This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json) Hash identifier: 0RF9ECDMChwjYETOOBokPyqRbsOzjbd09bhhFB6jsFU= Subject key identifier: 26:35:B0:F1:6A:E3:E4:9B:66:16:D8:BF:E9:78:EA:3F:A2:C5:80:14 Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47 Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847 Certificate serial: 019AF19AA365C0A43D766D31B111E82C09E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 03:00:34 +0000 Manifest this update: Sat 06 Dec 2025 03:00:34 +0000 Manifest next update: Sun 07 Dec 2025 03:00:34 +0000 Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: hWh6Vx+PpZig+L5zuHNv6YhfDZJsZwrGSj8z2NiwdWc=) 2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a3:65:c0:a4:3d:76:6d:31:b1:11:e8:2c:09:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847 Validity Not Before: Dec 6 03:00:34 2025 GMT Not After : Dec 7 03:00:34 2025 GMT Subject: CN=2635b0f16ae3e49b6616d8bfe978ea3fa2c58014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:8b:50:c9:81:f6:00:f0:15:94:da:63:a0: 70:97:a9:76:67:33:c4:09:67:a8:16:85:db:4b:10: 71:dc:d9:67:57:da:4d:c5:2a:5f:75:af:71:bf:36: aa:37:3c:8b:fe:13:1f:9f:76:fa:76:c7:3b:0b:b1: 5c:0a:6d:be:69:f6:a1:d6:9f:dc:3c:08:a3:0d:52: bc:e3:0a:f1:4f:ee:ba:e8:eb:10:d2:f7:6c:25:39: bc:9b:82:74:55:35:9a:95:c0:b8:13:f3:f8:f8:29: db:52:cb:81:5a:f9:d4:2d:76:36:7c:f5:b0:e9:d8: b0:34:16:5d:47:9d:25:34:4a:a7:72:86:fa:a3:f7: c3:8e:90:30:aa:2a:81:ef:08:9a:bc:dc:c6:fb:3b: 83:69:39:14:e5:23:9e:29:2d:c6:ce:99:1d:f4:22: 7a:7a:e2:d0:7b:10:da:81:81:d6:0b:90:a6:07:81: 5a:ba:ef:a1:bb:aa:aa:5d:ed:49:71:4d:80:e2:26: 36:b9:f1:8a:3f:5d:54:e1:ac:4a:e7:a1:11:80:7e: c6:89:e5:78:50:8a:1f:f1:84:98:6d:ac:7b:fc:30: 0a:32:1b:89:11:59:c5:1a:d4:b7:97:eb:76:68:10: d4:12:5d:fd:e8:c0:1f:06:b2:01:a6:2d:da:75:2e: 52:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:35:B0:F1:6A:E3:E4:9B:66:16:D8:BF:E9:78:EA:3F:A2:C5:80:14 X509v3 Authority Key Identifier: keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:e4:c9:3b:d7:28:43:61:e9:1c:89:43:b0:ce:d6:b6:0d:45: 24:39:96:8c:db:cb:c2:42:9a:92:d1:b2:a4:6b:8d:b6:f4:f2: da:44:cb:1b:cb:5c:71:41:6a:34:90:67:d2:17:24:3e:6b:29: 7f:00:96:04:10:8e:23:d5:78:f7:de:14:4a:ba:4a:0b:c8:f7: 99:5f:ca:95:67:07:d6:da:24:7c:de:10:31:23:cd:d7:49:2b: 1e:05:cb:da:d5:05:af:74:df:b2:58:72:47:c9:07:fd:44:59: 68:19:ab:db:6a:2a:f8:ae:59:10:e1:d5:cb:f6:09:0c:12:b5: a9:97:18:0f:18:fb:28:3d:5f:32:d4:53:33:cb:21:26:a7:ff: 52:07:35:e6:1a:a1:22:79:20:68:a1:11:a2:95:d5:4c:53:23: 46:8f:ae:60:4a:0e:cc:87:82:6e:25:77:57:92:de:6f:cf:3b: 12:30:4e:88:ee:8a:5c:b6:17:bc:f0:f7:8e:e7:e2:22:f0:98: ef:4e:75:81:f6:51:ac:fa:4f:65:53:77:06:66:37:db:26:53: b7:e6:47:b6:b4:65:f0:a6:43:63:fa:77:94:2e:75:35:ab:88: 42:9f:e7:5d:4c:c3:94:82:03:f6:58:22:ee:67:2d:6c:74:fb: f1:0b:b5:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqNlwKQ9dm0xsRHoLAnnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGRlYTRlYTI1NDZkN2EwMTlhNGVmODI0M2I1ZWI2MzU2 NWM4NDcwHhcNMjUxMjA2MDMwMDM0WhcNMjUxMjA3MDMwMDM0WjAzMTEwLwYDVQQD EygyNjM1YjBmMTZhZTNlNDliNjYxNmQ4YmZlOTc4ZWEzZmEyYzU4MDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoCLUMmB9gDwFZTaY6Bwl6l2ZzPE CWeoFoXbSxBx3NlnV9pNxSpfda9xvzaqNzyL/hMfn3b6dsc7C7FcCm2+afah1p/c PAijDVK84wrxT+666OsQ0vdsJTm8m4J0VTWalcC4E/P4+CnbUsuBWvnULXY2fPWw 6diwNBZdR50lNEqncob6o/fDjpAwqiqB7wiavNzG+zuDaTkU5SOeKS3Gzpkd9CJ6 euLQexDagYHWC5CmB4Fauu+hu6qqXe1JcU2A4iY2ufGKP11U4axK56ERgH7GieV4 UIof8YSYbax7/DAKMhuJEVnFGtS3l+t2aBDUEl396MAfBrIBpi3adS5SEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCY1sPFq4+SbZhbYv+l46j+ixYAUMB8GA1UdIwQY MBaAFNwN6k6iVG16AZpO+CQ7XrY1ZchHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMt M2Q0YjI4M2YzMjJkLzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMtM2Q0YjI4M2YzMjJk LzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyOTJO9co Q2HpHIlDsM7Wtg1FJDmWjNvLwkKaktGypGuNtvTy2kTLG8tccUFqNJBn0hckPmsp fwCWBBCOI9V4994USrpKC8j3mV/KlWcH1tokfN4QMSPN10krHgXL2tUFr3Tfslhy R8kH/URZaBmr22oq+K5ZEOHVy/YJDBK1qZcYDxj7KD1fMtRTM8shJqf/Ugc15hqh InkgaKERopXVTFMjRo+uYEoOzIeCbiV3V5Leb887EjBOiO6KXLYXvPD3jufiIvCY 7051gfZRrPpPZVN3BmY32yZTt+ZHtrRl8KZDY/p3lC51NauIQp/nXUzDlIID9lgi 7mctbHT78Qu1XA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:50 2025 by rpki-client