This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json) Hash identifier: tr6IqeCrBTzB1qL0vS5H+163HkRRxFX7ggtdNL7AfxY= Subject key identifier: C5:0F:C4:87:52:C2:41:5A:65:4F:B9:0E:68:13:35:96:80:E5:FF:93 Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92 Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892 Certificate serial: 019AF31B8ED87B92F167B7148CC70547B363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft Manifest number: 10BF Signing time: Sat 06 Dec 2025 10:01:00 +0000 Manifest this update: Sat 06 Dec 2025 10:01:00 +0000 Manifest next update: Sun 07 Dec 2025 10:01:00 +0000 Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: NsJVUd0WTquyFynkz2uCMQ+skvVm6lSqc/qCDdlInrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8e:d8:7b:92:f1:67:b7:14:8c:c7:05:47:b3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de122d172c13b15291e41f945681525826fef892 Validity Not Before: Dec 6 10:01:00 2025 GMT Not After : Dec 7 10:01:00 2025 GMT Subject: CN=c50fc48752c2415a654fb90e6813359680e5ff93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b0:54:01:92:e6:f7:d5:e7:8c:2b:ff:26:99: e9:1d:17:76:10:77:8b:61:9a:da:3c:ea:24:4e:66: c5:53:87:fe:b5:e4:9f:40:f9:0d:f7:9e:fd:ec:0e: 83:4a:35:49:59:ca:5b:c4:2c:d7:3b:f7:86:28:d8: da:30:fa:46:cb:84:e3:f3:2b:bd:2b:a9:97:42:22: c0:d3:6f:83:71:2e:48:ce:19:ad:dd:03:42:27:82: 5d:44:2c:8a:ea:18:e5:99:ab:72:29:56:8c:83:2c: 5f:68:51:8a:90:87:3f:74:7e:c9:ac:d8:55:cf:a3: 29:5d:06:11:21:ab:d0:ef:6a:6a:95:78:4d:04:9b: 54:9f:77:8e:c5:b4:1d:10:3d:92:14:e4:4c:d6:21: 58:13:84:e1:c7:e4:9d:26:5f:8b:fd:9a:66:01:ab: 72:22:79:43:6d:d4:54:6a:c5:d2:96:48:e5:4d:ab: 29:ed:ea:f7:4d:6e:b8:9d:8a:2a:49:e8:05:d7:36: 0e:33:d4:bc:6b:d3:4d:ca:91:ef:e2:91:f1:66:9e: 47:ff:fc:51:51:45:80:d4:7d:15:6a:8b:a6:e7:c8: 4b:f5:7e:bd:e8:41:e4:fa:d9:a9:0c:e5:9f:87:9b: ac:4e:db:20:11:72:33:ab:1b:41:db:c8:27:5b:97: 43:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0F:C4:87:52:C2:41:5A:65:4F:B9:0E:68:13:35:96:80:E5:FF:93 X509v3 Authority Key Identifier: keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f2:ea:20:c7:79:1b:04:40:c2:a7:95:88:f6:ea:b0:78:66: fe:6e:9c:16:ac:9a:07:66:77:a1:c7:26:67:8e:37:e6:7e:5c: 86:85:75:ea:d5:54:98:70:ee:13:e3:73:1b:57:c0:1c:eb:49: d4:84:e0:85:bc:74:12:97:1b:a6:38:66:fe:46:b7:2f:a7:b2: a8:9d:4f:3f:9c:1c:a7:60:6d:16:24:2c:2c:43:20:7a:66:b8: fc:e5:cd:f0:98:c0:9d:a2:a0:85:fa:33:93:f6:46:1e:5e:2d: 0e:81:49:32:ed:ef:99:4f:56:70:9a:53:01:a0:9c:11:07:3b: 1a:19:1f:15:4f:53:58:d7:69:e8:c0:e6:42:c2:fd:94:19:a0: 70:8b:64:cb:8b:b1:86:83:ad:af:d5:1b:36:7b:61:04:6a:da: ee:b6:b6:66:ae:f3:eb:00:9c:51:f6:a6:70:a5:69:90:b8:f7: cd:a4:40:71:b0:90:43:2b:8f:7c:11:bb:4b:9b:2b:b7:4b:95: 64:91:db:e2:f0:1e:98:64:20:ee:e7:a0:6e:0e:d1:84:a5:83: b9:c3:5e:ef:e9:f1:40:8c:de:bb:dc:71:51:96:07:f8:b2:df: a6:4d:4b:9d:e5:83:a6:83:3e:3a:22:ed:2f:0e:c8:4f:33:1e: 89:3e:09:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG47Ye5LxZ7cUjMcFR7NjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTIyZDE3MmMxM2IxNTI5MWU0MWY5NDU2ODE1MjU4MjZm ZWY4OTIwHhcNMjUxMjA2MTAwMTAwWhcNMjUxMjA3MTAwMTAwWjAzMTEwLwYDVQQD EyhjNTBmYzQ4NzUyYzI0MTVhNjU0ZmI5MGU2ODEzMzU5NjgwZTVmZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LBUAZLm99XnjCv/JpnpHRd2EHeL YZraPOokTmbFU4f+teSfQPkN95797A6DSjVJWcpbxCzXO/eGKNjaMPpGy4Tj8yu9 K6mXQiLA02+DcS5Izhmt3QNCJ4JdRCyK6hjlmatyKVaMgyxfaFGKkIc/dH7JrNhV z6MpXQYRIavQ72pqlXhNBJtUn3eOxbQdED2SFORM1iFYE4Thx+SdJl+L/ZpmAaty InlDbdRUasXSlkjlTasp7er3TW64nYoqSegF1zYOM9S8a9NNypHv4pHxZp5H//xR UUWA1H0Vaoum58hL9X696EHk+tmpDOWfh5usTtsgEXIzqxtB28gnW5dDYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUPxIdSwkFaZU+5DmgTNZaA5f+TMB8GA1UdIwQY MBaAFN4SLRcsE7FSkeQflFaBUlgm/viSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84MzcwMjItZmRkYi00ZmM5LWE3MzMt MzY1YzRiNWMyNGVkLzEvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84MzcwMjItZmRkYi00ZmM5LWE3MzMtMzY1YzRiNWMyNGVk LzEvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/LqIMd5 GwRAwqeViPbqsHhm/m6cFqyaB2Z3occmZ4435n5choV16tVUmHDuE+NzG1fAHOtJ 1ITghbx0Epcbpjhm/ka3L6eyqJ1PP5wcp2BtFiQsLEMgema4/OXN8JjAnaKghfoz k/ZGHl4tDoFJMu3vmU9WcJpTAaCcEQc7GhkfFU9TWNdp6MDmQsL9lBmgcItky4ux hoOtr9UbNnthBGra7ra2Zq7z6wCcUfamcKVpkLj3zaRAcbCQQyuPfBG7S5srt0uV ZJHb4vAemGQg7uegbg7RhKWDucNe7+nxQIzeu9xxUZYH+LLfpk1LneWDpoM+OiLt Lw7ITzMeiT4J5g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:38 2025 by rpki-client