This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft File: 3Hgh4by_bgdOpIFKqlxj47qBPF8.mft (raw, json) Hash identifier: Ya8o7gn6Pubf/VbuRhMcZd73Mqx1NLTnRInhJNJ9e7c= Subject key identifier: 8F:54:91:31:29:15:FB:10:C4:E8:04:94:47:40:8E:DA:9A:FD:ED:6C Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f Certificate serial: 019B3CEC6A47F5F3474DFBF47813DF4A6295 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft Manifest number: 179A Signing time: Sat 20 Dec 2025 18:01:25 +0000 Manifest this update: Sat 20 Dec 2025 18:01:25 +0000 Manifest next update: Sun 21 Dec 2025 18:01:25 +0000 Files and hashes: 1: 3Hgh4by_bgdOpIFKqlxj47qBPF8.crl (hash: rejXK3yrbTw29Yyni0FOmSIQUqajXRPX7oEWdDo9u/c=) 2: 4MXMdJWAndzkkiHFnmOxrlOkHIs.roa (hash: OiJ7+6r4bWAFN5vOHYBjk8U2TGkBpOBvwNxXY+Qb+To=) 3: FnxhJQ5jd2jBoCiaTZ0_b7pYcn4.roa (hash: YbjDITXwnNkMY1d8iM5sg8TPIw1q/oeZDc75wOKQiOE=) 4: Rbk5PVjqlkpGo1SxsQ_tSeJLPbo.roa (hash: BRLtcU6d3bxk4bV/7KHF4XZmiUFqH8jja8emVx8VywY=) 5: biONUDB1iLS86N-lmaqB6_yoBtQ.roa (hash: 5maaRfHknlsWIxQOJIJbyzAegwgxyX3Q4OIbKY62ook=) 6: e8yyBy_WYk0MmiOF_-c6ZOE78e0.roa (hash: XCwVuTCuJ/Y/WAoLWIkeepq2X2E/4/mFMfojm79U0cM=) 7: s30LP9oNn_a9WqmNNhVG8BZsr_E.roa (hash: niAKqfiybnbnJMKEAdo6F1LKY3RNGfAvckOC23OVwd0=) 8: uRWNqrl7lEtL4BdXY6zm3up7W9g.roa (hash: 5dZDwl/VQCf/bzBpVyR3+W+VZSdwG299LMVlDR4jvrU=) 9: w6y6tA7YYKjCRBu0w7S_pejO5kU.roa (hash: m4339RdE053FyeU5wm1JX9FNzAT+cE85Onp7E9j3YoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:6a:47:f5:f3:47:4d:fb:f4:78:13:df:4a:62:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f Validity Not Before: Dec 20 18:01:25 2025 GMT Not After : Dec 21 18:01:25 2025 GMT Subject: CN=8f5491312915fb10c4e8049447408eda9afded6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:fd:7b:b7:32:78:17:bc:b2:72:51:44:fa: 6e:35:00:09:2b:50:b0:88:d9:5b:8a:66:a2:0c:c2: 94:ee:69:07:4a:7b:79:7c:c1:d7:ac:37:dc:01:4c: 75:ec:d2:82:f3:86:60:d3:a8:a9:fd:ce:6c:f2:5c: 00:38:a7:ab:41:16:5d:9e:5e:99:73:dd:d5:02:4c: 8f:a9:b7:57:e8:dc:d1:5d:60:08:cd:41:b7:7c:88: f1:1b:27:50:c1:d2:d7:f3:d8:c3:5f:74:d7:8d:aa: 0e:ad:01:70:42:07:d7:15:00:cb:01:d9:30:c1:9b: 58:3d:53:bd:c2:b7:bd:31:0f:65:59:b8:74:ee:af: 63:94:f3:fa:51:9c:73:6c:23:54:74:0a:0f:1a:c9: fa:ec:2f:da:92:40:68:60:51:e8:d6:2d:2e:d1:2c: 06:fe:36:36:f3:1e:e7:d2:65:77:2f:1d:47:98:1f: 72:ac:89:0e:2b:cc:9a:d0:ac:6b:fb:c4:4f:b9:9c: e6:64:62:28:50:9a:15:68:7b:14:5c:1d:12:71:05: 4c:d8:fc:b0:24:6a:ab:06:62:f4:55:8f:10:c0:a7: a7:64:75:c6:0f:f7:f2:7e:c4:c5:6a:c5:bf:95:fc: 55:1e:94:de:a0:b9:28:4f:90:02:db:7c:26:22:5d: bb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:54:91:31:29:15:FB:10:C4:E8:04:94:47:40:8E:DA:9A:FD:ED:6C X509v3 Authority Key Identifier: keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:2d:7e:77:1b:ed:51:e7:e6:c5:62:81:d0:1c:7f:b4:90:f2: bd:3f:18:c4:f9:c7:e6:fc:b8:71:b5:9a:54:2d:5a:2b:be:2b: b3:1f:46:8b:27:6c:d1:cd:d2:4c:f9:9d:20:87:5e:92:ca:36: 6a:90:50:a5:24:5f:4a:f3:f4:31:04:95:3a:c0:26:fb:2b:6f: 69:9c:91:3b:7d:f8:24:33:05:77:b4:d8:50:b8:f4:78:d8:86: 67:34:aa:f3:82:01:a2:68:6d:50:f7:49:24:cc:83:2f:9a:e8: 84:65:e0:f3:05:14:35:31:04:bb:f2:06:56:6d:92:2a:6b:2f: 7e:dd:e7:77:f7:f5:14:08:25:a6:8a:fa:2f:4b:c7:af:c3:c2: b1:ea:ba:86:2b:50:59:eb:a2:92:55:28:29:eb:09:88:c7:b2: f7:e4:f4:a3:52:04:b8:e1:da:0c:ec:0d:5c:4d:38:a5:8b:8d: 84:fd:2b:f1:ee:25:5b:29:6a:61:1a:e0:92:1e:74:8a:07:49: 17:f9:30:ce:12:4e:0d:3c:d8:65:17:7f:a5:c9:4d:38:f1:fa: e7:6e:e6:54:c0:19:4e:fb:10:66:87:dc:6a:7b:07:7c:2c:55: 8b:2c:bd:74:ab:e2:21:29:a5:6e:88:8e:fb:9e:cf:de:1d:0d: ec:76:1a:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87GpH9fNHTfv0eBPfSmKVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNzgyMWUxYmNiZjZlMDc0ZWE0ODE0YWFhNWM2M2UzYmE4 MTNjNWYwHhcNMjUxMjIwMTgwMTI1WhcNMjUxMjIxMTgwMTI1WjAzMTEwLwYDVQQD Eyg4ZjU0OTEzMTI5MTVmYjEwYzRlODA0OTQ0NzQwOGVkYTlhZmRlZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF/9e7cyeBe8snJRRPpuNQAJK1Cw iNlbimaiDMKU7mkHSnt5fMHXrDfcAUx17NKC84Zg06ip/c5s8lwAOKerQRZdnl6Z c93VAkyPqbdX6NzRXWAIzUG3fIjxGydQwdLX89jDX3TXjaoOrQFwQgfXFQDLAdkw wZtYPVO9wre9MQ9lWbh07q9jlPP6UZxzbCNUdAoPGsn67C/akkBoYFHo1i0u0SwG /jY28x7n0mV3Lx1HmB9yrIkOK8ya0Kxr+8RPuZzmZGIoUJoVaHsUXB0ScQVM2Pyw JGqrBmL0VY8QwKenZHXGD/fyfsTFasW/lfxVHpTeoLkoT5AC23wmIl27awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9UkTEpFfsQxOgElEdAjtqa/e1sMB8GA1UdIwQY MBaAFNx4IeG8v24HTqSBSqpcY+O6gTxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYt ZDQ4YjQyZWYxNTliLzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYtZDQ4YjQyZWYxNTli LzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeS1+dxvt UefmxWKB0Bx/tJDyvT8YxPnH5vy4cbWaVC1aK74rsx9Giyds0c3STPmdIIdekso2 apBQpSRfSvP0MQSVOsAm+ytvaZyRO334JDMFd7TYULj0eNiGZzSq84IBomhtUPdJ JMyDL5rohGXg8wUUNTEEu/IGVm2SKmsvft3nd/f1FAglpor6L0vHr8PCseq6hitQ WeuiklUoKesJiMey9+T0o1IEuOHaDOwNXE04pYuNhP0r8e4lWylqYRrgkh50igdJ F/kwzhJODTzYZRd/pclNOPH6527mVMAZTvsQZofcansHfCxViyy9dKviISmlboiO +57P3h0N7HYaIg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:40:23 2025 by rpki-client