This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json) Hash identifier: rN31kD2uxqtci1hLgAAahkfy7cHeiP8H04VRKtPuq5o= Subject key identifier: 00:D7:E0:55:63:62:C4:2A:50:7E:4D:72:59:D2:70:D5:16:97:B1:A0 Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17 Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617 Certificate serial: 019B311E78A3780360620C4E6F34B54D69D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft Manifest number: 0CA8 Signing time: Thu 18 Dec 2025 11:00:39 +0000 Manifest this update: Thu 18 Dec 2025 11:00:39 +0000 Manifest next update: Fri 19 Dec 2025 11:00:39 +0000 Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: x3uKspAGUPTVZhsVyMo2ovL3GE42ZNkz0t/FLCnDrDU=) 2: GTryjErQ-QvKOHELwraRwqDQoQ4.roa (hash: GN3kBbzA5jk8ZVZGy0p/hEuJ6JzyB6iMj6OE8Sf6qCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:78:a3:78:03:60:62:0c:4e:6f:34:b5:4d:69:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec756af77dafebca10684d68556baacd7173617 Validity Not Before: Dec 18 11:00:39 2025 GMT Not After : Dec 19 11:00:39 2025 GMT Subject: CN=00d7e0556362c42a507e4d7259d270d51697b1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:8e:42:cc:0d:19:f3:46:5c:28:d4:2c:b4: be:08:f0:9a:82:01:65:c6:2a:67:06:fa:1f:f0:71: d5:29:25:b6:a0:7e:c3:91:20:c8:56:c2:ed:c7:4f: 5f:fd:90:05:66:bc:f8:46:09:57:09:14:0a:bc:fb: 96:92:b1:b3:5e:4a:91:4b:a7:ba:22:88:37:69:43: 7a:f4:53:d4:14:37:03:4f:09:c4:09:ba:31:6c:5d: b4:48:46:91:26:f7:6f:4e:b0:53:c6:51:f1:07:87: c6:c7:16:f2:55:de:f1:b6:f4:b3:1c:7a:21:33:33: 8d:81:64:65:9e:e3:03:91:7c:13:ea:70:c0:82:95: 21:85:bb:0f:df:e3:4d:3a:5a:55:d5:cc:22:4f:3a: b2:a3:98:c5:c7:1c:5b:2e:5e:b9:b3:5b:60:4b:a0: c0:29:1e:b3:dd:d2:3d:1f:f6:77:84:64:17:b1:f3: 22:f1:b0:16:6b:c9:dc:f1:4f:fd:ce:3a:27:cb:07: 51:02:d2:d5:1d:52:49:da:55:eb:2a:ae:ec:f4:0d: 7e:3b:2c:b3:5c:d9:dc:c2:09:ff:a4:9a:dd:59:4f: 15:96:f3:09:3a:10:ad:d7:e4:3e:a9:80:1a:8c:ad: 88:5a:9a:dd:82:c4:13:80:06:3a:35:5a:ed:73:b1: 03:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D7:E0:55:63:62:C4:2A:50:7E:4D:72:59:D2:70:D5:16:97:B1:A0 X509v3 Authority Key Identifier: keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ac:c6:24:36:a7:e3:b6:01:4b:6c:32:41:03:e8:8e:2d:46: ef:17:55:21:d2:26:bd:ce:34:91:dd:6d:aa:86:c0:06:e4:9f: b5:3a:1a:d4:40:3e:ee:f1:7e:5b:46:78:b3:68:84:b2:a3:f3: 8a:0e:16:a2:8b:d1:23:d1:ad:71:a1:65:40:9c:86:8f:40:79: 16:c4:02:80:9b:4d:03:f2:86:6d:95:7c:9b:c0:a8:84:ff:80: 1d:d8:36:03:82:51:74:a0:73:04:76:f1:f3:e5:a5:20:21:75: e7:08:f0:49:be:9d:9e:ab:6c:21:9a:eb:f6:34:81:bf:65:58: 6b:56:c5:7c:ba:2e:b6:6b:b9:7a:20:b2:32:6c:81:02:74:71: 74:9b:5b:91:f2:bc:01:c8:4c:96:4f:f2:04:b7:3a:42:95:d2: e9:8d:10:c4:a5:0c:91:cc:62:dd:a3:35:42:04:fe:6a:73:b7: ef:cf:a7:97:99:24:35:9b:a5:5f:ad:1e:fb:60:bf:2c:bf:0f: 74:5c:b4:80:6d:9f:51:24:30:dc:b3:87:87:aa:cc:74:fe:6c: 0a:0e:3a:3c:2a:a1:3f:b3:22:69:24:80:60:84:a0:26:d7:4e: 85:da:51:00:36:9f:48:88:c6:f5:96:08:2e:ed:3c:c7:2e:3b: b6:80:03:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHnijeANgYgxObzS1TWnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYzc1NmFmNzdkYWZlYmNhMTA2ODRkNjg1NTZiYWFjZDcx NzM2MTcwHhcNMjUxMjE4MTEwMDM5WhcNMjUxMjE5MTEwMDM5WjAzMTEwLwYDVQQD EygwMGQ3ZTA1NTYzNjJjNDJhNTA3ZTRkNzI1OWQyNzBkNTE2OTdiMWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvyOQswNGfNGXCjULLS+CPCaggFl xipnBvof8HHVKSW2oH7DkSDIVsLtx09f/ZAFZrz4RglXCRQKvPuWkrGzXkqRS6e6 Iog3aUN69FPUFDcDTwnECboxbF20SEaRJvdvTrBTxlHxB4fGxxbyVd7xtvSzHHoh MzONgWRlnuMDkXwT6nDAgpUhhbsP3+NNOlpV1cwiTzqyo5jFxxxbLl65s1tgS6DA KR6z3dI9H/Z3hGQXsfMi8bAWa8nc8U/9zjonywdRAtLVHVJJ2lXrKq7s9A1+Oyyz XNncwgn/pJrdWU8VlvMJOhCt1+Q+qYAajK2IWprdgsQTgAY6NVrtc7EDEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADX4FVjYsQqUH5NclnScNUWl7GgMB8GA1UdIwQY MBaAFN7HVq932v68oQaE1oVWuqzXFzYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MWI4MmItY2RlMC00YWY2LTk1MmMt N2UwYzdkMzUyNjcxLzEvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80MWI4MmItY2RlMC00YWY2LTk1MmMtN2UwYzdkMzUyNjcx LzEvM3NkV3IzZmFfcnloQm9UV2hWYTZyTmNYTmhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqzGJDan 47YBS2wyQQPoji1G7xdVIdImvc40kd1tqobABuSftToa1EA+7vF+W0Z4s2iEsqPz ig4WoovRI9GtcaFlQJyGj0B5FsQCgJtNA/KGbZV8m8CohP+AHdg2A4JRdKBzBHbx 8+WlICF15wjwSb6dnqtsIZrr9jSBv2VYa1bFfLoutmu5eiCyMmyBAnRxdJtbkfK8 AchMlk/yBLc6QpXS6Y0QxKUMkcxi3aM1QgT+anO378+nl5kkNZulX60e+2C/LL8P dFy0gG2fUSQw3LOHh6rMdP5sCg46PCqhP7MiaSSAYISgJtdOhdpRADafSIjG9ZYI Lu08xy47toAD3g== -----END CERTIFICATE-----Generated at Thu Dec 18 18:52:18 2025 by rpki-client