This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json) Hash identifier: ERVdC+WOsyi69Pml0bMwHrSrDdwEUGgfJ53Z4xy+Gs8= Subject key identifier: BE:B7:61:1C:2E:6A:A8:27:7C:67:C6:FA:66:5C:EA:23:83:16:5C:16 Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9 Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9 Certificate serial: 019AF2093FC4F0F11761D57D652D0B4BC788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft Manifest number: 0596 Signing time: Sat 06 Dec 2025 05:01:23 +0000 Manifest this update: Sat 06 Dec 2025 05:01:23 +0000 Manifest next update: Sun 07 Dec 2025 05:01:23 +0000 Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: F6gaLQFn2p2FqkOHbnnG/11R6NK1c4NbowDi3chDNxs=) 2: R82wyiQ6WGXDZ2qmyfic2Rx16EQ.roa (hash: q3ADHp8TbEdc9vO2jFfoJST4ALm7hMCr9dPnLoGdV9o=) 3: msFkodHiiLA7yYTUvQfg1svzo58.roa (hash: 8maRWfYNuUoSqjA1l1zPbJ9FPRTfD/7OAF7wZnEEN9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3f:c4:f0:f1:17:61:d5:7d:65:2d:0b:4b:c7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9 Validity Not Before: Dec 6 05:01:23 2025 GMT Not After : Dec 7 05:01:23 2025 GMT Subject: CN=beb7611c2e6aa8277c67c6fa665cea2383165c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:30:e0:ff:3c:c5:59:9c:8c:22:b2:d1:d9: b5:3b:47:7b:b5:c2:15:91:c8:13:a6:48:71:6c:ba: a5:6a:0c:82:38:d4:ed:95:98:da:25:af:98:f7:d8: a2:ba:46:24:f9:76:4d:d8:03:cc:21:20:8f:cb:c6: 34:2a:b3:39:d5:a6:11:39:af:41:38:62:91:fc:c9: e4:14:5a:be:da:55:02:d7:70:92:9a:ae:ba:b0:bc: 0e:5e:65:4e:6f:69:3a:7b:da:a1:98:5d:d2:68:d4: d5:9d:87:50:d1:1c:12:12:45:e8:02:21:52:40:20: 79:21:b1:60:ef:56:a9:b8:a0:b7:3e:62:da:ca:07: 60:f5:ed:cb:ea:1a:81:9a:eb:3e:af:d9:23:98:aa: b6:13:20:9c:6b:9c:5f:d9:c9:de:b3:0f:8d:1b:d3: 5f:2b:3f:2d:27:e2:8d:e3:61:75:49:ae:50:82:6f: 5d:75:f5:5d:f9:4e:94:e0:91:5c:c0:7d:fb:34:e1: 24:e0:06:b4:45:ae:61:c1:06:a6:39:5c:38:75:02: 75:ef:26:06:22:01:24:a4:a7:02:4e:cb:85:57:8e: 55:f8:bc:04:bd:f4:f8:45:77:1a:bb:65:7e:fa:94: e7:13:09:f4:83:50:96:c1:c8:c1:b2:85:66:1a:4c: 31:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B7:61:1C:2E:6A:A8:27:7C:67:C6:FA:66:5C:EA:23:83:16:5C:16 X509v3 Authority Key Identifier: keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:75:fd:5f:2b:c9:b3:3c:8b:ee:9b:98:a8:2b:3f:2a:13:15: 82:2b:84:c2:54:53:38:2d:8b:b9:58:50:13:be:f1:9b:6f:6f: b8:6d:e6:c2:ce:35:71:6a:72:aa:51:b9:f2:dd:eb:97:99:e0: 40:34:ac:6f:fb:68:48:49:26:90:10:c6:99:50:b5:59:9d:13: 96:5c:f5:6f:e4:50:8b:d2:3a:de:35:51:9a:4d:a0:1d:6b:1c: ef:dd:fd:ce:83:a0:59:f0:17:37:fa:09:de:96:e2:d4:ec:70: ee:32:9b:8b:fe:13:a5:2e:20:47:2e:51:bf:2c:66:44:52:7d: 5c:ab:72:08:7e:5a:81:0d:f7:cd:50:d8:50:9c:98:7a:47:cc: 3a:a3:c9:e3:e6:79:3d:ff:4b:87:39:5d:58:0f:1c:1e:2a:9a: d8:47:7d:d3:19:ff:ed:a0:46:a4:78:69:9c:3f:54:ea:75:9f: e6:01:f6:7d:2f:b9:e2:34:d9:f5:47:13:55:75:13:70:11:42: b8:13:80:e9:97:c2:25:e4:27:1d:8e:dc:47:01:3f:bb:2d:43: 5f:1f:ca:19:07:e8:fc:49:28:23:bb:48:34:fa:b0:af:0b:47: d2:1b:65:32:5a:f4:92:03:1f:ce:a7:ed:2b:a8:14:07:f0:fb: ae:de:61:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCT/E8PEXYdV9ZS0LS8eIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZDk3NzBjMzA3ZWEzOTYwYzhkYTI2OGE4ODY1YTRhOWZh NjM0YzkwHhcNMjUxMjA2MDUwMTIzWhcNMjUxMjA3MDUwMTIzWjAzMTEwLwYDVQQD EyhiZWI3NjExYzJlNmFhODI3N2M2N2M2ZmE2NjVjZWEyMzgzMTY1YzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv48w4P88xVmcjCKy0dm1O0d7tcIV kcgTpkhxbLqlagyCONTtlZjaJa+Y99iiukYk+XZN2APMISCPy8Y0KrM51aYROa9B OGKR/MnkFFq+2lUC13CSmq66sLwOXmVOb2k6e9qhmF3SaNTVnYdQ0RwSEkXoAiFS QCB5IbFg71apuKC3PmLaygdg9e3L6hqBmus+r9kjmKq2EyCca5xf2cnesw+NG9Nf Kz8tJ+KN42F1Sa5Qgm9ddfVd+U6U4JFcwH37NOEk4Aa0Ra5hwQamOVw4dQJ17yYG IgEkpKcCTsuFV45V+LwEvfT4RXcau2V++pTnEwn0g1CWwcjBsoVmGkwxzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL63YRwuaqgnfGfG+mZc6iODFlwWMB8GA1UdIwQY MBaAFN3ZdwwwfqOWDI2iaKiGWkqfpjTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUt ZjJmZTBkMDRiZmJmLzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUtZjJmZTBkMDRiZmJm LzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHX9XyvJ szyL7puYqCs/KhMVgiuEwlRTOC2LuVhQE77xm29vuG3mws41cWpyqlG58t3rl5ng QDSsb/toSEkmkBDGmVC1WZ0Tllz1b+RQi9I63jVRmk2gHWsc7939zoOgWfAXN/oJ 3pbi1Oxw7jKbi/4TpS4gRy5RvyxmRFJ9XKtyCH5agQ33zVDYUJyYekfMOqPJ4+Z5 Pf9LhzldWA8cHiqa2Ed90xn/7aBGpHhpnD9U6nWf5gH2fS+54jTZ9UcTVXUTcBFC uBOA6ZfCJeQnHY7cRwE/uy1DXx/KGQfo/EkoI7tINPqwrwtH0htlMlr0kgMfzqft K6gUB/D7rt5hyw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:27:47 2025 by rpki-client