This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json) Hash identifier: 9VW51VfaGva3ZFVWGh7YTWhNIJpff0RcMvtj7FZuG6g= Subject key identifier: C5:CE:CC:4F:F4:FF:B5:30:95:D5:FB:83:CE:C7:7B:3E:D0:63:ED:B1 Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92 Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92 Certificate serial: 019B3D90990A90C456A5FFF1A4DE26BA9763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft Manifest number: 06F0 Signing time: Sat 20 Dec 2025 21:00:45 +0000 Manifest this update: Sat 20 Dec 2025 21:00:45 +0000 Manifest next update: Sun 21 Dec 2025 21:00:45 +0000 Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: LGeLJj45pzaVWtGOxXgVRps6EtP6i0xq+NdV/LA5EKM=) 2: S2et9u3-k4c1RbSQYpZyfZKneKE.roa (hash: Ha/+fD6TOAGH3fDS11rGJPIxFiX3z4IR9RxVgbeKPDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:99:0a:90:c4:56:a5:ff:f1:a4:de:26:ba:97:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de182707c444c31064b1899c597e9efd73438f92 Validity Not Before: Dec 20 21:00:45 2025 GMT Not After : Dec 21 21:00:45 2025 GMT Subject: CN=c5cecc4ff4ffb53095d5fb83cec77b3ed063edb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5f:9c:7d:04:5b:41:99:40:95:9e:88:a0:8b: 67:ca:d7:43:e5:b0:d9:f6:13:15:2f:c3:0d:49:13: b5:46:7d:1c:00:68:3c:20:90:dc:02:55:f7:2d:26: 0f:4f:79:f1:a9:fe:d6:95:de:eb:dd:45:6e:c5:2d: 51:51:5c:3b:fc:02:e9:17:7b:86:30:fa:1f:f1:f8: a0:f7:21:9d:be:c8:d3:b4:09:bc:c4:be:10:bc:d7: e6:b1:31:cc:e5:da:1b:16:20:61:99:e2:be:d8:3a: b2:78:92:97:59:78:2b:fa:a6:c4:cd:a3:63:2b:9c: b0:f8:39:8b:17:5c:f4:05:aa:a1:80:d5:f7:b8:44: a8:83:50:86:9f:40:c1:95:b9:b5:8f:b6:4a:e3:12: aa:8d:bb:5c:60:16:15:24:dc:9e:ad:e4:d5:44:e0: ac:35:92:b8:ff:8d:c6:b8:a2:61:9a:98:0b:23:ea: d7:e6:68:e3:07:43:63:c8:1c:66:3b:9d:71:6e:66: a7:26:7d:6d:52:1e:7a:f0:f1:37:78:42:0d:9f:1a: ef:95:c8:11:f9:03:03:48:cd:69:e2:01:19:8d:b6: 13:62:eb:40:fa:1f:3d:7c:d7:cc:03:77:70:25:be: fa:a2:09:7e:48:8f:92:fe:b8:02:5c:bf:bb:32:09: d0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CE:CC:4F:F4:FF:B5:30:95:D5:FB:83:CE:C7:7B:3E:D0:63:ED:B1 X509v3 Authority Key Identifier: keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2e:79:a5:e0:1d:fd:3b:28:3f:e3:1b:44:c3:75:c0:6d:0c: 67:88:5e:69:75:fc:88:82:f7:94:70:8e:41:fe:88:ee:4a:a3: 64:ef:e5:02:e9:ec:b7:d4:8e:65:d3:a3:af:cb:9a:af:7d:fd: 93:13:04:9e:10:00:2d:15:c3:c1:56:6a:ec:33:8f:a5:54:01: 82:9b:48:9e:c0:7a:4d:ef:1e:dc:40:6e:46:1b:c8:9f:13:b8: 52:7d:59:13:fb:f4:3d:90:e9:83:35:52:c8:fd:63:13:3f:6f: 76:a4:53:fb:53:94:df:3d:3e:28:36:31:86:79:82:8b:22:0a: 94:26:1c:3e:6f:d7:7c:12:1e:9c:e5:26:d0:2d:db:f2:d7:8f: 90:6f:e5:cc:f1:e9:1d:1c:ba:b9:f2:4b:c7:65:df:24:4b:d5: 5c:34:ea:db:4e:23:ff:a5:c4:9b:5d:e3:f9:ef:c8:22:5e:9f: 7c:5e:c1:df:ac:67:c4:bd:09:f2:c5:e1:d1:b6:c3:30:c6:8f: c2:4a:aa:f0:88:84:f9:8b:4b:4b:40:f9:af:4c:e1:bf:62:d7: 81:77:e5:fd:c8:09:3f:ae:89:73:4f:a2:3a:53:b3:77:2e:c6: 72:ea:3a:eb:3b:14:6b:92:59:56:e9:fb:c5:d3:a2:d9:cc:d4: d5:85:ff:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kJkKkMRWpf/xpN4mupdjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTgyNzA3YzQ0NGMzMTA2NGIxODk5YzU5N2U5ZWZkNzM0 MzhmOTIwHhcNMjUxMjIwMjEwMDQ1WhcNMjUxMjIxMjEwMDQ1WjAzMTEwLwYDVQQD EyhjNWNlY2M0ZmY0ZmZiNTMwOTVkNWZiODNjZWM3N2IzZWQwNjNlZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4l+cfQRbQZlAlZ6IoItnytdD5bDZ 9hMVL8MNSRO1Rn0cAGg8IJDcAlX3LSYPT3nxqf7Wld7r3UVuxS1RUVw7/ALpF3uG MPof8fig9yGdvsjTtAm8xL4QvNfmsTHM5dobFiBhmeK+2DqyeJKXWXgr+qbEzaNj K5yw+DmLF1z0BaqhgNX3uESog1CGn0DBlbm1j7ZK4xKqjbtcYBYVJNyereTVROCs NZK4/43GuKJhmpgLI+rX5mjjB0NjyBxmO51xbmanJn1tUh568PE3eEINnxrvlcgR +QMDSM1p4gEZjbYTYutA+h89fNfMA3dwJb76ogl+SI+S/rgCXL+7MgnQUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXOzE/0/7UwldX7g87Hez7QY+2xMB8GA1UdIwQY MBaAFN4YJwfERMMQZLGJnFl+nv1zQ4+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zYmYzMDEtZDE4OS00NzVkLTk1ZGMt ZWFhZTNkZThhYjU4LzEvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zYmYzMDEtZDE4OS00NzVkLTk1ZGMtZWFhZTNkZThhYjU4 LzEvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjC55peAd /TsoP+MbRMN1wG0MZ4heaXX8iIL3lHCOQf6I7kqjZO/lAunst9SOZdOjr8uar339 kxMEnhAALRXDwVZq7DOPpVQBgptInsB6Te8e3EBuRhvInxO4Un1ZE/v0PZDpgzVS yP1jEz9vdqRT+1OU3z0+KDYxhnmCiyIKlCYcPm/XfBIenOUm0C3b8tePkG/lzPHp HRy6ufJLx2XfJEvVXDTq204j/6XEm13j+e/IIl6ffF7B36xnxL0J8sXh0bbDMMaP wkqq8IiE+YtLS0D5r0zhv2LXgXfl/cgJP66Jc0+iOlOzdy7Gcuo66zsUa5JZVun7 xdOi2czU1YX/lw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:28:51 2025 by rpki-client