This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json) Hash identifier: ILiEEvDSijlJFXrlzkp21rSU9pNwhFI3JLHWg8tyY5E= Subject key identifier: 47:62:BF:F0:81:DD:14:B8:DF:DC:34:40:0E:FE:A1:A3:8E:FD:95:D7 Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Certificate serial: 019B2E8BC2413E78E52B0E7CE97ED5CCF7EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft Manifest number: 179E Signing time: Wed 17 Dec 2025 23:01:09 +0000 Manifest this update: Wed 17 Dec 2025 23:01:09 +0000 Manifest next update: Thu 18 Dec 2025 23:01:09 +0000 Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: BNJNCIbX9QRUwCw8E2mMc9qTUExJ1En7yB/rXl7bwLU=) 2: 6vn0S84Of3Am641RtQSWgEcI8LQ.roa (hash: liXU+EaS34eLz4h7mt5PwqdMf8bXjU0VdoViqn9V7yA=) 3: 8CNNYBbzQiDFPTM1tjqp5lUESM8.roa (hash: FKMYJ+6HiuRFIY6sbk4LB3mHseE0YsFT5neIU8ZSV0A=) 4: SgwPvwknub36baQ9KcDiF10XVjg.roa (hash: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=) 5: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (hash: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=) 6: YJiS4qGuwLN_Sg41RSYko6CqAYU.roa (hash: 2h4yWiYaNQUsbtMp+bAg/Hr+KrDeiT3A2mqFfxK9yew=) 7: goC_YpQrwJcU48WyzOg3OlsUAbY.roa (hash: OHpeanfXRy8bamPYQwO5dLykWIe4C63dtCxwNHxZdBc=) 8: lXMs99__wPFL_tQdoxzgPhccZK0.roa (hash: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:c2:41:3e:78:e5:2b:0e:7c:e9:7e:d5:cc:f7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Validity Not Before: Dec 17 23:01:09 2025 GMT Not After : Dec 18 23:01:09 2025 GMT Subject: CN=4762bff081dd14b8dfdc34400efea1a38efd95d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f9:d8:51:6d:30:44:89:4a:81:5c:e7:3f:7b: d1:49:b9:10:cb:e9:90:44:81:2b:0c:a3:f7:31:32: 0b:f6:88:bd:be:d1:6a:47:91:71:3c:e7:95:74:41: ae:be:73:f7:29:30:41:4f:43:3a:e3:0f:e3:2c:b3: b2:b5:34:fa:46:a1:49:be:92:ae:fe:b7:62:ab:63: c9:51:8c:df:15:8d:34:45:da:1e:0e:d2:e2:31:b3: 54:38:93:8f:45:3b:7e:ed:26:07:cc:3d:a8:d1:65: e8:da:a5:9b:2a:b1:42:f6:9c:59:cf:08:47:f7:0f: d1:3e:0e:c1:db:99:ae:c2:9f:2b:65:8b:cc:6c:26: 6f:f1:af:2d:6f:a7:ee:df:9e:ca:b0:d5:47:a8:2f: 5f:e5:be:2a:95:6c:80:c9:f5:40:a7:b8:5e:2a:98: 2f:b3:31:41:57:5b:a6:8c:0d:ac:b0:09:b9:a4:ae: c0:72:22:6d:56:a3:06:37:9b:cb:b2:f1:9d:6c:f4: 28:74:38:59:2f:22:7c:d2:06:a2:48:a6:5c:31:d4: 6b:dc:17:dd:ea:8e:b1:db:73:62:ec:31:0f:29:c7: 1d:b0:2e:59:8d:74:2e:65:b4:e3:fc:cb:46:86:ba: ef:7d:97:b0:8e:6f:41:eb:c8:92:f3:c5:31:83:39: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:62:BF:F0:81:DD:14:B8:DF:DC:34:40:0E:FE:A1:A3:8E:FD:95:D7 X509v3 Authority Key Identifier: keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ef:68:ee:43:e6:4f:5a:36:7f:09:d4:2c:1b:39:e5:1e:e1: c6:2d:cb:cc:3d:a7:ce:eb:8f:d9:91:0c:21:ba:0b:85:c1:39: 51:fb:41:c3:44:86:99:57:03:d7:88:43:0c:02:22:11:7e:7c: 6c:d5:e5:c8:57:76:e2:47:2c:1c:cd:c4:de:08:19:aa:f7:ec: e8:72:7a:4f:16:82:db:fa:36:19:ef:53:08:a5:20:fc:8c:ab: 83:58:fd:0e:8f:84:a3:b0:02:2b:90:57:25:2e:17:63:d9:2f: 0c:a5:98:99:6d:f1:37:39:79:c9:f1:46:9e:df:d0:fa:9a:ec: 33:bf:3b:73:09:f1:48:87:19:4e:f5:6c:53:0a:4b:3b:28:f7: 43:f4:98:00:41:53:1b:dd:20:bb:1b:ba:da:9e:9d:a8:48:e9: 60:03:d4:99:0e:98:db:d9:be:54:50:93:ae:03:dd:e1:ce:0c: 01:76:a2:11:b4:6c:64:a2:3d:f2:37:a4:07:bb:8d:4a:55:10: cf:12:f5:f3:cf:a1:70:32:8b:20:7e:b8:fb:73:33:0c:cb:a2: 48:42:78:1d:6b:db:e0:c2:68:a7:3a:12:82:32:23:f5:b9:2d: ec:3d:b2:da:d8:92:cb:c9:00:73:c7:72:e3:6e:98:be:70:a4: 53:3d:38:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui8JBPnjlKw586X7VzPfvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0 OWQ3NGQwHhcNMjUxMjE3MjMwMTA5WhcNMjUxMjE4MjMwMTA5WjAzMTEwLwYDVQQD Eyg0NzYyYmZmMDgxZGQxNGI4ZGZkYzM0NDAwZWZlYTFhMzhlZmQ5NWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvnYUW0wRIlKgVznP3vRSbkQy+mQ RIErDKP3MTIL9oi9vtFqR5FxPOeVdEGuvnP3KTBBT0M64w/jLLOytTT6RqFJvpKu /rdiq2PJUYzfFY00RdoeDtLiMbNUOJOPRTt+7SYHzD2o0WXo2qWbKrFC9pxZzwhH 9w/RPg7B25muwp8rZYvMbCZv8a8tb6fu357KsNVHqC9f5b4qlWyAyfVAp7heKpgv szFBV1umjA2ssAm5pK7AciJtVqMGN5vLsvGdbPQodDhZLyJ80gaiSKZcMdRr3Bfd 6o6x23Ni7DEPKccdsC5ZjXQuZbTj/MtGhrrvfZewjm9B68iS88UxgzkqxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdiv/CB3RS439w0QA7+oaOO/ZXXMB8GA1UdIwQY MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt NjY0ZjA0ZDJhNjhkLzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZu9o7kPm T1o2fwnULBs55R7hxi3LzD2nzuuP2ZEMIboLhcE5UftBw0SGmVcD14hDDAIiEX58 bNXlyFd24kcsHM3E3ggZqvfs6HJ6TxaC2/o2Ge9TCKUg/Iyrg1j9Do+Eo7ACK5BX JS4XY9kvDKWYmW3xNzl5yfFGnt/Q+prsM787cwnxSIcZTvVsUwpLOyj3Q/SYAEFT G90guxu62p6dqEjpYAPUmQ6Y29m+VFCTrgPd4c4MAXaiEbRsZKI98jekB7uNSlUQ zxL188+hcDKLIH64+3MzDMuiSEJ4HWvb4MJopzoSgjIj9bkt7D2y2tiSy8kAc8dy 426YvnCkUz04rA== -----END CERTIFICATE-----Generated at Thu Dec 18 06:52:14 2025 by rpki-client