This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json) Hash identifier: BXGGtq/Jwnms7wJMYw2CMZj0RRJMebv5NYgX9+BEqPk= Subject key identifier: AF:1C:00:35:89:60:1F:B4:82:D7:01:08:47:8B:EE:EE:E5:ED:F5:CD Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41 Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641 Certificate serial: 019B37C5A675AA130195A2300F94403008C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft Manifest number: 178E Signing time: Fri 19 Dec 2025 18:00:58 +0000 Manifest this update: Fri 19 Dec 2025 18:00:58 +0000 Manifest next update: Sat 20 Dec 2025 18:00:58 +0000 Files and hashes: 1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=) 2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=) 3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: clyvMOKgN140HD5JzzVs8eWXVESRdbjF1c95MqdkYnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:a6:75:aa:13:01:95:a2:30:0f:94:40:30:08:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641 Validity Not Before: Dec 19 18:00:58 2025 GMT Not After : Dec 20 18:00:58 2025 GMT Subject: CN=af1c003589601fb482d70108478beeeee5edf5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:09:40:e7:83:e8:67:d7:ef:60:1b:3f:1c: 28:ab:30:9d:f5:c3:5c:42:90:c0:09:59:02:8a:26: 10:17:48:ab:aa:9c:ff:f0:c4:ed:f7:47:af:0a:15: fe:aa:3c:2e:77:c1:61:89:f5:f4:ee:46:64:98:e4: 94:a0:a7:f5:11:d6:bd:eb:19:11:78:fe:46:8a:cc: 8a:4c:4d:f2:d0:c2:25:50:63:56:15:c4:4f:0b:50: eb:ab:27:96:f7:84:c5:61:a7:9d:11:d6:1a:ea:ff: f3:2b:79:c9:4c:35:f1:27:df:55:1c:75:f6:70:cd: 1d:b7:31:5d:14:a1:ab:22:dc:25:84:f8:26:ea:95: 03:2b:73:6d:46:74:68:02:9f:eb:51:54:cf:af:eb: dd:d1:fe:38:3c:39:87:17:5b:4c:24:3c:ef:30:5a: 39:90:82:4c:ed:81:0c:1b:39:2d:e2:2b:d3:e5:4e: ee:87:13:9c:33:26:f8:00:fe:90:98:fe:64:38:0a: 5a:21:4f:cc:4e:c2:c5:0e:37:a1:be:1f:41:4f:99: d8:7f:0a:e7:f1:76:8d:7c:ad:5a:72:3c:62:b8:37: c1:c0:c1:3e:84:ef:6d:74:c5:ba:54:d1:f6:b9:3d: 09:bb:f7:c5:1b:89:30:30:a9:0e:43:25:5b:23:84: 8d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1C:00:35:89:60:1F:B4:82:D7:01:08:47:8B:EE:EE:E5:ED:F5:CD X509v3 Authority Key Identifier: keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:37:d7:57:ac:33:7f:f9:b2:ab:12:44:44:ef:1f:37:41:63: 66:a3:19:a3:df:6a:18:bf:64:3c:43:dd:44:91:10:b7:f5:fd: fa:a4:bc:8d:b4:5e:67:66:76:ba:f8:e2:8b:33:83:10:26:f1: c3:c2:55:b8:07:fb:e5:0f:be:97:25:b6:83:15:8a:b2:45:5c: 8e:67:e0:cc:2e:37:b3:78:47:4d:71:1c:bd:7a:0c:e6:25:90: e1:5e:26:66:cf:74:61:38:ba:b6:6d:76:f0:2d:2c:1a:a0:2a: df:37:1e:1b:bc:0b:77:67:05:12:d8:f9:fd:14:94:93:2b:a0: 6f:10:d5:14:ac:76:f3:0d:b8:db:70:8d:96:f7:ab:2e:06:d5: 91:4b:af:81:cf:2d:dc:a6:1e:a3:76:cc:85:8f:be:3f:f5:6d: 04:bb:df:04:a5:21:8a:4a:24:fa:84:c2:23:19:9a:f2:38:bd: 55:ce:dc:85:44:17:84:4c:11:37:52:3c:ab:d4:84:f7:cc:30: 72:8b:ab:ca:97:98:ec:ae:90:7c:93:a5:16:93:f6:2b:35:3e: 8a:10:34:8e:b2:f5:2b:1e:c5:60:8e:47:69:21:44:d4:8d:48: dd:cf:bb:2b:a4:ab:79:bb:98:61:df:dc:c3:50:61:ee:76:dc: 3f:e7:fb:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xaZ1qhMBlaIwD5RAMAjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTBkNDMyOTNjZmViZjg3ZTdlYWIyYjBkNTUzZmQyMWE2 ZTk2NDEwHhcNMjUxMjE5MTgwMDU4WhcNMjUxMjIwMTgwMDU4WjAzMTEwLwYDVQQD EyhhZjFjMDAzNTg5NjAxZmI0ODJkNzAxMDg0NzhiZWVlZWU1ZWRmNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc8JQOeD6GfX72AbPxwoqzCd9cNc QpDACVkCiiYQF0irqpz/8MTt90evChX+qjwud8FhifX07kZkmOSUoKf1Eda96xkR eP5GisyKTE3y0MIlUGNWFcRPC1DrqyeW94TFYaedEdYa6v/zK3nJTDXxJ99VHHX2 cM0dtzFdFKGrItwlhPgm6pUDK3NtRnRoAp/rUVTPr+vd0f44PDmHF1tMJDzvMFo5 kIJM7YEMGzkt4ivT5U7uhxOcMyb4AP6QmP5kOApaIU/MTsLFDjehvh9BT5nYfwrn 8XaNfK1acjxiuDfBwME+hO9tdMW6VNH2uT0Ju/fFG4kwMKkOQyVbI4SN/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8cADWJYB+0gtcBCEeL7u7l7fXNMB8GA1UdIwQY MBaAFN6Q1DKTz+v4fn6rKw1VP9IabpZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODkt NTNlZGM2MjZiMjg3LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODktNTNlZGM2MjZiMjg3 LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzfXV6wz f/myqxJERO8fN0FjZqMZo99qGL9kPEPdRJEQt/X9+qS8jbReZ2Z2uvjiizODECbx w8JVuAf75Q++lyW2gxWKskVcjmfgzC43s3hHTXEcvXoM5iWQ4V4mZs90YTi6tm12 8C0sGqAq3zceG7wLd2cFEtj5/RSUkyugbxDVFKx28w2423CNlverLgbVkUuvgc8t 3KYeo3bMhY++P/VtBLvfBKUhikok+oTCIxma8ji9Vc7chUQXhEwRN1I8q9SE98ww courypeY7K6QfJOlFpP2KzU+ihA0jrL1Kx7FYI5HaSFE1I1I3c+7K6SrebuYYd/c w1Bh7nbcP+f7zQ== -----END CERTIFICATE-----Generated at Sat Dec 20 02:44:31 2025 by rpki-client