This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json) Hash identifier: RsKoqwX68SUU4XIVdb1pn3vhEdroN4ai/6dVNxEjY9s= Subject key identifier: D6:DB:9C:BB:86:76:94:EF:37:8E:34:15:B4:A6:6B:0A:96:BC:66:77 Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9 Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9 Certificate serial: 019AF2768062AB58F1FCF6CBE406F1BB31E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft Manifest number: 0870 Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: MyKmrBNXR+g/KhFRRCcDI0F7yABx2Fpbk23Atr1GHzc=) 2: MpZzldQi5IW1vH72zsN86ALdCYo.roa (hash: hGLTyfZCRDqAerkM2L4I96QJCTHMEKoFxuiSvfkJH1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:80:62:ab:58:f1:fc:f6:cb:e4:06:f1:bb:31:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9 Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=d6db9cbb867694ef378e3415b4a66b0a96bc6677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6c:1e:98:e9:60:6a:38:8a:a1:e0:ec:19:17: 02:e6:6a:0c:a3:65:f1:e7:ac:ea:b6:88:35:d7:69: d5:de:a8:b0:fe:cd:e7:70:7e:d7:3f:b0:2e:6f:1e: 46:fd:84:c1:41:ae:e0:8e:3b:22:8c:9a:f0:9c:64: 9f:5a:a7:eb:cd:94:d2:40:ca:f8:c2:77:91:50:b1: 9a:0d:24:58:0a:cb:f8:7e:a9:77:48:c2:62:49:4e: 25:a6:21:4f:76:b9:07:8d:90:79:5e:cf:c8:98:28: 2c:8d:a8:92:a3:3e:c1:5c:14:db:a0:e9:74:90:6d: dc:2e:9d:ae:2b:1c:c2:2c:fb:d1:40:67:fb:0f:be: 0a:62:a7:6f:49:44:86:df:e4:2a:d5:47:74:c3:91: 16:49:92:1a:72:64:28:c9:cc:57:ca:46:91:75:b6: e9:5e:3b:e8:35:30:c0:59:8d:89:c1:5b:a7:4a:60: 85:44:f9:d8:18:90:23:bc:5d:27:c6:65:db:10:ae: d4:46:21:72:61:4b:33:af:8b:0a:e2:ea:ad:74:b1: 3a:5c:c4:fd:75:fc:f8:12:4f:7d:45:d8:c3:6c:c7: 02:8e:f4:5f:13:b3:64:9f:45:59:3c:56:37:36:2f: 7c:cf:fd:da:6a:4e:67:9c:00:e0:b3:8d:e1:f1:ba: 4d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DB:9C:BB:86:76:94:EF:37:8E:34:15:B4:A6:6B:0A:96:BC:66:77 X509v3 Authority Key Identifier: keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:4c:2e:20:d7:c6:a7:b5:45:3f:88:bc:30:fa:56:17:a2:77: 0e:98:f7:23:eb:9c:72:85:37:3f:04:77:db:fc:7f:d5:74:65: 10:d6:ea:5b:8b:7b:53:9c:35:51:f3:af:3f:89:20:f5:2b:fa: 9f:01:76:5d:a0:ec:d1:7a:ed:6c:f0:cd:46:ba:83:aa:b5:fa: b1:55:e0:ed:59:23:cb:ad:44:96:e4:a2:00:0a:fa:99:8d:d2: 67:32:e7:e9:68:cb:78:3d:dd:1b:74:0c:ef:b4:97:5a:64:f9: cd:ac:a4:11:2c:3e:ae:86:8f:c1:61:9a:19:eb:7b:ef:80:c5: 3b:28:19:a5:98:cb:5d:64:e0:87:cd:0a:b3:0a:28:cd:33:50: 8b:f4:cb:5c:6a:96:ce:79:e5:f3:96:7d:be:b5:02:b8:71:0f: 0a:32:b9:cf:93:ff:30:d0:89:3f:b3:53:48:4e:1f:9f:9d:6b: dd:65:dc:e3:82:a4:1f:16:ea:d7:a5:dc:0b:81:cc:9d:f9:08: 4b:bc:d9:88:bf:ab:4a:58:10:fb:ab:97:8b:a8:44:85:d1:5c: d1:07:f2:25:96:f2:9e:90:e4:09:30:37:96:50:dd:5e:a5:4f: da:fe:49:5d:69:94:0d:ad:a0:7d:a2:89:55:b0:ff:ee:88:6a: f3:16:4a:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoBiq1jx/PbL5AbxuzHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNmRhZWY2NjY0YTc1MjliNjI5ZjNmZDY1MDA0OTE1MjMw ZjFiZTkwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD EyhkNmRiOWNiYjg2NzY5NGVmMzc4ZTM0MTViNGE2NmIwYTk2YmM2Njc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GwemOlgajiKoeDsGRcC5moMo2Xx 56zqtog112nV3qiw/s3ncH7XP7Aubx5G/YTBQa7gjjsijJrwnGSfWqfrzZTSQMr4 wneRULGaDSRYCsv4fql3SMJiSU4lpiFPdrkHjZB5Xs/ImCgsjaiSoz7BXBTboOl0 kG3cLp2uKxzCLPvRQGf7D74KYqdvSUSG3+Qq1Ud0w5EWSZIacmQoycxXykaRdbbp XjvoNTDAWY2JwVunSmCFRPnYGJAjvF0nxmXbEK7URiFyYUszr4sK4uqtdLE6XMT9 dfz4Ek99RdjDbMcCjvRfE7Nkn0VZPFY3Ni98z/3aak5nnADgs43h8bpNFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbbnLuGdpTvN440FbSmawqWvGZ3MB8GA1UdIwQY MBaAFN1trvZmSnUptinz/WUASRUjDxvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83ZGQ0MmItNjZlZC00YzEzLWEzMzYt Y2ZlMTMzNWYyN2ZiLzEvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi83ZGQ0MmItNjZlZC00YzEzLWEzMzYtY2ZlMTMzNWYyN2Zi LzEvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEwuINfG p7VFP4i8MPpWF6J3Dpj3I+uccoU3PwR32/x/1XRlENbqW4t7U5w1UfOvP4kg9Sv6 nwF2XaDs0XrtbPDNRrqDqrX6sVXg7Vkjy61EluSiAAr6mY3SZzLn6WjLeD3dG3QM 77SXWmT5zaykESw+roaPwWGaGet774DFOygZpZjLXWTgh80KswoozTNQi/TLXGqW znnl85Z9vrUCuHEPCjK5z5P/MNCJP7NTSE4fn51r3WXc44KkHxbq16XcC4HMnfkI S7zZiL+rSlgQ+6uXi6hEhdFc0QfyJZbynpDkCTA3llDdXqVP2v5JXWmUDa2gfaKJ VbD/7ohq8xZKCA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:28:42 2025 by rpki-client