This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json) Hash identifier: sBmA2tiCkn/wFBuZemtc3yaZjnq0SMPFHWmlbKx1afU= Subject key identifier: 02:BC:1D:A5:4F:57:2F:1B:66:27:F8:C0:0A:96:2D:90:A8:F5:19:99 Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06 Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06 Certificate serial: 019B3F48851F14050D3E0A9F9106A7D58CCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft Manifest number: 0DB8 Signing time: Sun 21 Dec 2025 05:01:15 +0000 Manifest this update: Sun 21 Dec 2025 05:01:15 +0000 Manifest next update: Mon 22 Dec 2025 05:01:15 +0000 Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: y/VEaWL5TrL11A4qXpI1oX7ByXi4MLCn0gV5zunk7Q4=) 2: NH9bJkmOLcBYnLsAYTfcsFMJkSM.roa (hash: sPNuwdbSLXSgaPh+BpoER3Hzbei/qqQBt4s/TVbjmVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:85:1f:14:05:0d:3e:0a:9f:91:06:a7:d5:8c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06 Validity Not Before: Dec 21 05:01:15 2025 GMT Not After : Dec 22 05:01:15 2025 GMT Subject: CN=02bc1da54f572f1b6627f8c00a962d90a8f51999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:84:59:b7:5b:73:88:59:f6:54:48:a8:2c: 1b:c1:6c:13:05:1d:df:74:ee:00:2e:cf:34:c9:9d: f1:57:46:d9:46:cb:77:17:03:d4:83:c0:92:fb:2b: 0c:10:f6:18:af:46:f1:79:0c:f1:ac:89:52:74:7a: 96:8f:b3:4a:c3:ce:64:fb:1d:7d:e1:45:aa:7a:1e: 64:c4:95:4f:d3:d7:7b:38:2a:56:75:0a:1b:a7:7c: 85:1e:1c:cc:b6:79:76:00:8d:c2:e7:4b:1f:9d:4f: 48:ab:f3:03:35:1e:e4:24:47:76:e3:f3:2c:35:18: d3:4a:3d:a3:40:28:33:4b:6a:1a:3c:dd:4a:24:7d: 44:aa:f2:0c:84:c2:01:a6:5b:09:39:6b:72:f3:91: 9c:6e:d3:d4:38:8f:a9:80:ab:ee:e9:a7:48:8e:3a: a1:47:57:f8:d4:d8:3c:59:f7:7a:14:8e:27:d4:5a: 7d:3c:ca:5f:75:ed:f0:66:35:69:1d:23:de:b8:8c: 54:38:cb:6b:8c:e6:6f:8f:1c:7a:92:08:a0:42:c3: 20:7a:c7:03:f9:9b:a3:62:ee:86:19:01:be:6b:45: 14:1c:71:84:02:f1:33:0d:63:f5:31:9a:f2:4d:c8: 03:61:e2:63:1a:e0:17:18:ad:37:c6:5c:d6:6c:82: c7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BC:1D:A5:4F:57:2F:1B:66:27:F8:C0:0A:96:2D:90:A8:F5:19:99 X509v3 Authority Key Identifier: keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ab:d5:9b:76:f4:75:ac:26:96:44:7d:6a:95:d6:51:06:b6: 46:b1:0b:2b:b7:68:80:d6:a3:3b:e6:87:7b:ad:14:2c:af:14: 0c:ce:33:c4:aa:3a:0c:c3:7b:ea:87:68:a7:d6:d7:2f:01:2a: 1b:4a:50:ab:ab:73:a8:28:76:f9:db:1a:d7:79:ae:08:a6:ce: 83:ba:8d:26:70:bd:40:e0:81:41:4e:61:bb:50:cd:e3:61:76: 4e:3f:fe:19:54:ff:c0:c0:03:1a:98:df:c0:39:04:63:da:38: 93:a7:8d:55:ef:3e:9e:e5:35:77:a5:68:76:f2:65:ed:03:12: 1d:69:f4:64:ba:16:da:71:88:84:b6:d3:c4:27:89:59:67:85: e9:1c:ca:59:25:87:38:78:6f:d9:c9:42:a4:be:68:bc:ca:d2: 0b:e3:38:0e:4f:0b:22:ff:c9:4c:b3:49:02:a0:b0:75:bb:b8: 5c:87:38:23:e8:d2:d3:28:58:3b:14:02:52:f1:72:18:d0:33: 7f:d2:26:23:2f:a7:31:4d:cc:6f:ce:44:22:cc:d6:b4:51:de: 7c:d8:e9:e7:8d:b1:69:40:e2:b1:b3:97:de:7a:51:73:78:03: 13:e9:68:26:0b:05:7f:5e:e1:de:72:77:94:ef:87:b3:a7:b1: c8:3a:a6:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SIUfFAUNPgqfkQan1YzOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNzJmNWQxMThhYmQxMjkxYWUyNDhlNmM2OWQ2NGE5OWE5 YWVmMDYwHhcNMjUxMjIxMDUwMTE1WhcNMjUxMjIyMDUwMTE1WjAzMTEwLwYDVQQD EygwMmJjMWRhNTRmNTcyZjFiNjYyN2Y4YzAwYTk2MmQ5MGE4ZjUxOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZuEWbdbc4hZ9lRIqCwbwWwTBR3f dO4ALs80yZ3xV0bZRst3FwPUg8CS+ysMEPYYr0bxeQzxrIlSdHqWj7NKw85k+x19 4UWqeh5kxJVP09d7OCpWdQobp3yFHhzMtnl2AI3C50sfnU9Iq/MDNR7kJEd24/Ms NRjTSj2jQCgzS2oaPN1KJH1EqvIMhMIBplsJOWty85GcbtPUOI+pgKvu6adIjjqh R1f41Ng8Wfd6FI4n1Fp9PMpfde3wZjVpHSPeuIxUOMtrjOZvjxx6kgigQsMgescD +ZujYu6GGQG+a0UUHHGEAvEzDWP1MZryTcgDYeJjGuAXGK03xlzWbILH0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAK8HaVPVy8bZif4wAqWLZCo9RmZMB8GA1UdIwQY MBaAFDNy9dEYq9EpGuJI5sadZKmamu8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMt ZDJkOTI0MWVjNWRiLzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMtZDJkOTI0MWVjNWRi LzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPavVm3b0 dawmlkR9apXWUQa2RrELK7dogNajO+aHe60ULK8UDM4zxKo6DMN76odop9bXLwEq G0pQq6tzqCh2+dsa13muCKbOg7qNJnC9QOCBQU5hu1DN42F2Tj/+GVT/wMADGpjf wDkEY9o4k6eNVe8+nuU1d6VodvJl7QMSHWn0ZLoW2nGIhLbTxCeJWWeF6RzKWSWH OHhv2clCpL5ovMrSC+M4Dk8LIv/JTLNJAqCwdbu4XIc4I+jS0yhYOxQCUvFyGNAz f9ImIy+nMU3Mb85EIszWtFHefNjp542xaUDisbOX3npRc3gDE+loJgsFf17h3nJ3 lO+Hs6exyDqmqg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:10 2025 by rpki-client