This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft File: V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json) Hash identifier: ifRtGMutYF7p1EkK+Dj8nmaIebri3/sDRJEfvCXJJ9k= Subject key identifier: 69:EA:D0:88:69:85:19:74:ED:14:48:68:2E:7F:52:73:5D:40:45:DA Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55 Certificate issuer: /CN=577cd3b2391f4726c1aa89d5ed3d040823252355 Certificate serial: 019B3FB60568FBB694CD613BFB9B4A90DDC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft Manifest number: 02FA Signing time: Sun 21 Dec 2025 07:00:52 +0000 Manifest this update: Sun 21 Dec 2025 07:00:52 +0000 Manifest next update: Mon 22 Dec 2025 07:00:52 +0000 Files and hashes: 1: IwKSwRXA9Ph0qRohZhJ0WEYVgOM.roa (hash: RFNUKmFIpsyvimoGalaE9V72k6NP7c6/ODYYIyEjkmE=) 2: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: NiVvfqYJZ35AkXRHFHmlNX99rPv7tkmUJxDf/OeGMJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:05:68:fb:b6:94:cd:61:3b:fb:9b:4a:90:dd:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355 Validity Not Before: Dec 21 07:00:52 2025 GMT Not After : Dec 22 07:00:52 2025 GMT Subject: CN=69ead08869851974ed1448682e7f52735d4045da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:88:cf:de:f4:45:f9:d7:09:5d:d9:91:52:b8: 7f:d6:cb:ce:6e:9f:94:8e:34:e8:3b:4a:a1:2b:f5: a5:0d:a8:a2:cc:f5:93:98:5d:e8:d9:fe:ce:3d:c4: 98:31:3e:92:b5:27:80:af:95:f5:69:3d:80:aa:83: 72:f5:91:ea:89:7d:7d:7a:83:d2:59:38:ea:dd:9d: be:53:7c:a2:76:8d:e4:b4:0c:dc:fb:b9:8a:3a:eb: 69:88:08:6a:7e:f1:1d:b7:91:d9:a2:0f:4d:08:ed: e9:b2:61:a1:59:81:0f:d8:3c:7b:9c:72:f0:ee:8e: 42:5c:2e:ea:0f:a0:09:87:21:6f:0b:8f:50:1c:c2: 79:84:bf:0b:ea:78:7b:98:33:49:68:dc:81:7b:31: dc:9a:ca:24:59:10:80:ba:34:f3:3c:ef:1b:30:6b: 5e:8a:f7:5a:5e:98:63:03:f9:d8:c1:e9:45:b2:49: a7:e5:4d:4a:0b:38:6c:99:c3:c6:fe:14:50:ae:09: de:d9:13:b0:6b:5b:65:93:1e:f2:0d:f6:32:7e:3f: 8d:2a:c3:fa:e9:6e:12:4d:07:75:c6:84:08:92:7a: 27:dc:81:ea:53:3f:6e:12:af:70:5d:c9:3e:50:ea: 96:02:7e:a0:d4:87:77:30:86:c8:74:74:a6:ac:f5: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EA:D0:88:69:85:19:74:ED:14:48:68:2E:7F:52:73:5D:40:45:DA X509v3 Authority Key Identifier: keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f8:63:be:8e:c9:1c:eb:55:b4:c5:40:63:90:52:17:4f:57: 3c:a6:84:6d:85:56:ef:f1:f9:36:91:57:30:4c:ea:fc:b0:9e: c9:8d:24:9f:85:74:6d:8c:fc:6b:5f:37:cf:e4:84:55:3d:b5: 63:9e:bd:31:b3:b7:c6:89:19:ef:d7:85:aa:11:db:0d:30:dd: 6b:9c:e9:77:e0:d9:88:99:62:3d:d4:5d:78:0d:32:29:8f:ff: e0:59:d8:86:85:ce:c1:19:b4:82:0d:de:e5:2a:fc:82:78:57: 39:24:b8:3b:17:1a:2a:ed:77:ad:f6:ca:73:2e:6b:0f:dd:6e: 11:41:17:48:79:27:5d:d1:7b:9e:07:64:07:7e:3b:22:1f:c9: af:0d:b9:68:32:04:c3:f4:5b:c3:38:e1:05:82:f9:da:d3:47: fd:bf:86:68:2d:fb:29:08:31:7d:95:7b:40:3d:50:2a:9b:25: c5:01:ee:2e:96:ac:1f:97:56:d2:21:93:08:e1:25:8c:a9:4c: 4c:8a:a8:80:c2:35:f0:29:18:69:9c:c8:cf:98:94:b4:77:1b: d2:fa:0c:23:08:3a:8b:dc:12:13:cb:8c:18:f9:7a:41:8d:eb: fd:c4:ca:7a:7d:02:bb:1c:23:94:ad:f4:e8:b2:8e:d1:6d:c1: d3:cc:8c:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tgVo+7aUzWE7+5tKkN3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3N2NkM2IyMzkxZjQ3MjZjMWFhODlkNWVkM2QwNDA4MjMy NTIzNTUwHhcNMjUxMjIxMDcwMDUyWhcNMjUxMjIyMDcwMDUyWjAzMTEwLwYDVQQD Eyg2OWVhZDA4ODY5ODUxOTc0ZWQxNDQ4NjgyZTdmNTI3MzVkNDA0NWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYjP3vRF+dcJXdmRUrh/1svObp+U jjToO0qhK/WlDaiizPWTmF3o2f7OPcSYMT6StSeAr5X1aT2AqoNy9ZHqiX19eoPS WTjq3Z2+U3yido3ktAzc+7mKOutpiAhqfvEdt5HZog9NCO3psmGhWYEP2Dx7nHLw 7o5CXC7qD6AJhyFvC49QHMJ5hL8L6nh7mDNJaNyBezHcmsokWRCAujTzPO8bMGte ivdaXphjA/nYwelFskmn5U1KCzhsmcPG/hRQrgne2ROwa1tlkx7yDfYyfj+NKsP6 6W4STQd1xoQIknon3IHqUz9uEq9wXck+UOqWAn6g1Id3MIbIdHSmrPVoXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnq0IhphRl07RRIaC5/UnNdQEXaMB8GA1UdIwQY MBaAFFd807I5H0cmwaqJ1e09BAgjJSNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjN6VHNqa2ZSeWJCcW9uVjdUMEVDQ01sSTFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80YjgyZmUtZmY3My00YjU4LWEyMWEt MDBmZDA1ZDNjZDFkLzEvVjN6VHNqa2ZSeWJCcW9uVjdUMEVDQ01sSTFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS80YjgyZmUtZmY3My00YjU4LWEyMWEtMDBmZDA1ZDNjZDFk LzEvVjN6VHNqa2ZSeWJCcW9uVjdUMEVDQ01sSTFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPhjvo7J HOtVtMVAY5BSF09XPKaEbYVW7/H5NpFXMEzq/LCeyY0kn4V0bYz8a183z+SEVT21 Y569MbO3xokZ79eFqhHbDTDda5zpd+DZiJliPdRdeA0yKY//4FnYhoXOwRm0gg3e 5Sr8gnhXOSS4OxcaKu13rfbKcy5rD91uEUEXSHknXdF7ngdkB347Ih/Jrw25aDIE w/RbwzjhBYL52tNH/b+GaC37KQgxfZV7QD1QKpslxQHuLpasH5dW0iGTCOEljKlM TIqogMI18CkYaZzIz5iUtHcb0voMIwg6i9wSE8uMGPl6QY3r/cTKen0CuxwjlK30 6LKO0W3B08yMYQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:12 2025 by rpki-client