This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json) Hash identifier: 61rjOwpNKAD/bT/6fF+pE4Kdg53YZj1JMTWulATL0tY= Subject key identifier: 4A:2F:EA:B9:0D:A2:DB:3E:14:3D:9F:E3:A7:C3:62:B0:4D:6C:D6:5C Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05 Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05 Certificate serial: 019AF12E29E373C547204A705D5281FEB6EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft Manifest number: 0F7C Signing time: Sat 06 Dec 2025 01:02:05 +0000 Manifest this update: Sat 06 Dec 2025 01:02:05 +0000 Manifest next update: Sun 07 Dec 2025 01:02:05 +0000 Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: Zcc/nPYUtU5MJzVdu0k6rQMVU1n5p3rr65qkpTNIfKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:29:e3:73:c5:47:20:4a:70:5d:52:81:fe:b6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05 Validity Not Before: Dec 6 01:02:05 2025 GMT Not After : Dec 7 01:02:05 2025 GMT Subject: CN=4a2feab90da2db3e143d9fe3a7c362b04d6cd65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:cc:42:29:df:34:97:44:58:1a:9a:34:4f: 73:f4:bd:2c:a0:2c:30:1b:31:c1:c4:14:af:3f:2d: 4b:70:1d:83:17:7f:69:68:dc:77:a2:f2:e1:b6:94: 7e:d3:c6:45:22:de:7a:70:db:79:5f:b3:f3:50:8f: 0e:df:58:36:2e:55:36:6a:7a:99:29:c4:67:f8:d9: d4:93:30:03:dd:e5:76:06:c2:e4:f9:0c:7f:e1:39: e3:f0:a2:c4:77:d6:6f:b6:c6:91:49:b2:ec:1e:b4: cc:00:3a:2e:ac:94:a2:87:c0:57:fc:11:f3:be:0f: 31:df:ba:41:6d:1c:9a:38:65:a4:08:5b:81:4f:d1: 60:ec:08:7e:38:3d:8f:92:bd:9c:e1:da:ba:8e:e9: a0:de:6f:5e:6b:02:9a:fc:6d:4f:d9:75:c4:6c:ac: c0:e5:be:c7:82:16:3b:77:49:d6:0e:75:1d:b4:7a: 64:f7:32:f3:c3:e8:d9:22:e9:18:b9:be:17:f1:e9: 00:5d:46:83:ba:7d:23:e7:c6:d1:ac:ce:62:39:35: 0e:93:d6:0e:ec:a1:d2:2f:9c:1a:b4:58:c6:77:dd: 35:ce:b8:c9:4b:d7:85:6b:c5:aa:02:f5:2d:68:cc: 78:5d:2a:e5:21:36:3e:0d:27:d5:7f:a3:1e:9e:d8: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2F:EA:B9:0D:A2:DB:3E:14:3D:9F:E3:A7:C3:62:B0:4D:6C:D6:5C X509v3 Authority Key Identifier: keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b9:c0:9a:c3:41:1e:7d:38:fc:e6:8c:f5:58:f7:a1:0c:65: 88:9d:4f:14:a3:ba:7e:68:41:05:b2:ca:38:b5:ee:7c:ad:eb: 7d:bb:1b:f8:a3:f5:04:20:c3:a4:ef:18:b1:77:61:79:94:8b: 4f:92:8f:27:c6:54:27:fa:08:c7:21:78:47:ef:0b:62:73:cb: d4:ae:6a:25:6e:ef:f7:20:05:04:7b:72:66:3c:83:76:d1:d0: 70:fa:f0:04:ac:c0:e2:81:eb:48:bc:69:26:b5:eb:eb:a7:7c: e6:51:93:21:63:37:e2:da:64:f5:43:e6:e1:56:62:e5:7d:85: 3a:3e:a6:a2:74:e7:6b:15:43:d0:19:6e:55:e9:6c:93:e3:6d: 3a:73:da:1e:b3:14:20:f7:0a:1f:05:ca:f5:30:b5:34:9c:e4: 55:c7:eb:10:28:b0:05:b3:3e:6a:b3:e5:fa:8f:f5:83:a1:3f: e9:d2:ed:0a:53:d6:f4:8b:d4:e3:33:c6:f6:e0:4c:54:9f:d5: 00:0c:37:31:93:3e:99:f7:02:e9:50:b0:e5:e8:71:68:fb:69: fc:0e:c1:ba:7f:09:86:30:f5:2f:f0:37:0d:1b:dd:14:63:9f: 7e:06:89:d7:ae:2b:14:2e:82:85:28:9e:55:db:97:8f:b3:00: f2:09:49:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLinjc8VHIEpwXVKB/rbrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZjhhYjVmNzRkYzkwZTlmZmJhOGQ0Mjk4OGVkNWE3NzQ4 YzFkMDUwHhcNMjUxMjA2MDEwMjA1WhcNMjUxMjA3MDEwMjA1WjAzMTEwLwYDVQQD Eyg0YTJmZWFiOTBkYTJkYjNlMTQzZDlmZTNhN2MzNjJiMDRkNmNkNjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/fMQinfNJdEWBqaNE9z9L0soCww GzHBxBSvPy1LcB2DF39paNx3ovLhtpR+08ZFIt56cNt5X7PzUI8O31g2LlU2anqZ KcRn+NnUkzAD3eV2BsLk+Qx/4Tnj8KLEd9ZvtsaRSbLsHrTMADourJSih8BX/BHz vg8x37pBbRyaOGWkCFuBT9Fg7Ah+OD2Pkr2c4dq6jumg3m9eawKa/G1P2XXEbKzA 5b7HghY7d0nWDnUdtHpk9zLzw+jZIukYub4X8ekAXUaDun0j58bRrM5iOTUOk9YO 7KHSL5watFjGd901zrjJS9eFa8WqAvUtaMx4XSrlITY+DSfVf6Menth2xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEov6rkNots+FD2f46fDYrBNbNZcMB8GA1UdIwQY MBaAFN74q1903JDp/7qNQpiO1ad0jB0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTcyNWEtNDJlNC00MjcwLWI1YWYt NDUzZmMxYmNiY2Q1LzEvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82YTcyNWEtNDJlNC00MjcwLWI1YWYtNDUzZmMxYmNiY2Q1 LzEvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrnAmsNB Hn04/OaM9Vj3oQxliJ1PFKO6fmhBBbLKOLXufK3rfbsb+KP1BCDDpO8YsXdheZSL T5KPJ8ZUJ/oIxyF4R+8LYnPL1K5qJW7v9yAFBHtyZjyDdtHQcPrwBKzA4oHrSLxp JrXr66d85lGTIWM34tpk9UPm4VZi5X2FOj6monTnaxVD0BluVelsk+NtOnPaHrMU IPcKHwXK9TC1NJzkVcfrECiwBbM+arPl+o/1g6E/6dLtClPW9IvU4zPG9uBMVJ/V AAw3MZM+mfcC6VCw5ehxaPtp/A7Bun8JhjD1L/A3DRvdFGOffgaJ164rFC6ChSie VduXj7MA8glJNA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:00 2025 by rpki-client