This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json) Hash identifier: F2v+Wl/wex65XYwyBxgYDpTTO0wJzvIMU22crKEBjuI= Subject key identifier: D1:41:60:29:2F:57:33:68:8B:46:DE:94:D9:A9:E0:76:BB:C6:BC:32 Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2 Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2 Certificate serial: 019AF1D23000194DDF8AF482D80ADCEF8457 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft Manifest number: 0DEF Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: y9UnH7iJr8VhN43GK54z3oiR7BoT6AZLAo+TKJq1GBY=) 2: prKzcOdb2gq7whbRtn2j18st210.roa (hash: TLxvtHMzXY4Lge96VJalh1cOFoXVbLd9V2/rCUHRN3g=) 3: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:30:00:19:4d:df:8a:f4:82:d8:0a:dc:ef:84:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2 Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=d14160292f5733688b46de94d9a9e076bbc6bc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:56:88:ac:3d:23:cd:bd:e9:d2:54:31:c1: 40:27:82:b8:d7:47:0c:db:4f:35:d5:5c:a8:30:d7: ad:71:0f:fe:81:be:38:11:fd:81:9e:16:9c:df:cd: 00:bf:2c:08:76:77:47:15:62:7d:9f:56:65:b2:5c: f3:06:49:02:df:f0:67:c8:a1:06:0c:53:db:52:02: 4b:fb:de:31:cc:39:8e:b6:19:10:fd:b0:0d:a0:28: 1a:19:e7:1e:99:8d:71:0d:52:b2:ad:f4:62:60:07: 03:43:b7:c9:08:e9:a0:27:4e:23:de:ea:2a:c5:b7: b9:45:ec:64:d3:bc:e8:3c:87:9a:c6:5d:90:22:aa: 65:56:3e:77:cb:ae:e9:c2:6a:b9:98:6c:5a:79:4c: b7:7e:60:9b:7b:24:06:3a:b8:51:3b:63:03:d2:e0: 44:13:9d:80:f4:c1:ec:52:c5:31:78:da:dc:c5:e2: de:e4:16:52:6d:37:97:5b:e2:4a:b4:cf:47:27:ce: 63:cb:4a:7a:80:db:68:38:8a:f7:a5:9f:95:c5:e6: a7:a9:43:c7:c2:fd:01:17:41:ab:b7:a7:30:10:89: 68:28:0d:40:94:9b:d5:2b:48:50:7b:30:d1:06:44: 44:23:f8:49:85:a7:eb:2c:6b:fa:6f:b5:42:71:7a: e9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:41:60:29:2F:57:33:68:8B:46:DE:94:D9:A9:E0:76:BB:C6:BC:32 X509v3 Authority Key Identifier: keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:0f:58:99:20:66:f5:07:46:54:95:e9:75:f7:1f:e7:80:7a: a7:08:c1:47:d3:a2:c5:0c:1e:fd:4b:33:a3:5b:3c:07:97:4e: f1:2a:96:a0:06:c4:3a:86:6b:3e:09:c6:d5:ea:bd:27:78:55: 28:f8:e9:83:59:80:97:cb:75:b6:c8:dd:88:0c:02:8f:a5:2a: c7:ff:66:79:57:41:d0:1b:69:e9:c8:3f:b2:a1:37:07:e9:01: 3e:06:70:12:de:5d:36:bd:6b:f1:a5:c8:88:47:e8:c0:29:5b: eb:54:dd:46:7f:b0:d9:fe:9d:27:c1:64:a6:14:32:64:7c:30: 64:6c:c2:30:55:58:e3:c9:0d:75:47:d1:60:96:6c:5f:f3:31: 3b:a5:cc:75:3b:d3:d0:13:43:81:75:fa:dd:11:5b:01:5f:f0: 6a:04:26:07:31:36:f0:6c:5a:16:b8:a5:25:7a:e4:b2:5c:5f: e5:4b:9a:3c:cf:a5:ba:22:34:80:01:81:81:8c:df:45:f9:73: dd:d2:d4:0b:62:18:37:1a:ad:34:a7:98:28:ac:e4:bc:ca:69: f1:ef:02:02:1a:d5:fd:41:60:ca:6e:fe:9a:3a:98:b1:89:ae: cc:8f:85:d1:7d:be:07:bf:fa:c8:03:aa:ef:31:e3:1d:18:a2: ef:b1:03:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jAAGU3fivSC2Arc74RXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTcyYzhmYWVjYjcwNTJjODQxMjAxYjI1ZjZhMDE4ZTQ3 N2IxYzIwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD EyhkMTQxNjAyOTJmNTczMzY4OGI0NmRlOTRkOWE5ZTA3NmJiYzZiYzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYJWiKw9I8296dJUMcFAJ4K410cM 20811VyoMNetcQ/+gb44Ef2Bnhac380AvywIdndHFWJ9n1ZlslzzBkkC3/BnyKEG DFPbUgJL+94xzDmOthkQ/bANoCgaGecemY1xDVKyrfRiYAcDQ7fJCOmgJ04j3uoq xbe5Rexk07zoPIeaxl2QIqplVj53y67pwmq5mGxaeUy3fmCbeyQGOrhRO2MD0uBE E52A9MHsUsUxeNrcxeLe5BZSbTeXW+JKtM9HJ85jy0p6gNtoOIr3pZ+VxeanqUPH wv0BF0Grt6cwEIloKA1AlJvVK0hQezDRBkREI/hJhafrLGv6b7VCcXrp3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFBYCkvVzNoi0belNmp4Ha7xrwyMB8GA1UdIwQY MBaAFN7nLI+uy3BSyEEgGyX2oBjkd7HCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lZjgyOWEtYWNmYy00NDAyLTk1Y2Ut MzgzZmIyYjk1NGQ5LzEvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lZjgyOWEtYWNmYy00NDAyLTk1Y2UtMzgzZmIyYjk1NGQ5 LzEvM3Vjc2o2N0xjRkxJUVNBYkpmYWdHT1Izc2NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQ9YmSBm 9QdGVJXpdfcf54B6pwjBR9OixQwe/Uszo1s8B5dO8SqWoAbEOoZrPgnG1eq9J3hV KPjpg1mAl8t1tsjdiAwCj6Uqx/9meVdB0Btp6cg/sqE3B+kBPgZwEt5dNr1r8aXI iEfowClb61TdRn+w2f6dJ8FkphQyZHwwZGzCMFVY48kNdUfRYJZsX/MxO6XMdTvT 0BNDgXX63RFbAV/wagQmBzE28GxaFrilJXrkslxf5UuaPM+luiI0gAGBgYzfRflz 3dLUC2IYNxqtNKeYKKzkvMpp8e8CAhrV/UFgym7+mjqYsYmuzI+F0X2+B7/6yAOq 7zHjHRii77EDzw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:18 2025 by rpki-client