This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json) Hash identifier: C1GLhIV/xobX5rDhY7HV9u4KxQX6tto+DNb1nPoVIyA= Subject key identifier: 3C:A9:F7:07:C0:E9:42:8D:78:E7:56:6C:C7:CB:CA:26:0E:73:6B:E2 Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e Certificate serial: 019B3E6D6A49E7D0D72CA3BD195E1056C4BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft Manifest number: 0EBF Signing time: Sun 21 Dec 2025 01:01:56 +0000 Manifest this update: Sun 21 Dec 2025 01:01:56 +0000 Manifest next update: Mon 22 Dec 2025 01:01:56 +0000 Files and hashes: 1: 3f1U8HcG3gg1d7c-AMV0OeLqnk4.roa (hash: 6g/YiGFM7SXH1avma+AWhdPQYeSM8xFquer6wIrnMrw=) 2: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: 0bn+8SDxdIXX2wQOsYu6BqILj7p1SP4B2cO0iO2TKTA=) 3: LKSIMzg2qS8EWL02SO5YPjrz_I0.roa (hash: ZtwqDuK6zfdHnP5iApdAnlCr/naZTEL8mOtuOOiHgUY=) 4: uKO3HquanWKUmJ90M8YK1DIe1PA.roa (hash: XUrZ548wn+DveWLDDAs++NbjxnozKfTkNs4dRtLEX4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:6a:49:e7:d0:d7:2c:a3:bd:19:5e:10:56:c4:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e Validity Not Before: Dec 21 01:01:56 2025 GMT Not After : Dec 22 01:01:56 2025 GMT Subject: CN=3ca9f707c0e9428d78e7566cc7cbca260e736be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:fe:13:4a:be:7d:76:7c:09:c1:d0:c8:a3: 2a:5f:be:c7:be:1a:52:bb:be:ec:a7:c9:2d:20:40: a6:61:ec:d4:10:f9:53:48:55:7d:41:55:1c:7a:2b: 59:05:27:d3:bf:43:17:18:dc:e1:18:fa:b7:f9:49: a8:b3:93:c8:03:f0:25:46:75:26:12:d8:7e:a4:64: 39:48:71:da:0a:78:03:a4:f9:ee:bc:62:2e:9d:4e: 64:51:89:46:2c:9a:f1:72:ef:3a:03:b8:4d:a9:13: 56:87:40:16:8e:fe:af:f7:21:5a:42:8a:8e:f7:1a: 6d:47:94:d7:7b:74:9f:0b:32:eb:f8:46:1c:54:3a: db:24:5a:b6:5f:29:af:cc:27:59:2b:64:0e:db:99: 53:79:52:0c:9b:4d:87:dd:06:d2:fc:ab:a9:a6:ce: 5e:f5:24:51:29:56:28:a6:d8:c4:8e:bd:e5:00:90: 27:e3:cb:7b:31:51:e3:44:dc:e7:81:ec:60:f8:9f: d2:9f:0e:27:fe:e3:3c:6c:55:b6:ef:9b:e3:4f:f8: f6:49:64:e2:8c:83:b0:3d:ad:ee:06:1c:a3:ee:b6: d9:8b:bb:35:05:c7:09:db:05:62:8a:8d:22:1c:04: 84:49:be:bb:04:0e:4b:0b:51:53:57:e1:9a:3f:05: 92:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A9:F7:07:C0:E9:42:8D:78:E7:56:6C:C7:CB:CA:26:0E:73:6B:E2 X509v3 Authority Key Identifier: keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:60:7f:d4:60:ae:98:9d:5f:6c:ad:bd:bf:f5:64:6f:21:e7: 9a:d5:83:e6:64:a2:4a:49:ed:e7:cf:d5:b2:e3:11:20:e7:2c: 0d:a3:17:df:e1:89:fe:50:49:ba:a6:ed:09:f5:49:90:e3:cf: 75:8c:a8:73:71:49:10:4e:11:c2:9a:04:53:60:a5:22:f0:e0: 89:11:c9:6b:a4:5b:1c:e3:09:55:c5:f9:20:6b:e7:7d:b6:7a: b4:31:9b:8c:f8:fa:c2:89:a2:52:d2:82:a3:2a:72:3e:6d:3f: ac:86:c0:74:75:83:2a:ec:93:16:b5:57:a1:6d:e7:36:dd:bf: 90:4b:42:11:d8:1e:79:22:1c:1b:f2:86:03:6f:32:a0:3e:49: 3c:45:de:1b:44:c9:93:43:f1:66:88:09:96:7d:b8:cc:67:66: 46:a5:8f:c2:1f:18:ed:79:51:f9:a1:8a:f9:65:e2:af:56:b5: 05:a5:31:3d:97:08:7e:23:45:04:fa:25:c4:89:10:71:ed:ae: c7:19:c6:ad:ee:be:ae:15:47:db:af:73:22:41:11:72:dd:f3: 36:fd:94:92:6f:c1:87:6a:19:e6:14:15:30:be:cb:e7:fd:5b: 65:c8:b9:2f:54:b0:57:6c:ee:6a:a7:a9:fe:6f:45:eb:38:7c: c2:55:3e:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bWpJ59DXLKO9GV4QVsS7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDg1ODJiMDI0Mzg2M2M1NzJjZTI1Nzg2Y2NiMzZmZjc5 NWIyMmUwHhcNMjUxMjIxMDEwMTU2WhcNMjUxMjIyMDEwMTU2WjAzMTEwLwYDVQQD EygzY2E5ZjcwN2MwZTk0MjhkNzhlNzU2NmNjN2NiY2EyNjBlNzM2YmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucX+E0q+fXZ8CcHQyKMqX77HvhpS u77sp8ktIECmYezUEPlTSFV9QVUceitZBSfTv0MXGNzhGPq3+Umos5PIA/AlRnUm Eth+pGQ5SHHaCngDpPnuvGIunU5kUYlGLJrxcu86A7hNqRNWh0AWjv6v9yFaQoqO 9xptR5TXe3SfCzLr+EYcVDrbJFq2XymvzCdZK2QO25lTeVIMm02H3QbS/Kupps5e 9SRRKVYoptjEjr3lAJAn48t7MVHjRNzngexg+J/Snw4n/uM8bFW275vjT/j2SWTi jIOwPa3uBhyj7rbZi7s1BccJ2wViio0iHASESb67BA5LC1FTV+GaPwWS5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyp9wfA6UKNeOdWbMfLyiYOc2viMB8GA1UdIwQY MBaAFN7YWCsCQ4Y8VyziV4bMs2/3lbIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jYTUxMGMtYjZkMS00ZWIzLThkZDEt NDk4ZjRjMTBiNjU1LzEvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jYTUxMGMtYjZkMS00ZWIzLThkZDEtNDk4ZjRjMTBiNjU1 LzEvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWB/1GCu mJ1fbK29v/VkbyHnmtWD5mSiSknt58/VsuMRIOcsDaMX3+GJ/lBJuqbtCfVJkOPP dYyoc3FJEE4RwpoEU2ClIvDgiRHJa6RbHOMJVcX5IGvnfbZ6tDGbjPj6womiUtKC oypyPm0/rIbAdHWDKuyTFrVXoW3nNt2/kEtCEdgeeSIcG/KGA28yoD5JPEXeG0TJ k0PxZogJln24zGdmRqWPwh8Y7XlR+aGK+WXir1a1BaUxPZcIfiNFBPolxIkQce2u xxnGre6+rhVH269zIkERct3zNv2Ukm/Bh2oZ5hQVML7L5/1bZci5L1SwV2zuaqep /m9F6zh8wlU+qQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:59:25 2025 by rpki-client