This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json) Hash identifier: v2c13kBMHgUMwj1Iqjp/WERUsP8sUUnJR9LFshNEK2I= Subject key identifier: AC:9C:B0:91:2F:8C:7B:BD:DD:54:15:94:8F:B7:1C:8B:A5:17:35:0E Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad Certificate serial: 019B21E266E575A5A046994D3DAE0F2A1BCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft Manifest number: 04AD Signing time: Mon 15 Dec 2025 12:00:44 +0000 Manifest this update: Mon 15 Dec 2025 12:00:44 +0000 Manifest next update: Tue 16 Dec 2025 12:00:44 +0000 Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: AAizI03z+Il7Rfqcmup/Hdipq+DDl3aN8junNauuSfM=) 2: 4QrqTeH17AXNTy8pbTdrujVUbQI.roa (hash: FZeq9SJr8r+vs6lCOy39Gvb+wDR+3HmqIg9DlvmdZfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:66:e5:75:a5:a0:46:99:4d:3d:ae:0f:2a:1b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad Validity Not Before: Dec 15 12:00:44 2025 GMT Not After : Dec 16 12:00:44 2025 GMT Subject: CN=ac9cb0912f8c7bbddd5415948fb71c8ba517350e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:d7:59:be:da:28:78:df:00:b1:73:2f:b6: 41:74:49:37:ed:12:da:5e:1a:a8:e8:e5:0b:af:af: e6:39:11:11:df:13:a8:24:1d:7a:07:34:1f:88:5f: 51:5f:73:e9:91:4a:fd:41:54:ae:67:f1:00:a9:c6: 45:7e:b3:72:b3:d5:08:7c:f3:df:7d:c5:c2:2d:b9: 1d:1e:fa:91:ab:29:ec:67:ae:60:1d:fe:d6:1d:ad: ba:76:2c:f9:3b:65:c7:8e:78:94:cc:e4:dd:bf:0d: 16:92:f8:c8:39:5b:ab:99:2f:d6:6f:f9:2b:aa:7a: 20:2d:74:91:07:38:08:1d:31:de:69:60:49:c7:fd: 03:8c:69:5c:0b:ca:3f:db:3a:35:2c:9b:03:93:66: 4e:46:74:05:3a:71:c1:04:b7:52:eb:38:ae:f8:87: 3f:52:e7:69:9c:e8:54:bb:7b:c6:19:20:07:57:a1: 4b:c4:9b:93:c3:ff:e0:b7:cb:b9:76:e1:22:7b:3b: 5e:47:4c:74:49:90:e6:6b:6c:b1:c6:34:94:13:4a: a3:93:52:01:64:52:a3:ec:ea:31:31:56:f9:6c:43: 70:c6:56:68:71:d0:50:f5:ab:dc:cb:7a:7e:f3:6b: 1a:26:35:cc:81:e2:ef:cf:87:00:fb:88:38:2e:40: ee:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9C:B0:91:2F:8C:7B:BD:DD:54:15:94:8F:B7:1C:8B:A5:17:35:0E X509v3 Authority Key Identifier: keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:68:95:76:be:12:2d:91:b3:47:67:80:60:6f:ab:8c:ba:5d: 03:7a:e2:7e:e7:05:cb:50:4c:0f:20:18:c1:63:94:9c:29:59: a6:99:ee:7a:b2:14:1a:41:aa:0e:0b:b1:7d:51:a9:92:0e:90: ff:c3:8a:79:e0:7a:ab:ff:ee:0c:cd:65:98:ac:94:2a:b3:2d: 2d:fe:3c:e8:1a:f2:23:a6:cf:a7:81:1d:8e:90:aa:52:cc:58: 1e:c5:98:20:25:17:ed:a2:18:a3:eb:00:22:1f:8b:70:8f:a0: 66:5e:d7:98:26:3b:da:76:ef:6e:87:15:c4:84:49:7d:b0:37: 77:ae:5d:a0:6d:5b:6b:ff:f7:23:84:0b:18:12:81:8c:f9:00: 18:0b:78:04:42:b7:67:8f:60:7e:cc:c2:3e:68:ca:63:b0:c6: 3a:28:87:38:0e:f3:95:c9:35:23:7e:6f:cc:d2:48:02:fa:46: ef:c5:2e:55:11:1b:9a:f9:6a:81:c4:bb:ca:72:cd:4b:ca:70: 8d:a8:7f:a4:06:9b:74:35:82:cb:29:e9:53:6a:a0:4a:71:c8: 2d:d7:6d:39:fa:8c:e2:7a:f5:33:83:f0:21:44:de:f3:40:21: fb:c6:2e:dd:59:e3:fd:42:6b:e4:e4:16:5c:63:08:78:98:2b: 5d:90:9f:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4mbldaWgRplNPa4PKhvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjA5Y2Y5NmU1ZmM4NzRlZTkzOTA5N2M1NjUxYzhiZDg0 MmU2YWQwHhcNMjUxMjE1MTIwMDQ0WhcNMjUxMjE2MTIwMDQ0WjAzMTEwLwYDVQQD EyhhYzljYjA5MTJmOGM3YmJkZGQ1NDE1OTQ4ZmI3MWM4YmE1MTczNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2PXWb7aKHjfALFzL7ZBdEk37RLa Xhqo6OULr6/mORER3xOoJB16BzQfiF9RX3PpkUr9QVSuZ/EAqcZFfrNys9UIfPPf fcXCLbkdHvqRqynsZ65gHf7WHa26diz5O2XHjniUzOTdvw0WkvjIOVurmS/Wb/kr qnogLXSRBzgIHTHeaWBJx/0DjGlcC8o/2zo1LJsDk2ZORnQFOnHBBLdS6ziu+Ic/ UudpnOhUu3vGGSAHV6FLxJuTw//gt8u5duEiezteR0x0SZDma2yxxjSUE0qjk1IB ZFKj7OoxMVb5bENwxlZocdBQ9avcy3p+82saJjXMgeLvz4cA+4g4LkDuHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKycsJEvjHu93VQVlI+3HIulFzUOMB8GA1UdIwQY MBaAFN3wnPluX8h07pOQl8VlHIvYQuatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZDYy1XNWZ5SFR1azVDWHhXVWNpOWhDNXEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wMDc5ZTgtYzI0Ni00YzM4LTkwNTIt NjczNjcwZTZlZjA5LzEvM2ZDYy1XNWZ5SFR1azVDWHhXVWNpOWhDNXEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wMDc5ZTgtYzI0Ni00YzM4LTkwNTItNjczNjcwZTZlZjA5 LzEvM2ZDYy1XNWZ5SFR1azVDWHhXVWNpOWhDNXEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGiVdr4S LZGzR2eAYG+rjLpdA3rifucFy1BMDyAYwWOUnClZppnuerIUGkGqDguxfVGpkg6Q /8OKeeB6q//uDM1lmKyUKrMtLf486BryI6bPp4EdjpCqUsxYHsWYICUX7aIYo+sA Ih+LcI+gZl7XmCY72nbvbocVxIRJfbA3d65doG1ba//3I4QLGBKBjPkAGAt4BEK3 Z49gfszCPmjKY7DGOiiHOA7zlck1I35vzNJIAvpG78UuVREbmvlqgcS7ynLNS8pw jah/pAabdDWCyynpU2qgSnHILddtOfqM4nr1M4PwIUTe80Ah+8Yu3Vnj/UJr5OQW XGMIeJgrXZCfiw== -----END CERTIFICATE-----Generated at Mon Dec 15 15:35:18 2025 by rpki-client