This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json) Hash identifier: kXZYLLybncgdKeLcSPYW/xY91fYHsIPeknmJRx/LnME= Subject key identifier: 93:E2:E2:51:97:7D:BE:54:80:E7:9A:4F:E0:AE:18:50:66:F9:CB:75 Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f Certificate serial: 019B424992846AF2FA2C4DD034663A470007 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft Manifest number: 06A3 Signing time: Sun 21 Dec 2025 19:01:16 +0000 Manifest this update: Sun 21 Dec 2025 19:01:16 +0000 Manifest next update: Mon 22 Dec 2025 19:01:16 +0000 Files and hashes: 1: 6Ws74y6Nwf78AVosGHIH3KZShUI.roa (hash: HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=) 2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: 5T1WydO6kSsDvBrv8o9Zd35gwGOM5oUen3OwtuPQd/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:92:84:6a:f2:fa:2c:4d:d0:34:66:3a:47:00:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f Validity Not Before: Dec 21 19:01:16 2025 GMT Not After : Dec 22 19:01:16 2025 GMT Subject: CN=93e2e251977dbe5480e79a4fe0ae185066f9cb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:fe:2b:e0:f9:32:a0:17:b5:5c:19:ed:b5: a0:cc:d2:f4:91:87:e9:32:83:2f:4a:18:e2:c7:38: c5:f2:2a:d8:51:0d:f4:e7:c5:7b:5d:bf:1a:84:84: 09:46:48:50:e2:b9:b0:db:6c:18:d6:4d:a2:5e:ab: 51:13:fa:3a:90:63:cb:af:f7:3f:72:67:00:68:9e: 29:28:90:fd:d7:96:93:61:7b:d4:bb:9b:08:fa:0e: 21:54:dc:b6:ec:7f:3f:64:e6:66:41:20:af:e6:9b: d0:ce:13:55:ba:76:5e:af:52:e1:95:61:66:45:65: 7c:6d:34:c2:31:d3:7d:05:37:68:8c:71:c0:43:32: 88:15:32:3d:35:c8:6a:40:cb:bf:dc:c7:fb:49:90: fe:56:2e:da:3a:49:d8:6b:66:61:2e:16:f1:88:c0: 5f:28:a4:32:9a:9d:b4:a0:d2:6d:cb:99:2f:3d:b1: 3b:46:ee:df:21:08:cc:fe:b2:a8:81:26:39:6c:41: e9:a7:b0:2a:1e:9b:1d:ad:2a:55:85:10:2d:b6:61: 45:03:53:ad:82:8f:3e:15:d2:4b:89:34:04:85:0d: 8e:84:45:36:4f:d3:1c:ab:e9:47:21:33:1c:c3:9f: 2e:17:b1:c1:08:f8:8e:a5:d6:01:b3:38:0c:3a:b0: ee:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E2:E2:51:97:7D:BE:54:80:E7:9A:4F:E0:AE:18:50:66:F9:CB:75 X509v3 Authority Key Identifier: keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:34:1e:80:e4:d6:c7:85:99:c6:13:20:d6:d5:2c:02:e1:68: 45:96:90:c5:11:61:ef:dd:fd:39:a2:b9:8f:4e:d8:42:f5:5c: 67:40:34:31:95:48:3d:b2:72:83:2b:fd:40:15:39:95:51:58: 68:83:ea:4b:76:14:aa:3b:26:c0:55:4e:74:2e:39:2d:50:e3: 8c:17:e1:6e:bf:70:6c:ff:06:6c:e2:6c:01:84:32:b0:c4:31: ba:6a:68:8a:1e:58:5f:3c:26:ee:0b:1d:b1:21:e9:e3:b6:c8: f8:a0:ac:77:db:6d:6a:45:9c:c4:a9:75:fe:8e:da:60:e7:55: 72:54:db:24:4b:31:c7:57:d1:66:ad:03:8c:a8:d8:a1:e3:56: 9d:85:2b:8d:00:90:c5:45:31:89:17:46:af:43:87:bb:7e:0e: ae:db:56:b0:d8:a6:ea:61:bd:c7:7c:f9:fb:ae:fb:28:fb:b9: 78:c4:8d:25:2c:1b:65:2f:39:21:02:c1:64:2c:20:cf:7b:f9: 29:2c:0e:4a:af:c5:e3:1b:0e:5c:d7:2f:50:cc:db:ba:d5:4d: ff:a7:11:6c:bf:ed:6f:fe:88:94:6a:29:68:8f:60:70:94:45: e6:40:31:96:84:7a:24:1e:ad:67:a0:e4:8b:bf:19:91:9e:49: 2b:e4:89:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSZKEavL6LE3QNGY6RwAHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy NTI3OGYwHhcNMjUxMjIxMTkwMTE2WhcNMjUxMjIyMTkwMTE2WjAzMTEwLwYDVQQD Eyg5M2UyZTI1MTk3N2RiZTU0ODBlNzlhNGZlMGFlMTg1MDY2ZjljYjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBL+K+D5MqAXtVwZ7bWgzNL0kYfp MoMvShjixzjF8irYUQ3058V7Xb8ahIQJRkhQ4rmw22wY1k2iXqtRE/o6kGPLr/c/ cmcAaJ4pKJD915aTYXvUu5sI+g4hVNy27H8/ZOZmQSCv5pvQzhNVunZer1LhlWFm RWV8bTTCMdN9BTdojHHAQzKIFTI9NchqQMu/3Mf7SZD+Vi7aOknYa2ZhLhbxiMBf KKQymp20oNJty5kvPbE7Ru7fIQjM/rKogSY5bEHpp7AqHpsdrSpVhRAttmFFA1Ot go8+FdJLiTQEhQ2OhEU2T9Mcq+lHITMcw58uF7HBCPiOpdYBszgMOrDuZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPi4lGXfb5UgOeaT+CuGFBm+ct1MB8GA1UdIwQY MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct OTEyZTc4YzJmMmViLzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDQegOTW x4WZxhMg1tUsAuFoRZaQxRFh7939OaK5j07YQvVcZ0A0MZVIPbJygyv9QBU5lVFY aIPqS3YUqjsmwFVOdC45LVDjjBfhbr9wbP8GbOJsAYQysMQxumpoih5YXzwm7gsd sSHp47bI+KCsd9ttakWcxKl1/o7aYOdVclTbJEsxx1fRZq0DjKjYoeNWnYUrjQCQ xUUxiRdGr0OHu34OrttWsNim6mG9x3z5+677KPu5eMSNJSwbZS85IQLBZCwgz3v5 KSwOSq/F4xsOXNcvUMzbutVN/6cRbL/tb/6IlGopaI9gcJRF5kAxloR6JB6tZ6Dk i78ZkZ5JK+SJLA== -----END CERTIFICATE-----Generated at Mon Dec 22 03:31:31 2025 by rpki-client