This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json) Hash identifier: zqjLV0FDbLg17FCeCp8o2EJThPd06PmtLRS9L+Q1Jnc= Subject key identifier: A3:74:CA:A0:A7:B4:E0:88:40:DA:07:BA:CA:87:EE:6A:D0:FC:37:39 Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab Certificate serial: 019B2FD539FDF24BFDC17CBB9E1FD41998AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft Manifest number: 1426 Signing time: Thu 18 Dec 2025 05:01:01 +0000 Manifest this update: Thu 18 Dec 2025 05:01:01 +0000 Manifest next update: Fri 19 Dec 2025 05:01:01 +0000 Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: Fc6MpHhjt3oXWKr9XBXznOczDW8Gg3C1SalMp4z6NMg=) 2: yrS5JvCeQkL61hQzQKYDkOhEOTg.roa (hash: goLq7UsC9/y1qbTkOPG/FDEBz20Pk1byDqCOGCbWKi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:39:fd:f2:4b:fd:c1:7c:bb:9e:1f:d4:19:98:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab Validity Not Before: Dec 18 05:01:01 2025 GMT Not After : Dec 19 05:01:01 2025 GMT Subject: CN=a374caa0a7b4e08840da07baca87ee6ad0fc3739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:7d:80:b3:22:5b:84:de:c2:80:c2:c2:77: fc:eb:76:a7:35:29:c2:93:ee:b6:45:6a:d8:ab:1e: b0:54:4c:3f:24:24:3e:e8:87:12:a1:56:03:66:7a: 73:72:aa:3f:ea:16:40:89:ba:37:e1:4d:59:a1:8d: 1e:ee:75:8e:5a:9f:e3:4c:6d:f0:6a:67:e7:b3:42: 80:cd:97:7a:9d:3d:45:9f:eb:c3:95:91:d7:48:4f: fb:d5:71:f8:ab:90:20:5e:1a:ed:9e:1d:7f:79:a9: 82:0e:2e:66:dd:e1:30:dc:7c:ba:77:a8:8b:8a:0c: b7:9c:be:29:2f:ef:19:b9:72:41:58:0a:bf:17:a1: 97:fd:98:77:c1:65:1a:62:fd:15:b2:71:98:ff:45: e9:2d:ac:20:ca:95:04:c6:02:a2:05:8c:4b:86:98: 3c:b6:5c:6c:66:a9:d5:39:69:de:87:9a:2a:9f:53: 77:b9:89:00:9e:5e:25:6b:00:41:f8:b3:5f:cd:1a: 26:f2:fb:c6:03:8d:48:09:5c:85:ec:7d:e5:80:29: 5e:cb:c7:e4:57:7b:c8:20:b0:4f:3d:6e:43:5b:91: 09:16:3b:f9:c7:75:9b:dd:ef:8d:02:94:53:d3:a8: 08:6b:39:09:35:f3:5d:9b:4d:7b:55:8f:0c:3a:95: 45:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:74:CA:A0:A7:B4:E0:88:40:DA:07:BA:CA:87:EE:6A:D0:FC:37:39 X509v3 Authority Key Identifier: keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d5:ae:8c:a5:53:d2:45:09:6b:73:9f:18:c3:51:80:40:74: 66:22:5e:1f:f9:02:5c:d1:22:3f:b1:28:8e:2c:07:18:8b:0b: 7b:9b:88:fa:f8:65:e6:f5:ef:75:b3:9e:ae:bc:27:c6:2e:a2: c8:4f:50:a9:d5:77:54:63:28:51:28:cc:6a:ea:3e:12:d9:7f: c0:f1:15:32:b8:84:2f:35:95:df:96:13:d3:15:19:49:e3:c1: a4:84:61:51:d4:da:e4:d0:7d:34:16:a0:8c:09:05:76:12:89: 8d:cb:50:5d:a5:0e:6c:70:d0:ed:5e:f7:f7:a1:57:02:6f:36: 00:d6:4b:63:5f:9f:14:0f:d5:8d:a0:84:cf:89:2d:56:3f:53: 1e:5d:a1:6b:b7:d7:5c:8b:c6:95:47:0b:92:32:89:69:db:84: 4e:ce:d0:d8:d9:79:bc:e8:03:5b:9f:62:d6:9e:d8:8f:00:0e: ab:55:78:74:25:d2:88:4f:28:fe:8c:24:ca:d9:6f:43:9e:0d: d2:de:8d:85:d2:79:f3:3e:29:5c:2a:02:26:2a:1a:41:d5:26: 86:bd:8c:e9:24:55:3c:b1:6e:3f:d1:08:3a:c8:02:8a:94:f9: 8f:17:6a:9a:f4:66:7d:5c:1c:b6:5c:aa:56:f3:37:5c:e0:b7: b9:8f:65:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1Tn98kv9wXy7nh/UGZisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNTFjM2M1ZGRjNGZiNjEzODFjM2JlYTI0YzFiYTRmNzQ5 OThlYWIwHhcNMjUxMjE4MDUwMTAxWhcNMjUxMjE5MDUwMTAxWjAzMTEwLwYDVQQD EyhhMzc0Y2FhMGE3YjRlMDg4NDBkYTA3YmFjYTg3ZWU2YWQwZmMzNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyJ9gLMiW4TewoDCwnf863anNSnC k+62RWrYqx6wVEw/JCQ+6IcSoVYDZnpzcqo/6hZAibo34U1ZoY0e7nWOWp/jTG3w amfns0KAzZd6nT1Fn+vDlZHXSE/71XH4q5AgXhrtnh1/eamCDi5m3eEw3Hy6d6iL igy3nL4pL+8ZuXJBWAq/F6GX/Zh3wWUaYv0VsnGY/0XpLawgypUExgKiBYxLhpg8 tlxsZqnVOWneh5oqn1N3uYkAnl4lawBB+LNfzRom8vvGA41ICVyF7H3lgCley8fk V3vIILBPPW5DW5EJFjv5x3Wb3e+NApRT06gIazkJNfNdm017VY8MOpVFXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKN0yqCntOCIQNoHusqH7mrQ/Dc5MB8GA1UdIwQY MBaAFN5Rw8XdxPthOBw76iTBuk90mY6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEt YTUzMjVkNDQxNzAyLzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEtYTUzMjVkNDQxNzAy LzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNWujKVT 0kUJa3OfGMNRgEB0ZiJeH/kCXNEiP7EojiwHGIsLe5uI+vhl5vXvdbOerrwnxi6i yE9QqdV3VGMoUSjMauo+Etl/wPEVMriELzWV35YT0xUZSePBpIRhUdTa5NB9NBag jAkFdhKJjctQXaUObHDQ7V7396FXAm82ANZLY1+fFA/VjaCEz4ktVj9THl2ha7fX XIvGlUcLkjKJaduETs7Q2Nl5vOgDW59i1p7YjwAOq1V4dCXSiE8o/owkytlvQ54N 0t6NhdJ58z4pXCoCJioaQdUmhr2M6SRVPLFuP9EIOsgCipT5jxdqmvRmfVwctlyq VvM3XOC3uY9lVQ== -----END CERTIFICATE-----Generated at Thu Dec 18 13:12:17 2025 by rpki-client