This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json) Hash identifier: 8Ui4erdQ0iI6DyLQ0HT5nYOQedvDOfm0SqD2d82JBps= Subject key identifier: C9:B2:7E:1B:B8:C5:4D:D0:73:CB:1D:9D:8D:09:1A:BF:BC:94:D6:CF Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f Certificate serial: 019AF23FE240243A71A241CA9E44B1C7C524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft Manifest number: 0650 Signing time: Sat 06 Dec 2025 06:01:03 +0000 Manifest this update: Sat 06 Dec 2025 06:01:03 +0000 Manifest next update: Sun 07 Dec 2025 06:01:03 +0000 Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: wMRoUro5t8DqnSsJIups8TCbZuRyDvnF5h+zEKQJcHM=) 2: wLvB8cGiUEUZNSS38jCt0kGtb0w.roa (hash: m3dcBbH2bIeKi8Ap8eHL2CuPz3vf7Stl96ekMV6tjIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e2:40:24:3a:71:a2:41:ca:9e:44:b1:c7:c5:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f Validity Not Before: Dec 6 06:01:03 2025 GMT Not After : Dec 7 06:01:03 2025 GMT Subject: CN=c9b27e1bb8c54dd073cb1d9d8d091abfbc94d6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:e5:e6:80:19:dd:4d:93:a6:3a:75:4e:e2: 3d:9d:86:cd:9f:70:35:23:15:08:7e:da:99:4c:5c: 65:51:50:00:10:50:3f:f3:c4:cd:4e:d9:07:70:9d: d1:9a:24:11:68:dc:a9:bf:cb:a0:bf:07:2c:39:44: 4c:21:cb:7f:9e:81:30:dd:af:e0:98:a8:c6:18:ab: b4:35:0e:63:6d:b8:1f:b9:d6:ae:37:6a:ed:e0:9a: 81:d0:f9:b0:f3:19:b6:02:86:71:e0:b0:ba:8f:0e: 10:57:8d:a5:c5:ac:15:28:00:49:c0:77:78:cb:1f: ac:24:59:e0:0e:67:a1:82:62:9f:19:d3:5a:09:60: 03:4d:01:44:41:34:7b:25:00:e3:85:5c:90:28:ba: 0b:b2:2f:bd:66:ee:f0:96:70:da:25:a4:70:12:52: 5b:ef:63:e4:23:30:98:7a:73:6a:22:35:11:74:e8: f6:54:b9:de:57:1f:7d:90:91:5c:19:37:71:24:92: 74:b7:89:b9:a5:b1:a1:54:8b:68:37:60:b8:86:40: 4a:4e:72:5a:50:4b:63:1f:4a:cb:12:4d:5e:69:ad: b6:1d:0e:6b:e8:7d:79:de:32:ca:70:7d:83:05:60: 28:e2:5f:db:8c:60:77:0d:f5:9c:2d:54:b2:6a:a6: af:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B2:7E:1B:B8:C5:4D:D0:73:CB:1D:9D:8D:09:1A:BF:BC:94:D6:CF X509v3 Authority Key Identifier: keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ae:da:14:3f:b0:07:46:44:33:db:16:75:47:f1:e3:ae:84: 8f:dc:3b:64:ca:90:55:49:47:24:95:12:d1:b0:0a:be:ab:1e: 8d:f8:85:4a:b7:18:55:b5:0a:f9:38:10:50:a2:b4:ff:2f:9e: a2:e7:63:29:11:be:4b:98:ec:03:e8:57:29:6b:36:de:04:e5: 91:7a:20:3d:a5:23:d2:35:77:05:be:8f:a1:2d:a0:a8:6f:f5: 42:24:5a:7a:d4:54:7e:9e:b8:4e:e9:a9:0a:f8:bb:5b:8b:40: 11:59:36:18:a0:34:9d:22:c9:d0:f3:bb:28:7e:3d:05:d4:22: d2:25:34:66:44:fa:10:b5:b9:49:2d:0a:f7:37:f2:2b:61:95: 10:8c:17:31:f4:c9:16:f2:9f:a0:9f:0e:b6:ca:ba:77:95:a4: b2:7d:b2:ee:74:7d:1d:fc:22:0e:92:c6:e5:f0:93:88:ee:0e: 70:a9:2b:4f:62:b6:10:45:19:71:e5:79:a0:67:18:c5:cf:9c: a6:d1:a5:a4:e0:6c:38:e2:48:cb:a6:dd:32:77:81:7c:a1:07: e7:a2:c6:af:b1:6f:20:bc:d4:56:be:b3:a7:07:83:b6:b0:18: b2:9f:d9:fc:e1:cb:9c:be:ac:a5:d3:e5:4b:9b:c3:99:34:fb: 63:a7:8d:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+JAJDpxokHKnkSxx8UkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYWZhZGExMGUyY2UyMGUxYzk2Zjg5NWJiOGVjMzJhNTgw OGY2M2YwHhcNMjUxMjA2MDYwMTAzWhcNMjUxMjA3MDYwMTAzWjAzMTEwLwYDVQQD EyhjOWIyN2UxYmI4YzU0ZGQwNzNjYjFkOWQ4ZDA5MWFiZmJjOTRkNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslzl5oAZ3U2Tpjp1TuI9nYbNn3A1 IxUIftqZTFxlUVAAEFA/88TNTtkHcJ3RmiQRaNypv8ugvwcsOURMIct/noEw3a/g mKjGGKu0NQ5jbbgfudauN2rt4JqB0Pmw8xm2AoZx4LC6jw4QV42lxawVKABJwHd4 yx+sJFngDmehgmKfGdNaCWADTQFEQTR7JQDjhVyQKLoLsi+9Zu7wlnDaJaRwElJb 72PkIzCYenNqIjURdOj2VLneVx99kJFcGTdxJJJ0t4m5pbGhVItoN2C4hkBKTnJa UEtjH0rLEk1eaa22HQ5r6H153jLKcH2DBWAo4l/bjGB3DfWcLVSyaqavUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmyfhu4xU3Qc8sdnY0JGr+8lNbPMB8GA1UdIwQY MBaAFNyvraEOLOIOHJb4lbuOwypYCPY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQt YTY2Zjg0ZWRiZDZkLzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQtYTY2Zjg0ZWRiZDZk LzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh67aFD+w B0ZEM9sWdUfx466Ej9w7ZMqQVUlHJJUS0bAKvqsejfiFSrcYVbUK+TgQUKK0/y+e oudjKRG+S5jsA+hXKWs23gTlkXogPaUj0jV3Bb6PoS2gqG/1QiRaetRUfp64Tump Cvi7W4tAEVk2GKA0nSLJ0PO7KH49BdQi0iU0ZkT6ELW5SS0K9zfyK2GVEIwXMfTJ FvKfoJ8Otsq6d5Wksn2y7nR9HfwiDpLG5fCTiO4OcKkrT2K2EEUZceV5oGcYxc+c ptGlpOBsOOJIy6bdMneBfKEH56LGr7FvILzUVr6zpweDtrAYsp/Z/OHLnL6spdPl S5vDmTT7Y6eNzw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:44:47 2025 by rpki-client