This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft File: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft (raw, json) Hash identifier: 7b00iOEkn3tyQ4O7bA8zJtC5zw+ZaLjs4eq/xpe+9mo= Subject key identifier: 7E:77:EC:83:AC:48:69:2B:2C:3A:C7:E0:4F:20:9E:F3:3E:58:AF:CD Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17 Certificate issuer: /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917 Certificate serial: 019AF1D1C55E90F06661F52B2D1193599246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft Manifest number: 1618 Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl (hash: Kd6gIykANnbt2uN4opfchPgtDx7Y98KOt0bt9W7/+mc=) 2: Wh1jH5vANwZcwldoZxeJx9Ms8Tw.roa (hash: /m2D3y0N+aO5CYT+TsC7FYKiJpOsP+DSU+ozinhXmV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c5:5e:90:f0:66:61:f5:2b:2d:11:93:59:92:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917 Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=7e77ec83ac48692b2c3ac7e04f209ef33e58afcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:69:5f:2c:f3:8d:de:c6:3a:1d:b8:9f:73:cf: 9f:a3:2c:e1:ed:f5:6c:ea:04:9f:8e:5b:38:d3:8c: 95:19:85:fe:7a:27:83:5e:1a:4e:a0:d4:4e:00:63: 3d:e9:79:dd:4f:09:8e:09:e4:a3:9d:0a:fc:ac:ce: cb:01:97:dd:54:ef:f9:96:e6:49:6f:c5:fd:04:96: c4:43:4e:da:83:47:85:62:42:93:46:91:83:a0:b2: 69:2d:8c:c2:55:66:ed:22:5d:28:10:69:8c:d2:ab: ed:f6:25:86:d9:69:d1:7a:4c:db:c5:b8:38:2f:98: 07:b5:2f:12:dd:5f:ea:ef:97:e3:2d:b4:4f:fb:01: 8e:fd:2c:99:b6:4f:65:d6:2c:9e:fc:10:9e:9e:64: 58:80:b3:da:25:60:3a:ce:b1:58:33:c4:63:c4:c5: 33:ba:61:7e:08:36:c6:fb:21:54:78:ac:b5:30:96: 1f:ed:e2:0b:47:51:4c:30:88:c9:55:33:6e:76:48: 6b:2d:35:0f:3d:af:9f:8a:1e:6d:00:68:10:42:5e: fb:4c:8e:fe:43:89:26:ac:80:bf:97:b4:ab:bc:13: e4:3a:fe:fd:9d:ab:98:5f:e2:82:f2:24:d3:dc:30: b2:d1:a7:a6:4b:cd:8a:53:1a:e3:cb:b0:04:5d:0f: b1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:77:EC:83:AC:48:69:2B:2C:3A:C7:E0:4F:20:9E:F3:3E:58:AF:CD X509v3 Authority Key Identifier: keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:a5:6c:a5:b8:b4:da:62:b2:fa:c2:1a:5f:6c:17:8d:fb:1f: 81:ea:b3:27:11:45:6d:66:4f:b7:8d:65:b7:4c:24:00:9c:57: 8a:be:6f:e0:5c:87:54:88:8c:a2:39:1c:8d:6b:11:ca:25:ac: f4:a0:7d:41:53:03:55:bb:f0:eb:01:a9:81:11:f3:6c:7d:91: 4a:bf:c7:ec:3b:bf:bf:1d:14:41:e9:47:05:3f:62:2f:00:fb: c6:54:c3:a4:94:69:43:96:d8:4c:60:c1:e4:37:94:d0:b3:b8: bc:af:b2:e2:68:a8:54:dc:bf:73:3f:89:52:2f:ce:fc:08:45: 3b:6f:ce:98:3a:40:20:e2:d7:ac:9b:57:70:2a:73:32:32:c9: 53:45:67:96:47:54:e6:0f:0b:e9:da:7b:a8:6d:1c:11:af:d2: b0:ee:8f:e6:00:56:2e:80:3a:9b:31:df:4b:b7:26:2a:a5:c7: b7:7f:c1:5c:3e:46:f5:05:8d:f6:4f:70:c4:87:7e:1b:5e:4f: 91:4b:2a:82:ff:1b:d4:14:31:40:c5:ce:28:66:96:75:74:08: 51:d0:b7:7f:83:ac:79:19:00:97:2d:7c:45:7a:9d:03:3e:f9: 6a:82:c2:7f:a7:af:ae:55:cf:e8:d1:df:0f:f9:5f:c5:93:e2: 28:62:6f:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cVekPBmYfUrLRGTWZJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMmMyZmVmOWM4Y2FmOGYyZjA4MjExZWYwMmMzZDBhZDM0 NzQ5MTcwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD Eyg3ZTc3ZWM4M2FjNDg2OTJiMmMzYWM3ZTA0ZjIwOWVmMzNlNThhZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12lfLPON3sY6Hbifc8+foyzh7fVs 6gSfjls404yVGYX+eieDXhpOoNROAGM96XndTwmOCeSjnQr8rM7LAZfdVO/5luZJ b8X9BJbEQ07ag0eFYkKTRpGDoLJpLYzCVWbtIl0oEGmM0qvt9iWG2WnRekzbxbg4 L5gHtS8S3V/q75fjLbRP+wGO/SyZtk9l1iye/BCenmRYgLPaJWA6zrFYM8RjxMUz umF+CDbG+yFUeKy1MJYf7eILR1FMMIjJVTNudkhrLTUPPa+fih5tAGgQQl77TI7+ Q4kmrIC/l7SrvBPkOv79nauYX+KC8iTT3DCy0aemS82KUxrjy7AEXQ+xLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH537IOsSGkrLDrH4E8gnvM+WK/NMB8GA1UdIwQY MBaAFNwsL++cjK+PLwghHvAsPQrTR0kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0N3djc1eU1yNDh2Q0NFZThDdzlDdE5IU1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wODUzMWItYmQ2Ni00ZmNlLWE1Njkt ODY0NGM1ODE0YzlhLzEvM0N3djc1eU1yNDh2Q0NFZThDdzlDdE5IU1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8wODUzMWItYmQ2Ni00ZmNlLWE1NjktODY0NGM1ODE0Yzlh LzEvM0N3djc1eU1yNDh2Q0NFZThDdzlDdE5IU1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx6Vspbi0 2mKy+sIaX2wXjfsfgeqzJxFFbWZPt41lt0wkAJxXir5v4FyHVIiMojkcjWsRyiWs 9KB9QVMDVbvw6wGpgRHzbH2RSr/H7Du/vx0UQelHBT9iLwD7xlTDpJRpQ5bYTGDB 5DeU0LO4vK+y4mioVNy/cz+JUi/O/AhFO2/OmDpAIOLXrJtXcCpzMjLJU0VnlkdU 5g8L6dp7qG0cEa/SsO6P5gBWLoA6mzHfS7cmKqXHt3/BXD5G9QWN9k9wxId+G15P kUsqgv8b1BQxQMXOKGaWdXQIUdC3f4OseRkAly18RXqdAz75aoLCf6evrlXP6NHf D/lfxZPiKGJvaA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:03 2025 by rpki-client