This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json) Hash identifier: plM/sSTOp+Lb1oBdrIZPgcdY53t8ezuKO68QwLHD3eY= Subject key identifier: 49:88:20:C1:F7:84:2E:1F:64:F5:69:08:FE:B2:06:D3:DB:1E:FD:C7 Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9 Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9 Certificate serial: 019AF0884C877C642F9AAB8946F19A28D17B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft Manifest number: 111C Signing time: Fri 05 Dec 2025 22:00:55 +0000 Manifest this update: Fri 05 Dec 2025 22:00:55 +0000 Manifest next update: Sat 06 Dec 2025 22:00:55 +0000 Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: EpFNIc+NqILipuNx5SacvI5YSKAwnjPxYIXLXoWk3dA=) 2: 6f05f7w22zRcUpz28tjM6XCdsYk.roa (hash: kl4KaLs8etslFAKNgVQw6su1C8PWL6O+HJhYp1T4Tak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:4c:87:7c:64:2f:9a:ab:89:46:f1:9a:28:d1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9 Validity Not Before: Dec 5 22:00:55 2025 GMT Not After : Dec 6 22:00:55 2025 GMT Subject: CN=498820c1f7842e1f64f56908feb206d3db1efdc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c7:27:dc:14:bc:17:0b:87:17:8f:5d:32:9e: 76:c8:d1:62:d6:01:df:29:0d:69:8b:f9:cf:94:ff: 10:32:76:94:83:19:89:a8:c1:2a:69:63:41:a3:44: 8c:b0:8f:42:01:8d:53:a0:8f:01:6e:68:00:ba:2b: a1:2e:d4:b2:65:1d:36:99:c3:96:43:67:af:57:50: 49:cf:62:ca:8c:82:60:11:51:c5:b2:14:8e:67:ae: 7f:7d:3c:74:7c:6e:6b:5a:e2:2c:dc:c3:b0:3c:c1: f7:46:31:d5:28:fb:2b:90:da:c2:5e:1e:88:40:e0: 0d:9a:9d:d4:a6:a2:96:9b:b0:ee:cc:0e:a6:92:1a: a0:9b:56:70:bd:2c:fc:04:20:02:4d:33:36:63:98: ed:02:68:a9:22:6b:0e:7f:cc:41:06:8f:83:83:94: 5d:51:22:a4:9d:40:81:63:ce:55:25:97:48:29:65: 63:78:25:66:2c:5d:9f:64:60:dc:2a:c2:c2:17:2f: 49:15:08:a2:14:33:6b:de:cc:c5:b5:0e:be:8d:d5: 45:c4:be:11:f2:c8:94:70:5b:13:ce:b7:5b:00:e4: 1f:d9:dc:f7:fd:51:de:bf:de:f2:a2:d0:3f:d8:4c: 2d:ff:07:dc:cf:58:36:69:ec:67:62:0f:e4:4c:6b: b2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:88:20:C1:F7:84:2E:1F:64:F5:69:08:FE:B2:06:D3:DB:1E:FD:C7 X509v3 Authority Key Identifier: keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:46:a0:86:2c:57:b7:37:00:fa:6a:6d:56:00:c7:2b:be:3b: e1:b6:d7:de:38:bf:72:73:cd:4c:a3:40:8f:20:df:1f:86:8f: f9:30:16:52:a4:0f:b7:4b:b2:a9:75:4b:ab:ea:be:2a:1d:e3: 15:f8:32:86:08:0f:25:fa:4e:53:15:6b:0e:9d:af:bc:c6:e1: 00:84:7d:78:bd:36:74:7c:21:22:f8:85:32:5a:fd:41:61:64: 68:7e:9e:d8:e8:f7:c1:b5:d4:fe:71:6c:61:84:a0:68:b6:87: db:0b:84:5a:dd:03:40:95:4f:14:33:67:a1:dc:d0:f6:7a:60: 89:cc:8b:fe:a3:63:f7:1e:eb:28:a2:17:33:ab:e4:28:ed:87: 44:52:67:fd:79:6d:13:d7:57:d1:66:11:21:65:28:34:ab:dd: c6:fe:51:96:67:92:72:24:ab:99:55:82:4f:9b:4e:04:ff:f0: 39:02:1b:40:ae:6a:8a:3f:76:aa:fb:16:b2:cc:9d:f7:11:c9: c9:e5:68:95:59:f0:77:e2:d3:94:19:35:d7:a6:ca:48:f6:b3: ea:fd:72:ab:c1:4c:fd:e9:2c:47:80:b6:ed:0a:cf:5f:3e:5d: 07:0c:71:41:d5:e4:cd:0a:6b:d5:e6:75:f8:9c:ec:27:b5:e6: b6:37:fa:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiEyHfGQvmquJRvGaKNF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjY2E1MjIxOTZmZDA5YmFlNzM5YjZiZDIzMjJlNWViOTBk YTRmYjkwHhcNMjUxMjA1MjIwMDU1WhcNMjUxMjA2MjIwMDU1WjAzMTEwLwYDVQQD Eyg0OTg4MjBjMWY3ODQyZTFmNjRmNTY5MDhmZWIyMDZkM2RiMWVmZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8cn3BS8FwuHF49dMp52yNFi1gHf KQ1pi/nPlP8QMnaUgxmJqMEqaWNBo0SMsI9CAY1ToI8BbmgAuiuhLtSyZR02mcOW Q2evV1BJz2LKjIJgEVHFshSOZ65/fTx0fG5rWuIs3MOwPMH3RjHVKPsrkNrCXh6I QOANmp3UpqKWm7DuzA6mkhqgm1ZwvSz8BCACTTM2Y5jtAmipImsOf8xBBo+Dg5Rd USKknUCBY85VJZdIKWVjeCVmLF2fZGDcKsLCFy9JFQiiFDNr3szFtQ6+jdVFxL4R 8siUcFsTzrdbAOQf2dz3/VHev97yotA/2Ewt/wfcz1g2aexnYg/kTGuylwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmIIMH3hC4fZPVpCP6yBtPbHv3HMB8GA1UdIwQY MBaAFNzKUiGW/Qm65zm2vSMi5euQ2k+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMt M2IyNTBhZTE4OTM2LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMtM2IyNTBhZTE4OTM2 LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEaghixX tzcA+mptVgDHK7474bbX3ji/cnPNTKNAjyDfH4aP+TAWUqQPt0uyqXVLq+q+Kh3j FfgyhggPJfpOUxVrDp2vvMbhAIR9eL02dHwhIviFMlr9QWFkaH6e2Oj3wbXU/nFs YYSgaLaH2wuEWt0DQJVPFDNnodzQ9npgicyL/qNj9x7rKKIXM6vkKO2HRFJn/Xlt E9dX0WYRIWUoNKvdxv5RlmeSciSrmVWCT5tOBP/wOQIbQK5qij92qvsWssyd9xHJ yeVolVnwd+LTlBk116bKSPaz6v1yq8FM/eksR4C27QrPXz5dBwxxQdXkzQpr1eZ1 +JzsJ7Xmtjf6Qg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:14 2025 by rpki-client