This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json) Hash identifier: PRTdak7uyy+RbjZO12xljkj5SqzTYOdVqDITmlKLPpI= Subject key identifier: D3:0D:5B:5B:A4:8F:FC:FE:B3:6E:DB:4B:3D:52:F2:A6:2E:15:E1:AA Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0 Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0 Certificate serial: 019AF208C5AD8DAA6C67AB28705EB54F1A8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft Manifest number: 05FB Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: JYiPSgaQ1CdD2q4oexOTNsXnk9gMPJ+mMbthM5HzVCw=) 2: qrjM3Xke9StQsD7QGEaMB1cnPCg.roa (hash: 5cHU2tUbN3WIKRuo57dJz/SiBbrBTxsVU0FxctK2/WQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c5:ad:8d:aa:6c:67:ab:28:70:5e:b5:4f:1a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0 Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=d30d5b5ba48ffcfeb36edb4b3d52f2a62e15e1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:02:f9:fa:c8:34:4b:84:c3:89:31:43:91: 98:46:39:2d:88:50:85:1d:84:db:00:74:fd:07:4c: f1:18:7b:18:a7:63:d9:3a:c0:ab:13:bb:af:68:78: 1c:b5:50:d2:7f:76:5f:c9:67:41:e5:ed:ee:02:ce: eb:b7:ca:02:95:92:40:36:67:1c:41:f3:d2:a8:18: e0:94:58:c1:cb:23:49:23:c5:8f:e6:74:c2:6a:08: 09:18:87:68:13:8d:59:06:27:5f:e1:1f:87:12:c0: 41:84:f2:4c:a8:3b:ff:e0:8b:26:78:30:3f:0b:e5: 14:be:e2:14:db:19:f1:1e:88:5d:a3:eb:00:b2:cb: e4:33:30:a0:8c:7f:c1:98:b2:05:53:88:7e:fb:91: 04:a8:2e:a9:2a:90:88:ed:d6:5d:36:14:c0:14:f7: b2:d6:05:cb:7f:08:8e:62:5e:1a:76:57:3e:e3:48: 75:f9:01:55:1e:0c:ae:5e:ff:97:0e:b8:8d:ba:da: 7c:c1:4b:8d:4f:2e:5a:ed:5a:30:2d:8a:9b:29:29: ae:39:10:52:03:a6:8e:5f:5b:3f:81:06:19:8b:ea: 11:f3:ff:ba:d0:44:91:1a:73:57:19:7f:2e:b6:4f: 4c:a4:da:b7:11:f9:8a:13:e1:b5:cc:e6:ae:8d:ee: b4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0D:5B:5B:A4:8F:FC:FE:B3:6E:DB:4B:3D:52:F2:A6:2E:15:E1:AA X509v3 Authority Key Identifier: keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a8:ef:79:32:8e:22:ab:41:95:2f:6b:31:92:97:bf:0a:9f: 85:d6:f9:48:29:b9:4a:65:79:9a:90:d2:36:d2:29:5e:44:5f: ed:50:89:8b:5b:9c:42:f2:71:b7:ae:be:22:21:ff:2e:d4:20: ff:7d:f9:85:a5:de:fd:ad:79:38:34:0c:8e:e3:13:09:33:3d: d6:54:26:5b:bc:73:c4:db:e0:3f:63:44:6f:5d:08:68:2b:18: 36:40:91:eb:ff:a5:e4:1c:ae:35:3c:7d:e0:7f:4b:99:63:ee: 90:d5:81:ff:80:aa:83:a9:99:1a:21:13:6f:24:1b:d8:7a:ae: 22:83:4c:4b:ca:54:90:bf:d3:8e:ec:d9:c5:ba:07:d4:a5:73: 27:04:74:8c:60:6e:71:6c:84:34:6e:ce:e4:c3:fe:09:c5:8c: db:ce:b3:79:e8:d3:b8:82:61:73:a9:21:88:a6:e5:8b:37:e7: cf:54:98:ce:b9:00:47:27:38:6e:19:64:fe:84:d2:86:21:02: 50:95:01:3e:a4:8b:1a:ec:a9:b5:07:f1:bb:37:ea:a1:9c:9f: e2:fe:6c:63:cf:73:4c:59:13:5a:91:62:07:ef:05:78:77:33: 48:71:5f:75:25:37:9d:d1:56:ad:54:36:a3:97:d3:72:b3:6f: 85:df:c8:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMWtjapsZ6socF61TxqPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZDI0NmUxODMwNTY3YWIxMTUyMzFkYjc3NWYyODc5ZDk5 YWYwYTAwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD EyhkMzBkNWI1YmE0OGZmY2ZlYjM2ZWRiNGIzZDUyZjJhNjJlMTVlMWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWgC+frINEuEw4kxQ5GYRjktiFCF HYTbAHT9B0zxGHsYp2PZOsCrE7uvaHgctVDSf3ZfyWdB5e3uAs7rt8oClZJANmcc QfPSqBjglFjByyNJI8WP5nTCaggJGIdoE41ZBidf4R+HEsBBhPJMqDv/4IsmeDA/ C+UUvuIU2xnxHohdo+sAssvkMzCgjH/BmLIFU4h++5EEqC6pKpCI7dZdNhTAFPey 1gXLfwiOYl4adlc+40h1+QFVHgyuXv+XDriNutp8wUuNTy5a7VowLYqbKSmuORBS A6aOX1s/gQYZi+oR8/+60ESRGnNXGX8utk9MpNq3EfmKE+G1zOauje60PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMNW1ukj/z+s27bSz1S8qYuFeGqMB8GA1UdIwQY MBaAFNzSRuGDBWerEVIx23dfKHnZmvCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lMTE2YjYtM2M2ZC00ODVmLWFmY2Qt YTQxZTYyMGJhM2ViLzEvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lMTE2YjYtM2M2ZC00ODVmLWFmY2QtYTQxZTYyMGJhM2Vi LzEvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6jveTKO IqtBlS9rMZKXvwqfhdb5SCm5SmV5mpDSNtIpXkRf7VCJi1ucQvJxt66+IiH/LtQg /335haXe/a15ODQMjuMTCTM91lQmW7xzxNvgP2NEb10IaCsYNkCR6/+l5ByuNTx9 4H9LmWPukNWB/4Cqg6mZGiETbyQb2HquIoNMS8pUkL/TjuzZxboH1KVzJwR0jGBu cWyENG7O5MP+CcWM286zeejTuIJhc6khiKblizfnz1SYzrkARyc4bhlk/oTShiEC UJUBPqSLGuyptQfxuzfqoZyf4v5sY89zTFkTWpFiB+8FeHczSHFfdSU3ndFWrVQ2 o5fTcrNvhd/Ing== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:12 2025 by rpki-client