This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json) Hash identifier: vxilcRM5+YQnxgKNcfE4m58K23xT3Jm1FmG2xiUXvHs= Subject key identifier: 25:0A:FC:F7:BD:44:B2:00:E8:6C:37:E1:EF:F9:A5:6C:CF:E8:E6:EC Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82 Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82 Certificate serial: 019B3AC6DF55286AB4D24E3CBC6734037879 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 08:01:10 +0000 Manifest this update: Sat 20 Dec 2025 08:01:10 +0000 Manifest next update: Sun 21 Dec 2025 08:01:10 +0000 Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: 1oR21chyvA4+RyO1/Ql5G0zo4PLXJtRvi9gVz0N+/2w=) 2: CgFc8x26QM3VY1KiLgccdsxhrXo.roa (hash: P9EWdQX/EOCp7WZ5gfsQmoM4qU0udbuMuOqDFw597IY=) 3: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:df:55:28:6a:b4:d2:4e:3c:bc:67:34:03:78:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82 Validity Not Before: Dec 20 08:01:10 2025 GMT Not After : Dec 21 08:01:10 2025 GMT Subject: CN=250afcf7bd44b200e86c37e1eff9a56ccfe8e6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e9:b2:da:24:f8:ef:5b:e2:e3:56:86:31:6c: 27:95:a3:ae:e9:7f:f6:35:e0:cb:13:39:71:c0:e4: 56:20:c1:da:aa:77:61:88:fe:ee:a2:db:73:71:91: 14:36:6d:f6:83:7e:50:71:64:1b:8f:13:55:4e:fb: 53:f3:a0:79:1d:0f:80:9e:2c:a5:50:8c:c2:54:1f: a6:65:81:4c:d9:41:9a:2c:0c:52:33:30:19:42:a7: 0c:1e:6c:5b:7f:d9:c6:ff:c9:7c:71:e5:13:42:0f: 10:82:48:c5:b0:09:00:82:99:6a:82:46:7a:8d:4a: ec:f6:89:00:45:96:5c:55:70:a5:e4:1e:a5:40:1b: ff:4c:05:68:03:69:92:79:c7:42:e4:6e:e8:fd:5b: 9c:27:13:80:fd:ad:7a:a6:0b:c0:ac:57:b2:16:c9: 5e:76:52:d6:ad:47:12:4f:6f:d1:9c:0a:61:42:2b: 71:6a:59:63:75:49:d6:06:55:1e:ab:17:ac:d7:eb: 89:06:19:75:8e:43:49:a3:a3:e1:75:68:01:b0:3f: 7f:34:9f:2e:2e:3a:02:80:9c:e1:f0:b9:61:0d:86: 11:5a:50:c4:36:8e:2b:52:bb:35:cf:c3:11:75:b6: 35:4b:98:3f:1d:d2:63:06:93:e1:21:43:86:8e:be: 84:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0A:FC:F7:BD:44:B2:00:E8:6C:37:E1:EF:F9:A5:6C:CF:E8:E6:EC X509v3 Authority Key Identifier: keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ed:5c:14:80:41:f7:18:c1:92:98:77:fd:48:47:b1:71:92: 66:08:d5:f1:9f:a4:50:a3:dc:00:78:6d:b0:bd:a2:a8:2e:10: 89:2e:6c:25:15:e6:cd:d9:97:96:af:6d:d9:5d:7a:fe:93:44: 2d:99:37:fe:9d:f9:78:55:ca:1b:97:3d:40:5c:47:d0:18:5f: a6:17:df:9b:e8:be:a7:52:2c:12:37:28:b0:9d:e6:11:e2:2f: 00:76:b8:f8:71:1e:e9:9f:a8:4e:ad:f5:47:d9:d7:c0:88:b9: 09:fc:8b:89:c3:3e:52:8a:f8:37:67:b2:c8:40:3e:f1:26:0e: 0b:66:51:30:89:88:b2:3d:a2:63:b3:23:72:d6:24:ec:19:05: 57:cf:ba:d8:c1:cd:8d:30:e8:e1:f5:eb:d1:68:b0:ae:10:26: f7:7d:5e:b0:b7:0c:41:0c:7a:f6:5e:14:a6:93:43:74:1b:0c: 27:c9:d6:b4:35:e0:c5:90:8f:29:62:a7:ee:2a:40:03:66:3f: 37:47:7b:56:5f:b6:64:ec:72:ab:74:48:a9:a9:24:a8:e2:33: 72:f2:b2:07:eb:3f:57:b4:d5:c1:fa:13:8b:c8:ba:09:8e:ed: 0f:71:84:54:37:92:f0:01:e5:39:38:3b:81:72:08:59:52:f1: 06:88:02:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xt9VKGq00k48vGc0A3h5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMGJhNGY1NmU2ZjAzNzcyNTI4NjAzN2FmYzNjMTRjMjkz YjliODIwHhcNMjUxMjIwMDgwMTEwWhcNMjUxMjIxMDgwMTEwWjAzMTEwLwYDVQQD EygyNTBhZmNmN2JkNDRiMjAwZTg2YzM3ZTFlZmY5YTU2Y2NmZThlNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOmy2iT471vi41aGMWwnlaOu6X/2 NeDLEzlxwORWIMHaqndhiP7uottzcZEUNm32g35QcWQbjxNVTvtT86B5HQ+Aniyl UIzCVB+mZYFM2UGaLAxSMzAZQqcMHmxbf9nG/8l8ceUTQg8QgkjFsAkAgplqgkZ6 jUrs9okARZZcVXCl5B6lQBv/TAVoA2mSecdC5G7o/VucJxOA/a16pgvArFeyFsle dlLWrUcST2/RnAphQitxalljdUnWBlUeqxes1+uJBhl1jkNJo6PhdWgBsD9/NJ8u LjoCgJzh8LlhDYYRWlDENo4rUrs1z8MRdbY1S5g/HdJjBpPhIUOGjr6E8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUK/Pe9RLIA6Gw34e/5pWzP6ObsMB8GA1UdIwQY MBaAFN8LpPVubwN3JShgN6/DwUwpO5uCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTIt MzZjNjc4OTAwZjc5LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTItMzZjNjc4OTAwZjc5 LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+1cFIBB 9xjBkph3/UhHsXGSZgjV8Z+kUKPcAHhtsL2iqC4QiS5sJRXmzdmXlq9t2V16/pNE LZk3/p35eFXKG5c9QFxH0Bhfphffm+i+p1IsEjcosJ3mEeIvAHa4+HEe6Z+oTq31 R9nXwIi5CfyLicM+Uor4N2eyyEA+8SYOC2ZRMImIsj2iY7MjctYk7BkFV8+62MHN jTDo4fXr0WiwrhAm931esLcMQQx69l4UppNDdBsMJ8nWtDXgxZCPKWKn7ipAA2Y/ N0d7Vl+2ZOxyq3RIqakkqOIzcvKyB+s/V7TVwfoTi8i6CY7tD3GEVDeS8AHlOTg7 gXIIWVLxBogCtQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:04:16 2025 by rpki-client