This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json) Hash identifier: ZDqflC/LhQtaRtcLgAXJNLuSbBlZD2zccHrqf2obiKw= Subject key identifier: D5:14:AF:15:1E:3B:1E:83:65:23:67:F8:7F:24:67:AD:5B:F0:6C:05 Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06 Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06 Certificate serial: 019B38A130841C7AEE3727119C42F2665D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft Manifest number: 0EC0 Signing time: Fri 19 Dec 2025 22:00:46 +0000 Manifest this update: Fri 19 Dec 2025 22:00:46 +0000 Manifest next update: Sat 20 Dec 2025 22:00:46 +0000 Files and hashes: 1: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (hash: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=) 2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: iwwtfk+Rlx3dyxa2hUzRWK97MK+XK8Z5UAVutpYH0Cc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:30:84:1c:7a:ee:37:27:11:9c:42:f2:66:5d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06 Validity Not Before: Dec 19 22:00:46 2025 GMT Not After : Dec 20 22:00:46 2025 GMT Subject: CN=d514af151e3b1e83652367f87f2467ad5bf06c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4e:55:ae:9e:6b:ec:3a:e1:5f:01:d9:e6:55: fb:75:2c:ed:5c:55:e0:0d:4e:17:33:5c:78:66:8e: b9:65:aa:c8:7f:f2:d8:0b:b3:65:56:0b:1c:a3:9f: 30:04:d6:93:57:3d:74:fc:ee:8d:e2:f6:d4:01:10: fe:3c:0f:7b:1e:64:a5:24:6e:c9:bf:98:ea:b1:bb: 62:ca:c1:e1:74:29:4e:71:ee:76:bc:2c:24:21:2b: 3b:fb:cc:b8:86:0b:98:40:6d:e9:19:1d:00:11:ca: b1:96:b8:67:b2:1c:81:95:75:1a:e0:c8:a3:64:f9: db:4e:83:fd:76:61:2e:8e:46:41:69:37:0b:de:55: 76:a2:ee:4d:5b:54:b7:fa:d9:5d:b7:1c:e8:f2:86: 68:d6:c6:73:fe:08:0f:93:c3:7c:69:7b:bf:39:90: 4c:6f:ca:dd:a0:89:5d:de:90:74:92:8b:40:da:67: a9:a3:69:e4:11:4f:3d:53:6c:7d:d1:15:21:9c:c4: ca:9d:02:af:03:ce:ae:03:25:aa:cf:7c:36:7d:58: de:65:7d:67:68:a0:91:df:fc:ca:68:60:39:78:81: 5b:60:47:db:40:1e:e3:e4:a3:02:48:ae:8f:80:92: 8a:0d:80:79:d5:d9:58:bb:82:5d:38:6e:85:5a:6e: ef:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:14:AF:15:1E:3B:1E:83:65:23:67:F8:7F:24:67:AD:5B:F0:6C:05 X509v3 Authority Key Identifier: keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b9:61:5f:c8:09:a9:f1:52:a0:f5:59:fd:da:c0:2c:35:ad: f2:24:aa:8c:cf:49:db:a3:22:1c:cc:fe:f7:0d:bb:32:25:52: ea:da:99:df:3d:29:01:59:f3:1f:32:07:46:ea:2b:f4:97:91: 76:f0:81:9d:56:fd:44:1c:55:75:8d:57:80:4c:55:cc:4e:7b: 93:34:16:8c:b1:87:4b:8e:ce:60:16:dc:df:57:39:94:d5:6e: fa:6a:cf:0b:58:cf:48:16:b8:bd:5b:4f:57:9b:6f:ff:b8:94: 1a:57:1e:ce:45:ee:86:b5:c6:8a:00:c0:74:33:5b:55:d0:0e: a9:15:51:b7:c6:39:40:fb:b2:c4:46:53:ea:0d:a9:76:20:69: 24:56:f7:14:38:31:bb:dd:93:bb:e1:ca:a9:f8:01:f6:f8:2a: cd:b4:e5:06:82:9c:3d:09:1a:59:3a:34:2e:31:08:e6:39:59: 5e:68:7c:83:2e:23:57:0e:66:9c:50:d1:5a:fe:2e:08:31:aa: 48:7e:fb:16:fb:4f:5e:9f:be:24:25:8d:f4:6f:4c:04:9e:31: 70:de:6f:3b:ff:2d:0b:ac:9b:b0:8e:b8:5f:87:48:bd:43:31: d4:63:a4:20:17:9c:80:99:f4:4f:66:51:8e:73:27:9d:f9:0a: 10:59:26:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oTCEHHruNycRnELyZl2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNzA4NjhmMGMyYzIxODc2NWZhNmI1M2FiOWFmMDY1ZmYz MzlmMDYwHhcNMjUxMjE5MjIwMDQ2WhcNMjUxMjIwMjIwMDQ2WjAzMTEwLwYDVQQD EyhkNTE0YWYxNTFlM2IxZTgzNjUyMzY3Zjg3ZjI0NjdhZDViZjA2YzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU5Vrp5r7DrhXwHZ5lX7dSztXFXg DU4XM1x4Zo65ZarIf/LYC7NlVgsco58wBNaTVz10/O6N4vbUARD+PA97HmSlJG7J v5jqsbtiysHhdClOce52vCwkISs7+8y4hguYQG3pGR0AEcqxlrhnshyBlXUa4Mij ZPnbToP9dmEujkZBaTcL3lV2ou5NW1S3+tldtxzo8oZo1sZz/ggPk8N8aXu/OZBM b8rdoIld3pB0kotA2mepo2nkEU89U2x90RUhnMTKnQKvA86uAyWqz3w2fVjeZX1n aKCR3/zKaGA5eIFbYEfbQB7j5KMCSK6PgJKKDYB51dlYu4JdOG6FWm7vvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUUrxUeOx6DZSNn+H8kZ61b8GwFMB8GA1UdIwQY MBaAFP9who8MLCGHZfprU6ua8GX/M58GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNTRiM2ItNWQ3Ni00OWQ1LWE1NmMt MDA3YzRlNTg1MjdlLzEvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8zNTRiM2ItNWQ3Ni00OWQ1LWE1NmMtMDA3YzRlNTg1Mjdl LzEvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrlhX8gJ qfFSoPVZ/drALDWt8iSqjM9J26MiHMz+9w27MiVS6tqZ3z0pAVnzHzIHRuor9JeR dvCBnVb9RBxVdY1XgExVzE57kzQWjLGHS47OYBbc31c5lNVu+mrPC1jPSBa4vVtP V5tv/7iUGlcezkXuhrXGigDAdDNbVdAOqRVRt8Y5QPuyxEZT6g2pdiBpJFb3FDgx u92Tu+HKqfgB9vgqzbTlBoKcPQkaWTo0LjEI5jlZXmh8gy4jVw5mnFDRWv4uCDGq SH77FvtPXp++JCWN9G9MBJ4xcN5vO/8tC6ybsI64X4dIvUMx1GOkIBecgJn0T2ZR jnMnnfkKEFkmjQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:59:04 2025 by rpki-client