This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json) Hash identifier: iO1rMIZ+lqhpfhY7Q4BRtvcX/NjHXUUUOtXafzF3HmA= Subject key identifier: 5E:AC:37:69:A0:A5:C5:2C:95:2D:20:47:24:4C:BE:B8:7D:B4:FD:02 Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463 Certificate serial: 019B2A7820E8BD31CCD952203A9053F085BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft Manifest number: 01F0 Signing time: Wed 17 Dec 2025 04:01:14 +0000 Manifest this update: Wed 17 Dec 2025 04:01:14 +0000 Manifest next update: Thu 18 Dec 2025 04:01:14 +0000 Files and hashes: 1: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: pHXOZbKutYfYgRd7thgxESyukB9JVUrNdzhXgBzHIZE=) 2: 9PYNd2Mqf0MgiwYiWD5Tou1mIuE.roa (hash: afICcgfnIITniDH/lSXwW7AGExaecqfSGTuSlxA7xGg=) 3: 9r6qhrs-WMkKmRhAntLw5h6AV9I.roa (hash: mGzN/cmzbkWWHzKCoo8CWgSNL6Xv/KsXwu7f/tuseAI=) 4: FV7sZMg6O9JY4mwLcg69aoeW06M.roa (hash: VMFrYstU7+hz9IBC63E6LRr18iCOAuJeM9dbn8Jpzcg=) 5: te3WMh-yrJFuEs-O68YZIgyPTj4.roa (hash: PUYB4+IXFx4u1CgmVxG5cnaiyHUWZquRy6c28CZK2GY=) 6: wisg1C0CAyX9XxLdO577ldeT69g.roa (hash: M3DmtV6K4CRmVxyCwx6PvbpzCTNJhQrB7qDUrLhfsqs=) 7: x9OQVd5EhLuMfEc41OZ9FtQxau0.roa (hash: S4KeHAe6LXOVOw99dVjAwA7gRPfLYoFF69p3U5kCgFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:78:20:e8:bd:31:cc:d9:52:20:3a:90:53:f0:85:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463 Validity Not Before: Dec 17 04:01:14 2025 GMT Not After : Dec 18 04:01:14 2025 GMT Subject: CN=5eac3769a0a5c52c952d2047244cbeb87db4fd02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:ef:03:b5:09:29:5c:2c:e5:a9:e0:25:a5: 2b:b8:d5:39:19:67:4c:fb:eb:64:d7:ac:bc:94:7b: ac:98:dd:82:9a:c7:d5:8a:84:e6:00:85:ad:c8:ff: 88:68:de:d4:c8:24:82:ab:34:79:d8:25:10:28:4d: 87:1c:d7:2f:9c:38:bd:f7:b3:12:51:b5:13:b6:de: 7b:aa:2e:3e:6b:bb:92:0e:d6:c2:f9:3b:ef:df:a3: d8:3c:80:67:15:2b:8e:a1:8b:f0:84:6a:a2:a9:32: 57:f0:03:4c:d0:c0:cd:47:a4:35:0b:b9:f4:76:84: 51:76:e1:56:21:19:bc:7c:8a:b9:20:74:54:c8:c9: bb:eb:e0:6e:56:8a:1b:9d:e9:2a:04:82:5a:91:f8: f9:2b:20:7b:4d:8f:7f:99:e5:2c:eb:e2:0d:e9:1d: ce:44:34:92:7f:29:14:cd:21:7c:20:a5:bf:d8:54: c5:0f:cc:52:41:08:98:b9:f2:a0:b6:18:78:43:53: 15:eb:1e:d8:ca:54:06:1b:4e:ce:43:b0:90:d6:e7: 6c:b4:53:88:d7:fc:0f:b0:31:20:2d:8c:25:b5:02: ab:a2:92:40:bc:53:79:4f:c3:7c:a2:54:56:b7:42: 64:36:2e:43:20:44:79:dc:d5:29:2d:28:fd:76:be: c6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AC:37:69:A0:A5:C5:2C:95:2D:20:47:24:4C:BE:B8:7D:B4:FD:02 X509v3 Authority Key Identifier: keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c3:eb:7d:7c:2c:25:1e:e0:42:09:83:18:dc:34:6e:d1:91: 0a:84:c4:6e:94:ec:b8:2f:5b:93:da:8c:f2:e6:04:2e:67:4b: 0a:cf:09:8b:af:ca:4c:d6:59:f0:b3:59:81:d7:95:b2:63:71: bc:d2:f6:46:b8:89:72:ec:5c:e3:9d:9c:99:c2:f7:8a:99:87: 1c:bc:ed:78:db:c2:f7:b9:8a:1b:47:f5:ec:fb:66:e1:ea:80: 8a:a6:5f:a3:a9:fd:7d:9b:92:a5:a7:98:3d:da:2a:21:0e:ef: c3:3d:5c:77:d4:b7:7d:ae:8a:43:f7:41:e7:db:db:3b:1a:05: 09:24:89:1d:34:d7:51:d5:b6:20:9d:0c:63:38:3e:9c:2e:7f: af:31:f6:6b:7a:78:15:0f:f5:5e:c1:de:07:a2:3f:0d:56:32: 38:a7:ec:fe:39:c8:69:0f:f5:75:63:f5:45:a5:7d:09:73:d8: 1e:3a:9f:1d:72:0a:f2:87:06:12:ca:9d:8c:4e:78:7d:d2:3c: 69:53:65:24:a2:95:d7:d8:cf:9c:36:3c:d9:bb:5c:84:f0:a4: 99:54:7d:9d:9f:52:f1:84:4a:7c:b6:b0:53:00:c3:6d:86:82: ba:74:dd:35:be:f1:42:07:79:29:78:87:d9:54:b4:cc:c0:bb: 35:ee:9e:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqeCDovTHM2VIgOpBT8IW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNjQxNjZhOTExNzkzMDhmMjUzYTkxNzU2MTZjY2M2ODI4 YzQ0NjMwHhcNMjUxMjE3MDQwMTE0WhcNMjUxMjE4MDQwMTE0WjAzMTEwLwYDVQQD Eyg1ZWFjMzc2OWEwYTVjNTJjOTUyZDIwNDcyNDRjYmViODdkYjRmZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp7vA7UJKVws5angJaUruNU5GWdM ++tk16y8lHusmN2CmsfVioTmAIWtyP+IaN7UyCSCqzR52CUQKE2HHNcvnDi997MS UbUTtt57qi4+a7uSDtbC+Tvv36PYPIBnFSuOoYvwhGqiqTJX8ANM0MDNR6Q1C7n0 doRRduFWIRm8fIq5IHRUyMm76+BuVoobnekqBIJakfj5KyB7TY9/meUs6+IN6R3O RDSSfykUzSF8IKW/2FTFD8xSQQiYufKgthh4Q1MV6x7YylQGG07OQ7CQ1udstFOI 1/wPsDEgLYwltQKropJAvFN5T8N8olRWt0JkNi5DIER53NUpLSj9dr7GnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6sN2mgpcUslS0gRyRMvrh9tP0CMB8GA1UdIwQY MBaAFN1kFmqRF5MI8lOpF1YWzMaCjERjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3Yzct NzRkZTI1OGE3NmY4LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3YzctNzRkZTI1OGE3NmY4 LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsPrfXws JR7gQgmDGNw0btGRCoTEbpTsuC9bk9qM8uYELmdLCs8Ji6/KTNZZ8LNZgdeVsmNx vNL2RriJcuxc452cmcL3ipmHHLzteNvC97mKG0f17Ptm4eqAiqZfo6n9fZuSpaeY PdoqIQ7vwz1cd9S3fa6KQ/dB59vbOxoFCSSJHTTXUdW2IJ0MYzg+nC5/rzH2a3p4 FQ/1XsHeB6I/DVYyOKfs/jnIaQ/1dWP1RaV9CXPYHjqfHXIK8ocGEsqdjE54fdI8 aVNlJKKV19jPnDY82btchPCkmVR9nZ9S8YRKfLawUwDDbYaCunTdNb7xQgd5KXiH 2VS0zMC7Ne6eCA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:13:34 2025 by rpki-client