This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json) Hash identifier: ACl/ZOkKzVkHZwVo5ONaVRFPJqA38bhkapthKJJaO3g= Subject key identifier: 10:1F:CF:37:59:A2:F6:68:63:72:C1:85:C0:5F:A7:62:AD:C5:CD:7E Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3 Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3 Certificate serial: 019B413675F451E3B050E56BFB387B74E357 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 14:00:46 +0000 Manifest this update: Sun 21 Dec 2025 14:00:46 +0000 Manifest next update: Mon 22 Dec 2025 14:00:46 +0000 Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: As9a6AVGfmOp495YJznS9Ylg7QYrf6KImeHQ1wxiwJw=) 2: 57HaC7393494-Kydk1JdAp5sP5I.roa (hash: MC5zLYnL7jsECqxeDtP30qM0sWScy6N43eUhfx207aw=) 3: m5gUSNnJ2hKaiWTW0ODmWqqDw-s.roa (hash: EE2S7AYIPyyJZqEsdRi77q99LaNKBqMzcLpUq4bS+A8=) 4: nX1l9uEaP3hKft0f6nr66330FaY.roa (hash: Ify3evSlWibc6XFuSTIlXp6BEPgQD/cUtILAv8sgqKU=) 5: rYOTmI6zBWy0_qXug-7vEbI5-NE.roa (hash: WCnXAEMnH2mCY9gWHiuKlZ1HO6eQUoArgriFfc+fAVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:75:f4:51:e3:b0:50:e5:6b:fb:38:7b:74:e3:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3 Validity Not Before: Dec 21 14:00:46 2025 GMT Not After : Dec 22 14:00:46 2025 GMT Subject: CN=101fcf3759a2f6686372c185c05fa762adc5cd7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:5c:43:48:43:d8:c8:a2:15:90:e9:32:dd: 4a:77:9a:68:31:9c:8a:ac:6a:d9:d0:eb:c0:ef:a5: db:2c:33:77:9c:3a:98:9f:03:51:6f:aa:50:48:88: 68:bd:3c:58:55:d0:f3:fb:1d:9c:6e:e9:d6:b9:6b: 14:b9:28:32:3b:b0:26:40:5c:0c:5a:13:83:e5:86: 49:90:93:0c:27:a1:67:28:d2:63:d1:1c:74:24:66: e2:a2:d2:47:42:a8:58:f8:da:ae:d0:11:2d:46:a8: aa:39:bf:f8:c7:f8:bb:ff:d9:41:81:83:74:72:11: 10:b6:a1:42:d0:58:38:ab:be:58:2a:82:87:56:67: 01:42:e2:b3:8c:1a:a6:a3:4b:be:a5:37:12:03:1c: 1a:e2:e0:d6:fe:78:8c:c7:01:fa:2e:98:85:00:71: ad:2f:37:df:e9:83:1d:a4:a5:a7:f4:c5:f9:f0:a4: 1f:14:a4:35:5e:8f:18:2b:58:03:6e:50:90:5f:0f: 6b:3d:88:98:9e:c0:92:8a:52:8b:06:a0:8d:28:b8: 9c:de:30:aa:fd:67:ef:9e:b2:9e:94:0e:13:ce:50: 89:93:9e:75:a6:ec:c2:47:8d:6d:aa:10:93:44:6f: cd:86:a1:3f:77:f0:29:a2:ad:b2:a3:c2:3d:56:71: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1F:CF:37:59:A2:F6:68:63:72:C1:85:C0:5F:A7:62:AD:C5:CD:7E X509v3 Authority Key Identifier: keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:35:37:5b:46:30:35:2e:79:d5:88:9f:8f:30:09:58:38:30: 7d:98:ba:79:37:be:99:a7:6f:7d:e0:00:bc:0e:ae:bc:17:01: 81:49:fc:48:2d:f4:b5:e9:89:00:3b:9a:3f:d9:47:b6:8f:c3: b8:c9:54:d0:35:43:6e:ea:ae:42:71:40:5f:dd:91:55:1f:55: ba:e2:5a:db:0c:bc:c4:43:9d:b6:ad:b4:55:d2:16:6b:0d:15: fb:86:5e:01:29:ae:60:fa:91:2a:67:4b:1f:6d:ab:fc:11:41: 1a:e2:a1:db:2f:2a:b3:9c:42:ef:f0:cd:04:53:7d:2a:dd:ff: 07:c1:cc:bb:8f:db:4d:2a:7e:04:30:11:64:44:e0:19:31:77: 6f:87:fb:83:c5:b0:68:b2:b9:d4:76:4b:04:e8:c1:11:ed:1b: 5e:73:bc:93:81:0a:17:f9:80:d4:ac:8e:25:05:f5:56:27:28: ea:80:39:ba:9b:21:ff:69:1c:e1:d3:95:aa:47:c6:09:b0:f6: 34:16:e5:bf:0a:04:32:06:c8:0b:27:c7:62:bf:87:ef:10:24: e2:4b:bc:4a:74:eb:56:4f:9d:f1:67:83:b2:62:47:95:d1:9f: bc:82:0b:c9:0a:8a:3a:c2:87:06:a3:cd:cf:8a:08:be:ee:09: bc:cc:ca:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNnX0UeOwUOVr+zh7dONXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTA4OWM5NDJiNjgwMzM2ODNiNGRkNTA2YzBjMzZmNzRi ZTBlYTMwHhcNMjUxMjIxMTQwMDQ2WhcNMjUxMjIyMTQwMDQ2WjAzMTEwLwYDVQQD EygxMDFmY2YzNzU5YTJmNjY4NjM3MmMxODVjMDVmYTc2MmFkYzVjZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrRcQ0hD2MiiFZDpMt1Kd5poMZyK rGrZ0OvA76XbLDN3nDqYnwNRb6pQSIhovTxYVdDz+x2cbunWuWsUuSgyO7AmQFwM WhOD5YZJkJMMJ6FnKNJj0Rx0JGbiotJHQqhY+Nqu0BEtRqiqOb/4x/i7/9lBgYN0 chEQtqFC0Fg4q75YKoKHVmcBQuKzjBqmo0u+pTcSAxwa4uDW/niMxwH6LpiFAHGt Lzff6YMdpKWn9MX58KQfFKQ1Xo8YK1gDblCQXw9rPYiYnsCSilKLBqCNKLic3jCq /WfvnrKelA4TzlCJk551puzCR41tqhCTRG/NhqE/d/Apoq2yo8I9VnEGvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAfzzdZovZoY3LBhcBfp2Ktxc1+MB8GA1UdIwQY MBaAFNwQiclCtoAzaDtN1QbAw290vg6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDkt Y2I1NmVkM2VhN2ZhLzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDktY2I1NmVkM2VhN2Zh LzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDU3W0Yw NS551YifjzAJWDgwfZi6eTe+madvfeAAvA6uvBcBgUn8SC30temJADuaP9lHto/D uMlU0DVDbuquQnFAX92RVR9VuuJa2wy8xEOdtq20VdIWaw0V+4ZeASmuYPqRKmdL H22r/BFBGuKh2y8qs5xC7/DNBFN9Kt3/B8HMu4/bTSp+BDARZETgGTF3b4f7g8Ww aLK51HZLBOjBEe0bXnO8k4EKF/mA1KyOJQX1Vico6oA5upsh/2kc4dOVqkfGCbD2 NBblvwoEMgbICyfHYr+H7xAk4ku8SnTrVk+d8WeDsmJHldGfvIILyQqKOsKHBqPN z4oIvu4JvMzKpA== -----END CERTIFICATE-----Generated at Sun Dec 21 21:52:04 2025 by rpki-client