This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft File: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json) Hash identifier: Jw4N4aw/O/SHJ9jlySDmOEPXNq7+Xax1E7Bd7w/EFQw= Subject key identifier: 65:3C:05:FF:FE:C1:E1:DC:FF:51:31:C3:B3:33:2E:82:65:A3:0D:7E Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Certificate serial: 019B4FCF04D2A8279E06571A50F7DD2DAEF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft Manifest number: 155D Signing time: Wed 24 Dec 2025 10:02:05 +0000 Manifest this update: Wed 24 Dec 2025 10:02:05 +0000 Manifest next update: Thu 25 Dec 2025 10:02:05 +0000 Files and hashes: 1: 29TbMLufIPxRE020kIvBxrijcXE.roa (hash: yaWCKyUE+f0tiisSqvZhHpxJTfa3UwVcLIOHWKNCXpA=) 2: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: xHhAxPN+PoJ7V2cLcahpxSD2uGY15bS6j7mHM/H0RW8=) 3: EpG6DN4aBjhttZAw1Q1XQqE7-1s.roa (hash: l6KmPb3Emr7cpoLQVZzViHX9jNPkSHPfBrkC7M4zEOg=) 4: bCHjuq-GwNDHZjsTd3pAyP2Si4w.roa (hash: M+Njn6Jry+REmQlQYvUz0vQnUhP0EbBt8o0lYes6W+o=) 5: hn5_PzzfTec18eIUGShu0x__N3w.roa (hash: +8CUvj+aURe4BOcdllxHMI3BGLO88+PbI/02n/kq4Ik=) 6: pYZCrMGmxkKgeeR3OB7Sabq_PhY.roa (hash: xXgcQpyaaoiy7n7zCgLujfBrckf/0cL3u4clvozeQMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:04:d2:a8:27:9e:06:57:1a:50:f7:dd:2d:ae:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Validity Not Before: Dec 24 10:02:05 2025 GMT Not After : Dec 25 10:02:05 2025 GMT Subject: CN=653c05fffec1e1dcff5131c3b3332e8265a30d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:e7:5f:28:e5:06:f7:27:33:9b:fb:aa:3a: ff:f6:72:b9:ae:0f:88:3f:8d:26:9f:83:3f:59:65: a2:77:8b:86:4c:33:19:0c:66:52:a7:de:28:bd:77: 25:66:c3:3b:93:8c:ea:9c:c1:c5:0d:0c:7a:2a:75: a0:4c:9a:ae:af:3b:9e:18:06:ce:0c:f6:bd:c3:76: 00:08:45:5c:a4:f9:8c:b5:9f:4d:a0:52:a1:19:8c: 11:fc:af:53:cf:22:fd:a4:99:87:9d:91:99:80:ec: 29:a8:a0:59:70:a4:7d:04:d5:cc:6e:16:02:ec:bb: 91:c0:1d:91:c8:38:6c:ed:ba:b0:3e:20:86:57:57: 87:a0:67:1f:e7:84:1c:4e:6d:58:f5:b2:08:89:97: c6:82:a9:44:d6:ec:25:49:f9:cf:e7:83:65:a7:4f: 25:d5:22:d2:b8:98:a4:58:e6:81:c7:c2:65:29:b6: 9d:ca:4d:97:73:4a:b0:98:5e:9b:77:b3:40:93:16: 8f:29:3c:41:3a:33:e4:ad:7e:e5:bd:48:92:e8:fb: 49:5b:d2:5b:a5:5f:3d:61:72:4e:89:3f:86:63:94: 6d:b9:3e:84:79:ea:30:3d:77:2d:93:8b:19:b4:f9: dd:a3:c6:cf:b2:4b:cc:8e:ac:ba:cf:62:1f:8b:e5: b4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3C:05:FF:FE:C1:E1:DC:FF:51:31:C3:B3:33:2E:82:65:A3:0D:7E X509v3 Authority Key Identifier: keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:23:8d:1f:55:15:14:b2:c1:83:d5:dc:70:5c:0b:d0:56:75: bd:b3:5c:ff:70:35:8a:62:ab:db:f0:d0:fd:93:bb:89:59:6c: 27:ec:ce:e1:a5:df:e8:19:09:b8:bf:d3:c8:97:45:11:cc:1f: 8c:59:da:ef:22:70:cd:29:e7:b2:63:2a:19:73:3e:4e:06:3b: 41:dc:af:f6:ec:d9:47:35:65:65:2d:ac:a3:76:24:eb:eb:3e: 41:b2:f5:55:04:08:a8:41:20:b9:2c:f9:81:c5:2f:61:b3:9b: d3:e1:92:b2:9c:c8:45:ef:25:f7:9f:0b:54:6e:3f:15:df:41: 36:e0:a1:43:5c:05:ce:31:5b:dc:8a:39:29:56:9c:71:e4:ca: 87:eb:5d:e0:fa:e4:31:35:22:61:99:0e:57:74:7d:d7:59:a9: 11:c5:87:01:7c:d3:ea:af:a3:a4:ec:d8:7f:e3:b0:7b:3e:ce: 02:d3:b9:d7:d3:f5:4f:50:b3:5c:c2:43:63:64:18:59:89:e8: d2:07:d0:af:12:e8:c3:ad:73:a7:67:54:69:ff:c7:7b:cb:b5: c8:74:3f:d8:86:04:97:6e:aa:f0:e7:8d:56:eb:ea:3f:45:f3: e0:10:e9:d5:bb:96:b8:be:62:6c:ea:c1:6b:22:37:a7:09:4e: ce:57:a9:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzwTSqCeeBlcaUPfdLa74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl ZTQzYzAwHhcNMjUxMjI0MTAwMjA1WhcNMjUxMjI1MTAwMjA1WjAzMTEwLwYDVQQD Eyg2NTNjMDVmZmZlYzFlMWRjZmY1MTMxYzNiMzMzMmU4MjY1YTMwZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5DnXyjlBvcnM5v7qjr/9nK5rg+I P40mn4M/WWWid4uGTDMZDGZSp94ovXclZsM7k4zqnMHFDQx6KnWgTJqurzueGAbO DPa9w3YACEVcpPmMtZ9NoFKhGYwR/K9TzyL9pJmHnZGZgOwpqKBZcKR9BNXMbhYC 7LuRwB2RyDhs7bqwPiCGV1eHoGcf54QcTm1Y9bIIiZfGgqlE1uwlSfnP54Nlp08l 1SLSuJikWOaBx8JlKbadyk2Xc0qwmF6bd7NAkxaPKTxBOjPkrX7lvUiS6PtJW9Jb pV89YXJOiT+GY5RtuT6EeeowPXctk4sZtPndo8bPskvMjqy6z2Ifi+W0kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGU8Bf/+weHc/1Exw7MzLoJlow1+MB8GA1UdIwQY MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt OWM4ZTU5YzI3NzFjLzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSONH1UV FLLBg9XccFwL0FZ1vbNc/3A1imKr2/DQ/ZO7iVlsJ+zO4aXf6BkJuL/TyJdFEcwf jFna7yJwzSnnsmMqGXM+TgY7Qdyv9uzZRzVlZS2so3Yk6+s+QbL1VQQIqEEguSz5 gcUvYbOb0+GSspzIRe8l958LVG4/Fd9BNuChQ1wFzjFb3Io5KVacceTKh+td4Prk MTUiYZkOV3R911mpEcWHAXzT6q+jpOzYf+Owez7OAtO519P1T1CzXMJDY2QYWYno 0gfQrxLow61zp2dUaf/He8u1yHQ/2IYEl26q8OeNVuvqP0Xz4BDp1buWuL5ibOrB ayI3pwlOzlepsQ== -----END CERTIFICATE-----Generated at Wed Dec 24 15:11:29 2025 by rpki-client