 4: nGmNNcPYPqUlkXgs_RQgBIHWHdU.roa (hash: qd/h+GWajfOX6OMR5HYNSJZTt3Etfb5C3Mcx9RhNRgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:48:d4:87:f7:67:d9:3b:65:f0:26:e7:b5:5f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f Validity Not Before: Dec 20 19:01:21 2025 GMT Not After : Dec 21 19:01:21 2025 GMT Subject: CN=f3992283af08c0cde45962b5e566beb1544da4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:ed:b6:fd:3a:76:c5:de:30:14:dd:bd:bc: 54:7e:cf:8d:91:2d:d4:86:43:8d:a6:21:83:6c:c2: 85:a4:3a:f2:5d:33:88:1e:5b:9c:f3:6e:45:37:f0: ab:fb:38:86:8a:76:46:a8:84:89:bd:71:7a:e7:71: 12:b0:6c:e1:be:e8:a5:3a:df:27:09:2a:e6:d3:e5: 58:68:5e:1f:7a:6e:d6:c2:62:6a:4d:39:83:69:67: 20:80:c4:08:e1:30:9f:bf:5b:2d:30:00:b9:8b:e2: 7d:e3:38:d4:44:e6:71:1d:26:5d:04:1c:bc:88:9d: cf:93:98:4a:48:91:58:7e:95:02:13:e8:bf:90:ea: 39:35:22:3e:07:c3:05:28:a8:66:ab:7a:0a:71:1f: cf:b4:56:07:ce:70:02:3c:f3:fa:7f:d6:a1:c9:dd: 7a:b0:9e:f6:5d:80:81:37:da:4a:f3:13:c5:37:c9: 9c:57:53:7f:ad:07:90:d1:72:09:f4:d8:98:60:5d: 3f:9d:b9:bc:8e:49:b0:f4:a7:43:61:a8:13:1a:10: 91:3b:e0:fc:89:ec:b8:54:4c:b4:0f:0f:ca:75:ba: 1d:0f:94:08:ed:62:0c:fb:34:a2:0e:28:46:a6:5d: b5:b4:5b:ae:19:a6:8b:d6:e6:b5:72:43:6f:c5:2f: 48:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:99:22:83:AF:08:C0:CD:E4:59:62:B5:E5:66:BE:B1:54:4D:A4:F9 X509v3 Authority Key Identifier: keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:46:08:5d:7a:d2:19:b0:28:03:36:f2:f5:87:52:e6:5d:a9: ae:8b:d8:3f:2d:9b:67:e1:e5:4b:e7:51:96:ba:41:b4:b6:2e: 76:84:d7:a5:74:8d:07:3c:75:e4:00:49:2a:66:f5:e6:ca:52: f1:5f:8b:7a:be:90:df:63:8d:a5:9f:30:19:69:fd:a6:d9:8d: d5:27:55:83:11:55:d2:2d:09:73:9b:78:f1:35:47:6f:e9:c0: f9:fb:57:d5:98:87:02:a0:67:5b:19:cf:e1:a6:4b:00:39:84: 05:b2:56:a6:25:bf:a4:34:8e:f3:27:47:e8:a5:78:cc:cc:08: 41:c7:88:2b:4b:93:10:61:07:6c:d8:9f:e8:d5:0a:cb:b7:96: 94:de:fa:ee:76:ef:86:47:b0:07:31:1b:5f:f8:f4:b0:3d:fa: 57:9c:77:41:9d:c1:9a:b9:b6:46:70:d7:b9:5e:93:ad:91:55: 62:bb:b6:c7:9e:0f:dd:a4:c3:2b:7d:70:6a:84:cc:2b:43:59: e6:ae:3d:57:29:6c:2a:08:64:a4:ae:a8:dc:f8:63:b6:b7:2c: e8:54:ea:ab:67:02:e7:6e:4f:f9:29:ca:c1:e9:5e:20:5d:7b: b4:1e:cf:fd:4a:5c:4a:e1:33:8b:87:db:28:36:88:e1:2b:f7: 0d:e7:b1:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I0jUh/dn2Ttl8CbntV9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNzhiMmQzZjYyNzAwZmU2N2U1OTNiNWEzM2QxY2Y5MTc4 OTI1MmYwHhcNMjUxMjIwMTkwMTIxWhcNMjUxMjIxMTkwMTIxWjAzMTEwLwYDVQQD EyhmMzk5MjI4M2FmMDhjMGNkZTQ1OTYyYjVlNTY2YmViMTU0NGRhNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4/ttv06dsXeMBTdvbxUfs+NkS3U hkONpiGDbMKFpDryXTOIHluc825FN/Cr+ziGinZGqISJvXF653ESsGzhvuilOt8n CSrm0+VYaF4fem7WwmJqTTmDaWcggMQI4TCfv1stMAC5i+J94zjUROZxHSZdBBy8 iJ3Pk5hKSJFYfpUCE+i/kOo5NSI+B8MFKKhmq3oKcR/PtFYHznACPPP6f9ahyd16 sJ72XYCBN9pK8xPFN8mcV1N/rQeQ0XIJ9NiYYF0/nbm8jkmw9KdDYagTGhCRO+D8 iey4VEy0Dw/KdbodD5QI7WIM+zSiDihGpl21tFuuGaaL1ua1ckNvxS9IbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOZIoOvCMDN5FliteVmvrFUTaT5MB8GA1UdIwQY MBaAFAt4stP2JwD+Z+WTtaM9HPkXiSUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEt NjA3OGVmZDA3ODVlLzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEtNjA3OGVmZDA3ODVl LzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUYIXXrS GbAoAzby9YdS5l2provYPy2bZ+HlS+dRlrpBtLYudoTXpXSNBzx15ABJKmb15spS 8V+Ler6Q32ONpZ8wGWn9ptmN1SdVgxFV0i0Jc5t48TVHb+nA+ftX1ZiHAqBnWxnP 4aZLADmEBbJWpiW/pDSO8ydH6KV4zMwIQceIK0uTEGEHbNif6NUKy7eWlN767nbv hkewBzEbX/j0sD36V5x3QZ3Bmrm2RnDXuV6TrZFVYru2x54P3aTDK31waoTMK0NZ 5q49VylsKghkpK6o3Phjtrcs6FTqq2cC525P+SnKweleIF17tB7P/UpcSuEzi4fb KDaI4Sv3DeexpQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:38 2025 by rpki-client