This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json) Hash identifier: THr+tgWhMEVB61ps+smHV1kil1M2d5fSya+aj8Kim40= Subject key identifier: 6A:13:CC:1E:D1:9E:90:18:3E:28:AE:52:01:1E:B1:5A:7B:9D:5C:F5 Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f Certificate serial: 019AF208D38F38DA5339C2E5ADBE3DED9F0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: fIDT0n3Pwd47AChMgs0nrgr80R4uzeNbXUQ3BjdT44g=) 2: sHHovkPcLVWIMQ_tboQIdcTBHy0.roa (hash: fYwK2GNfLuzV598M+4d1qnmBbMriSVB83QSoeu+hALg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d3:8f:38:da:53:39:c2:e5:ad:be:3d:ed:9f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=6a13cc1ed19e90183e28ae52011eb15a7b9d5cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:f7:c3:f2:8d:e7:bd:f0:4b:5a:cf:bb:d8: 14:71:50:f3:f6:71:38:2e:9a:bf:cf:cf:3b:2e:3f: f9:d9:95:f5:8c:c3:e0:95:0b:23:64:b9:1c:01:b6: a4:73:80:1d:7a:1e:44:04:f2:4f:26:08:5f:90:69: 67:4c:51:94:18:64:52:9b:3e:3c:a0:14:db:31:b9: 6a:b9:03:8a:25:89:ca:dc:2e:40:bc:3f:1a:42:86: 1c:cb:e5:09:02:ad:31:83:f9:6d:38:5d:c5:54:47: ca:b6:f9:69:fa:91:ec:1d:db:24:de:9f:42:7d:a0: ca:3e:fe:71:6b:f8:64:50:4b:c8:4d:90:8e:e9:ba: 57:0e:b5:1b:81:72:ea:3b:b2:c9:e8:fe:03:23:22: 01:16:a6:c7:b6:3a:82:df:6f:e3:18:b2:57:05:af: 2f:81:1b:3e:0b:a3:33:ce:b5:07:aa:11:05:23:4f: 90:fb:13:3a:a6:61:0c:73:32:24:29:91:4f:33:cb: 34:da:7f:4f:ac:b1:8a:86:3c:76:a5:66:9f:fc:35: 3e:7c:3c:54:35:fe:5a:bd:f2:5c:57:c5:27:92:78: 90:6a:86:c0:bf:94:b7:b3:0d:c2:91:f1:70:ce:ac: 0b:09:22:0d:88:c1:2f:26:3f:c9:e4:20:2e:ed:7e: 3b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:13:CC:1E:D1:9E:90:18:3E:28:AE:52:01:1E:B1:5A:7B:9D:5C:F5 X509v3 Authority Key Identifier: keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b1:aa:a9:9d:73:15:27:81:08:7d:48:07:74:4c:a8:04:b7: 22:9f:ba:df:e1:f2:d4:b9:74:c2:36:5e:a2:b7:c2:ad:a3:ef: 2d:7b:80:2c:ec:db:8b:77:8b:63:64:8a:2b:38:5a:b2:e3:05: 55:f3:25:9d:8c:5a:a5:dd:dd:b6:3c:db:48:5d:db:9e:d2:f6: f8:b5:f0:60:38:95:af:dd:05:fe:a7:c6:29:ae:e8:9d:5d:08: 00:7c:c4:20:4f:4c:59:e0:a5:2c:13:f5:25:74:57:11:87:a6: 99:87:16:70:ea:48:c0:f2:cd:2c:db:84:ff:aa:cb:83:3d:04: 59:3c:cc:ba:e6:0a:6b:97:d9:7d:ec:34:b7:59:ef:60:fb:e6: fa:9c:b0:47:e2:a1:57:8d:53:5d:ed:eb:07:05:11:98:cb:9b: 5d:8b:4d:0e:05:a0:47:ce:fa:c4:61:c2:9b:ad:b3:71:30:55: ac:ba:0a:06:73:55:a8:c5:dd:10:5d:cb:c4:b9:74:8f:41:a0: 99:8a:f8:8d:38:a5:9d:78:70:18:80:17:49:5b:f2:45:c7:1a: 14:ea:2f:f9:99:ee:2c:84:4a:34:95:6c:d4:15:5a:b1:47:ab: 33:ea:ad:d3:a0:8d:1a:e9:56:d4:2e:9f:72:3e:61:9f:5d:d5: ef:37:06:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNOPONpTOcLlrb497Z8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMDg1YjBkMWJiZjllNzgxYjE1NGIwNmY3YjkxNDExMjlk Yjc3NWYwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD Eyg2YTEzY2MxZWQxOWU5MDE4M2UyOGFlNTIwMTFlYjE1YTdiOWQ1Y2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvX3w/KN573wS1rPu9gUcVDz9nE4 Lpq/z887Lj/52ZX1jMPglQsjZLkcAbakc4Adeh5EBPJPJghfkGlnTFGUGGRSmz48 oBTbMblquQOKJYnK3C5AvD8aQoYcy+UJAq0xg/ltOF3FVEfKtvlp+pHsHdsk3p9C faDKPv5xa/hkUEvITZCO6bpXDrUbgXLqO7LJ6P4DIyIBFqbHtjqC32/jGLJXBa8v gRs+C6MzzrUHqhEFI0+Q+xM6pmEMczIkKZFPM8s02n9PrLGKhjx2pWaf/DU+fDxU Nf5avfJcV8UnkniQaobAv5S3sw3CkfFwzqwLCSINiMEvJj/J5CAu7X47QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoTzB7RnpAYPiiuUgEesVp7nVz1MB8GA1UdIwQY MBaAFN4IWw0bv554GxVLBve5FBEp23dfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZjAzYTMtMzFhMS00ZGExLWI4ZTkt N2EwYjNkNWQ5MTU2LzEvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mZjAzYTMtMzFhMS00ZGExLWI4ZTktN2EwYjNkNWQ5MTU2 LzEvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbGqqZ1z FSeBCH1IB3RMqAS3Ip+63+Hy1Ll0wjZeorfCraPvLXuALOzbi3eLY2SKKzhasuMF VfMlnYxapd3dtjzbSF3bntL2+LXwYDiVr90F/qfGKa7onV0IAHzEIE9MWeClLBP1 JXRXEYemmYcWcOpIwPLNLNuE/6rLgz0EWTzMuuYKa5fZfew0t1nvYPvm+pywR+Kh V41TXe3rBwURmMubXYtNDgWgR876xGHCm62zcTBVrLoKBnNVqMXdEF3LxLl0j0Gg mYr4jTilnXhwGIAXSVvyRccaFOov+ZnuLIRKNJVs1BVasUerM+qt06CNGulW1C6f cj5hn13V7zcGqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:25 2025 by rpki-client