This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json) Hash identifier: lAX9k5py6QP/RJyhwmmtzhGGC4q97DznNwh030tqY4c= Subject key identifier: DE:2A:6C:1C:76:04:F8:6B:85:4A:12:13:91:DA:57:D1:5E:77:3A:D2 Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0 Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0 Certificate serial: 019B3B6BF25CF8DA5EC16CA3718E04E19AD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft Manifest number: 12FE Signing time: Sat 20 Dec 2025 11:01:28 +0000 Manifest this update: Sat 20 Dec 2025 11:01:28 +0000 Manifest next update: Sun 21 Dec 2025 11:01:28 +0000 Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: OuJbXgRifi/jRt3rZrOkeOGbCdtvxLnsQO4gKvHjEZM=) 2: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (hash: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:f2:5c:f8:da:5e:c1:6c:a3:71:8e:04:e1:9a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0 Validity Not Before: Dec 20 11:01:28 2025 GMT Not After : Dec 21 11:01:28 2025 GMT Subject: CN=de2a6c1c7604f86b854a121391da57d15e773ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5d:7b:4d:74:33:6f:41:12:a4:cf:34:51:69: d4:4e:d5:fe:d7:91:0e:63:fc:d7:cd:e8:ef:7e:63: 5f:67:f2:6a:8c:c7:1c:d3:31:6a:69:ca:84:7a:0d: 04:73:0b:38:67:ed:68:d0:c9:24:1e:1f:a2:ac:1d: df:c1:bc:b5:1d:7e:38:68:97:da:12:ba:05:f9:cf: aa:35:2b:7b:e6:0f:5b:18:e2:e2:5a:6b:da:2f:2d: a5:2a:2e:3a:0d:87:23:65:61:f4:6b:bd:b6:00:04: 1f:c6:5e:7e:a3:fd:b6:7f:72:85:35:64:17:b0:b7: da:a1:c4:3e:7a:12:84:1f:65:90:dc:62:f6:f3:cb: 6a:5e:3b:4b:f4:81:81:8a:43:26:55:38:c3:67:99: a9:29:ba:a5:d3:29:8f:eb:7f:83:90:e3:95:50:1a: c5:bb:cb:d1:63:c4:59:63:25:43:c6:f8:d1:fe:70: 24:ff:93:4a:02:d8:3c:b8:12:d6:3a:1a:b7:e9:d4: 48:db:d3:a2:cb:7a:a1:a7:10:15:40:12:14:39:76: b6:ad:45:97:97:4c:fb:3c:da:8c:41:db:2a:6a:81: cd:75:c5:8e:e6:75:c0:ab:f0:19:16:78:89:6e:71: 0f:1b:2d:5b:5b:fd:bf:28:5d:c8:ba:de:a5:bf:30: f0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2A:6C:1C:76:04:F8:6B:85:4A:12:13:91:DA:57:D1:5E:77:3A:D2 X509v3 Authority Key Identifier: keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a3:0a:47:cd:dd:60:1c:be:c1:2b:6e:44:9f:50:f3:3e:15: 89:23:ba:5a:3c:24:9d:7d:e3:2f:13:8c:66:36:ba:5b:a6:b5: 78:3d:3a:9c:67:c9:d7:3a:f0:ee:f5:62:c7:38:91:03:76:84: 7c:95:17:b9:bd:38:8f:72:47:32:0a:02:5d:9e:bf:9a:55:3f: e1:e3:86:5d:ee:34:c3:f4:32:53:7b:a8:cd:f5:a1:cb:8c:38: c6:8b:b9:99:3a:c1:63:32:f1:b6:70:56:aa:09:ae:62:bc:6f: f3:41:ba:9a:43:8c:2e:7e:d4:bf:96:26:af:d1:90:02:5b:0c: 02:2a:5e:bf:a0:6a:bb:2e:d9:a8:93:58:55:38:ab:91:bd:6c: 45:a4:99:0d:1d:d9:dd:67:e6:77:7f:92:af:b6:5a:9d:bf:69: 92:f1:45:32:90:c4:70:f5:3a:1b:42:3d:7a:d9:b0:75:d0:2c: 7f:20:cc:1e:8a:b6:95:2a:90:0a:0a:0d:7f:e4:b4:16:15:28: e9:1d:6f:47:9b:22:32:e6:73:5e:07:42:2c:c3:bd:d9:8f:f8: e9:59:c5:0d:a9:0b:6d:23:c1:96:9c:b1:16:ba:02:21:f8:a4: d5:c6:06:1c:b0:c6:e9:45:a8:1e:11:a7:69:c9:5a:3e:c4:82: 49:35:f4:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a/Jc+NpewWyjcY4E4ZrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGY5YTY3MWJjZjE3ODljMWI1YWMzNjMwYzc0MWJlNTYw ZGFkYTAwHhcNMjUxMjIwMTEwMTI4WhcNMjUxMjIxMTEwMTI4WjAzMTEwLwYDVQQD EyhkZTJhNmMxYzc2MDRmODZiODU0YTEyMTM5MWRhNTdkMTVlNzczYWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl17TXQzb0ESpM80UWnUTtX+15EO Y/zXzejvfmNfZ/JqjMcc0zFqacqEeg0Ecws4Z+1o0MkkHh+irB3fwby1HX44aJfa EroF+c+qNSt75g9bGOLiWmvaLy2lKi46DYcjZWH0a722AAQfxl5+o/22f3KFNWQX sLfaocQ+ehKEH2WQ3GL288tqXjtL9IGBikMmVTjDZ5mpKbql0ymP63+DkOOVUBrF u8vRY8RZYyVDxvjR/nAk/5NKAtg8uBLWOhq36dRI29Oiy3qhpxAVQBIUOXa2rUWX l0z7PNqMQdsqaoHNdcWO5nXAq/AZFniJbnEPGy1bW/2/KF3Iut6lvzDw/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4qbBx2BPhrhUoSE5HaV9FedzrSMB8GA1UdIwQY MBaAFN7fmmcbzxeJwbWsNjDHQb5WDa2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUt Nzc2NjA1MDFjNDc4LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUtNzc2NjA1MDFjNDc4 LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqMKR83d YBy+wStuRJ9Q8z4ViSO6WjwknX3jLxOMZja6W6a1eD06nGfJ1zrw7vVixziRA3aE fJUXub04j3JHMgoCXZ6/mlU/4eOGXe40w/QyU3uozfWhy4w4xou5mTrBYzLxtnBW qgmuYrxv80G6mkOMLn7Uv5Ymr9GQAlsMAipev6Bquy7ZqJNYVTirkb1sRaSZDR3Z 3Wfmd3+Sr7Zanb9pkvFFMpDEcPU6G0I9etmwddAsfyDMHoq2lSqQCgoNf+S0FhUo 6R1vR5siMuZzXgdCLMO92Y/46VnFDakLbSPBlpyxFroCIfik1cYGHLDG6UWoHhGn aclaPsSCSTX0cg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:01:37 2025 by rpki-client