This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json) Hash identifier: Bl5qEg+LM5Q/lxrMkCWqUyXCLcIAw0mbZaqEDp368tQ= Subject key identifier: 59:7E:95:DF:C1:3E:F9:F3:5A:3F:F1:1B:C3:91:31:B8:F0:9D:D2:83 Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff Certificate serial: 019B45EED8FA9C436F460BC2ADD25190E48C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft Manifest number: 0540 Signing time: Mon 22 Dec 2025 12:00:39 +0000 Manifest this update: Mon 22 Dec 2025 12:00:39 +0000 Manifest next update: Tue 23 Dec 2025 12:00:39 +0000 Files and hashes: 1: KJwvgElTVvzSDkiiLVbk2sY499A.roa (hash: kKy6TJRdTCOke9YuiLb9jXp15SOk9kOvN+LVFTH7qS0=) 2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: MP8kYxrO+GXQwdBWAg9l3LYGjSx46kjq7kULGQsIEt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:ee:d8:fa:9c:43:6f:46:0b:c2:ad:d2:51:90:e4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff Validity Not Before: Dec 22 12:00:39 2025 GMT Not After : Dec 23 12:00:39 2025 GMT Subject: CN=597e95dfc13ef9f35a3ff11bc39131b8f09dd283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:2f:2b:1f:d0:da:9c:9b:6a:5f:34:64:b3: 7e:67:6b:a5:61:bc:7a:97:19:59:ba:97:3e:99:b6: 67:21:16:97:ce:3f:dc:41:7f:98:27:a1:dd:82:b9: bb:05:5c:ab:64:5c:88:65:e3:c0:b6:69:6b:aa:e0: 76:75:d3:16:5a:cd:18:e8:4f:9d:36:87:13:b9:47: d2:63:70:34:67:8a:d0:f9:49:98:a8:95:1c:5b:07: 51:13:2e:e0:19:49:41:63:47:52:48:aa:be:6e:d4: ed:c6:f0:ce:ef:be:10:bf:9d:fa:9c:62:1e:dc:c1: 8d:99:87:b7:1d:e3:53:41:1b:79:6f:ff:3a:e1:83: 7a:4b:87:ea:ea:22:9c:36:e9:5e:7e:b4:a1:67:05: 67:9d:82:1d:3e:a8:9c:4f:ef:4f:a1:70:4d:05:ad: 35:e5:7b:88:21:3c:6a:3d:44:4e:72:bc:37:44:11: df:7d:96:1b:e0:b8:b3:d5:c7:37:71:c2:d0:1e:86: 12:33:54:e9:e8:40:2f:bf:52:9b:c9:34:25:d4:a3: 2f:8e:e2:63:7a:48:74:08:bd:7d:ec:fc:55:e7:69: 46:b2:39:8f:b9:fc:94:a5:0e:db:79:13:9c:ac:ba: 48:5d:90:43:c7:e4:2e:df:5e:b8:56:4f:6b:91:0b: db:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7E:95:DF:C1:3E:F9:F3:5A:3F:F1:1B:C3:91:31:B8:F0:9D:D2:83 X509v3 Authority Key Identifier: keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a1:df:ea:46:d5:68:f3:7f:fe:7f:43:69:fe:e3:83:88:21: c3:00:63:2a:6d:13:05:80:ef:bd:d3:bf:4e:cd:58:19:92:b0: 89:8b:84:36:0b:ac:59:27:a0:fb:cc:6d:2f:e1:66:61:26:82: 64:e9:60:51:b6:76:80:09:e9:49:bc:6c:7f:7b:83:98:15:a1: 3a:bd:d5:6d:1b:42:33:f0:16:65:82:ed:b0:92:19:71:81:fe: 3f:9c:d0:3b:0e:f7:b5:f0:06:36:49:54:40:f3:b7:8a:26:0b: 0c:50:02:d2:99:95:bd:4e:cc:0d:7f:ed:18:d4:49:07:d1:8f: cf:58:3e:6a:79:b8:cf:58:3c:68:2a:c4:97:ea:f5:11:42:f8: 8d:8f:44:a2:24:b8:3c:56:6a:90:5a:0b:10:07:88:a1:f6:3a: 63:1e:3c:e6:d2:65:3e:f8:25:c5:87:05:f9:b6:07:7a:68:5c: 8e:7b:6a:18:23:33:4f:60:ad:ed:5b:6e:d2:da:94:03:21:19: 3f:32:50:5c:17:15:b4:1b:aa:99:c6:3f:6b:c7:4c:04:45:74: f4:6c:2b:cb:c9:b4:8d:c6:6a:1e:13:9a:d9:ee:f5:c8:5b:97: 2e:cc:fb:3b:7d:90:c1:9f:26:7c:ac:ba:72:dc:e2:25:3c:a9: 3a:ce:52:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtF7tj6nENvRgvCrdJRkOSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNzExMDU0YTg5NDQ2YTc2ZjQ5M2NlMmMxMjdhOTQ4ZWJh NGE4ZmYwHhcNMjUxMjIyMTIwMDM5WhcNMjUxMjIzMTIwMDM5WjAzMTEwLwYDVQQD Eyg1OTdlOTVkZmMxM2VmOWYzNWEzZmYxMWJjMzkxMzFiOGYwOWRkMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfUvKx/Q2pybal80ZLN+Z2ulYbx6 lxlZupc+mbZnIRaXzj/cQX+YJ6Hdgrm7BVyrZFyIZePAtmlrquB2ddMWWs0Y6E+d NocTuUfSY3A0Z4rQ+UmYqJUcWwdREy7gGUlBY0dSSKq+btTtxvDO774Qv536nGIe 3MGNmYe3HeNTQRt5b/864YN6S4fq6iKcNulefrShZwVnnYIdPqicT+9PoXBNBa01 5XuIITxqPUROcrw3RBHffZYb4Liz1cc3ccLQHoYSM1Tp6EAvv1KbyTQl1KMvjuJj ekh0CL197PxV52lGsjmPufyUpQ7beROcrLpIXZBDx+Qu3164Vk9rkQvbOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFl+ld/BPvnzWj/xG8ORMbjwndKDMB8GA1UdIwQY MBaAFP9xEFSolEanb0k84sEnqUjrpKj/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAt NDdhYzM4OWQzMjYxLzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iOGZjNTUtYjRjZC00ZDFmLTk5OTAtNDdhYzM4OWQzMjYx LzEvXzNFUVZLaVVScWR2U1R6aXdTZXBTT3VrcVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6Hf6kbV aPN//n9Daf7jg4ghwwBjKm0TBYDvvdO/Ts1YGZKwiYuENgusWSeg+8xtL+FmYSaC ZOlgUbZ2gAnpSbxsf3uDmBWhOr3VbRtCM/AWZYLtsJIZcYH+P5zQOw73tfAGNklU QPO3iiYLDFAC0pmVvU7MDX/tGNRJB9GPz1g+anm4z1g8aCrEl+r1EUL4jY9EoiS4 PFZqkFoLEAeIofY6Yx485tJlPvglxYcF+bYHemhcjntqGCMzT2Ct7Vtu0tqUAyEZ PzJQXBcVtBuqmcY/a8dMBEV09Gwry8m0jcZqHhOa2e71yFuXLsz7O32QwZ8mfKy6 ctziJTypOs5Sgg== -----END CERTIFICATE-----Generated at Mon Dec 22 15:30:33 2025 by rpki-client