This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json) Hash identifier: D4fIsxGsFRJpEIQlmnP24MRtiv/kRMkR8+25hvgzX5A= Subject key identifier: F5:22:82:E5:27:32:E6:74:A3:DD:25:21:E4:98:01:AB:83:62:FF:22 Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52 Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52 Certificate serial: 019AF50BDFBFC87B5DCDF1D6D0F29F0A1B01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:03:07 +0000 Manifest this update: Sat 06 Dec 2025 19:03:07 +0000 Manifest next update: Sun 07 Dec 2025 19:03:07 +0000 Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: b0ZRjRTV4b3Ufk3ht0/m31QnPLeGnurk1EwLeTmdV4Y=) 2: O3I8fzz4GA8viyeptOfjUJ2mnRw.roa (hash: MhSpfjBUjJxXqy4aU0rHbneKVULz0h6JWSZvHTRBN24=) 3: ovS3rx1XoRtGLlvdJ72CyzvNZcw.roa (hash: lov3tLPiy71ecc5+P9JXxH2Fu9PCJbxZNtxQg4EVWM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:df:bf:c8:7b:5d:cd:f1:d6:d0:f2:9f:0a:1b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52 Validity Not Before: Dec 6 19:03:07 2025 GMT Not After : Dec 7 19:03:07 2025 GMT Subject: CN=f52282e52732e674a3dd2521e49801ab8362ff22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:60:62:7d:d5:d7:6a:86:89:1b:15:74:b1: 2b:ce:9c:b4:7e:c0:1a:1b:b6:24:41:28:01:4b:b6: 64:eb:01:25:06:2e:b7:a6:29:93:d7:49:e4:63:10: ef:dd:22:7e:f4:6e:41:f7:d0:94:8b:54:f8:14:61: e9:fc:9d:36:da:4b:c7:9a:6f:ed:3a:39:ac:85:f7: 94:43:e9:c6:d9:57:07:71:3d:a4:1e:0e:66:76:30: d9:3a:ae:37:dc:7a:f8:e6:a7:9f:92:5d:d3:54:50: f4:80:e0:b1:82:7e:86:8f:e6:2b:14:c1:bd:bf:79: 7a:fa:e6:27:37:2a:b3:24:cf:bd:4e:45:e0:bd:5d: ab:45:01:51:69:23:be:ca:8d:50:2a:e5:86:8f:9d: 69:c0:98:4c:b9:36:c1:41:a4:0d:03:4a:05:ea:af: ee:01:3e:ba:cc:a3:21:70:86:10:bf:17:18:ea:c5: 70:9b:90:4a:e7:5b:1d:34:0f:2c:7f:60:4b:8d:78: e0:3a:07:85:87:ef:97:47:ce:6c:64:48:75:41:72: c1:41:ef:ae:91:20:ab:5c:28:f7:61:89:a2:51:33: 3c:45:01:22:db:71:58:00:f2:e1:f1:9f:bc:70:d1: 43:fa:c9:8a:ec:80:af:0a:fc:21:a6:31:43:54:f1: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:22:82:E5:27:32:E6:74:A3:DD:25:21:E4:98:01:AB:83:62:FF:22 X509v3 Authority Key Identifier: keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d5:f9:82:32:c0:66:d0:7c:aa:d1:9a:90:86:48:7e:72:d8: be:93:a9:4e:d6:92:4c:f0:4b:8e:5a:2f:d8:10:ff:91:88:e3: ca:57:86:b7:c2:cf:42:95:21:24:de:de:e3:41:61:0f:ce:10: 59:ec:c1:a7:13:29:b6:7a:0e:6f:36:e0:7a:b3:ec:15:a7:3f: 54:e0:98:e7:27:8c:05:2f:9b:96:de:66:60:13:dd:dd:4a:ca: f4:d9:2e:30:5d:64:0d:9c:f2:34:f7:9e:1b:da:04:a4:e5:3c: 96:bf:5d:5a:de:ae:b0:59:b4:03:32:b6:ab:6a:02:7b:4b:09: 26:9c:73:77:a6:c5:d3:66:49:4f:96:4c:a1:a7:87:8c:e3:31: 93:6b:cf:e6:3d:2c:1c:ff:3c:a4:c9:05:f6:98:ae:75:db:02: 44:0d:ef:3c:71:24:87:dc:74:15:ba:95:f8:72:6b:d1:5a:12: 54:8a:c2:87:1b:13:37:c2:13:20:65:a2:23:49:ae:94:24:03: 6a:80:25:6e:25:20:96:a3:93:85:4b:08:32:79:0f:b5:60:49: 40:6f:d1:01:f1:99:19:44:21:77:c2:df:cc:cb:55:58:d6:1c: 17:e0:c3:39:0e:18:f3:95:b2:5a:41:fb:f3:9f:f1:a5:2a:23: 6b:ab:d7:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C9+/yHtdzfHW0PKfChsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZGNiMDJiNjFlM2ExNWVhYzM3M2I5OTJlMGUxYTY1NDVm NjFlNTIwHhcNMjUxMjA2MTkwMzA3WhcNMjUxMjA3MTkwMzA3WjAzMTEwLwYDVQQD EyhmNTIyODJlNTI3MzJlNjc0YTNkZDI1MjFlNDk4MDFhYjgzNjJmZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrlgYn3V12qGiRsVdLErzpy0fsAa G7YkQSgBS7Zk6wElBi63pimT10nkYxDv3SJ+9G5B99CUi1T4FGHp/J022kvHmm/t OjmshfeUQ+nG2VcHcT2kHg5mdjDZOq433Hr45qefkl3TVFD0gOCxgn6Gj+YrFMG9 v3l6+uYnNyqzJM+9TkXgvV2rRQFRaSO+yo1QKuWGj51pwJhMuTbBQaQNA0oF6q/u AT66zKMhcIYQvxcY6sVwm5BK51sdNA8sf2BLjXjgOgeFh++XR85sZEh1QXLBQe+u kSCrXCj3YYmiUTM8RQEi23FYAPLh8Z+8cNFD+smK7ICvCvwhpjFDVPHurQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUiguUnMuZ0o90lIeSYAauDYv8iMB8GA1UdIwQY MBaAFNzcsCth46FerDc7mS4OGmVF9h5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAt NjY3NTg0Nzk4NjNlLzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAtNjY3NTg0Nzk4NjNl LzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtX5gjLA ZtB8qtGakIZIfnLYvpOpTtaSTPBLjlov2BD/kYjjyleGt8LPQpUhJN7e40FhD84Q WezBpxMptnoObzbgerPsFac/VOCY5yeMBS+blt5mYBPd3UrK9NkuMF1kDZzyNPee G9oEpOU8lr9dWt6usFm0AzK2q2oCe0sJJpxzd6bF02ZJT5ZMoaeHjOMxk2vP5j0s HP88pMkF9piuddsCRA3vPHEkh9x0FbqV+HJr0VoSVIrChxsTN8ITIGWiI0mulCQD aoAlbiUglqOThUsIMnkPtWBJQG/RAfGZGUQhd8LfzMtVWNYcF+DDOQ4Y85WyWkH7 85/xpSoja6vXAA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:41:31 2025 by rpki-client