This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft File: A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json) Hash identifier: AGXBOCvo7POzADCH5jG5rPKFSy7hInaCZCPJVaLlNJw= Subject key identifier: F1:FD:BD:C5:24:D1:21:D4:EF:AF:8C:D1:39:E3:72:2C:96:72:B6:30 Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F Certificate issuer: /CN=037863dc3c259e60b2c986802dd6021115e8bf1f Certificate serial: 019B3268378793F0886B714902AC77D8AB14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 17:00:49 +0000 Manifest this update: Thu 18 Dec 2025 17:00:49 +0000 Manifest next update: Fri 19 Dec 2025 17:00:49 +0000 Files and hashes: 1: 0VtcIuxUGMiSf51ESt2U0ZJJN3I.roa (hash: pnzB/pCC1PdPD6bGcX+A1+WWtoVI4A2/GkUREyGlYVs=) 2: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: X7hooz+AgG822zIXrSrXVG7qKU7+NvGwVDi/6xvG9e4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:37:87:93:f0:88:6b:71:49:02:ac:77:d8:ab:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f Validity Not Before: Dec 18 17:00:49 2025 GMT Not After : Dec 19 17:00:49 2025 GMT Subject: CN=f1fdbdc524d121d4efaf8cd139e3722c9672b630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:18:f7:cd:35:df:1d:33:6c:27:06:ed:37:f7: 29:cd:70:c5:01:2e:91:a4:bf:fc:c5:a5:d8:f4:97: 8f:78:1d:82:37:36:87:b7:e5:86:14:14:40:e1:2b: d5:04:23:41:3d:61:c4:69:8c:58:f2:81:4c:9f:e0: 52:48:70:5b:1b:9b:95:9e:3b:40:e0:ca:bc:25:4c: bc:6d:97:4b:03:b1:28:d6:ed:95:6d:1b:2d:7d:44: 18:ad:0a:13:c7:c4:c3:d2:a5:06:dd:1a:fa:c4:5a: 1e:eb:00:0a:ed:0b:a6:65:7a:0c:1a:26:32:ae:da: db:05:62:1d:72:2a:6c:31:e9:5c:03:97:e5:e8:1d: 87:0b:10:ba:84:00:ed:0f:52:45:7e:ff:ab:f8:fb: af:21:30:36:f7:e2:5f:77:c1:48:0e:ba:12:04:bf: a6:23:48:48:d0:f7:17:f3:ec:d2:ed:02:3d:36:65: 67:43:89:d6:be:e1:99:9b:44:c5:17:5f:bc:aa:3d: af:7f:f0:ac:37:6b:ff:04:61:fa:21:16:16:2f:95: 4f:c0:7b:91:1e:ac:fb:f4:b8:b8:ee:7c:f1:93:af: 1c:ce:58:99:f3:a9:39:50:5f:c8:5a:f0:75:05:f5: dd:cc:5d:45:69:e4:67:7c:7f:4f:a8:56:0b:43:91: ca:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FD:BD:C5:24:D1:21:D4:EF:AF:8C:D1:39:E3:72:2C:96:72:B6:30 X509v3 Authority Key Identifier: keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:28:e5:19:37:8f:aa:4b:65:1b:9a:82:9c:c4:79:26:46:16: 49:d9:4e:1f:14:11:b0:f6:1e:93:ec:f7:e1:d7:87:09:7f:f2: 61:52:39:c3:46:2a:2a:ce:5d:13:f2:ac:d4:ee:9b:1b:75:82: 73:24:1e:32:0b:2f:79:0c:2a:18:39:17:7b:3f:ed:04:e0:3a: 69:47:9a:36:1d:76:9f:47:42:cd:bb:e4:ba:cf:f9:9d:1b:70: 17:39:98:aa:93:7d:c6:63:16:bb:90:c7:15:16:4d:3b:38:ea: 5e:1b:f2:be:b2:94:b8:6a:25:2a:1c:20:a0:85:6a:5b:bc:52: d5:79:b7:48:a6:39:11:64:23:b3:f8:fe:38:52:dd:1b:06:c1: 06:93:90:fa:ff:cf:7a:90:73:80:ac:21:65:f7:7f:8a:9c:e0: 18:a5:fa:32:08:f1:ea:5b:88:ac:d6:db:6d:27:5f:ae:b8:6c: d5:95:87:74:05:41:00:ad:21:eb:2a:35:b6:78:aa:f7:63:ae: 17:d3:e4:f4:37:05:49:d2:e9:76:bc:3e:fd:5b:b1:41:20:ab: 69:e8:3c:05:b1:81:c5:97:da:0c:f8:7c:fe:65:5b:03:06:b7: 89:37:ec:cd:31:1c:2e:d3:d5:69:47:66:a1:ac:fa:c8:5a:56: 8c:51:01:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaDeHk/CIa3FJAqx32KsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNzg2M2RjM2MyNTllNjBiMmM5ODY4MDJkZDYwMjExMTVl OGJmMWYwHhcNMjUxMjE4MTcwMDQ5WhcNMjUxMjE5MTcwMDQ5WjAzMTEwLwYDVQQD EyhmMWZkYmRjNTI0ZDEyMWQ0ZWZhZjhjZDEzOWUzNzIyYzk2NzJiNjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBj3zTXfHTNsJwbtN/cpzXDFAS6R pL/8xaXY9JePeB2CNzaHt+WGFBRA4SvVBCNBPWHEaYxY8oFMn+BSSHBbG5uVnjtA 4Mq8JUy8bZdLA7Eo1u2VbRstfUQYrQoTx8TD0qUG3Rr6xFoe6wAK7QumZXoMGiYy rtrbBWIdcipsMelcA5fl6B2HCxC6hADtD1JFfv+r+PuvITA29+Jfd8FIDroSBL+m I0hI0PcX8+zS7QI9NmVnQ4nWvuGZm0TFF1+8qj2vf/CsN2v/BGH6IRYWL5VPwHuR Hqz79Li47nzxk68czliZ86k5UF/IWvB1BfXdzF1FaeRnfH9PqFYLQ5HKZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPH9vcUk0SHU76+M0TnjciyWcrYwMB8GA1UdIwQY MBaAFAN4Y9w8JZ5gssmGgC3WAhEV6L8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTNoajNEd2xubUN5eVlhQUxkWUNFUlhvdng4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kNzgyOTMtNTBjNS00NzFlLWI5MWIt ZDlmMzAxODY4ZWYzLzEvQTNoajNEd2xubUN5eVlhQUxkWUNFUlhvdng4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kNzgyOTMtNTBjNS00NzFlLWI5MWItZDlmMzAxODY4ZWYz LzEvQTNoajNEd2xubUN5eVlhQUxkWUNFUlhvdng4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0SjlGTeP qktlG5qCnMR5JkYWSdlOHxQRsPYek+z34deHCX/yYVI5w0YqKs5dE/Ks1O6bG3WC cyQeMgsveQwqGDkXez/tBOA6aUeaNh12n0dCzbvkus/5nRtwFzmYqpN9xmMWu5DH FRZNOzjqXhvyvrKUuGolKhwgoIVqW7xS1Xm3SKY5EWQjs/j+OFLdGwbBBpOQ+v/P epBzgKwhZfd/ipzgGKX6Mgjx6luIrNbbbSdfrrhs1ZWHdAVBAK0h6yo1tniq92Ou F9Pk9DcFSdLpdrw+/VuxQSCraeg8BbGBxZfaDPh8/mVbAwa3iTfszTEcLtPVaUdm oaz6yFpWjFEBnQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:04:42 2025 by rpki-client