This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json) Hash identifier: BG3eLXMukg6F2f4Ebt1vz+VoApOkhaQ+LPddwh6PCGs= Subject key identifier: CD:81:2C:BE:85:B1:4D:A9:B9:71:F9:FF:1B:4D:AA:45:1F:1E:50:72 Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20 Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120 Certificate serial: 019AF12E1A0C64FD36083DE2F9CFC1FC71D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:01 +0000 Manifest this update: Sat 06 Dec 2025 01:02:01 +0000 Manifest next update: Sun 07 Dec 2025 01:02:01 +0000 Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: 2BniLPjiWjtPzkaBBHDhhCjxAM7ZIKayO8mIAGz1PMQ=) 2: VU0FkvZgVaRI8EGkm-qXkP1h2_c.roa (hash: FXgImtBv7FeA5blXsKdg5pD7MuiscFVJi0Lfx25h6e4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1a:0c:64:fd:36:08:3d:e2:f9:cf:c1:fc:71:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120 Validity Not Before: Dec 6 01:02:01 2025 GMT Not After : Dec 7 01:02:01 2025 GMT Subject: CN=cd812cbe85b14da9b971f9ff1b4daa451f1e5072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2a:4d:09:0a:60:ed:4a:fc:6f:40:87:ff:6e: 76:62:3b:c3:39:f9:e0:42:28:2f:c2:ce:c9:8a:2d: 6b:4a:99:2c:be:cf:6d:8e:42:1a:e3:97:0f:79:26: 38:40:8c:3e:72:ea:5d:12:65:ad:c8:90:6d:79:89: f3:aa:9e:aa:ee:78:79:ae:39:ac:02:6d:73:41:b6: 20:fb:b8:e6:ce:72:30:61:ef:87:ed:56:1b:2e:d8: 24:a9:e8:84:5f:ea:7e:1a:b1:f3:ae:b1:36:44:09: 6d:21:7d:c8:e6:ab:2e:1e:51:8f:9f:3c:c9:d0:2f: 4d:28:db:dc:cd:72:6d:d8:e8:76:64:48:89:cf:7b: b1:1c:93:9f:5e:78:6f:e4:e0:65:e5:ec:79:9e:09: c6:b7:ac:05:82:f5:d7:ec:ca:3d:94:95:79:0e:bb: 55:5b:ff:51:f2:f8:7f:1c:13:32:8a:56:6e:73:16: b3:e9:12:cd:43:88:e2:76:ca:33:6e:c7:79:e8:30: 07:21:c0:6e:61:bb:b6:8c:8a:de:f6:ab:70:99:de: 4a:c8:ac:f4:cf:3d:1a:f3:14:1b:98:96:80:1e:b5: 2d:7f:87:80:9f:0f:ea:ab:70:16:1f:2b:da:d9:fd: b0:7c:54:e0:91:8b:76:6b:9d:e7:d9:b2:ea:72:53: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:81:2C:BE:85:B1:4D:A9:B9:71:F9:FF:1B:4D:AA:45:1F:1E:50:72 X509v3 Authority Key Identifier: keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6a:89:c5:0f:e8:7d:8b:4e:fd:3d:2f:7c:9b:c4:8a:a2:8a: 41:61:94:ff:9a:d7:59:bd:48:c6:48:c4:45:2d:29:5a:6b:6f: 2e:38:91:d5:fe:c3:74:48:86:11:9c:d7:b1:93:ac:82:cf:dd: ab:fa:b1:37:be:ae:3e:e9:9f:ed:6c:16:17:91:da:dc:fc:e0: cd:e2:6e:8c:95:e0:c8:03:e7:9d:e3:41:44:17:5f:10:2f:e2: 1f:db:7f:57:a5:37:7b:33:3b:6a:7f:cc:d9:fd:d8:2a:7a:77: 55:1e:c6:0b:1c:2b:da:76:aa:49:d7:a7:96:8f:e8:45:21:d9: 93:bb:71:da:89:1c:e4:82:de:16:6e:27:03:ed:73:c4:90:ea: cb:71:d2:9e:bd:32:bd:c2:bc:1e:f1:b6:06:a0:4e:67:df:cf: c9:0c:eb:b1:ab:4a:6f:f1:b2:29:90:a1:28:9a:e2:9b:6f:96: e4:d7:26:00:4e:a0:45:f1:0d:19:f7:3b:4e:35:d1:20:b4:9f: 26:21:e0:50:9b:c6:9b:6d:28:1c:f1:23:98:6f:e1:4b:9e:8d: 6b:c0:6d:77:fe:aa:e6:91:91:36:52:dd:98:6e:fc:bf:7f:bd: 96:b8:70:f8:b5:4b:a9:01:78:c8:e8:07:3c:cd:96:c3:fc:3e: cc:ce:0b:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhoMZP02CD3i+c/B/HHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDVkZjZlNDA0ZWY5MjBlNmE1OTI4ZDg5NjNlNmE1Zjhk NjExMjAwHhcNMjUxMjA2MDEwMjAxWhcNMjUxMjA3MDEwMjAxWjAzMTEwLwYDVQQD EyhjZDgxMmNiZTg1YjE0ZGE5Yjk3MWY5ZmYxYjRkYWE0NTFmMWU1MDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CpNCQpg7Ur8b0CH/252YjvDOfng Qigvws7Jii1rSpksvs9tjkIa45cPeSY4QIw+cupdEmWtyJBteYnzqp6q7nh5rjms Am1zQbYg+7jmznIwYe+H7VYbLtgkqeiEX+p+GrHzrrE2RAltIX3I5qsuHlGPnzzJ 0C9NKNvczXJt2Oh2ZEiJz3uxHJOfXnhv5OBl5ex5ngnGt6wFgvXX7Mo9lJV5DrtV W/9R8vh/HBMyilZucxaz6RLNQ4jidsozbsd56DAHIcBuYbu2jIre9qtwmd5KyKz0 zz0a8xQbmJaAHrUtf4eAnw/qq3AWHyva2f2wfFTgkYt2a53n2bLqclMIPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2BLL6FsU2puXH5/xtNqkUfHlByMB8GA1UdIwQY MBaAFNwF325ATvkg5qWSjYlj5qX41hEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQt YmNlOTM0MjA1YWU4LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQtYmNlOTM0MjA1YWU4 LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGqJxQ/o fYtO/T0vfJvEiqKKQWGU/5rXWb1IxkjERS0pWmtvLjiR1f7DdEiGEZzXsZOsgs/d q/qxN76uPumf7WwWF5Ha3PzgzeJujJXgyAPnneNBRBdfEC/iH9t/V6U3ezM7an/M 2f3YKnp3VR7GCxwr2naqSdenlo/oRSHZk7tx2okc5ILeFm4nA+1zxJDqy3HSnr0y vcK8HvG2BqBOZ9/PyQzrsatKb/GyKZChKJrim2+W5NcmAE6gRfENGfc7TjXRILSf JiHgUJvGm20oHPEjmG/hS56Na8Btd/6q5pGRNlLdmG78v3+9lrhw+LVLqQF4yOgH PM2Ww/w+zM4L2A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:23 2025 by rpki-client