This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json) Hash identifier: /mrlQ471gCETIY/s/rB9Dzr7KcIllalwy4jznxVEU9I= Subject key identifier: 38:A4:D2:B0:BE:93:F3:4F:B0:49:BC:95:C9:28:E7:6A:FE:8B:31:4C Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e Certificate serial: 019B465CCE1FBAB08F34290C83BFA17B3B43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 14:00:45 +0000 Manifest this update: Mon 22 Dec 2025 14:00:45 +0000 Manifest next update: Tue 23 Dec 2025 14:00:45 +0000 Files and hashes: 1: 1Z0qsk9StCFAQktZcYQaKAQv6Eo.roa (hash: 7ZoC6UA8RmSyn6UoUQLfpDC2951iCi7ws/lgZfO/s3U=) 2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: w0zUlJLV+T9y5UBjVWGL+m6KVi67perYRB3ZuveCaEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5c:ce:1f:ba:b0:8f:34:29:0c:83:bf:a1:7b:3b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e Validity Not Before: Dec 22 14:00:45 2025 GMT Not After : Dec 23 14:00:45 2025 GMT Subject: CN=38a4d2b0be93f34fb049bc95c928e76afe8b314c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:f8:41:4f:50:98:25:85:ad:55:ef:08:b8: d2:47:fc:d5:d0:7a:96:dc:71:e6:2c:9c:bb:26:6e: a2:04:64:c5:7d:06:8f:8e:f9:84:f5:1d:2f:24:3b: 3a:bf:76:7b:02:78:d7:c9:e4:b5:d8:bb:71:24:13: 6a:a8:9e:c6:a8:5f:cd:02:0a:df:3f:e8:bf:22:a6: 55:f1:44:d4:08:53:d3:d6:6f:09:fa:73:3d:72:3e: cb:1b:8b:78:b5:1a:1c:73:19:3b:0a:47:3f:53:42: 8b:d0:82:50:62:af:49:87:1f:49:ff:52:85:d0:65: 2a:67:7e:1c:1f:3c:0c:4e:d6:09:d1:6b:5d:4c:6a: f4:b3:f6:3e:2b:68:ff:9b:31:dd:12:e2:15:01:0c: 6c:16:7c:17:ea:15:31:1e:10:2c:1b:81:75:89:59: 14:52:c3:5b:31:d8:3c:e1:f1:07:cf:f4:6e:16:e2: 43:51:e9:35:8f:71:a1:97:22:70:eb:29:38:64:f3: 4a:d7:02:97:51:80:64:ab:82:6e:e8:72:0c:28:3d: 71:bd:e9:17:0e:4f:1a:f4:8d:3c:01:17:d9:14:9f: f1:fe:5e:e5:3b:76:37:f3:ad:b7:54:9a:6c:fc:6b: 3f:66:4f:64:ee:ff:e3:a0:0e:ff:5c:dc:92:61:c3: 23:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A4:D2:B0:BE:93:F3:4F:B0:49:BC:95:C9:28:E7:6A:FE:8B:31:4C X509v3 Authority Key Identifier: keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a4:98:68:91:d8:a7:b9:44:d5:54:6b:37:8a:e5:77:b7:8d: 48:d0:31:37:6c:a0:52:9e:11:07:d1:1b:46:d0:0a:e1:8e:ee: 17:53:a2:f3:51:80:9e:4b:ae:53:a3:9f:9f:52:a1:47:ca:03: cb:71:92:60:64:12:03:cc:1e:db:69:f7:02:2d:a7:3b:fb:fa: 55:87:db:6d:02:75:f4:47:63:8c:be:41:29:bc:cb:88:0b:a0: ae:ee:c8:f8:18:89:4e:89:43:eb:bc:3b:62:f1:a6:ee:cd:2f: 2c:a8:b8:6d:91:ca:93:45:fd:cb:ca:77:41:44:90:47:f0:01: 26:a8:4b:f1:66:03:6b:27:35:4b:f5:ce:66:3b:9b:6a:b8:5a: 1d:9c:f2:e2:8c:0c:66:0c:fb:e1:e0:d4:3d:c2:a7:55:29:94: fa:f9:8c:4d:8b:14:3f:01:f9:88:f7:28:f2:92:d0:95:ab:3c: 3d:4d:cd:6d:b4:69:57:ac:15:f3:9e:cc:95:10:5a:b2:e3:ce: bd:14:2f:05:aa:c1:aa:bd:3a:af:ab:c0:25:21:2d:3f:fe:00: d4:1e:e5:ff:39:2d:5f:6f:89:62:d1:50:3b:04:13:36:59:2b: a6:ad:c9:cc:3f:21:22:66:c1:69:a1:4c:0c:32:59:00:26:82: 30:00:ea:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXM4furCPNCkMg7+heztDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNzkxMGRhMWYzYTQzZjk2YjU4ZjIxOTA1ZWI1OGY2NDNk MDI2N2UwHhcNMjUxMjIyMTQwMDQ1WhcNMjUxMjIzMTQwMDQ1WjAzMTEwLwYDVQQD EygzOGE0ZDJiMGJlOTNmMzRmYjA0OWJjOTVjOTI4ZTc2YWZlOGIzMTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx74QU9QmCWFrVXvCLjSR/zV0HqW 3HHmLJy7Jm6iBGTFfQaPjvmE9R0vJDs6v3Z7AnjXyeS12LtxJBNqqJ7GqF/NAgrf P+i/IqZV8UTUCFPT1m8J+nM9cj7LG4t4tRoccxk7Ckc/U0KL0IJQYq9Jhx9J/1KF 0GUqZ34cHzwMTtYJ0WtdTGr0s/Y+K2j/mzHdEuIVAQxsFnwX6hUxHhAsG4F1iVkU UsNbMdg84fEHz/RuFuJDUek1j3GhlyJw6yk4ZPNK1wKXUYBkq4Ju6HIMKD1xvekX Dk8a9I08ARfZFJ/x/l7lO3Y38623VJps/Gs/Zk9k7v/joA7/XNySYcMj2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDik0rC+k/NPsEm8lcko52r+izFMMB8GA1UdIwQY MBaAFLN5ENofOkP5a1jyGQXrWPZD0CZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczNrUTJoODZRX2xyV1BJWkJldFk5a1BRSm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81ZmM4MGUtYTA5NS00YzIwLTkwZTQt MmMwZjk4YTc0OTY2LzEvczNrUTJoODZRX2xyV1BJWkJldFk5a1BRSm40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi81ZmM4MGUtYTA5NS00YzIwLTkwZTQtMmMwZjk4YTc0OTY2 LzEvczNrUTJoODZRX2xyV1BJWkJldFk5a1BRSm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKSYaJHY p7lE1VRrN4rld7eNSNAxN2ygUp4RB9EbRtAK4Y7uF1Oi81GAnkuuU6Ofn1KhR8oD y3GSYGQSA8we22n3Ai2nO/v6VYfbbQJ19EdjjL5BKbzLiAugru7I+BiJTolD67w7 YvGm7s0vLKi4bZHKk0X9y8p3QUSQR/ABJqhL8WYDayc1S/XOZjubarhaHZzy4owM Zgz74eDUPcKnVSmU+vmMTYsUPwH5iPco8pLQlas8PU3NbbRpV6wV857MlRBasuPO vRQvBarBqr06r6vAJSEtP/4A1B7l/zktX2+JYtFQOwQTNlkrpq3JzD8hImbBaaFM DDJZACaCMADqSg== -----END CERTIFICATE-----Generated at Mon Dec 22 15:38:46 2025 by rpki-client