This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft File: 0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json) Hash identifier: Mnzg5eW6/gUmDsZFmzWlNhv+EniGCkS660IUgEpxgAk= Subject key identifier: D8:E8:47:67:FE:6A:81:11:F9:BB:9E:96:BB:9E:B5:D1:DA:A5:C5:FE Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Certificate serial: 019B3D232226306BB88881C130628B48B346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft Manifest number: 1798 Signing time: Sat 20 Dec 2025 19:01:11 +0000 Manifest this update: Sat 20 Dec 2025 19:01:11 +0000 Manifest next update: Sun 21 Dec 2025 19:01:11 +0000 Files and hashes: 1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: VRmLkFF78CGOYel0311CHsVbjdYCT8YIMm9Zk4azdCc=) 2: JOdkDpvp0vkWhvJ9lV0dWUTL_74.roa (hash: Yn5hV+sSL6Zg2EJjKD6GZsY1cY5bsq3d8VKm7ARDueo=) 3: Mx0tomllVsmkxbnh1iU8_2PCyj0.roa (hash: 7kB7d7CTYtow392lbDCXYANcYe1E5mU3cWH2302D1Ck=) 4: TiEyxKmyiS65-0wzRPZF8VUxgEI.roa (hash: O61YlumzohkeBoQeKX9n1/69jzfPg7pNTilEHThyZVQ=) 5: UZGcM2ffX81NtAhfATE7LMKcmU0.roa (hash: IHojeJZnyEKNZzsFj36mgVJwIZkRWe7Nk65gWxDYXn0=) 6: gWauuati_t4mDyHK5P6-vGRw5tI.roa (hash: 8Gg051rcVEVxLbKS4zWCYakDmEwjk+i+o+ush3e3CSQ=) 7: rtkk5gT-jAJhBoaE_BQPXocOEfU.roa (hash: v/MP7pEa6ZGIvq0Wu6Fpus/nOHl8IEXjbt8QwhltqFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:22:26:30:6b:b8:88:81:c1:30:62:8b:48:b3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Validity Not Before: Dec 20 19:01:11 2025 GMT Not After : Dec 21 19:01:11 2025 GMT Subject: CN=d8e84767fe6a8111f9bb9e96bb9eb5d1daa5c5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2f:4d:7f:9c:60:9e:bd:5a:b6:d2:5c:14:47: b6:13:8a:6e:7f:13:7b:fe:39:b0:2f:5f:02:9e:a6: c8:c8:63:f7:75:22:c4:f6:39:59:c0:32:2a:9c:4c: 33:0a:36:90:3c:73:00:43:09:07:5e:e5:4c:7a:03: 1e:e2:05:b5:67:47:71:04:9e:5f:ab:4f:45:11:8d: 73:80:ce:3b:e8:07:af:f8:db:a0:b3:71:fe:e6:b4: 7b:27:b4:58:49:66:47:89:d1:14:2a:3b:08:6a:2f: 2b:f9:84:df:49:c5:d6:f1:d2:8e:d8:f8:a7:7e:98: 48:24:b2:4b:9f:a0:0c:ce:fc:4a:fc:62:a8:7f:03: 92:fa:07:35:ca:f0:fa:55:44:6e:ac:c4:c2:ca:80: 3e:d8:4a:28:91:90:7c:95:0e:a1:60:9b:33:67:c7: 6b:68:3d:17:31:38:01:36:08:8d:1d:4b:5c:a5:79: 8d:f0:63:7f:ef:ca:b0:c8:b9:f8:2c:84:04:33:3d: ef:e7:81:3b:bb:dd:63:6c:cf:6a:d3:48:c1:c6:b6: c4:cd:80:34:2f:a8:80:ae:be:0e:b0:af:17:52:b7: 4f:37:01:12:70:77:89:e2:c6:a5:ea:ab:cc:84:2f: 2e:01:2c:76:62:fa:9c:86:7f:83:0b:82:8e:74:a7: c5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E8:47:67:FE:6A:81:11:F9:BB:9E:96:BB:9E:B5:D1:DA:A5:C5:FE X509v3 Authority Key Identifier: keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e4:5b:6c:83:b9:9c:21:5c:20:e4:8b:64:56:c9:58:da:86: 33:63:e7:36:86:bd:6f:d3:5b:86:90:1f:78:19:b5:0d:c0:93: 2f:f6:17:8e:7a:2e:f6:99:d0:4b:13:33:82:bb:bb:cd:11:c8: b2:4c:f2:36:7c:ff:5e:15:10:fc:d9:bf:a7:05:46:bb:a7:91: 28:af:13:15:cb:ca:5a:e6:3b:84:84:c6:66:bc:a4:7d:66:23: ea:8f:e5:68:a8:b0:26:d8:99:51:2c:e1:10:d3:25:99:47:a5: a8:1a:1a:64:ef:0d:83:c8:8f:ce:b7:81:3f:fb:bc:b3:ea:5b: 9d:f2:69:78:b7:b2:5c:db:60:b9:fd:79:c8:08:a4:3c:2c:61: 0d:20:ec:42:ad:b5:e3:ad:96:bc:7c:06:98:89:49:68:a0:fa: da:64:08:56:aa:95:f0:33:08:5f:40:52:61:d6:da:ea:b2:25: 64:7e:ce:8f:32:b1:2b:fc:02:7a:80:a8:c7:b8:41:1f:8a:d4: 40:4f:67:98:61:e8:e5:d0:12:18:4b:9e:be:45:28:e6:25:1b: e5:13:2a:7f:62:74:61:bf:f1:33:63:26:17:cd:c5:b5:7e:7c: c5:f8:c1:63:5a:8a:0c:68:80:e0:86:ed:b2:2e:bf:10:d0:07: c4:d3:44:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IyImMGu4iIHBMGKLSLNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMWRkMWE1MTRkM2E3ZTNkZmRiOGJmYjc1ZDdkMjRlZDk4 ZDQ3OWYwHhcNMjUxMjIwMTkwMTExWhcNMjUxMjIxMTkwMTExWjAzMTEwLwYDVQQD EyhkOGU4NDc2N2ZlNmE4MTExZjliYjllOTZiYjllYjVkMWRhYTVjNWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy9Nf5xgnr1attJcFEe2E4pufxN7 /jmwL18CnqbIyGP3dSLE9jlZwDIqnEwzCjaQPHMAQwkHXuVMegMe4gW1Z0dxBJ5f q09FEY1zgM476Aev+Nugs3H+5rR7J7RYSWZHidEUKjsIai8r+YTfScXW8dKO2Pin fphIJLJLn6AMzvxK/GKofwOS+gc1yvD6VURurMTCyoA+2EookZB8lQ6hYJszZ8dr aD0XMTgBNgiNHUtcpXmN8GN/78qwyLn4LIQEMz3v54E7u91jbM9q00jBxrbEzYA0 L6iArr4OsK8XUrdPNwEScHeJ4sal6qvMhC8uASx2Yvqchn+DC4KOdKfFpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjoR2f+aoER+buelruetdHapcX+MB8GA1UdIwQY MBaAFNMd0aUU06fj39uL+3XX0k7ZjUefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjIt YjE2NmFlMmVmMjg3LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjItYjE2NmFlMmVmMjg3 LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKORbbIO5 nCFcIOSLZFbJWNqGM2PnNoa9b9NbhpAfeBm1DcCTL/YXjnou9pnQSxMzgru7zRHI skzyNnz/XhUQ/Nm/pwVGu6eRKK8TFcvKWuY7hITGZrykfWYj6o/laKiwJtiZUSzh ENMlmUelqBoaZO8Ng8iPzreBP/u8s+pbnfJpeLeyXNtguf15yAikPCxhDSDsQq21 462WvHwGmIlJaKD62mQIVqqV8DMIX0BSYdba6rIlZH7OjzKxK/wCeoCox7hBH4rU QE9nmGHo5dASGEuevkUo5iUb5RMqf2J0Yb/xM2MmF83FtX58xfjBY1qKDGiA4Ibt si6/ENAHxNNEpA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:37:43 2025 by rpki-client