This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json) Hash identifier: Z0/D6B+cCIoauOZfTTw7Je7xZozMBPVLsHg4VrGoH2k= Subject key identifier: 58:04:0F:3D:AF:0E:2C:D8:B8:05:FA:E5:0A:FC:78:BF:6A:C1:91:D5 Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79 Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579 Certificate serial: 019B30E9013533845B729E2248F0202586C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 10:02:15 +0000 Manifest this update: Thu 18 Dec 2025 10:02:15 +0000 Manifest next update: Fri 19 Dec 2025 10:02:15 +0000 Files and hashes: 1: 2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa (hash: HuLQbolqCGZmiUhvPO/wiFvtWi3Okwmgccu/aBpptuc=) 2: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: 0KBAw6rj3V7L54Y25cEmHsQgWKgPbgoaUVQai8baS+g=) 3: S87qjShx0Cde64tPkPpF-gZYMZE.roa (hash: KfR58Ep5CQd0S3bEgqtjtqAMWmdjTVJqVmZhBaCwNRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:01:35:33:84:5b:72:9e:22:48:f0:20:25:86:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579 Validity Not Before: Dec 18 10:02:15 2025 GMT Not After : Dec 19 10:02:15 2025 GMT Subject: CN=58040f3daf0e2cd8b805fae50afc78bf6ac191d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:40:c5:4d:20:5a:a4:c5:e3:27:97:07:58:3b: f2:c6:a8:28:eb:9e:05:42:bd:7e:9e:06:6d:ed:b4: 1f:17:6c:6e:50:1b:df:ec:fc:24:cd:5b:03:5a:bf: a5:07:76:e2:55:fa:32:f0:e3:07:58:82:c5:78:40: 1f:71:3d:23:48:ef:88:96:32:18:00:b0:58:c1:f3: e0:b3:75:bd:87:28:02:e4:43:7e:b6:74:ad:39:4a: cd:9b:a0:40:b3:d3:e3:10:4d:ef:fd:8a:6b:c7:db: 61:ac:fb:29:ab:fb:e3:ec:00:a3:05:23:80:63:95: 66:49:60:7f:f6:79:57:00:b4:18:f6:db:9a:39:d5: 4d:30:ea:68:15:66:01:e3:d7:5c:63:2b:3d:d9:35: e9:f6:1c:d9:99:8e:21:50:09:8b:20:b0:44:65:43: 18:a4:9f:dd:d4:9c:c9:d2:85:61:57:22:91:34:90: c3:6b:ab:d2:ac:6f:07:15:f8:d3:42:d0:da:6a:87: 3e:37:e2:b6:cd:a9:24:ee:5f:af:44:36:98:df:57: 5b:c5:5d:ab:18:1a:a7:3e:87:cb:f9:eb:c2:1d:ea: 0a:8e:36:29:73:f4:3c:4e:ed:97:d4:35:b6:a4:83: 46:9c:af:41:08:34:a2:fe:eb:a0:db:7f:16:24:e7: f9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:04:0F:3D:AF:0E:2C:D8:B8:05:FA:E5:0A:FC:78:BF:6A:C1:91:D5 X509v3 Authority Key Identifier: keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a1:cb:92:94:69:7d:52:ec:82:27:27:dc:39:2c:c0:b2:47: 85:ea:14:c1:44:8b:c0:ea:5f:3a:0e:a3:1a:ef:ab:52:c7:20: 54:bb:83:e6:72:f8:9f:a0:6a:72:b0:1b:71:53:e3:df:b6:18: ad:94:e1:a2:de:c7:d4:48:12:e2:e6:73:ab:b3:f0:bf:50:0a: 61:34:a8:85:aa:70:22:7e:71:d9:87:2b:f3:57:4a:ef:73:2d: 8b:73:2e:53:eb:4d:82:ab:4e:72:b9:f7:f6:aa:7b:eb:f6:97: ea:bf:97:ac:39:62:34:0d:9d:4d:f0:2c:cc:5f:8a:1d:51:58: 5d:26:fb:c4:07:38:84:53:30:02:a8:2e:16:b3:29:9a:75:96: 23:62:00:a7:6f:b2:3f:e2:97:65:c1:05:35:3d:ea:3d:b2:de: 90:16:2f:5e:30:95:8e:3d:0b:b5:19:f6:a9:b8:10:23:df:90: 8b:71:ea:10:b4:48:52:95:c2:6d:3b:e6:29:ae:2e:a4:70:da: e9:c8:8b:c2:4b:45:3d:86:ef:38:67:52:87:6c:2c:28:eb:33: de:73:94:27:f9:63:bb:08:db:88:69:86:62:ea:65:49:f8:1e: 8a:cb:bd:67:cf:52:9e:40:49:bf:4b:ac:40:23:54:eb:24:d9: b2:6f:36:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6QE1M4Rbcp4iSPAgJYbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNjUxNjY5MmM2MzgyYjNmODNkYWU5OTFmZDg5ZGQxYjBj ZWY1NzkwHhcNMjUxMjE4MTAwMjE1WhcNMjUxMjE5MTAwMjE1WjAzMTEwLwYDVQQD Eyg1ODA0MGYzZGFmMGUyY2Q4YjgwNWZhZTUwYWZjNzhiZjZhYzE5MWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkDFTSBapMXjJ5cHWDvyxqgo654F Qr1+ngZt7bQfF2xuUBvf7PwkzVsDWr+lB3biVfoy8OMHWILFeEAfcT0jSO+IljIY ALBYwfPgs3W9hygC5EN+tnStOUrNm6BAs9PjEE3v/Yprx9thrPspq/vj7ACjBSOA Y5VmSWB/9nlXALQY9tuaOdVNMOpoFWYB49dcYys92TXp9hzZmY4hUAmLILBEZUMY pJ/d1JzJ0oVhVyKRNJDDa6vSrG8HFfjTQtDaaoc+N+K2zakk7l+vRDaY31dbxV2r GBqnPofL+evCHeoKjjYpc/Q8Tu2X1DW2pINGnK9BCDSi/uug238WJOf5zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgEDz2vDizYuAX65Qr8eL9qwZHVMB8GA1UdIwQY MBaAFNxlFmksY4Kz+D2umR/YndGwzvV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jZDlmZDMtYTNlZS00ZWM1LThjNTQt MmYzODNlODVlYmMwLzEvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9jZDlmZDMtYTNlZS00ZWM1LThjNTQtMmYzODNlODVlYmMw LzEvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6HLkpRp fVLsgicn3DkswLJHheoUwUSLwOpfOg6jGu+rUscgVLuD5nL4n6BqcrAbcVPj37YY rZThot7H1EgS4uZzq7Pwv1AKYTSohapwIn5x2Ycr81dK73Mti3MuU+tNgqtOcrn3 9qp76/aX6r+XrDliNA2dTfAszF+KHVFYXSb7xAc4hFMwAqguFrMpmnWWI2IAp2+y P+KXZcEFNT3qPbLekBYvXjCVjj0LtRn2qbgQI9+Qi3HqELRIUpXCbTvmKa4upHDa 6ciLwktFPYbvOGdSh2wsKOsz3nOUJ/ljuwjbiGmGYuplSfgeisu9Z89SnkBJv0us QCNU6yTZsm824Q== -----END CERTIFICATE-----Generated at Thu Dec 18 19:10:37 2025 by rpki-client