This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft File: w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json) Hash identifier: 2iUf5lxR8wAG7IyUMNwi+i2SLcdAOs01Vdj+iFArZy0= Subject key identifier: 0A:50:7D:A2:0D:C8:A7:18:33:E0:34:9E:70:00:E5:F9:5C:BF:8A:7D Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2 Certificate issuer: /CN=c3743c89df34ec770a65973f1005146bfb32b0f2 Certificate serial: 019B3AFD7DBC9F10AF56E991C5D0999C6347 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft Manifest number: 0E68 Signing time: Sat 20 Dec 2025 09:00:49 +0000 Manifest this update: Sat 20 Dec 2025 09:00:49 +0000 Manifest next update: Sun 21 Dec 2025 09:00:49 +0000 Files and hashes: 1: lGKMR71wIiss24ARjCT6dglSzeg.roa (hash: pOKk5O831tF+GU5ZB5nOM1eHOcUVJqNluw5xZGpLXhs=) 2: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: yZdS9tlkgFDSJ97J35aHLMG4IPEoAPjSzpinKQqdMZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:7d:bc:9f:10:af:56:e9:91:c5:d0:99:9c:63:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2 Validity Not Before: Dec 20 09:00:49 2025 GMT Not After : Dec 21 09:00:49 2025 GMT Subject: CN=0a507da20dc8a71833e0349e7000e5f95cbf8a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:67:59:17:de:0d:11:07:d3:f3:cc:da:f0: fd:09:ba:f3:84:ba:af:d5:ff:87:07:e1:68:42:67: cf:e6:da:be:58:98:8e:5c:25:93:e0:88:32:a6:c2: e6:43:55:b3:7b:97:bf:3b:14:a4:26:b7:87:17:3e: 29:12:50:6a:c6:97:9e:86:d0:d6:27:94:c9:41:ec: de:8a:55:fd:cc:e7:92:d9:89:76:b7:bb:64:d7:51: 4c:d8:b3:83:a1:3b:f8:93:d1:74:c0:c2:55:06:d2: 49:02:57:ed:0d:5a:83:75:76:33:11:b1:05:8e:e1: 44:c3:4a:a8:6e:44:a5:27:d0:d1:6e:39:fa:ea:4a: 63:80:c4:a8:24:a0:7f:f8:ad:07:b7:36:86:f5:73: b4:e5:3b:97:a8:d6:ca:ff:20:e8:fb:e1:bf:1e:76: 0c:3e:4f:4d:e9:66:81:4d:d8:1c:4c:03:01:47:81: 0d:aa:ad:e5:d7:0a:9e:19:fb:5e:ff:e3:7d:e9:e9: 9c:50:71:dd:e9:f3:ea:98:1d:67:8c:15:2d:f0:d9: 35:1c:7a:71:1c:bc:01:9d:7a:e6:1e:f3:14:c3:fe: 78:92:e6:db:44:9b:05:49:1a:90:e2:68:68:1f:7a: 95:b1:a1:cf:dc:da:a6:19:19:43:97:15:a0:c5:8a: c7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:50:7D:A2:0D:C8:A7:18:33:E0:34:9E:70:00:E5:F9:5C:BF:8A:7D X509v3 Authority Key Identifier: keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:73:ea:63:58:d3:9d:72:d5:cf:4f:b8:20:3e:82:4c:2a:40: 5b:c6:f4:e1:24:f5:2b:9d:03:ec:43:ac:f2:bd:cc:0d:2b:ca: d8:80:69:18:63:91:e6:b4:9f:16:f5:10:9d:57:a9:40:01:29: 23:a0:1d:87:1f:01:e6:25:56:14:b8:13:26:a4:66:89:d6:d7: 27:77:87:b0:3a:ad:d7:b9:ee:d2:4a:38:e8:05:6f:b3:06:e6: 87:0a:63:e6:d5:a1:64:a0:fb:ef:a6:fc:0b:36:d8:b3:1e:13: 83:5d:aa:de:4c:01:24:8b:ff:de:26:98:9b:57:c3:be:2f:29: 57:99:44:b1:2a:c8:51:e1:6b:34:9a:c8:4b:05:78:d0:db:41: 79:70:6a:a7:24:f9:4a:e2:4e:a4:bb:e7:f1:85:25:89:69:c1: a2:5f:87:9e:55:b9:61:30:4e:dd:9d:99:5e:b9:99:9e:a5:20: 36:3e:1a:55:21:d9:40:2b:da:93:b7:76:62:2c:75:df:0f:bd: f8:f3:3c:e0:62:9a:79:d9:af:1d:a6:19:79:8f:c0:7d:fe:f7: 44:2d:4b:e3:c6:d6:e9:38:37:a0:4e:0d:a1:b7:67:ad:41:18: 4e:a2:07:0b:53:93:3e:c5:91:f0:a0:33:7b:a9:18:25:5a:0f: 62:80:5d:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/X28nxCvVumRxdCZnGNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzQzYzg5ZGYzNGVjNzcwYTY1OTczZjEwMDUxNDZiZmIz MmIwZjIwHhcNMjUxMjIwMDkwMDQ5WhcNMjUxMjIxMDkwMDQ5WjAzMTEwLwYDVQQD EygwYTUwN2RhMjBkYzhhNzE4MzNlMDM0OWU3MDAwZTVmOTVjYmY4YTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz9nWRfeDREH0/PM2vD9CbrzhLqv 1f+HB+FoQmfP5tq+WJiOXCWT4IgypsLmQ1Wze5e/OxSkJreHFz4pElBqxpeehtDW J5TJQezeilX9zOeS2Yl2t7tk11FM2LODoTv4k9F0wMJVBtJJAlftDVqDdXYzEbEF juFEw0qobkSlJ9DRbjn66kpjgMSoJKB/+K0HtzaG9XO05TuXqNbK/yDo++G/HnYM Pk9N6WaBTdgcTAMBR4ENqq3l1wqeGfte/+N96emcUHHd6fPqmB1njBUt8Nk1HHpx HLwBnXrmHvMUw/54kubbRJsFSRqQ4mhoH3qVsaHP3NqmGRlDlxWgxYrHOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApQfaINyKcYM+A0nnAA5flcv4p9MB8GA1UdIwQY MBaAFMN0PInfNOx3CmWXPxAFFGv7MrDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mOTlkYjQtOTg3ZS00M2IxLWEwY2Et MjBmMjdlODcwZDAxLzEvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mOTlkYjQtOTg3ZS00M2IxLWEwY2EtMjBmMjdlODcwZDAx LzEvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnPqY1jT nXLVz0+4ID6CTCpAW8b04ST1K50D7EOs8r3MDSvK2IBpGGOR5rSfFvUQnVepQAEp I6Adhx8B5iVWFLgTJqRmidbXJ3eHsDqt17nu0ko46AVvswbmhwpj5tWhZKD776b8 CzbYsx4Tg12q3kwBJIv/3iaYm1fDvi8pV5lEsSrIUeFrNJrISwV40NtBeXBqpyT5 SuJOpLvn8YUliWnBol+HnlW5YTBO3Z2ZXrmZnqUgNj4aVSHZQCvak7d2Yix13w+9 +PM84GKaedmvHaYZeY/Aff73RC1L48bW6Tg3oE4NobdnrUEYTqIHC1OTPsWR8KAz e6kYJVoPYoBdoA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:39:24 2025 by rpki-client