This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft File: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json) Hash identifier: wg5v4umMy7Ph+MYp4jrkshkNumGcck1DuXg4/gFJ72k= Subject key identifier: 8E:F6:1C:3D:C1:FD:55:C8:94:BE:78:32:73:A8:B9:2A:1A:A2:A8:4B Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64 Certificate issuer: /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64 Certificate serial: 019B533D0BA306FDA5A8D5BEFE43CE3C8563 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft Manifest number: 1359 Signing time: Thu 25 Dec 2025 02:01:08 +0000 Manifest this update: Thu 25 Dec 2025 02:01:08 +0000 Manifest next update: Fri 26 Dec 2025 02:01:08 +0000 Files and hashes: 1: TImGbHFcysH3yKCENp7I2KDKakw.roa (hash: wV738mzWH7BpaMNjeVJLX60iXYrXwr7zU2chvPIlwaE=) 2: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: ewIDijgT3AH7a7hYy9kn1hJA9JIwbGdoKYJGbdN9+gw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:0b:a3:06:fd:a5:a8:d5:be:fe:43:ce:3c:85:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64 Validity Not Before: Dec 25 02:01:08 2025 GMT Not After : Dec 26 02:01:08 2025 GMT Subject: CN=8ef61c3dc1fd55c894be783273a8b92a1aa2a84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:99:1a:3e:1a:8c:91:37:40:eb:7f:b3:ad: a4:53:84:29:2d:15:12:2d:2e:13:95:12:c0:27:2d: a9:12:c1:fa:a6:67:86:81:ee:52:82:49:88:14:3a: 5b:79:01:f9:80:17:dd:6a:e9:e2:a6:ce:4a:2a:61: 49:5f:08:e7:60:16:05:e1:1d:c9:66:51:15:7e:4a: 1d:ae:62:ec:33:c5:d2:52:49:62:71:b3:e6:81:01: 8b:7d:ec:37:71:0f:3f:dc:f9:07:fd:ba:eb:53:eb: 20:6f:cc:b9:6a:aa:f1:0f:c9:a6:f6:00:cc:d6:c4: 63:c0:5b:ac:6d:36:7e:b4:bc:29:d3:a6:9c:30:33: ed:2d:84:7f:85:8a:e7:43:31:7d:40:34:d4:c0:00: 3a:35:60:b5:fe:9d:93:30:73:1d:55:ca:5c:fa:1f: b6:1d:1e:bb:a4:fd:d1:f2:23:25:8b:74:f4:a2:aa: 7c:ac:f2:cb:eb:93:ce:91:14:a5:7d:7f:1e:62:80: 3c:74:e5:cb:82:65:10:9c:44:15:d5:82:cc:4a:14: d0:f5:47:2d:f1:f6:e6:dc:2c:52:a5:06:ad:62:0d: a3:80:e9:9f:55:10:a8:3d:ae:ff:ce:6a:52:93:4e: ea:24:61:08:b9:37:11:ad:4f:ce:70:f9:85:7e:a0: 2c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F6:1C:3D:C1:FD:55:C8:94:BE:78:32:73:A8:B9:2A:1A:A2:A8:4B X509v3 Authority Key Identifier: keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e4:95:1e:74:a9:e2:6c:7d:e0:28:4d:ba:5d:c2:79:42:87: 3c:22:c0:0d:80:96:16:57:bc:1e:76:b5:6e:92:7b:c1:80:1a: 14:51:07:8f:42:91:bd:16:c5:f3:ff:b5:54:b4:29:6b:63:99: 04:8c:e5:d0:35:20:3f:a5:4e:05:9d:4d:0e:74:33:d9:db:bf: 2d:09:ac:a5:39:87:e8:dd:89:54:06:e1:db:ed:71:63:e7:50: 8d:b2:99:b6:6c:4e:07:d4:c8:fd:94:77:3b:7d:cf:e0:45:46: dd:18:f6:96:2f:a6:7e:66:18:5a:b9:16:cf:9a:6e:23:38:e4: 74:1b:d8:d9:ab:5f:38:b7:d8:c6:5c:66:6d:26:29:75:be:72: 58:0c:bd:53:06:07:f2:a7:37:6e:8b:5f:9f:54:e8:75:b4:e7: 77:38:48:44:65:14:83:e5:a4:56:5a:57:df:ee:ba:8a:77:c4: 30:34:c2:64:da:5e:a0:89:72:da:83:a3:ef:fb:dc:e0:7c:d7: a8:d9:34:a7:3b:d0:19:0e:0e:76:12:df:7a:ea:fd:bc:f1:07: 47:75:f3:ef:b8:9d:9b:41:5b:be:c1:19:92:0f:86:61:21:c9: b6:d8:62:9e:d6:18:7d:84:c0:de:1a:dd:26:29:95:9c:37:cc: 36:49:f5:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPQujBv2lqNW+/kPOPIVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkM2RkOGQzMmNmYzcxN2E2ZTY5MGViZTNlMWRiNDM4NmQ4 ZjZjNjQwHhcNMjUxMjI1MDIwMTA4WhcNMjUxMjI2MDIwMTA4WjAzMTEwLwYDVQQD Eyg4ZWY2MWMzZGMxZmQ1NWM4OTRiZTc4MzI3M2E4YjkyYTFhYTJhODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiKZGj4ajJE3QOt/s62kU4QpLRUS LS4TlRLAJy2pEsH6pmeGge5SgkmIFDpbeQH5gBfdaunips5KKmFJXwjnYBYF4R3J ZlEVfkodrmLsM8XSUklicbPmgQGLfew3cQ8/3PkH/brrU+sgb8y5aqrxD8mm9gDM 1sRjwFusbTZ+tLwp06acMDPtLYR/hYrnQzF9QDTUwAA6NWC1/p2TMHMdVcpc+h+2 HR67pP3R8iMli3T0oqp8rPLL65POkRSlfX8eYoA8dOXLgmUQnEQV1YLMShTQ9Uct 8fbm3CxSpQatYg2jgOmfVRCoPa7/zmpSk07qJGEIuTcRrU/OcPmFfqAsXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI72HD3B/VXIlL54MnOouSoaoqhLMB8GA1UdIwQY MBaAFK092NMs/HF6bmkOvj4dtDhtj2xkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQt M2JjZDIzOTllZTY0LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQtM2JjZDIzOTllZTY0 LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduSVHnSp 4mx94ChNul3CeUKHPCLADYCWFle8Hna1bpJ7wYAaFFEHj0KRvRbF8/+1VLQpa2OZ BIzl0DUgP6VOBZ1NDnQz2du/LQmspTmH6N2JVAbh2+1xY+dQjbKZtmxOB9TI/ZR3 O33P4EVG3Rj2li+mfmYYWrkWz5puIzjkdBvY2atfOLfYxlxmbSYpdb5yWAy9UwYH 8qc3botfn1TodbTndzhIRGUUg+WkVlpX3+66infEMDTCZNpeoIly2oOj7/vc4HzX qNk0pzvQGQ4OdhLfeur9vPEHR3Xz77idm0FbvsEZkg+GYSHJtthintYYfYTA3hrd JimVnDfMNkn1SQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:11:58 2025 by rpki-client