This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json) Hash identifier: 5HFfWL9zU2p7yCeihA5WfYnJRsnqWQE86GNyXlEmD3o= Subject key identifier: AC:FD:36:C8:89:70:14:DE:F8:0B:3F:7B:63:BD:52:4D:86:D3:79:FD Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16 Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16 Certificate serial: 019AF61C65204ED477F1309DE2548ECF0CB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft Manifest number: 12A7 Signing time: Sun 07 Dec 2025 00:00:47 +0000 Manifest this update: Sun 07 Dec 2025 00:00:47 +0000 Manifest next update: Mon 08 Dec 2025 00:00:47 +0000 Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: NpV78laoXIdvAfM4uiscHaavrXTxh7bmjMYzQ6vEMtQ=) 2: _Kt_ylx952g7HZhxMZibU4U_S9U.roa (hash: BRXKGTpDPGrVqoVy2fXV55G1/RGVRY4TQXSqB3YxXnw=) 3: bJ6OkDBz35azmUeGZSSY8SRMI4Y.roa (hash: y21BnaoaGpgbQvC0jOtfGrk+wq3H1xWVUYMR7XJq8OU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:65:20:4e:d4:77:f1:30:9d:e2:54:8e:cf:0c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16 Validity Not Before: Dec 7 00:00:47 2025 GMT Not After : Dec 8 00:00:47 2025 GMT Subject: CN=acfd36c8897014def80b3f7b63bd524d86d379fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fb:4d:47:b1:82:9b:f4:f1:a1:d9:81:dc:83: a1:2c:a6:0c:7a:b2:d7:2f:bd:d4:20:2b:bc:2c:2b: e1:9e:a5:1b:43:32:cb:de:2e:1a:41:a0:71:73:74: bc:f5:e1:75:ce:22:b7:61:56:dc:69:28:99:25:e7: c3:e1:4b:57:76:7e:4a:4a:1d:dc:a1:1b:9a:62:7d: 31:37:f4:89:f8:48:43:6c:e4:0d:f0:ac:2a:84:51: c8:73:b4:4d:d2:10:db:92:be:17:2c:b1:75:e7:b2: df:15:65:a6:17:e3:0d:66:8a:d6:de:ab:2e:de:b9: 02:a3:82:69:d3:44:37:8b:1c:16:b2:58:4c:9a:ae: e4:0b:61:df:2c:0c:f0:45:c2:86:52:75:f2:50:74: cc:6a:ac:9e:1c:f7:cb:94:a9:da:aa:e5:11:1e:5b: 6a:93:76:d6:a5:59:6a:0d:9c:0b:12:53:32:08:6b: 64:e6:ab:be:d3:36:5f:8a:0b:09:8b:fe:80:d9:43: b3:97:bf:cb:d8:f9:1c:a7:e4:d1:be:d3:14:c4:0a: 06:bb:38:d2:40:de:ec:fa:20:44:de:e3:1d:5e:40: f7:cd:fa:52:51:dd:74:87:ba:af:b3:bd:a4:e2:64: 75:5b:57:3c:3c:5a:ce:a3:57:2f:a2:dd:70:0d:0e: f3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FD:36:C8:89:70:14:DE:F8:0B:3F:7B:63:BD:52:4D:86:D3:79:FD X509v3 Authority Key Identifier: keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:76:0c:08:cc:a9:46:fa:a4:a9:0a:9a:76:43:05:bc:42:43: 58:a4:70:19:92:22:cc:21:f6:9c:87:07:7c:71:4d:e9:e0:ce: 16:85:5e:9b:f8:76:3d:d0:38:e9:ee:a3:8b:ef:e7:08:f5:b8: 36:f1:22:3a:37:55:f0:29:75:7d:95:68:d3:a3:dd:20:53:fb: 08:43:50:cf:a7:53:2c:8a:bc:fb:9c:4d:b6:6d:32:03:e7:06: cc:f5:7c:53:c7:40:74:d0:6b:7b:2e:4a:50:ac:cc:4a:fd:97: eb:47:df:85:84:d5:de:67:2b:91:a4:85:54:d3:ad:b1:13:e7: 6e:3e:21:be:89:71:55:54:0e:55:f7:d3:6e:8b:59:b9:55:8d: c7:9c:6a:6b:cf:db:bd:31:52:93:72:c6:70:aa:16:a0:91:fa: 50:03:4c:76:89:29:58:3d:96:60:eb:70:f9:c9:1b:5a:f9:ee: ef:96:3b:00:df:96:50:5e:ef:67:32:18:2a:29:99:78:a9:d1: 13:af:7b:c7:21:d9:95:dd:6d:ff:33:51:72:d9:70:9e:4b:92: e6:ea:e0:4f:fd:45:01:c6:d5:37:7b:c5:fd:87:99:75:7d:2c: 54:39:c5:8c:aa:b1:84:e9:89:42:7d:fb:d7:9f:ab:51:48:69: 15:a9:de:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HGUgTtR38TCd4lSOzwy3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNzI1YzRkMDk1M2U3ZWNmNDZmMzdlMTRmY2ExNGZkMDlh MTJkMTYwHhcNMjUxMjA3MDAwMDQ3WhcNMjUxMjA4MDAwMDQ3WjAzMTEwLwYDVQQD EyhhY2ZkMzZjODg5NzAxNGRlZjgwYjNmN2I2M2JkNTI0ZDg2ZDM3OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ftNR7GCm/TxodmB3IOhLKYMerLX L73UICu8LCvhnqUbQzLL3i4aQaBxc3S89eF1ziK3YVbcaSiZJefD4UtXdn5KSh3c oRuaYn0xN/SJ+EhDbOQN8KwqhFHIc7RN0hDbkr4XLLF157LfFWWmF+MNZorW3qsu 3rkCo4Jp00Q3ixwWslhMmq7kC2HfLAzwRcKGUnXyUHTMaqyeHPfLlKnaquURHltq k3bWpVlqDZwLElMyCGtk5qu+0zZfigsJi/6A2UOzl7/L2Pkcp+TRvtMUxAoGuzjS QN7s+iBE3uMdXkD3zfpSUd10h7qvs72k4mR1W1c8PFrOo1cvot1wDQ7z5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKz9NsiJcBTe+As/e2O9Uk2G03n9MB8GA1UdIwQY MBaAFN1yXE0JU+fs9G834U/KFP0JoS0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYWE2ZTMtZjA1NC00OGU3LTgyNDYt OGYyMGNiNzM0NDg4LzEvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hYWE2ZTMtZjA1NC00OGU3LTgyNDYtOGYyMGNiNzM0NDg4 LzEvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHYMCMyp RvqkqQqadkMFvEJDWKRwGZIizCH2nIcHfHFN6eDOFoVem/h2PdA46e6ji+/nCPW4 NvEiOjdV8Cl1fZVo06PdIFP7CENQz6dTLIq8+5xNtm0yA+cGzPV8U8dAdNBrey5K UKzMSv2X60ffhYTV3mcrkaSFVNOtsRPnbj4hvolxVVQOVffTbotZuVWNx5xqa8/b vTFSk3LGcKoWoJH6UANMdokpWD2WYOtw+ckbWvnu75Y7AN+WUF7vZzIYKimZeKnR E697xyHZld1t/zNRctlwnkuS5urgT/1FAcbVN3vF/YeZdX0sVDnFjKqxhOmJQn37 15+rUUhpFaneew== -----END CERTIFICATE-----Generated at Sun Dec 7 04:08:07 2025 by rpki-client