This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft File: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json) Hash identifier: RpSW03jFVfr7fUXzFNXV9kw7HqqHFwlML9ffw6EltBk= Subject key identifier: 3E:E6:F0:1A:65:5B:E1:5A:A2:9F:1C:06:46:9A:B9:9A:3B:59:B3:0F Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37 Certificate issuer: /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037 Certificate serial: 019AF1D244D911D1CF5537D77C9D30E98DA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: GHj7GoooTvUv2ndFYnOJH7Qn6PWvp/OCyy4n8e8RkGg=) 2: X_yuCbgOElk7t0Nndlrc9uLk_XU.roa (hash: zPioyhAie2r6Wx7GGJYyupW2bQRy/+no7AIsLRygNz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:44:d9:11:d1:cf:55:37:d7:7c:9d:30:e9:8d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037 Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=3ee6f01a655be15aa29f1c06469ab99a3b59b30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d8:e0:ce:08:c5:b4:f6:c5:0d:01:58:48:6f: e4:8b:84:37:2d:0b:ec:e9:76:99:05:63:61:66:c7: 80:cc:40:d9:ec:1a:76:6a:33:67:73:c8:93:fa:8d: 48:1f:5e:e1:e8:6e:73:4b:1e:ee:d3:5e:95:27:47: 3a:85:cb:10:d1:4f:27:37:d9:76:10:a7:93:e0:66: 7b:c2:d7:73:59:c7:54:55:25:f4:74:d2:47:28:8d: 28:3e:7a:da:51:59:a0:26:03:2e:20:5b:fd:43:d1: 65:a1:0e:7e:8c:f8:65:a2:5a:9c:74:f1:6e:e5:af: 36:d0:30:34:9e:b6:cc:88:46:ab:0c:48:67:85:b1: 1a:28:55:7a:c9:90:68:29:1e:3f:79:f8:26:6f:0b: bd:1d:b4:a3:e3:19:c3:76:82:dc:35:6a:fd:40:3e: dc:e1:60:23:cd:9e:c0:6e:31:e4:69:74:a0:bd:9a: a0:9c:ae:0b:b6:4d:06:73:d4:bc:f7:36:b3:0b:aa: 83:3e:f6:e9:99:b0:47:ba:60:c9:d6:13:22:16:fb: 0b:20:54:4e:df:a2:f5:6c:d5:7c:f8:0b:c8:98:b6: 61:68:41:38:39:24:75:c0:07:32:3b:c8:de:47:a3: f0:3c:36:75:e1:99:34:06:24:1f:5d:4c:24:4c:9d: 86:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E6:F0:1A:65:5B:E1:5A:A2:9F:1C:06:46:9A:B9:9A:3B:59:B3:0F X509v3 Authority Key Identifier: keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d2:3e:6b:c7:a0:4e:8c:f1:64:46:33:54:0e:11:7e:3a:6f: bc:ed:e1:c2:ef:a0:47:d4:f5:ac:74:9a:7a:6b:12:8c:7e:4f: 9d:24:4a:83:16:da:7f:6e:59:29:d0:a6:43:be:41:b7:c5:b7: c5:76:fa:a2:30:bd:1e:c7:d8:58:1f:9d:46:05:82:14:99:83: 63:3e:60:ff:3f:2b:e5:53:41:67:89:9c:16:0f:52:6f:dd:a2: 70:f4:59:05:b9:3f:b6:e9:6b:9e:53:e1:9e:04:6a:38:16:e8: 56:2b:81:6b:a2:7d:dd:bc:c1:f8:49:1e:8d:10:f4:21:27:eb: 48:53:37:9c:8e:a5:0e:d8:50:7d:2a:2f:fb:3e:3b:f4:14:9d: d9:f5:e4:02:de:69:c9:04:0d:64:5e:3a:c7:5c:a6:5c:33:6a: c1:bd:0f:e9:f6:46:0a:ba:4e:00:08:5c:73:83:c6:20:76:0d: be:e1:73:83:c8:d7:c5:8c:98:2e:4b:b2:2c:47:6a:7b:64:35: 0e:5e:c6:ed:1c:7e:1d:61:2f:41:6e:7b:13:01:f4:ac:23:15: 06:a0:86:6d:5b:9b:da:7f:40:b3:13:dc:94:fe:5d:1e:13:50: 23:9c:e9:20:7b:0d:61:08:a5:51:2d:24:a8:fb:08:e0:91:97: 2a:31:b4:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kTZEdHPVTfXfJ0w6Y2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMzc3YjVkMDIyYmYwYmU0YTYyMjRiNDdlZWE2Y2EwYjgx YmYwMzcwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD EygzZWU2ZjAxYTY1NWJlMTVhYTI5ZjFjMDY0NjlhYjk5YTNiNTliMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9jgzgjFtPbFDQFYSG/ki4Q3LQvs 6XaZBWNhZseAzEDZ7Bp2ajNnc8iT+o1IH17h6G5zSx7u016VJ0c6hcsQ0U8nN9l2 EKeT4GZ7wtdzWcdUVSX0dNJHKI0oPnraUVmgJgMuIFv9Q9FloQ5+jPhlolqcdPFu 5a820DA0nrbMiEarDEhnhbEaKFV6yZBoKR4/efgmbwu9HbSj4xnDdoLcNWr9QD7c 4WAjzZ7AbjHkaXSgvZqgnK4Ltk0Gc9S89zazC6qDPvbpmbBHumDJ1hMiFvsLIFRO 36L1bNV8+AvImLZhaEE4OSR1wAcyO8jeR6PwPDZ14Zk0BiQfXUwkTJ2GsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7m8BplW+Faop8cBkaauZo7WbMPMB8GA1UdIwQY MBaAFNw3e10CK/C+SmIktH7qbKC4G/A3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0RkN1hRSXI4TDVLWWlTMGZ1cHNvTGdiOERjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jYzU1OGMtMzVlNS00ZGQ2LTg2N2It OGIwNWI3NzhlMGQ1LzEvM0RkN1hRSXI4TDVLWWlTMGZ1cHNvTGdiOERjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jYzU1OGMtMzVlNS00ZGQ2LTg2N2ItOGIwNWI3NzhlMGQ1 LzEvM0RkN1hRSXI4TDVLWWlTMGZ1cHNvTGdiOERjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatI+a8eg TozxZEYzVA4RfjpvvO3hwu+gR9T1rHSaemsSjH5PnSRKgxbaf25ZKdCmQ75Bt8W3 xXb6ojC9HsfYWB+dRgWCFJmDYz5g/z8r5VNBZ4mcFg9Sb92icPRZBbk/tulrnlPh ngRqOBboViuBa6J93bzB+EkejRD0ISfrSFM3nI6lDthQfSov+z479BSd2fXkAt5p yQQNZF46x1ymXDNqwb0P6fZGCrpOAAhcc4PGIHYNvuFzg8jXxYyYLkuyLEdqe2Q1 Dl7G7Rx+HWEvQW57EwH0rCMVBqCGbVub2n9AsxPclP5dHhNQI5zpIHsNYQilUS0k qPsI4JGXKjG0Aw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:23 2025 by rpki-client