This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json) Hash identifier: 7tAgVBkMpRcsfF0AxRlCxlUA92D81LHwbw5m0ENOLtg= Subject key identifier: 4D:C7:42:A5:22:68:58:BF:09:C3:A7:EC:A0:4F:99:AE:EB:06:61:AE Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6 Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6 Certificate serial: 019AF2098DB04B28C9C44966AFA29F2AAC03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:43 +0000 Manifest this update: Sat 06 Dec 2025 05:01:43 +0000 Manifest next update: Sun 07 Dec 2025 05:01:43 +0000 Files and hashes: 1: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: eWzs/JlZLDPZZj/C/ZGozwmiJtDqF6ZIwgIHX+WX2DI=) 2: I9GqI9GxRbg5gyNw2oYeQXtgJJg.roa (hash: IdZbo1C2DnUJiJSpOjjTPKnvp3frNBJygc4FMjTeWHU=) 3: OJHrSjDn0A0xOyeisC7fOP_zy4g.roa (hash: 4mrlovUy+cBI29r4SEJkRQxz3HoEwjM6nDvfGvlxWBU=) 4: ie70DJhDrGYxNNPSAG6BpAZrtxY.roa (hash: HiOIeBO8KrrORXl70BQK8AAzSZ8zCob2hQpjThQB7t8=) 5: tr4Wz-5rQhPo47mTFs_LgvHDl8s.roa (hash: PZGVkTuh77FvBlVCnDa38AVdteMzJ1COvOQXzBoIS0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8d:b0:4b:28:c9:c4:49:66:af:a2:9f:2a:ac:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6 Validity Not Before: Dec 6 05:01:43 2025 GMT Not After : Dec 7 05:01:43 2025 GMT Subject: CN=4dc742a5226858bf09c3a7eca04f99aeeb0661ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c7:76:a5:52:34:83:c5:8f:99:d3:a5:d9:18: 30:43:16:96:a9:1f:66:33:1c:71:15:ce:31:a9:9b: b2:81:2d:71:13:0c:e7:84:98:35:0a:be:1a:b2:23: 57:62:b0:4b:35:1b:67:55:46:a0:dd:f0:d4:83:3f: aa:54:aa:8a:86:72:9b:13:6a:4d:51:a5:d1:f9:c4: 04:0d:61:52:f5:ce:5a:fa:c9:99:d3:c6:99:3d:ed: e9:51:5e:48:9a:56:76:4f:92:51:d2:9d:3f:b7:44: 6a:28:76:55:6d:b9:1b:9f:95:f4:6a:55:72:5f:ad: 59:f0:f3:c1:6f:91:af:db:03:96:98:68:b7:c7:e2: 2b:7d:98:99:53:27:8c:e4:1f:dd:32:fa:c5:36:63: e6:af:4c:ae:c3:e5:bc:49:3c:b3:b0:69:91:e4:2b: ee:31:bc:8f:99:d8:44:67:e0:2b:71:ab:3f:e8:ab: 7a:b6:22:10:a9:79:60:48:d8:42:51:46:bb:37:b9: 63:3c:ab:03:0b:e4:9f:a9:3d:82:c8:ae:d9:8c:cb: 0b:02:72:ec:22:77:1c:88:71:34:a9:e1:21:dc:58: b8:ee:eb:08:ff:74:a0:41:a4:4b:5d:35:8a:cf:76: 00:a0:af:9b:56:df:66:4b:44:00:d9:4e:84:e5:b2: 46:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C7:42:A5:22:68:58:BF:09:C3:A7:EC:A0:4F:99:AE:EB:06:61:AE X509v3 Authority Key Identifier: keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9d:31:f4:16:ae:64:28:78:67:b7:1a:7f:cb:1d:14:47:c8: ca:2a:25:70:18:9b:52:3e:6b:c0:a2:a5:0e:1f:8f:ea:0e:3e: 0a:5a:c9:34:e0:94:2d:43:af:a7:71:d7:92:2a:1e:89:0c:68: 3f:9f:4a:0b:01:bc:81:6a:04:e3:a4:4c:aa:00:fb:9a:73:63: 13:34:50:1a:46:1a:b6:b1:c3:14:8e:4f:47:f2:2d:85:6f:29: 0c:6e:5c:52:d6:80:9d:37:ec:18:38:f8:a6:52:c4:bb:be:2e: 9c:29:11:16:57:e5:66:58:cf:00:1d:86:82:7c:a1:08:f5:cc: 7a:23:d2:d6:39:15:60:e2:cd:b0:8e:fd:fb:2a:a5:53:b4:18: 34:88:3c:72:18:d5:33:0c:89:6e:6a:07:23:5d:98:ac:cb:42: aa:57:7d:bc:bc:1b:a1:12:a4:d6:fb:72:44:fd:2b:e5:bd:42: ce:8b:4c:cc:93:b7:62:4e:07:d2:4e:b1:14:52:b2:90:3c:6b: bf:0e:0c:4c:cc:48:f1:80:2c:64:14:92:86:99:b3:90:50:07: 68:c9:e2:0b:86:a3:5a:02:42:d1:37:39:77:cd:f4:ad:ba:54: 41:2c:23:4d:04:b8:bd:1e:28:69:b9:6e:07:6b:17:f2:e3:ac: 31:61:26:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCY2wSyjJxElmr6KfKqwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMGI2NjNjNDVkN2JjMjcyNGQxNjg0ODUwODc1ODFlMTQ0 NDhmYjYwHhcNMjUxMjA2MDUwMTQzWhcNMjUxMjA3MDUwMTQzWjAzMTEwLwYDVQQD Eyg0ZGM3NDJhNTIyNjg1OGJmMDljM2E3ZWNhMDRmOTlhZWViMDY2MWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sd2pVI0g8WPmdOl2RgwQxaWqR9m MxxxFc4xqZuygS1xEwznhJg1Cr4asiNXYrBLNRtnVUag3fDUgz+qVKqKhnKbE2pN UaXR+cQEDWFS9c5a+smZ08aZPe3pUV5ImlZ2T5JR0p0/t0RqKHZVbbkbn5X0alVy X61Z8PPBb5Gv2wOWmGi3x+IrfZiZUyeM5B/dMvrFNmPmr0yuw+W8STyzsGmR5Cvu MbyPmdhEZ+Arcas/6Kt6tiIQqXlgSNhCUUa7N7ljPKsDC+SfqT2CyK7ZjMsLAnLs IncciHE0qeEh3Fi47usI/3SgQaRLXTWKz3YAoK+bVt9mS0QA2U6E5bJGiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3HQqUiaFi/CcOn7KBPma7rBmGuMB8GA1UdIwQY MBaAFN0LZjxF17wnJNFoSFCHWB4URI+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQt M2I5ZTNjOGEyZmNhLzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQtM2I5ZTNjOGEyZmNh LzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf50x9Bau ZCh4Z7caf8sdFEfIyiolcBibUj5rwKKlDh+P6g4+ClrJNOCULUOvp3HXkioeiQxo P59KCwG8gWoE46RMqgD7mnNjEzRQGkYatrHDFI5PR/IthW8pDG5cUtaAnTfsGDj4 plLEu74unCkRFlflZljPAB2GgnyhCPXMeiPS1jkVYOLNsI79+yqlU7QYNIg8chjV MwyJbmoHI12YrMtCqld9vLwboRKk1vtyRP0r5b1CzotMzJO3Yk4H0k6xFFKykDxr vw4MTMxI8YAsZBSShpmzkFAHaMniC4ajWgJC0Tc5d830rbpUQSwjTQS4vR4oablu B2sX8uOsMWEmeg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:07 2025 by rpki-client