This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json) Hash identifier: 93li5nYCPN0LuiXlfx1Cwnds6aK8hHP87tEPWMrQbpY= Subject key identifier: BB:F3:F1:49:76:2C:EA:C2:CC:A8:55:4B:C6:25:55:C8:56:EF:46:9E Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76 Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176 Certificate serial: 019B3D91130AA1D393BFA7A7F3B12EA84E1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft Manifest number: 1790 Signing time: Sat 20 Dec 2025 21:01:16 +0000 Manifest this update: Sat 20 Dec 2025 21:01:16 +0000 Manifest next update: Sun 21 Dec 2025 21:01:16 +0000 Files and hashes: 1: F0xtYGfQ_s_LJkUkk89IHcL9J5M.roa (hash: JVjlGGRIJlPuTdOW/N8SfdRvr3fAH3HHybxJ5aP4RD0=) 2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: yidL57w0qw5sXapzoujJTfFKfw1bW+YmoOhbdOv4Pus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:13:0a:a1:d3:93:bf:a7:a7:f3:b1:2e:a8:4e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176 Validity Not Before: Dec 20 21:01:16 2025 GMT Not After : Dec 21 21:01:16 2025 GMT Subject: CN=bbf3f149762ceac2cca8554bc62555c856ef469e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8e:16:0c:6b:7a:ea:d3:22:09:74:95:a4:71: 33:fa:43:ce:e1:dd:78:a5:f0:bc:b7:9b:19:92:56: 26:09:2b:76:bc:08:0d:2e:50:92:88:9c:b6:3c:2a: 91:0a:53:49:4f:34:2e:dd:27:84:88:85:e9:52:65: 4e:f1:82:a3:97:2d:d4:e5:bc:8b:f6:9f:81:90:69: 6a:f3:f8:54:f7:21:33:95:b4:2c:31:59:05:ef:7d: c4:c2:21:e1:66:4d:8b:00:28:39:33:a9:76:a2:c3: f4:84:01:a3:40:40:55:6d:8d:d9:98:93:71:7b:03: 12:a1:a2:55:a2:1d:20:b6:dc:70:ca:ef:dc:ed:77: 34:33:d0:8f:03:ec:de:db:c5:7c:2d:29:d8:08:1f: 86:29:87:19:85:c5:22:11:28:c8:56:10:fb:2a:72: 6f:25:6f:49:8c:ac:b5:98:78:46:6b:10:da:c7:d8: 00:29:09:cc:6e:d6:c5:3f:33:40:47:61:9b:cc:40: 42:e4:fb:5c:5a:7e:7a:76:40:1b:1d:de:84:c6:92: c5:36:cd:6d:df:1b:02:35:56:da:0a:b6:2a:49:e0: af:fd:5d:cc:2b:45:ab:7d:f0:0d:f1:57:43:48:8c: 1c:84:54:10:3f:f2:23:8a:9e:00:b0:6e:81:ef:af: c6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F3:F1:49:76:2C:EA:C2:CC:A8:55:4B:C6:25:55:C8:56:EF:46:9E X509v3 Authority Key Identifier: keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:04:7a:f8:13:bf:25:79:99:c9:38:8d:07:00:e9:f3:5d:e1: fd:1e:be:69:b6:b8:09:8b:59:0c:19:b2:fe:5c:26:1c:86:6f: 3c:a6:78:17:d5:e1:2b:b8:c6:c3:ef:2c:de:9e:fd:d1:63:6e: 65:62:67:b8:19:d5:2c:0e:2c:61:76:53:88:d0:39:bb:38:9a: 87:22:94:a0:1f:24:56:ec:2a:f0:08:78:f4:8b:d3:2d:6a:50: 22:7d:03:07:6f:0b:fa:9d:73:4c:59:e6:8f:8d:6d:68:91:92: 36:bf:c5:3c:53:32:fe:b3:a1:c1:98:a0:54:02:16:ea:52:f6: 87:41:0a:35:37:fb:fc:61:75:53:09:d2:f4:18:34:5e:25:11: 7b:72:ab:d5:58:78:86:75:e7:39:9f:80:25:94:c1:50:e1:19: 3f:9b:5b:a3:9e:0f:c1:16:a7:72:47:11:d3:24:f1:18:a1:be: d4:53:43:80:73:77:90:c1:cb:59:18:07:ed:06:aa:06:ca:d4: d3:b4:bb:ca:98:91:3f:de:bf:65:1c:9c:5f:ae:25:41:55:94: 8e:45:44:f1:5a:38:9b:a6:c1:3a:e7:f5:5d:22:8c:5b:01:ed: d6:d4:63:eb:be:9c:1f:e5:73:ef:c5:0b:8a:1b:33:e7:41:f1: ed:4b:5e:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRMKodOTv6en87EuqE4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0YmRjMzc2YTE1OWQwNWUyYWY5NzE3NmEzZWJhODM2MGU2 MGQxNzYwHhcNMjUxMjIwMjEwMTE2WhcNMjUxMjIxMjEwMTE2WjAzMTEwLwYDVQQD EyhiYmYzZjE0OTc2MmNlYWMyY2NhODU1NGJjNjI1NTVjODU2ZWY0NjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk44WDGt66tMiCXSVpHEz+kPO4d14 pfC8t5sZklYmCSt2vAgNLlCSiJy2PCqRClNJTzQu3SeEiIXpUmVO8YKjly3U5byL 9p+BkGlq8/hU9yEzlbQsMVkF733EwiHhZk2LACg5M6l2osP0hAGjQEBVbY3ZmJNx ewMSoaJVoh0gttxwyu/c7Xc0M9CPA+ze28V8LSnYCB+GKYcZhcUiESjIVhD7KnJv JW9JjKy1mHhGaxDax9gAKQnMbtbFPzNAR2GbzEBC5PtcWn56dkAbHd6ExpLFNs1t 3xsCNVbaCrYqSeCv/V3MK0WrffAN8VdDSIwchFQQP/Ijip4AsG6B76/GOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvz8Ul2LOrCzKhVS8YlVchW70aeMB8GA1UdIwQY MBaAFLS9w3ahWdBeKvlxdqPrqDYOYNF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80MGVhMTQtZGM1MC00YWEwLWFhODUt MjhkMDEwNjAzNTI5LzEvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80MGVhMTQtZGM1MC00YWEwLWFhODUtMjhkMDEwNjAzNTI5 LzEvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwR6+BO/ JXmZyTiNBwDp813h/R6+aba4CYtZDBmy/lwmHIZvPKZ4F9XhK7jGw+8s3p790WNu ZWJnuBnVLA4sYXZTiNA5uziahyKUoB8kVuwq8Ah49IvTLWpQIn0DB28L+p1zTFnm j41taJGSNr/FPFMy/rOhwZigVAIW6lL2h0EKNTf7/GF1UwnS9Bg0XiURe3Kr1Vh4 hnXnOZ+AJZTBUOEZP5tbo54PwRanckcR0yTxGKG+1FNDgHN3kMHLWRgH7QaqBsrU 07S7ypiRP96/ZRycX64lQVWUjkVE8Vo4m6bBOuf1XSKMWwHt1tRj676cH+Vz78UL ihsz50Hx7Uteig== -----END CERTIFICATE-----Generated at Sun Dec 21 02:45:22 2025 by rpki-client