This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json) Hash identifier: n2wfsI+w8r33xtnqpBP7GYY1zW1pGOyjhcwY2InDPGo= Subject key identifier: 58:9D:9B:C7:A0:18:56:09:DA:75:BA:31:41:CD:51:A4:67:C7:88:58 Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9 Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9 Certificate serial: 019B3BD97B4BAC31EB5D9067B08A6C1C1BAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft Manifest number: 12E3 Signing time: Sat 20 Dec 2025 13:01:07 +0000 Manifest this update: Sat 20 Dec 2025 13:01:07 +0000 Manifest next update: Sun 21 Dec 2025 13:01:07 +0000 Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: XSOzaIwLL+TnxXfPdPZxDYJb93dTNZgpp1p1ipZtxk4=) 2: iVs53h_YZF7aBqVA1FOf0up1OVA.roa (hash: UW0lfLNzDTQsdkpmCT+L1fh8JEZx2jiYpIhhq1q1Nsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:7b:4b:ac:31:eb:5d:90:67:b0:8a:6c:1c:1b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9 Validity Not Before: Dec 20 13:01:07 2025 GMT Not After : Dec 21 13:01:07 2025 GMT Subject: CN=589d9bc7a0185609da75ba3141cd51a467c78858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5e:13:85:81:7a:c1:4c:88:75:5f:c7:e7:3d: 95:44:d0:e0:64:75:01:14:62:ef:18:21:56:8d:cf: 35:ef:ef:12:88:ef:08:e7:aa:34:56:51:d1:a5:8d: b1:9f:84:ea:06:f5:6a:6a:a5:51:ef:89:39:ce:0a: fb:ab:ac:5b:60:40:5a:86:2d:d9:35:e7:82:be:31: 60:ff:bb:b1:c8:13:9b:31:86:7f:c8:33:94:7b:d0: 5f:30:af:9f:69:9d:dc:b7:cb:c0:d4:88:4f:c7:cc: 3c:ba:6d:21:e7:0e:3a:0d:9c:a2:2b:5a:cd:b1:e4: 0b:a4:f0:6a:66:24:7b:e6:f4:b5:cc:00:5c:c3:1f: 9d:0c:17:63:fe:e1:9d:3f:ff:fb:1e:70:90:33:a5: e1:23:94:58:0d:a8:9d:dd:9d:7b:bf:5b:3d:15:7f: 7e:32:ce:94:1e:a6:5f:bc:d3:e1:83:20:07:52:f9: 7b:ef:60:cc:6b:76:83:b8:37:ec:29:77:8c:bd:2c: ec:a2:ec:8b:9c:5d:3f:d6:38:e0:e0:3a:dc:e4:d7: fb:aa:3c:c5:f7:42:91:bc:60:03:05:36:99:35:26: fc:03:f2:4d:6a:d7:c5:16:74:aa:08:16:8f:d7:99: eb:05:cc:da:2d:6c:7f:19:99:0d:e6:59:b7:c6:a0: f9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9D:9B:C7:A0:18:56:09:DA:75:BA:31:41:CD:51:A4:67:C7:88:58 X509v3 Authority Key Identifier: keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d2:57:9a:e9:cb:1c:cf:82:39:cc:6a:3c:4d:22:33:8d:de: ed:78:6f:f7:88:8a:f8:92:dc:25:ba:8b:38:74:c1:f0:22:98: 35:c0:7a:62:7b:54:eb:cf:c0:5f:5f:32:c6:7f:d3:a1:7e:bc: 89:94:42:59:95:90:78:97:03:b7:e6:c5:54:3c:6a:85:8a:91: a2:a1:01:79:d6:9b:9d:31:e1:41:ff:f7:14:5b:95:2d:8d:59: 86:a4:ab:93:a3:a2:e8:59:86:5a:38:0b:0a:17:7e:72:f6:5c: 70:14:a0:3c:f3:8f:fb:c4:06:3b:e2:05:54:ec:47:bb:07:ad: 46:a1:95:b1:17:b8:bb:d4:10:2f:0a:60:1e:ad:ca:c3:9b:d6: 52:c1:43:c5:1b:63:2a:fe:c9:36:12:b0:f9:ab:f8:6e:d1:dc: a0:eb:b9:63:78:ce:ea:f1:19:fb:b3:12:89:f1:fb:f3:8f:9e: 54:78:93:0f:dd:d9:d2:b3:8e:ba:25:a1:79:74:78:b9:95:2f: 37:59:c0:94:6e:01:5f:5f:7c:2b:88:c9:82:47:65:e4:f8:b5: 5d:31:42:61:a0:06:bf:96:54:e4:42:12:7a:e5:45:73:31:ee: 4a:e1:1d:57:1b:cb:1f:b1:b9:1f:00:08:e1:b2:f3:f4:92:93: 70:57:20:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72XtLrDHrXZBnsIpsHBusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZmE4Njg2M2M1NTg2NTcwMDYzNGUxMTM1ZTYxN2U0MDc5 YWY4YjkwHhcNMjUxMjIwMTMwMTA3WhcNMjUxMjIxMTMwMTA3WjAzMTEwLwYDVQQD Eyg1ODlkOWJjN2EwMTg1NjA5ZGE3NWJhMzE0MWNkNTFhNDY3Yzc4ODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F4ThYF6wUyIdV/H5z2VRNDgZHUB FGLvGCFWjc817+8SiO8I56o0VlHRpY2xn4TqBvVqaqVR74k5zgr7q6xbYEBahi3Z NeeCvjFg/7uxyBObMYZ/yDOUe9BfMK+faZ3ct8vA1IhPx8w8um0h5w46DZyiK1rN seQLpPBqZiR75vS1zABcwx+dDBdj/uGdP//7HnCQM6XhI5RYDaid3Z17v1s9FX9+ Ms6UHqZfvNPhgyAHUvl772DMa3aDuDfsKXeMvSzsouyLnF0/1jjg4Drc5Nf7qjzF 90KRvGADBTaZNSb8A/JNatfFFnSqCBaP15nrBczaLWx/GZkN5lm3xqD5FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFidm8egGFYJ2nW6MUHNUaRnx4hYMB8GA1UdIwQY MBaAFNz6hoY8VYZXAGNOETXmF+QHmvi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MDc2YTItMjk1Zi00NWVjLWI3Yzgt YzVjOWM2ODliNzQ1LzEvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni83MDc2YTItMjk1Zi00NWVjLWI3YzgtYzVjOWM2ODliNzQ1 LzEvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdJXmunL HM+COcxqPE0iM43e7Xhv94iK+JLcJbqLOHTB8CKYNcB6YntU68/AX18yxn/ToX68 iZRCWZWQeJcDt+bFVDxqhYqRoqEBedabnTHhQf/3FFuVLY1ZhqSrk6Oi6FmGWjgL Chd+cvZccBSgPPOP+8QGO+IFVOxHuwetRqGVsRe4u9QQLwpgHq3Kw5vWUsFDxRtj Kv7JNhKw+av4btHcoOu5Y3jO6vEZ+7MSifH784+eVHiTD93Z0rOOuiWheXR4uZUv N1nAlG4BX198K4jJgkdl5Pi1XTFCYaAGv5ZU5EISeuVFczHuSuEdVxvLH7G5HwAI 4bLz9JKTcFcgYQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:54:06 2025 by rpki-client