This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft File: 3mZANXrkrhD8Cz6dmPKgywEYkDw.mft (raw, json) Hash identifier: Ez+m1rzQpUuCcA3WTaBGtVGdcLRIUfV0frMa5+S9yTc= Subject key identifier: 36:54:DA:DE:F1:D4:69:E9:78:DA:D8:9F:83:E0:5F:84:A9:A2:E3:B8 Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C Certificate issuer: /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c Certificate serial: 019B5072F515ED27B2B86351D1D05AFFE98B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft Manifest number: 0C84 Signing time: Wed 24 Dec 2025 13:01:09 +0000 Manifest this update: Wed 24 Dec 2025 13:01:09 +0000 Manifest next update: Thu 25 Dec 2025 13:01:09 +0000 Files and hashes: 1: 3mZANXrkrhD8Cz6dmPKgywEYkDw.crl (hash: 6Z8fqZfmM6p0TQdDMfSs9Ro9yha3n0AV6TWNijGBSRw=) 2: 9Ht1WS_vqd6PGFgJgGHqYQxnzds.roa (hash: jy6H59LUS5waYqQP6Dhp+2VxxeHkS9j62qw0M1cdA/g=) 3: HWj4rrIG5yLx-R7YJHriQZkaHlU.roa (hash: w4NJmcaVn2AcPxlAH9mW36Xv6MPv2ne3C9Tmp8J45QY=) 4: Ja-mDUtTmKTc_5z3WZikEzgxnO0.roa (hash: OHF3bECjzb4WxileHvkYP3598NMiRQdCX4l/f2//5yI=) 5: gizPDPJlnHFMwdNkDj4bjEHwsOM.roa (hash: s+HhHFRsrWXDsklXWcH/16ndefegRFDZvIRvtU1bOnQ=) 6: o4UdTzK11yn9790w6aFya-CRsYk.roa (hash: 5gJHsN2PGfagg0XX4Yhkkp3hRI4hmN+LCY9ILQ0xCTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:f5:15:ed:27:b2:b8:63:51:d1:d0:5a:ff:e9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c Validity Not Before: Dec 24 13:01:09 2025 GMT Not After : Dec 25 13:01:09 2025 GMT Subject: CN=3654dadef1d469e978dad89f83e05f84a9a2e3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:6f:16:e6:a0:96:de:92:ae:ea:d9:12:a9: ba:da:de:59:ad:6f:88:e6:3c:27:94:cb:4f:ea:c8: 13:80:61:e7:ee:3c:a8:84:f4:04:44:2e:9d:ee:3b: 26:84:6d:f2:a0:6a:f9:cf:82:3e:b9:8f:00:1e:76: 61:53:57:8d:01:b4:34:7a:fa:91:72:cc:88:ff:a5: f8:06:1b:30:6f:d1:24:f0:8c:ee:ca:47:5d:dc:66: 63:db:2b:1f:2a:8f:f1:5f:fe:99:18:fc:8b:3b:65: fa:15:6f:8d:ed:ee:ad:a9:70:fd:86:6e:60:8e:cb: 88:ca:6d:f8:2e:ab:5b:86:12:95:a7:18:ee:63:3c: ff:36:20:7e:83:97:44:b5:bd:76:a7:bc:30:23:09: fd:d2:66:99:53:6e:24:26:b4:67:34:ed:56:51:c2: 76:4b:2b:03:5d:68:0e:56:9b:7f:c9:0a:0d:8f:22: 12:04:3b:84:ba:d5:d5:d5:5e:6a:68:5c:ef:0e:2b: cc:7c:51:d0:db:33:dd:73:fe:ac:b5:a6:1c:f3:89: 2d:1b:18:27:1a:c6:24:32:07:fa:23:e7:57:e7:4b: dd:a2:b6:f2:b4:bc:04:b5:a2:eb:38:c5:e1:43:18: e4:03:75:39:12:24:74:fb:9b:b9:65:58:8e:6b:05: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:54:DA:DE:F1:D4:69:E9:78:DA:D8:9F:83:E0:5F:84:A9:A2:E3:B8 X509v3 Authority Key Identifier: keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:3b:65:7b:d8:b8:08:78:8e:cd:14:8f:45:71:0d:4f:74:fb: 6d:42:d9:d0:50:bf:74:0c:84:d1:4d:44:f7:74:48:bd:9f:3a: 05:ec:8d:73:d4:c4:52:ad:ec:1d:83:34:8d:2e:6d:6d:ca:30: 5d:3a:03:07:7b:c8:c6:4b:a9:d6:98:0e:a1:1f:31:4a:49:1f: 8a:e5:ff:80:ad:7e:6f:86:d6:81:13:51:8d:0c:60:b9:d8:ae: 7f:90:30:3e:80:7f:30:24:91:80:a1:74:ba:97:8f:f7:96:93: c2:08:f6:36:12:79:72:6c:4a:2f:8e:50:34:16:0f:bc:d9:63: a9:5b:65:d7:31:41:d0:cb:75:95:5e:34:5a:81:3c:0e:73:69: a3:e6:3d:ec:0e:35:79:cb:90:52:e6:70:f0:2e:62:a4:5b:17: 49:0e:b4:fd:bc:a5:74:7b:dd:bb:75:f1:6a:ef:50:1f:88:84: e1:83:4c:a3:db:2b:ca:da:ba:67:6f:74:8c:34:83:39:7d:70: df:80:58:bf:c1:14:37:d2:0f:eb:4f:1d:f4:19:c8:3f:20:5a: 77:21:08:74:21:8e:b0:11:16:f2:f1:cf:07:25:04:b5:e6:40: ad:0b:99:66:28:7b:17:9c:dc:fc:13:93:09:7f:ef:eb:16:3a: 0c:ab:ea:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcvUV7SeyuGNR0dBa/+mLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNjY0MDM1N2FlNGFlMTBmYzBiM2U5ZDk4ZjJhMGNiMDEx ODkwM2MwHhcNMjUxMjI0MTMwMTA5WhcNMjUxMjI1MTMwMTA5WjAzMTEwLwYDVQQD EygzNjU0ZGFkZWYxZDQ2OWU5NzhkYWQ4OWY4M2UwNWY4NGE5YTJlM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbFvFuaglt6SrurZEqm62t5ZrW+I 5jwnlMtP6sgTgGHn7jyohPQERC6d7jsmhG3yoGr5z4I+uY8AHnZhU1eNAbQ0evqR csyI/6X4Bhswb9Ek8Izuykdd3GZj2ysfKo/xX/6ZGPyLO2X6FW+N7e6tqXD9hm5g jsuIym34LqtbhhKVpxjuYzz/NiB+g5dEtb12p7wwIwn90maZU24kJrRnNO1WUcJ2 SysDXWgOVpt/yQoNjyISBDuEutXV1V5qaFzvDivMfFHQ2zPdc/6staYc84ktGxgn GsYkMgf6I+dX50vdorbytLwEtaLrOMXhQxjkA3U5EiR0+5u5ZViOawXTOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZU2t7x1GnpeNrYn4PgX4SpouO4MB8GA1UdIwQY MBaAFN5mQDV65K4Q/As+nZjyoMsBGJA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAt ZmY5N2Y2MmEwOTQ1LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAtZmY5N2Y2MmEwOTQ1 LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQztle9i4 CHiOzRSPRXENT3T7bULZ0FC/dAyE0U1E93RIvZ86BeyNc9TEUq3sHYM0jS5tbcow XToDB3vIxkup1pgOoR8xSkkfiuX/gK1+b4bWgRNRjQxgudiuf5AwPoB/MCSRgKF0 upeP95aTwgj2NhJ5cmxKL45QNBYPvNljqVtl1zFB0Mt1lV40WoE8DnNpo+Y97A41 ecuQUuZw8C5ipFsXSQ60/byldHvdu3Xxau9QH4iE4YNMo9srytq6Z290jDSDOX1w 34BYv8EUN9IP608d9BnIPyBadyEIdCGOsBEW8vHPByUEteZArQuZZih7F5zc/BOT CX/v6xY6DKvqNA== -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:15 2025 by rpki-client