This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json) Hash identifier: iFRqxC4s4A5S5uUsq6bbOA53msDoT5Vmb0WEjzkHeZ0= Subject key identifier: 87:0F:82:BA:53:FF:77:A3:83:5F:FD:D5:11:8A:59:C9:B9:4B:80:3E Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66 Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566 Certificate serial: 019B3343E285E3AC5B81FA2A5247F465D9F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft Manifest number: 1099 Signing time: Thu 18 Dec 2025 21:00:45 +0000 Manifest this update: Thu 18 Dec 2025 21:00:45 +0000 Manifest next update: Fri 19 Dec 2025 21:00:45 +0000 Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: Z/oWl8iOduYlF7xuFDp82oWvMlFsGL3x7LD+NfkiFDs=) 2: f98-QGGyvPNag3NBWDooTVrQ2vI.roa (hash: HJhPbHQVg92t7q01K4xm1xNnj11AYPaciJd3bC3Ng+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:e2:85:e3:ac:5b:81:fa:2a:52:47:f4:65:d9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566 Validity Not Before: Dec 18 21:00:45 2025 GMT Not After : Dec 19 21:00:45 2025 GMT Subject: CN=870f82ba53ff77a3835ffdd5118a59c9b94b803e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:9f:43:8c:e9:3b:12:96:34:64:43:bb:f2: 8d:ba:58:3c:f7:7c:93:5c:4c:b4:47:df:76:b7:df: 88:69:da:c7:21:8b:ed:0d:6c:d2:f8:51:5e:19:b4: 26:e8:fc:5d:e3:ee:29:3c:0e:a4:3a:d9:cc:17:e5: b2:81:96:a7:71:f9:25:95:93:d9:fe:46:01:7d:73: 1d:a2:36:ed:ba:15:c3:ed:66:d4:bc:d9:6c:3e:45: e8:41:48:dc:5b:9b:34:ef:ce:e3:59:3c:90:06:07: 82:0a:21:0d:04:42:f5:a7:70:2d:c2:07:75:ce:ec: 40:78:49:05:f8:95:38:d1:5a:ab:48:ba:f6:bf:49: a8:89:48:75:0c:af:42:3b:d9:a3:eb:e2:97:a5:87: 90:b1:2d:08:8c:00:fd:74:8e:73:62:3f:dc:a3:17: a8:2f:db:ad:02:38:a6:45:65:27:83:a8:c4:db:ed: 87:02:7a:a2:a4:24:68:0c:2a:12:f8:49:dc:3b:7c: 51:3b:e0:a5:55:ea:f8:65:3c:d8:31:6e:84:f2:25: f8:15:c6:77:ca:fe:4f:08:a7:7d:83:2e:26:e2:e0: b9:a4:ad:fc:73:89:17:a9:f2:b4:53:ef:27:43:d9: 8b:75:d5:28:ac:b3:a1:0c:11:dc:13:31:00:ba:96: 1f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0F:82:BA:53:FF:77:A3:83:5F:FD:D5:11:8A:59:C9:B9:4B:80:3E X509v3 Authority Key Identifier: keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:00:10:03:05:a9:d3:34:39:23:f5:b3:7f:e9:78:fd:38:98: 5d:55:8d:ef:a4:9d:d9:3b:d7:7b:50:34:48:cb:a6:b8:10:e1: d9:2f:46:8b:21:9a:a9:9d:de:b0:87:e0:63:33:99:e9:a5:a0: 1e:d6:4a:74:81:a8:c1:59:2a:e7:44:48:14:21:0b:a5:72:d4: 98:41:05:84:69:23:18:a7:36:53:a3:3e:e7:c7:b0:85:de:cd: 04:ce:2d:e7:26:da:99:4d:aa:2a:d2:d1:b9:bd:94:4d:f0:d6: 56:92:9e:18:a2:cb:72:ab:31:12:ce:fc:10:5b:d9:0a:ef:68: f6:c1:fc:f3:8a:c4:80:0c:9a:fb:d5:59:22:5d:fc:51:88:05: b0:6e:58:8e:5e:a9:ad:bc:0a:19:27:63:15:c8:5b:4b:c8:84: ca:49:f1:c0:ca:2d:85:88:be:ac:c2:76:58:d9:82:98:b2:6f: b9:0a:67:ef:28:e7:75:30:c2:43:21:07:ae:a4:31:9e:9a:60: f8:73:83:4d:31:28:80:b1:21:3e:1a:ca:47:67:2e:ac:b9:62: 5e:0b:6e:33:2b:7b:1e:70:e4:17:2f:3d:d8:4b:39:95:b6:64: ff:f3:8e:fa:e2:24:69:f3:61:f2:be:ac:be:9b:97:40:37:a5: 17:68:d9:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ+KF46xbgfoqUkf0Zdn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNDhkNTA4MjE1MzQwZWFjMGYxNGYwYjc0NzQ5ZDFjOGVj OWY1NjYwHhcNMjUxMjE4MjEwMDQ1WhcNMjUxMjE5MjEwMDQ1WjAzMTEwLwYDVQQD Eyg4NzBmODJiYTUzZmY3N2EzODM1ZmZkZDUxMThhNTljOWI5NGI4MDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto+fQ4zpOxKWNGRDu/KNulg893yT XEy0R992t9+IadrHIYvtDWzS+FFeGbQm6Pxd4+4pPA6kOtnMF+WygZancfkllZPZ /kYBfXMdojbtuhXD7WbUvNlsPkXoQUjcW5s0787jWTyQBgeCCiENBEL1p3Atwgd1 zuxAeEkF+JU40VqrSLr2v0moiUh1DK9CO9mj6+KXpYeQsS0IjAD9dI5zYj/coxeo L9utAjimRWUng6jE2+2HAnqipCRoDCoS+EncO3xRO+ClVer4ZTzYMW6E8iX4FcZ3 yv5PCKd9gy4m4uC5pK38c4kXqfK0U+8nQ9mLddUorLOhDBHcEzEAupYfHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcPgrpT/3ejg1/91RGKWcm5S4A+MB8GA1UdIwQY MBaAFN1I1QghU0DqwPFPC3R0nRyOyfVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjkt NDVlNDc0MDAyM2RiLzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjktNDVlNDc0MDAyM2Ri LzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQAQAwWp 0zQ5I/Wzf+l4/TiYXVWN76Sd2TvXe1A0SMumuBDh2S9GiyGaqZ3esIfgYzOZ6aWg HtZKdIGowVkq50RIFCELpXLUmEEFhGkjGKc2U6M+58ewhd7NBM4t5ybamU2qKtLR ub2UTfDWVpKeGKLLcqsxEs78EFvZCu9o9sH884rEgAya+9VZIl38UYgFsG5Yjl6p rbwKGSdjFchbS8iEyknxwMothYi+rMJ2WNmCmLJvuQpn7yjndTDCQyEHrqQxnppg +HODTTEogLEhPhrKR2curLliXgtuMyt7HnDkFy892Es5lbZk//OO+uIkafNh8r6s vpuXQDelF2jZpw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:51 2025 by rpki-client