This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json) Hash identifier: QQT2x5plyFpFi3c1FqdK+EsGUq4f9rwypBcPkNeMZYs= Subject key identifier: 68:67:AB:20:E5:F4:D3:6F:12:FE:F9:44:82:75:7B:96:69:57:20:7A Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28 Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528 Certificate serial: 019AF68A58A0D1FC99FE23A393300BFD5065 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft Manifest number: 1762 Signing time: Sun 07 Dec 2025 02:00:53 +0000 Manifest this update: Sun 07 Dec 2025 02:00:53 +0000 Manifest next update: Mon 08 Dec 2025 02:00:53 +0000 Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: 1xjLc1t/RWyAbocBzUsYaPRhYANtJ1exGUPLEGbxHgw=) 2: urKpUlRihT17e4-sYhWpyMcE8Ac.roa (hash: OKr8BwUnDAnQRh/fja/ALDyKIeKec2Yi0x2apcZhAec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:58:a0:d1:fc:99:fe:23:a3:93:30:0b:fd:50:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528 Validity Not Before: Dec 7 02:00:53 2025 GMT Not After : Dec 8 02:00:53 2025 GMT Subject: CN=6867ab20e5f4d36f12fef94482757b966957207a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1d:70:a8:aa:74:49:30:6a:76:7b:50:21:54: 3d:bf:5e:ce:3f:bd:06:14:5a:2d:df:f8:dc:bc:be: 9c:51:f8:72:42:23:1d:ab:17:54:bb:59:91:20:fe: 8a:53:e4:25:28:d2:ff:ec:0e:06:30:7c:3e:5f:89: 23:08:ca:56:d4:1a:57:7f:28:f8:cf:aa:44:0b:81: 6c:ed:c5:64:4f:14:d2:44:0c:07:b3:e8:fb:5e:03: 56:29:51:fd:f1:d4:b1:ec:1f:2d:fd:83:bc:5c:cc: 08:85:5b:51:0f:f9:96:c5:ac:4a:93:e7:4b:9c:00: 96:5c:43:1a:3d:85:c9:17:dd:10:45:d0:fb:7c:1d: 0f:f1:d2:c9:64:fa:a0:32:0a:dc:ca:9e:5b:6a:ae: 2f:2b:49:12:f3:09:ea:f4:b4:a0:76:c0:07:da:fe: 68:a8:d9:cf:fc:c6:94:9a:54:fe:c0:ea:6b:a2:56: 5c:c4:39:14:08:4e:46:bb:b2:d6:fb:98:3c:7d:a4: a9:5a:a6:14:18:2d:48:c3:08:c9:b5:69:f6:42:ce: 05:8c:e8:ac:42:4e:da:e5:3c:72:a9:ad:33:4a:1d: f5:4e:d0:26:52:c1:83:a0:94:8b:bb:06:dd:a2:80: 80:4f:50:ad:a5:0a:73:ce:00:00:d1:87:78:7e:40: 0e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:67:AB:20:E5:F4:D3:6F:12:FE:F9:44:82:75:7B:96:69:57:20:7A X509v3 Authority Key Identifier: keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ef:7e:9c:3b:46:9b:1e:95:55:dc:de:ef:c4:62:a7:79:7f: bd:d1:5d:0e:06:ea:db:5e:f2:14:ad:32:73:1b:54:74:ec:4b: 8a:27:89:03:de:fa:5e:ce:92:a3:59:a6:57:2d:a6:49:97:92: a7:e4:dc:2e:1e:f0:8a:46:c4:2a:0f:dd:33:44:d6:27:ce:3f: 3f:b4:73:3d:5e:39:f2:7c:b1:8b:92:60:c0:d7:72:be:92:d3: c4:ff:9c:00:71:bf:13:e8:f3:fc:ce:ad:d3:e1:9e:f3:a3:7d: d3:ba:e6:01:e4:07:eb:26:33:31:82:6d:75:4a:43:25:6a:19: cb:a2:20:52:89:3b:68:42:ca:e9:32:fe:0d:7b:4d:8d:2e:6c: 43:29:f4:5c:10:51:3f:e7:c7:d0:7f:9b:1f:78:60:3b:6e:95: dc:35:db:db:58:10:59:4f:3f:38:36:62:82:46:3f:52:df:7f: 6e:e6:1c:23:ac:4d:ac:87:1f:7d:04:46:3a:07:3b:f2:b0:fd: 61:82:3f:c0:07:00:bc:db:8c:69:3b:20:2e:b5:d0:f4:53:bd: 18:8e:3c:54:db:a1:3b:bf:1b:5e:de:f2:58:30:4b:f4:7e:83: 9f:e1:52:f7:74:0e:c0:43:c2:bc:65:1b:72:1e:d1:b6:a7:64: c3:56:2f:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ilig0fyZ/iOjkzAL/VBlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOWYyYTkyNzM3OGJkMTQ1NWRhOGJkZjg1YmIxYWI4Njdl MWY1MjgwHhcNMjUxMjA3MDIwMDUzWhcNMjUxMjA4MDIwMDUzWjAzMTEwLwYDVQQD Eyg2ODY3YWIyMGU1ZjRkMzZmMTJmZWY5NDQ4Mjc1N2I5NjY5NTcyMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR1wqKp0STBqdntQIVQ9v17OP70G FFot3/jcvL6cUfhyQiMdqxdUu1mRIP6KU+QlKNL/7A4GMHw+X4kjCMpW1BpXfyj4 z6pEC4Fs7cVkTxTSRAwHs+j7XgNWKVH98dSx7B8t/YO8XMwIhVtRD/mWxaxKk+dL nACWXEMaPYXJF90QRdD7fB0P8dLJZPqgMgrcyp5baq4vK0kS8wnq9LSgdsAH2v5o qNnP/MaUmlT+wOprolZcxDkUCE5Gu7LW+5g8faSpWqYUGC1IwwjJtWn2Qs4FjOis Qk7a5Txyqa0zSh31TtAmUsGDoJSLuwbdooCAT1CtpQpzzgAA0Yd4fkAOhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhnqyDl9NNvEv75RIJ1e5ZpVyB6MB8GA1UdIwQY MBaAFN6fKpJzeL0UVdqL34W7Grhn4fUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQt NmRiMDkwMjE0MDM1LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQtNmRiMDkwMjE0MDM1 LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALO9+nDtG mx6VVdze78Rip3l/vdFdDgbq217yFK0ycxtUdOxLiieJA976Xs6So1mmVy2mSZeS p+TcLh7wikbEKg/dM0TWJ84/P7RzPV458nyxi5JgwNdyvpLTxP+cAHG/E+jz/M6t 0+Ge86N907rmAeQH6yYzMYJtdUpDJWoZy6IgUok7aELK6TL+DXtNjS5sQyn0XBBR P+fH0H+bH3hgO26V3DXb21gQWU8/ODZigkY/Ut9/buYcI6xNrIcffQRGOgc78rD9 YYI/wAcAvNuMaTsgLrXQ9FO9GI48VNuhO78bXt7yWDBL9H6Dn+FS93QOwEPCvGUb ch7Rtqdkw1YvHA== -----END CERTIFICATE-----Generated at Sun Dec 7 07:30:41 2025 by rpki-client