This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json) Hash identifier: 4/x26N8y3xS937qEaSFq9usJlYFu7MDkdomaLyPqfiI= Subject key identifier: 93:E1:6E:87:38:CA:EE:10:0E:90:F3:AF:72:34:60:EC:98:2A:7B:5F Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee Certificate serial: 019B3A9073959EB354E4DB96F3DF356753CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft Manifest number: 0E1B Signing time: Sat 20 Dec 2025 07:01:43 +0000 Manifest this update: Sat 20 Dec 2025 07:01:43 +0000 Manifest next update: Sun 21 Dec 2025 07:01:43 +0000 Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: MYuAxpZqUeFRhDPzeZrdKrfquYlDqD+oVwqrrrXpIko=) 2: 8miIDeBQxB0aKJY-TlsIuuJ2hww.roa (hash: mQmM8Cjnfx5WSvhPSj11m+hm6JvBiNUtIRExWbof9J8=) 3: IRGnT1eQmUBmgR6_xtusELr-83s.roa (hash: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=) 4: aw3P8V17V992wZUulFnFkkVrMmo.roa (hash: O9AIELr13JUWTjKqPnJ8lbjYgl5+VRQqDU69j3HTMwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:73:95:9e:b3:54:e4:db:96:f3:df:35:67:53:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee Validity Not Before: Dec 20 07:01:43 2025 GMT Not After : Dec 21 07:01:43 2025 GMT Subject: CN=93e16e8738caee100e90f3af723460ec982a7b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:06:91:fa:41:16:3a:d7:20:d6:c8:3f:44: 58:1a:66:48:f2:a9:40:cd:57:2b:71:a4:f5:11:41: dc:af:ff:cc:76:d5:7a:34:9a:b1:24:02:44:e5:bc: ed:3b:6b:2d:99:2c:a0:29:1b:78:53:9d:18:15:39: e5:f0:67:26:96:ce:7f:aa:4d:db:33:20:62:a9:12: 04:cf:fc:fa:8b:c7:4a:61:99:8e:fd:43:2b:98:a2: 1d:27:f5:6b:0f:f5:1d:98:46:21:b0:52:54:36:04: e3:7d:04:96:80:2e:28:9a:c8:6b:8f:d9:3c:7f:b6: 31:ad:a1:e5:4a:d2:ee:bc:19:76:89:34:9b:98:64: 91:a4:83:f9:94:af:66:d6:f9:e3:de:c5:1f:d0:a6: 87:4c:86:48:07:50:36:2b:5c:8d:d4:a0:08:fd:c8: bf:6b:8e:4f:5d:49:b8:95:a9:4f:02:b7:0b:5b:95: ff:93:ce:89:83:a4:95:5f:ef:05:eb:73:97:23:10: 9d:b1:4a:7c:f3:9d:f0:72:03:88:5a:a5:16:92:f7: c4:af:7b:ee:0b:c3:49:02:c1:f4:2b:17:0b:5e:21: 41:1e:36:f9:20:bc:68:ec:f6:e7:4e:49:a0:85:be: 27:02:b6:ca:92:17:b8:43:51:7c:8f:31:ad:94:5f: 98:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E1:6E:87:38:CA:EE:10:0E:90:F3:AF:72:34:60:EC:98:2A:7B:5F X509v3 Authority Key Identifier: keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2b:58:bb:f7:0e:7c:f4:41:c0:49:e4:6b:12:f4:e4:38:60: f7:d5:c4:58:da:a4:e0:b2:21:38:db:3b:55:74:af:9f:e4:42: 4a:70:b5:cd:3e:31:0f:ba:c9:40:a9:a1:e8:24:05:db:54:84: a6:e9:9b:13:33:2f:09:ca:cb:13:1f:24:7c:31:f6:37:ac:d9: b2:32:1c:f0:4b:12:eb:93:ed:a3:6c:be:88:fd:b4:0d:2b:14: 83:a1:4c:ea:50:c6:81:1d:4b:e0:ac:07:8a:38:2f:35:5f:d8: f4:ec:c0:35:69:a3:78:d3:5c:5b:19:4e:e7:de:d6:6b:03:16: 53:1c:f4:53:95:a5:6a:1c:33:3b:b0:00:c6:32:e4:33:a4:64: e4:37:e3:f5:8c:f9:ca:31:ba:7b:52:d4:87:b2:72:aa:27:98: 0d:d5:36:cb:5d:1c:d0:c4:16:76:2e:76:4f:ef:22:10:6b:d5: b5:cb:67:cf:13:f1:c7:f6:0d:62:f5:88:6b:ff:b7:ab:89:83: 86:1a:2e:c8:35:5e:f3:15:81:0b:ff:d8:50:1a:35:6e:99:83: a5:f5:f1:68:c6:aa:b0:dd:ac:90:30:0f:9c:0c:47:30:bb:66: 22:a3:5d:5f:06:22:29:d3:94:af:ba:9b:e9:e4:f3:e4:1b:1f: e3:ed:cc:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kHOVnrNU5NuW8981Z1PLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJi NWJlZWUwHhcNMjUxMjIwMDcwMTQzWhcNMjUxMjIxMDcwMTQzWjAzMTEwLwYDVQQD Eyg5M2UxNmU4NzM4Y2FlZTEwMGU5MGYzYWY3MjM0NjBlYzk4MmE3YjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0kGkfpBFjrXINbIP0RYGmZI8qlA zVcrcaT1EUHcr//MdtV6NJqxJAJE5bztO2stmSygKRt4U50YFTnl8Gcmls5/qk3b MyBiqRIEz/z6i8dKYZmO/UMrmKIdJ/VrD/UdmEYhsFJUNgTjfQSWgC4omshrj9k8 f7YxraHlStLuvBl2iTSbmGSRpIP5lK9m1vnj3sUf0KaHTIZIB1A2K1yN1KAI/ci/ a45PXUm4lalPArcLW5X/k86Jg6SVX+8F63OXIxCdsUp8853wcgOIWqUWkvfEr3vu C8NJAsH0KxcLXiFBHjb5ILxo7PbnTkmghb4nArbKkhe4Q1F8jzGtlF+YiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPhboc4yu4QDpDzr3I0YOyYKntfMB8GA1UdIwQY MBaAFN23FHE3O7BgPDVu7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgt NjIxMmFjNDljYTNiLzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNi LzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPitYu/cO fPRBwEnkaxL05Dhg99XEWNqk4LIhONs7VXSvn+RCSnC1zT4xD7rJQKmh6CQF21SE pumbEzMvCcrLEx8kfDH2N6zZsjIc8EsS65Pto2y+iP20DSsUg6FM6lDGgR1L4KwH ijgvNV/Y9OzANWmjeNNcWxlO597WawMWUxz0U5WlahwzO7AAxjLkM6Rk5Dfj9Yz5 yjG6e1LUh7JyqieYDdU2y10c0MQWdi52T+8iEGvVtctnzxPxx/YNYvWIa/+3q4mD hhouyDVe8xWBC//YUBo1bpmDpfXxaMaqsN2skDAPnAxHMLtmIqNdXwYiKdOUr7qb 6eTz5Bsf4+3MjQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:53:25 2025 by rpki-client