This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json) Hash identifier: enIviZLzFLXwgx794LhdoisCXg+B2OqHDWAc+eFM680= Subject key identifier: BB:C8:F9:14:E4:D7:99:23:EC:36:46:FA:C6:76:C3:50:D2:6C:67:BB Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16 Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16 Certificate serial: 019B35D74FB0BECD2C0F77D90B59973EFA72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft Manifest number: 12C8 Signing time: Fri 19 Dec 2025 09:01:01 +0000 Manifest this update: Fri 19 Dec 2025 09:01:01 +0000 Manifest next update: Sat 20 Dec 2025 09:01:01 +0000 Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: Cdp+vVmLcbPzTPPEiYf79Lf+JYW6U5RBY8iAkQQDU7U=) 2: _Kt_ylx952g7HZhxMZibU4U_S9U.roa (hash: BRXKGTpDPGrVqoVy2fXV55G1/RGVRY4TQXSqB3YxXnw=) 3: bJ6OkDBz35azmUeGZSSY8SRMI4Y.roa (hash: y21BnaoaGpgbQvC0jOtfGrk+wq3H1xWVUYMR7XJq8OU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:4f:b0:be:cd:2c:0f:77:d9:0b:59:97:3e:fa:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16 Validity Not Before: Dec 19 09:01:01 2025 GMT Not After : Dec 20 09:01:01 2025 GMT Subject: CN=bbc8f914e4d79923ec3646fac676c350d26c67bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f7:44:dd:8a:b5:c0:8c:bb:c1:22:c5:ad:f4: 3e:b7:7e:19:85:b9:d2:45:25:73:f0:f5:8b:88:ae: cf:22:00:1b:67:95:41:7a:a6:62:e4:15:25:f6:3c: b6:68:b5:f6:99:08:ae:ea:6d:48:76:75:cd:fe:e5: 18:6d:9a:c4:06:4d:fb:76:cb:0d:41:f3:b0:75:1f: 4a:2f:fc:0b:70:b5:ed:96:fd:77:48:67:b8:30:71: 4a:5b:ea:7a:4b:8d:e5:5a:f9:50:b5:c1:03:01:f3: 69:2e:6e:20:79:dd:58:a1:56:4a:d0:7a:97:6e:1a: e1:ed:83:82:b9:3f:3a:61:dd:82:97:d2:b1:89:90: f7:72:ea:e9:86:db:b7:4e:ed:50:15:35:94:8f:56: a5:da:62:27:b5:f9:57:d8:81:67:6a:c9:ec:c7:34: 4b:dc:fc:7f:24:4e:e2:24:05:fc:dc:5d:77:a6:13: 50:26:1f:c2:06:54:f4:0d:9a:90:39:a2:23:eb:6d: c9:09:5c:a9:f2:94:ac:58:ce:42:3f:c7:33:c4:15: 68:71:8c:eb:91:af:24:2d:a6:73:64:ae:22:c8:47: 15:ee:53:71:fc:41:8c:ea:ba:f1:be:3b:6e:48:99: df:2d:55:3b:34:32:d9:4b:aa:08:a6:d8:e5:0d:48: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C8:F9:14:E4:D7:99:23:EC:36:46:FA:C6:76:C3:50:D2:6C:67:BB X509v3 Authority Key Identifier: keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e0:3e:70:85:84:b0:82:9f:32:3f:9f:b2:1e:7d:25:79:3d: 61:d6:56:a9:8c:52:7c:09:1e:09:7b:6d:70:a3:64:f5:3b:96: 54:ea:c7:97:a8:2f:ae:47:7a:9d:7f:97:bc:c5:35:58:bf:c6: bc:70:15:ea:a4:bd:f9:05:31:86:fa:72:8c:9c:f1:0c:b1:be: b2:de:7d:80:03:3a:5d:e2:55:30:52:89:29:72:9b:0f:45:30: c0:eb:4a:fa:d4:d1:4c:1a:3f:b6:fe:fb:61:44:4d:62:27:c9: 98:47:d9:57:32:ba:3c:d3:3c:10:90:cc:09:1a:d7:05:23:ad: a4:be:32:ca:1e:ea:5a:fa:99:b8:45:61:bd:08:07:92:2e:f0: cc:72:7b:65:0f:f0:7d:f9:f3:05:ef:fe:31:19:68:4c:3b:b1: 3c:ff:57:79:98:91:9b:e8:10:d7:14:0f:8b:6b:17:c4:39:c8: 58:9a:c3:c0:89:d4:26:ae:71:05:e8:74:f3:54:d1:9f:3d:bf: 91:57:83:3d:fa:50:51:88:e3:ff:16:aa:d5:61:ff:2e:4f:d5: 43:17:d0:ba:f4:44:65:d2:05:21:88:ee:9b:d7:d6:da:b2:9c: e5:ad:55:e4:34:aa:48:f6:ae:35:b8:a0:10:f5:b0:4d:79:35: 0c:6e:e7:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs110+wvs0sD3fZC1mXPvpyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNzI1YzRkMDk1M2U3ZWNmNDZmMzdlMTRmY2ExNGZkMDlh MTJkMTYwHhcNMjUxMjE5MDkwMTAxWhcNMjUxMjIwMDkwMTAxWjAzMTEwLwYDVQQD EyhiYmM4ZjkxNGU0ZDc5OTIzZWMzNjQ2ZmFjNjc2YzM1MGQyNmM2N2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfdE3Yq1wIy7wSLFrfQ+t34ZhbnS RSVz8PWLiK7PIgAbZ5VBeqZi5BUl9jy2aLX2mQiu6m1IdnXN/uUYbZrEBk37dssN QfOwdR9KL/wLcLXtlv13SGe4MHFKW+p6S43lWvlQtcEDAfNpLm4ged1YoVZK0HqX bhrh7YOCuT86Yd2Cl9KxiZD3curphtu3Tu1QFTWUj1al2mIntflX2IFnasnsxzRL 3Px/JE7iJAX83F13phNQJh/CBlT0DZqQOaIj623JCVyp8pSsWM5CP8czxBVocYzr ka8kLaZzZK4iyEcV7lNx/EGM6rrxvjtuSJnfLVU7NDLZS6oIptjlDUizzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvI+RTk15kj7DZG+sZ2w1DSbGe7MB8GA1UdIwQY MBaAFN1yXE0JU+fs9G834U/KFP0JoS0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYWE2ZTMtZjA1NC00OGU3LTgyNDYt OGYyMGNiNzM0NDg4LzEvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hYWE2ZTMtZjA1NC00OGU3LTgyNDYtOGYyMGNiNzM0NDg4 LzEvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+A+cIWE sIKfMj+fsh59JXk9YdZWqYxSfAkeCXttcKNk9TuWVOrHl6gvrkd6nX+XvMU1WL/G vHAV6qS9+QUxhvpyjJzxDLG+st59gAM6XeJVMFKJKXKbD0UwwOtK+tTRTBo/tv77 YURNYifJmEfZVzK6PNM8EJDMCRrXBSOtpL4yyh7qWvqZuEVhvQgHki7wzHJ7ZQ/w ffnzBe/+MRloTDuxPP9XeZiRm+gQ1xQPi2sXxDnIWJrDwInUJq5xBeh081TRnz2/ kVeDPfpQUYjj/xaq1WH/Lk/VQxfQuvREZdIFIYjum9fW2rKc5a1V5DSqSPauNbig EPWwTXk1DG7n6A== -----END CERTIFICATE-----Generated at Fri Dec 19 13:32:17 2025 by rpki-client