This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft File: 3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json) Hash identifier: KnIiZam/YiEqLPd6l97474yjNsmnM51h63trk/qz9zA= Subject key identifier: 0D:36:A2:B2:8F:3C:68:37:29:8C:BB:56:E6:C4:F8:A4:D7:0E:39:9E Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c Certificate serial: 019AF2769165FC4CE15F8A19A4FC12ECE36F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft Manifest number: 0EC2 Signing time: Sat 06 Dec 2025 07:00:47 +0000 Manifest this update: Sat 06 Dec 2025 07:00:47 +0000 Manifest next update: Sun 07 Dec 2025 07:00:47 +0000 Files and hashes: 1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: +PmO6nYBgfbmsZopl9Wv/5Vbi4TvmzH8tje/WXpzkVw=) 2: jyRFM9_T_syhJNdrBbZtEXQjBxY.roa (hash: 3sN/6EgdGuf6mYlFqORSiJaf85S1hh85EE3f4pncjgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:91:65:fc:4c:e1:5f:8a:19:a4:fc:12:ec:e3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c Validity Not Before: Dec 6 07:00:47 2025 GMT Not After : Dec 7 07:00:47 2025 GMT Subject: CN=0d36a2b28f3c6837298cbb56e6c4f8a4d70e399e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a5:33:dd:bb:4a:88:0c:69:9f:76:78:2b:9d: e4:14:19:80:cd:f3:54:2c:aa:27:c1:ef:4d:aa:1b: 82:f4:40:a3:47:0e:cf:68:85:c8:a2:a7:6d:b3:7f: 6b:60:b5:24:a2:54:0e:f0:86:ef:45:ca:78:0a:64: 0f:86:d3:c2:b1:fd:85:ad:3d:da:6f:a4:02:88:5f: 0d:90:93:30:2f:b7:3a:ef:fa:f1:6c:fd:80:5d:02: 2b:ba:6f:01:a0:c1:7b:8c:67:55:ac:73:17:93:82: 19:f2:ff:f4:b5:63:b8:76:20:bd:9d:8e:c2:de:7d: cf:cd:8a:70:01:d6:78:fa:8d:d3:06:e6:f3:6e:a8: ba:9c:b2:d7:5e:61:1d:ad:65:99:ee:eb:69:48:33: 06:1c:cf:70:56:b7:83:41:e5:4e:9a:cc:06:17:27: 1e:5a:04:20:19:66:84:b2:9b:2c:8a:57:e8:ac:b3: 60:55:58:16:f7:73:9b:e7:bf:5e:e4:8a:0e:7b:5d: 14:33:ea:0b:02:c1:b8:d7:86:9d:34:b3:52:3b:20: 8d:83:98:29:51:de:f6:a1:0f:49:c5:29:51:9c:39: 35:af:7b:fe:50:01:a6:a6:60:b1:98:23:7d:e5:26: d5:25:78:01:a1:dc:47:4c:b4:f1:a0:cc:11:dd:aa: c0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:36:A2:B2:8F:3C:68:37:29:8C:BB:56:E6:C4:F8:A4:D7:0E:39:9E X509v3 Authority Key Identifier: keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6e:08:37:af:46:7f:d2:7d:35:a3:8b:0a:ce:89:20:8d:cf: 39:54:aa:72:1b:16:52:70:db:cd:67:49:65:23:55:a3:33:a8: eb:73:1d:1d:4d:de:08:a1:28:70:e4:2a:35:a2:47:a6:76:89: bd:02:9f:73:5e:bf:28:63:ff:b1:1e:59:68:6a:af:e5:7c:2f: a2:bf:d6:c7:c4:9d:e0:60:0a:7d:94:c2:a9:5d:63:d1:2b:aa: 7c:3e:c1:cb:c1:8c:d6:e8:7b:ad:e8:36:54:3c:99:e6:b1:79: e7:7a:8d:e9:f4:91:5b:fc:0c:0d:77:36:4b:d7:6f:c6:c0:e1: bc:55:35:5f:24:22:a2:8e:54:47:49:47:d6:3e:26:6d:ee:99: 1c:0e:80:22:a8:ed:ff:d3:ff:9a:28:05:55:e9:5d:89:85:4d: d3:9f:b3:39:60:ba:3c:25:8f:ad:10:99:25:27:48:0e:3e:e6: 3c:cc:b2:d7:a0:05:65:b2:4d:89:07:84:ea:9c:52:c9:33:42: 4c:71:96:e1:d1:c1:ef:11:07:15:3b:54:fa:a6:e3:86:ae:a0: fe:ab:52:80:63:26:7a:94:54:4f:80:39:ea:96:df:86:75:1f: f0:4c:5b:83:3e:0d:58:48:04:87:97:63:35:c5:66:ec:8b:b7: e5:22:c4:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpFl/EzhX4oZpPwS7ONvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOGFhYmEwZjQ2YmFhMTQ0ZmRiMDkzOGU5MWMxNGY5NGM2 MTY1MGMwHhcNMjUxMjA2MDcwMDQ3WhcNMjUxMjA3MDcwMDQ3WjAzMTEwLwYDVQQD EygwZDM2YTJiMjhmM2M2ODM3Mjk4Y2JiNTZlNmM0ZjhhNGQ3MGUzOTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6Uz3btKiAxpn3Z4K53kFBmAzfNU LKonwe9NqhuC9ECjRw7PaIXIoqdts39rYLUkolQO8IbvRcp4CmQPhtPCsf2FrT3a b6QCiF8NkJMwL7c67/rxbP2AXQIrum8BoMF7jGdVrHMXk4IZ8v/0tWO4diC9nY7C 3n3PzYpwAdZ4+o3TBubzbqi6nLLXXmEdrWWZ7utpSDMGHM9wVreDQeVOmswGFyce WgQgGWaEspssilforLNgVVgW93Ob579e5IoOe10UM+oLAsG414adNLNSOyCNg5gp Ud72oQ9JxSlRnDk1r3v+UAGmpmCxmCN95SbVJXgBodxHTLTxoMwR3arApwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA02orKPPGg3KYy7VubE+KTXDjmeMB8GA1UdIwQY MBaAFN2Kq6D0a6oUT9sJOOkcFPlMYWUMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xZmEyN2UtYWFmMC00YmUyLWE1MjIt YTgwYzk0NzYxZDIzLzEvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xZmEyN2UtYWFmMC00YmUyLWE1MjItYTgwYzk0NzYxZDIz LzEvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADW4IN69G f9J9NaOLCs6JII3POVSqchsWUnDbzWdJZSNVozOo63MdHU3eCKEocOQqNaJHpnaJ vQKfc16/KGP/sR5ZaGqv5Xwvor/Wx8Sd4GAKfZTCqV1j0SuqfD7By8GM1uh7reg2 VDyZ5rF553qN6fSRW/wMDXc2S9dvxsDhvFU1XyQioo5UR0lH1j4mbe6ZHA6AIqjt /9P/migFVeldiYVN05+zOWC6PCWPrRCZJSdIDj7mPMyy16AFZbJNiQeE6pxSyTNC THGW4dHB7xEHFTtU+qbjhq6g/qtSgGMmepRUT4A56pbfhnUf8Exbgz4NWEgEh5dj NcVm7Iu35SLEvA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:50 2025 by rpki-client