This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json) Hash identifier: y8gfrX50jKh3yO70JY3xaWsX6Gc01kyQa0Xq1160BCo= Subject key identifier: C0:35:0E:86:D4:73:19:1B:26:8A:47:99:46:87:AA:FE:90:9E:DD:94 Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec Certificate serial: 019AF08872E36900B27511D7EDB2FF927DB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 22:01:05 +0000 Manifest this update: Fri 05 Dec 2025 22:01:05 +0000 Manifest next update: Sat 06 Dec 2025 22:01:05 +0000 Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: dOgv59tzpFEkZuZZELDEato+PfdbnWFK29czlpWbdWY=) 2: MAicR0R3ncVMTkKV0oZy3oBwEck.roa (hash: WaK4eGmwJjqB7bEEMx1lPorCW+4yf4wVwlYB8uvjgfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:72:e3:69:00:b2:75:11:d7:ed:b2:ff:92:7d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec Validity Not Before: Dec 5 22:01:05 2025 GMT Not After : Dec 6 22:01:05 2025 GMT Subject: CN=c0350e86d473191b268a47994687aafe909edd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:af:e4:21:11:32:ae:26:23:36:93:51:28:dc: 00:db:32:ff:b0:20:c3:41:76:20:b8:3b:c8:02:03: 2a:08:44:87:4e:b4:50:83:58:1a:b2:1f:d7:54:b2: bb:3c:f9:d4:eb:02:4c:80:86:48:cb:3b:82:d0:47: ff:05:52:f2:c6:5d:34:30:b2:52:15:d4:b5:55:72: 93:f7:58:17:40:f6:df:1b:97:a1:28:0f:af:d1:94: 8d:5d:27:74:58:e9:dc:2d:40:7e:13:8a:5e:bd:22: 5e:17:95:35:98:06:5f:74:20:13:62:30:89:47:b4: 8b:27:b6:6a:e2:b9:8c:47:0e:f6:48:e5:e4:49:f5: 97:fd:3d:91:5b:8b:39:95:be:f5:b6:eb:d4:2b:d0: f0:54:fc:1c:5b:e7:97:74:35:7c:b4:10:57:87:9b: b5:87:89:c8:9c:bb:b1:c4:70:a0:0a:2f:f6:8c:4a: 87:fb:f5:67:45:80:50:10:ac:d0:13:0c:37:25:ee: 44:46:d9:09:ff:67:7e:8d:23:0c:97:7c:48:d6:37: 01:47:aa:cd:8c:fd:de:69:4f:16:14:b0:7e:36:f8: 3c:cc:94:5a:25:ae:77:b8:a6:bc:64:b5:66:6d:77: df:02:ab:14:fa:cd:17:33:58:97:b7:bb:f2:04:96: fa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:35:0E:86:D4:73:19:1B:26:8A:47:99:46:87:AA:FE:90:9E:DD:94 X509v3 Authority Key Identifier: keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7e:13:47:87:c6:7e:ec:29:87:e9:7c:98:6c:70:fd:bb:90: 3e:ee:58:0b:70:92:9a:9c:6a:3a:73:71:f5:9b:a3:8c:01:25: 59:39:1e:8d:f0:72:fd:4f:47:0a:ef:ea:aa:db:54:69:11:9c: 65:71:5b:d3:db:85:a2:7a:02:f6:96:04:05:94:96:20:2f:a3: a8:11:cc:8d:b5:ea:99:03:d6:38:0f:60:c4:49:3d:fd:40:c8: ab:ba:34:77:96:17:39:ac:03:e9:56:8e:db:31:fc:ff:a2:fb: 4d:74:55:b1:f6:68:e4:84:21:7b:c5:65:75:5b:ac:2f:d3:70: c8:51:a6:6a:b1:7a:93:99:f4:f0:e5:88:a1:75:4e:ec:8a:5d: 8d:b8:f6:7a:bd:f5:dc:6a:02:01:e6:91:f7:5f:94:22:53:34: 21:a4:00:7f:c0:e6:ee:38:e8:95:1c:99:51:e3:92:35:c3:44: 0b:98:17:62:da:56:43:a8:3f:7b:03:ec:a0:08:ae:57:79:7c: 99:cc:1f:e6:e7:b9:4b:91:b0:fd:4d:e9:15:cb:f2:97:ec:5c: bd:16:44:1d:b5:23:05:36:38:b6:41:24:f1:cb:22:fb:7b:0a: 1d:d3:e0:28:ed:7f:6a:57:b8:31:98:31:5f:85:61:da:27:68: ac:ae:4c:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiHLjaQCydRHX7bL/kn2wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYzBmMTRmYWM4ZGRiMzQ4MDM3MjgwMDc2Y2MzNjYxNGRh MzA1ZWMwHhcNMjUxMjA1MjIwMTA1WhcNMjUxMjA2MjIwMTA1WjAzMTEwLwYDVQQD EyhjMDM1MGU4NmQ0NzMxOTFiMjY4YTQ3OTk0Njg3YWFmZTkwOWVkZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76/kIREyriYjNpNRKNwA2zL/sCDD QXYguDvIAgMqCESHTrRQg1gash/XVLK7PPnU6wJMgIZIyzuC0Ef/BVLyxl00MLJS FdS1VXKT91gXQPbfG5ehKA+v0ZSNXSd0WOncLUB+E4pevSJeF5U1mAZfdCATYjCJ R7SLJ7Zq4rmMRw72SOXkSfWX/T2RW4s5lb71tuvUK9DwVPwcW+eXdDV8tBBXh5u1 h4nInLuxxHCgCi/2jEqH+/VnRYBQEKzQEww3Je5ERtkJ/2d+jSMMl3xI1jcBR6rN jP3eaU8WFLB+Nvg8zJRaJa53uKa8ZLVmbXffAqsU+s0XM1iXt7vyBJb6EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMA1DobUcxkbJopHmUaHqv6Qnt2UMB8GA1UdIwQY MBaAFN7A8U+sjds0gDcoAHbMNmFNowXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMGE5ZjktMTRhMS00Yzk2LTgyMjMt ZWViNmZkMzJlOTJmLzEvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wMGE5ZjktMTRhMS00Yzk2LTgyMjMtZWViNmZkMzJlOTJm LzEvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWn4TR4fG fuwph+l8mGxw/buQPu5YC3CSmpxqOnNx9ZujjAElWTkejfBy/U9HCu/qqttUaRGc ZXFb09uFonoC9pYEBZSWIC+jqBHMjbXqmQPWOA9gxEk9/UDIq7o0d5YXOawD6VaO 2zH8/6L7TXRVsfZo5IQhe8VldVusL9NwyFGmarF6k5n08OWIoXVO7Ipdjbj2er31 3GoCAeaR91+UIlM0IaQAf8Dm7jjolRyZUeOSNcNEC5gXYtpWQ6g/ewPsoAiuV3l8 mcwf5ue5S5Gw/U3pFcvyl+xcvRZEHbUjBTY4tkEk8csi+3sKHdPgKO1/ale4MZgx X4Vh2idorK5MYg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:55 2025 by rpki-client