This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json) Hash identifier: mNPBYRFbUb77CEAv8hYMo48tIQd3uT5eYuG20poTyqk= Subject key identifier: 8B:63:BB:B4:4E:FF:D7:02:D6:59:54:C3:83:FE:B5:96:54:E7:99:74 Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d Certificate serial: 019AF50B9092A6DC88595F357DE69A90ED3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft Manifest number: 1179 Signing time: Sat 06 Dec 2025 19:02:46 +0000 Manifest this update: Sat 06 Dec 2025 19:02:46 +0000 Manifest next update: Sun 07 Dec 2025 19:02:46 +0000 Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: AS7Et8fSd7smQOyxPMygcqa4RGOCB4+ypxVBWb8S6mI=) 2: 9yOwmAU645k5B-2q5IOc7M05GTo.roa (hash: E7bgo02yf2p1Xr2S53fCsY3j/+dXZDb8jPxeB97qfpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:90:92:a6:dc:88:59:5f:35:7d:e6:9a:90:ed:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d Validity Not Before: Dec 6 19:02:46 2025 GMT Not After : Dec 7 19:02:46 2025 GMT Subject: CN=8b63bbb44effd702d65954c383feb59654e79974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:13:04:06:8e:53:2b:95:b4:f1:f5:1a:4b: 24:c6:a9:92:24:6c:4d:96:e0:f0:96:88:cd:34:04: 94:9c:b9:e3:f6:91:c9:8a:bf:a1:4e:c0:67:6e:76: 15:9a:4f:2f:79:63:ad:c3:a5:72:ab:fc:08:50:32: 4b:4a:02:70:5c:04:a1:ca:9a:ba:fc:f3:da:7d:e5: 97:a9:53:d0:e1:98:a0:71:a4:d2:3c:db:29:27:28: a1:d9:42:c2:97:6c:99:c0:58:19:ae:26:f9:3d:7e: 15:89:d9:03:26:93:0c:a4:0e:c5:97:81:6c:62:11: dc:7f:87:cd:c0:bb:e5:ec:35:64:15:55:e2:4b:25: 0e:8a:62:26:1b:5e:62:54:ea:68:c5:2b:00:7e:20: 60:a5:54:ab:0d:ae:f3:5b:95:28:11:e2:93:db:fb: d9:42:7b:67:75:ba:e5:71:17:7c:e6:3b:4f:40:c4: 79:17:64:96:25:47:ad:8b:48:95:2f:ab:e5:03:81: 4f:12:18:4e:e8:ec:b7:1e:24:8a:b8:ef:84:e8:fb: 70:e4:6b:a0:bd:7b:f7:b2:df:db:39:eb:9a:16:ca: fe:9c:23:df:9c:9f:02:ff:1a:c5:8a:91:1e:0d:6f: 5a:6e:e5:ec:01:7d:10:60:06:53:eb:f3:eb:4c:3d: 38:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:63:BB:B4:4E:FF:D7:02:D6:59:54:C3:83:FE:B5:96:54:E7:99:74 X509v3 Authority Key Identifier: keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:10:07:9c:d0:42:9c:1d:74:76:d6:e2:1b:2f:73:30:52:45: 25:2c:d9:92:1b:b1:8a:5b:a8:dc:fa:01:be:3c:29:f6:a2:1d: 24:fd:f7:5a:07:8a:6e:b9:35:7d:3e:d6:28:8d:98:72:19:2a: 60:3d:ff:00:57:7a:61:00:64:0c:06:43:bd:b0:45:af:3c:b8: ea:bb:c4:53:60:d3:95:95:43:04:ca:7d:46:8f:91:de:0a:b6: ab:7a:b5:c1:a0:d7:f7:73:fc:e4:d5:b3:ae:f6:fb:fa:b7:b1: e5:f7:66:17:e9:1f:2a:4a:c8:99:07:c1:3c:ab:e8:f5:24:08: 7a:eb:55:88:10:17:f4:4b:41:40:ce:ad:a1:ea:a5:4f:f2:e0: 5e:14:e9:b1:12:76:5d:19:a8:f0:a9:c5:e3:18:25:9d:a1:f6: 96:74:51:fd:c1:79:79:19:c1:30:d4:67:7b:6f:27:e5:ce:d1: fc:b4:35:28:40:cc:13:fd:8e:02:ea:f8:27:46:e8:b9:ff:3e: 6b:ee:cb:ea:4a:f4:6b:e8:0b:a8:8c:47:6c:dd:ab:d8:d6:88: 99:97:23:e3:45:be:54:0d:e8:70:b4:d3:ed:c6:b3:35:31:55: 7a:8d:2d:c6:14:1e:bf:b7:71:3f:f0:1f:01:bb:34:e0:12:68: 37:46:f0:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5CSptyIWV81feaakO08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkM2Q0MDExMTc1ZTVkZjdhM2Y1N2QzOGU3ODE1MGEyYzA1 ZmRkMWQwHhcNMjUxMjA2MTkwMjQ2WhcNMjUxMjA3MTkwMjQ2WjAzMTEwLwYDVQQD Eyg4YjYzYmJiNDRlZmZkNzAyZDY1OTU0YzM4M2ZlYjU5NjU0ZTc5OTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRETBAaOUyuVtPH1GkskxqmSJGxN luDwlojNNASUnLnj9pHJir+hTsBnbnYVmk8veWOtw6Vyq/wIUDJLSgJwXAShypq6 /PPafeWXqVPQ4ZigcaTSPNspJyih2ULCl2yZwFgZrib5PX4VidkDJpMMpA7Fl4Fs YhHcf4fNwLvl7DVkFVXiSyUOimImG15iVOpoxSsAfiBgpVSrDa7zW5UoEeKT2/vZ QntndbrlcRd85jtPQMR5F2SWJUeti0iVL6vlA4FPEhhO6Oy3HiSKuO+E6Ptw5Gug vXv3st/bOeuaFsr+nCPfnJ8C/xrFipEeDW9abuXsAX0QYAZT6/PrTD040QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItju7RO/9cC1llUw4P+tZZU55l0MB8GA1UdIwQY MBaAFN09QBEXXl33o/V9OOeBUKLAX90dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQt MmQwYTc4YmU4OTJkLzEvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQtMmQwYTc4YmU4OTJk LzEvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxAHnNBC nB10dtbiGy9zMFJFJSzZkhuxiluo3PoBvjwp9qIdJP33WgeKbrk1fT7WKI2Ychkq YD3/AFd6YQBkDAZDvbBFrzy46rvEU2DTlZVDBMp9Ro+R3gq2q3q1waDX93P85NWz rvb7+rex5fdmF+kfKkrImQfBPKvo9SQIeutViBAX9EtBQM6toeqlT/LgXhTpsRJ2 XRmo8KnF4xglnaH2lnRR/cF5eRnBMNRne28n5c7R/LQ1KEDME/2OAur4J0bouf8+ a+7L6kr0a+gLqIxHbN2r2NaImZcj40W+VA3ocLTT7cazNTFVeo0txhQev7dxP/Af Abs04BJoN0bwIQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:44 2025 by rpki-client