This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft File: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json) Hash identifier: 06lgpF+vFYvj0YfQLvGxs6Ty3jsCRT5GZEEGCY+CyyQ= Subject key identifier: 0C:DD:DB:F2:4F:07:81:36:0F:D7:A6:CB:D1:75:C6:CB:28:D7:23:C6 Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D Certificate issuer: /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d Certificate serial: 019B3569FE54D53CA19BC9A7C43E5B4E567E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 07:01:37 +0000 Manifest this update: Fri 19 Dec 2025 07:01:37 +0000 Manifest next update: Sat 20 Dec 2025 07:01:37 +0000 Files and hashes: 1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: EXTQtsEel69GIcUejmxFSQ+7mUDj0WxeE/T2Tv7lXc8=) 2: aKn5wX9zpC6koraTjDd3gqhXdek.roa (hash: UCw+VdmiwuxVJRZ+XJIJQKAozSvDmGpk4Pb8r0Al3WE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:fe:54:d5:3c:a1:9b:c9:a7:c4:3e:5b:4e:56:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d Validity Not Before: Dec 19 07:01:37 2025 GMT Not After : Dec 20 07:01:37 2025 GMT Subject: CN=0cdddbf24f0781360fd7a6cbd175c6cb28d723c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:0d:1e:4e:ce:f3:c4:a8:3a:be:6b:13:90: ee:80:25:8a:1e:b7:8d:47:f7:97:f0:00:b6:6f:6d: b3:9e:1c:49:60:85:2a:1d:64:b4:fd:df:15:da:35: 9a:56:8c:9c:b1:ee:92:14:cf:be:37:ab:dc:da:7a: f5:53:e3:b7:a2:d9:f1:de:f8:aa:c3:b7:f1:f5:2d: 52:0e:d6:57:12:69:3a:8c:86:28:23:df:4c:7a:6c: c3:92:dc:c9:79:a8:1b:d6:a7:00:f6:69:c3:ed:41: f0:dd:a3:96:1f:89:c8:8a:82:ba:12:d7:c9:79:96: 0d:b2:af:82:8c:98:6f:c0:a8:e7:e8:82:50:c1:00: 6f:bb:14:94:10:1f:05:2f:8a:e8:64:93:98:56:f6: ee:89:aa:8d:1f:af:cf:d5:60:70:e5:55:55:18:89: 1f:a8:9c:b7:5c:26:3e:55:df:53:ca:78:2c:d5:1c: c2:14:f5:d8:cf:7c:0d:98:8c:01:82:e7:94:dd:e4: c1:ca:70:97:73:25:a8:4f:04:b1:01:ac:8f:71:c4: 20:6d:e4:72:f1:54:b5:1f:f1:ab:f3:5b:89:6b:df: f5:32:db:61:d7:a5:d0:c9:c8:4f:06:9e:3d:80:4b: 90:90:d9:de:8c:a4:87:58:ba:69:20:d2:16:67:bd: c2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DD:DB:F2:4F:07:81:36:0F:D7:A6:CB:D1:75:C6:CB:28:D7:23:C6 X509v3 Authority Key Identifier: keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:04:83:f5:07:10:de:f6:c5:e3:a3:f8:20:e1:d5:34:60:6f: 4b:80:eb:f5:1a:0d:c3:a2:d6:d2:88:20:e4:0f:c5:e3:1e:02: ad:ca:96:94:27:5c:90:de:e7:c2:f4:a2:d2:2a:fe:91:a8:98: f1:d6:79:d0:a8:08:ca:c6:a9:b2:50:5b:b5:f0:b7:29:ca:e0: 99:c8:45:50:85:84:d7:bd:d6:0f:c0:9a:af:52:52:0e:8b:cc: 9e:0d:c2:d9:10:29:85:b8:81:6e:03:63:77:7d:8c:4b:b3:d5: 56:63:43:7b:d6:ae:c1:b0:1e:f0:49:2d:6f:00:74:64:18:dc: 36:f1:33:2b:ad:65:41:2a:ee:82:29:77:c3:e8:84:4a:37:29: 6e:57:fa:c9:de:4e:c8:20:fd:65:8d:94:70:4e:3e:29:c7:35: b5:73:1b:66:06:ab:81:51:fa:20:55:58:10:8e:f2:ae:14:b4: 13:27:c1:f0:b1:15:5d:52:85:dd:90:9f:d9:34:e7:c0:38:82: 49:6f:73:d6:02:06:00:c9:0d:2e:fb:19:bb:c4:8d:cf:5a:ef: 76:a4:54:55:1b:70:92:c5:a6:42:14:2f:a0:40:eb:5b:89:8b: 04:a4:57:36:aa:48:38:f8:d7:9d:12:db:0e:f5:a1:47:ef:33: 37:eb:e7:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1af5U1Tyhm8mnxD5bTlZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZDU3MDhmNDI5YWRhZGJhMWI0YTM4Yzk0ZGQ3NzY1NGFm YWY5N2QwHhcNMjUxMjE5MDcwMTM3WhcNMjUxMjIwMDcwMTM3WjAzMTEwLwYDVQQD EygwY2RkZGJmMjRmMDc4MTM2MGZkN2E2Y2JkMTc1YzZjYjI4ZDcyM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunUNHk7O88SoOr5rE5DugCWKHreN R/eX8AC2b22znhxJYIUqHWS0/d8V2jWaVoycse6SFM++N6vc2nr1U+O3otnx3viq w7fx9S1SDtZXEmk6jIYoI99MemzDktzJeagb1qcA9mnD7UHw3aOWH4nIioK6EtfJ eZYNsq+CjJhvwKjn6IJQwQBvuxSUEB8FL4roZJOYVvbuiaqNH6/P1WBw5VVVGIkf qJy3XCY+Vd9Tyngs1RzCFPXYz3wNmIwBgueU3eTBynCXcyWoTwSxAayPccQgbeRy 8VS1H/Gr81uJa9/1Mtth16XQychPBp49gEuQkNnejKSHWLppINIWZ73CewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzd2/JPB4E2D9emy9F1xsso1yPGMB8GA1UdIwQY MBaAFN3VcI9CmtrbobSjjJTdd2VK+vl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2RWd2owS2EydHVodEtPTWxOMTNaVXI2LVgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNzk0YTMtZjNhZS00ZmJlLTk4ZWEt MjBlMWMzZTNmOGUyLzEvM2RWd2owS2EydHVodEtPTWxOMTNaVXI2LVgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9kNzk0YTMtZjNhZS00ZmJlLTk4ZWEtMjBlMWMzZTNmOGUy LzEvM2RWd2owS2EydHVodEtPTWxOMTNaVXI2LVgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwSD9QcQ 3vbF46P4IOHVNGBvS4Dr9RoNw6LW0ogg5A/F4x4CrcqWlCdckN7nwvSi0ir+kaiY 8dZ50KgIysapslBbtfC3KcrgmchFUIWE173WD8Car1JSDovMng3C2RAphbiBbgNj d32MS7PVVmNDe9auwbAe8EktbwB0ZBjcNvEzK61lQSrugil3w+iESjcpblf6yd5O yCD9ZY2UcE4+Kcc1tXMbZgargVH6IFVYEI7yrhS0EyfB8LEVXVKF3ZCf2TTnwDiC SW9z1gIGAMkNLvsZu8SNz1rvdqRUVRtwksWmQhQvoEDrW4mLBKRXNqpIOPjXnRLb DvWhR+8zN+vnlg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:21:54 2025 by rpki-client