This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.mft File: MV3KddscDCcsCIvLF-dqTQ7tNNM.mft (raw, json) Hash identifier: NbpUJm0erFtHFYtWgifalIJ89RDjh0QEyJmDsVFAi1U= Subject key identifier: 7B:54:BE:31:39:1F:43:5C:C0:9D:89:65:B4:DE:F2:47:70:59:17:0A Authority key identifier: 31:5D:CA:75:DB:1C:0C:27:2C:08:8B:CB:17:E7:6A:4D:0E:ED:34:D3 Certificate issuer: /CN=315dca75db1c0c272c088bcb17e76a4d0eed34d3 Certificate serial: 019AF2ADF329D82FE5468A66FD0ABF8954A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MV3KddscDCcsCIvLF-dqTQ7tNNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.mft Manifest number: BE Signing time: Sat 06 Dec 2025 08:01:17 +0000 Manifest this update: Sat 06 Dec 2025 08:01:17 +0000 Manifest next update: Sun 07 Dec 2025 08:01:17 +0000 Files and hashes: 1: MV3KddscDCcsCIvLF-dqTQ7tNNM.crl (hash: W8Otn58YQrePd9rx8k9DPVpEZE1tTvRGS5xG9vOWMmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.mft rsync://rpki.ripe.net/repository/DEFAULT/MV3KddscDCcsCIvLF-dqTQ7tNNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f3:29:d8:2f:e5:46:8a:66:fd:0a:bf:89:54:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=315dca75db1c0c272c088bcb17e76a4d0eed34d3 Validity Not Before: Dec 6 08:01:17 2025 GMT Not After : Dec 7 08:01:17 2025 GMT Subject: CN=7b54be31391f435cc09d8965b4def2477059170a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:f9:73:e6:35:eb:f9:c1:43:77:75:47:ff: 98:a1:69:88:9b:38:e1:00:d6:b6:0f:04:59:e3:c5: 8a:89:34:a8:b0:3e:3c:32:b1:6f:12:17:c8:01:02: d2:be:9d:79:54:90:66:58:a0:d3:a2:26:4b:4d:65: 80:e1:db:27:7a:45:c5:92:2e:b6:a5:19:bf:a0:f9: b4:04:64:9a:e2:fd:9c:6a:e5:66:ce:37:3c:3f:59: a0:63:45:8f:a1:84:73:23:fe:26:cf:81:f7:4d:54: 89:f7:06:a5:32:2b:c2:b4:ec:9b:75:99:dd:d8:82: ed:48:3b:77:79:f9:08:52:7d:28:4e:ae:a6:15:aa: c7:5b:95:dc:a0:ff:36:5d:1b:99:10:7c:d0:f9:cf: e8:a3:3a:88:0b:94:3c:3a:e3:f1:5a:29:ef:96:cf: b3:09:2c:d5:3b:e4:cd:68:d0:9e:87:b5:b1:55:05: 5e:25:47:d1:0b:23:92:1f:7c:8a:b2:59:54:67:f2: cc:03:39:95:e2:ae:28:92:bf:af:1f:7f:53:27:57: 2c:d1:f3:32:4b:1d:ab:3b:97:22:47:c1:76:46:fa: 56:f9:60:42:c4:4a:54:de:86:ea:cd:3e:aa:1c:16: 77:ef:42:7a:29:dc:bf:7d:95:80:f1:70:3a:9b:58: 8d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:54:BE:31:39:1F:43:5C:C0:9D:89:65:B4:DE:F2:47:70:59:17:0A X509v3 Authority Key Identifier: keyid:31:5D:CA:75:DB:1C:0C:27:2C:08:8B:CB:17:E7:6A:4D:0E:ED:34:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MV3KddscDCcsCIvLF-dqTQ7tNNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1c32f8-97fa-4f55-ae16-945064cd7329/1/MV3KddscDCcsCIvLF-dqTQ7tNNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:e4:48:44:02:3c:3c:c0:ff:96:af:3a:fe:77:7f:a3:61:59: db:29:9d:1e:42:84:e2:4b:bb:58:a5:92:df:c4:06:bd:47:d8: 64:3f:96:0d:77:ee:2c:cc:85:90:ab:ee:ef:a3:7f:b7:3f:43: 0e:df:18:c6:b6:26:a1:a6:d1:fc:da:43:68:2d:86:46:0c:fc: 48:49:12:b2:02:4d:9d:d4:b5:6f:a1:28:5f:97:ab:28:2e:43: f7:2e:8a:09:08:38:7b:8a:36:e7:9d:1b:5c:28:76:35:fd:44: 74:c5:68:04:00:9f:0d:90:e2:6a:1d:e7:d5:ae:e7:4d:fd:ba: 94:d7:00:af:2f:44:fd:04:9c:25:49:5a:b0:8c:50:10:57:11: c1:c6:11:9b:fc:1d:6f:4d:22:eb:db:3b:ee:d9:cf:6d:41:73: b3:49:04:e4:3e:c1:7d:24:9d:8a:d0:3d:03:c3:fb:57:dc:71: 2e:47:8c:63:2d:f8:d3:8c:8c:8d:26:34:15:0b:59:9c:b3:6e: 6a:1f:79:6f:06:23:19:00:c6:23:d2:77:f9:70:66:18:62:8c: 24:14:84:b1:b7:0d:06:da:0e:16:a6:0b:8a:68:72:1b:af:30: 1e:ca:c9:3a:0f:78:52:ca:a3:ca:90:1b:f5:0b:73:58:08:75: 38:58:a3:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfMp2C/lRopm/Qq/iVSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNWRjYTc1ZGIxYzBjMjcyYzA4OGJjYjE3ZTc2YTRkMGVl ZDM0ZDMwHhcNMjUxMjA2MDgwMTE3WhcNMjUxMjA3MDgwMTE3WjAzMTEwLwYDVQQD Eyg3YjU0YmUzMTM5MWY0MzVjYzA5ZDg5NjViNGRlZjI0NzcwNTkxNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vD5c+Y16/nBQ3d1R/+YoWmImzjh ANa2DwRZ48WKiTSosD48MrFvEhfIAQLSvp15VJBmWKDToiZLTWWA4dsnekXFki62 pRm/oPm0BGSa4v2cauVmzjc8P1mgY0WPoYRzI/4mz4H3TVSJ9walMivCtOybdZnd 2ILtSDt3efkIUn0oTq6mFarHW5XcoP82XRuZEHzQ+c/oozqIC5Q8OuPxWinvls+z CSzVO+TNaNCeh7WxVQVeJUfRCyOSH3yKsllUZ/LMAzmV4q4okr+vH39TJ1cs0fMy Sx2rO5ciR8F2RvpW+WBCxEpU3obqzT6qHBZ370J6Kdy/fZWA8XA6m1iNxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtUvjE5H0NcwJ2JZbTe8kdwWRcKMB8GA1UdIwQY MBaAFDFdynXbHAwnLAiLyxfnak0O7TTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVYzS2Rkc2NEQ2NzQ0l2TEYtZHFUUTd0Tk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xYzMyZjgtOTdmYS00ZjU1LWFlMTYt OTQ1MDY0Y2Q3MzI5LzEvTVYzS2Rkc2NEQ2NzQ0l2TEYtZHFUUTd0Tk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xYzMyZjgtOTdmYS00ZjU1LWFlMTYtOTQ1MDY0Y2Q3MzI5 LzEvTVYzS2Rkc2NEQ2NzQ0l2TEYtZHFUUTd0Tk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsORIRAI8 PMD/lq86/nd/o2FZ2ymdHkKE4ku7WKWS38QGvUfYZD+WDXfuLMyFkKvu76N/tz9D Dt8YxrYmoabR/NpDaC2GRgz8SEkSsgJNndS1b6EoX5erKC5D9y6KCQg4e4o2550b XCh2Nf1EdMVoBACfDZDiah3n1a7nTf26lNcAry9E/QScJUlasIxQEFcRwcYRm/wd b00i69s77tnPbUFzs0kE5D7BfSSditA9A8P7V9xxLkeMYy3404yMjSY0FQtZnLNu ah95bwYjGQDGI9J3+XBmGGKMJBSEsbcNBtoOFqYLimhyG68wHsrJOg94UsqjypAb 9QtzWAh1OFijuw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:20:52 2025 by rpki-client