This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json) Hash identifier: X5/o6gJWcs/hzI4nYyKf99yrzkh7AOsR8d3yu8uGhcs= Subject key identifier: B2:3B:DC:F4:E3:3B:C5:F2:4C:65:38:4B:31:BE:BE:C0:44:8A:8C:59 Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d Certificate serial: 019AF1D1A212C86F2F26F4863C7D9900C091 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: XhQsyRsSrxGoxVfj0jYgOwLHp53lpci/Ymp2ewrdppo=) 2: 5cvTQhZb21i8dsjZHSMpM2dxt9k.roa (hash: Jg1xw/OZvnd1OLClxYEzrvwZ5HBLqquVy880Rp6Vr+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a2:12:c8:6f:2f:26:f4:86:3c:7d:99:00:c0:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd206b8bd221574c96592443195b9005769c724d Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=b23bdcf4e33bc5f24c65384b31bebec0448a8c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:5d:2a:b6:b6:77:a1:e7:81:b3:53:1b:81: 3c:28:b9:68:1e:06:93:1d:a2:24:04:d3:49:6b:6f: b4:4f:6e:ac:90:89:c9:36:19:45:b6:19:e5:95:a5: 9d:82:b5:55:66:c3:c1:db:78:72:c6:38:49:13:64: fa:62:e4:3d:a4:30:fb:c0:eb:3a:ac:16:35:72:72: a2:b5:b0:e7:f9:f0:b9:af:81:49:57:00:71:2a:3a: e3:3a:d9:85:a3:54:52:d0:56:47:25:eb:44:9d:9f: e6:46:61:d8:69:42:2e:64:d8:2d:f6:5b:7b:0e:58: 79:ad:09:6d:09:1b:e6:2d:64:21:a1:2f:9c:75:1f: 78:8d:a5:ad:e8:71:f9:81:7c:ef:45:ff:8f:4a:89: ad:ea:84:2f:97:e3:ba:b4:7b:2c:93:39:68:8e:e8: 41:0b:47:4d:96:44:b4:37:0e:94:0e:2a:34:7f:73: 94:fe:f5:42:84:7f:4a:54:e3:00:07:82:e8:2f:a8: f8:3e:a1:ac:9e:4d:ad:4f:d8:ea:5f:50:39:a3:a7: a5:8c:67:f3:79:7e:80:0f:cf:e8:56:8d:9b:be:0a: 07:37:74:5d:c8:d2:34:58:a6:18:0e:65:f3:17:f0: 5b:5a:ef:19:d0:fe:f7:40:5b:9b:44:53:78:e4:8f: 01:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3B:DC:F4:E3:3B:C5:F2:4C:65:38:4B:31:BE:BE:C0:44:8A:8C:59 X509v3 Authority Key Identifier: keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:03:83:6e:09:3a:6b:2a:15:61:3c:f1:57:f2:e3:d1:58:4b: 5a:17:98:28:f3:d8:3e:e1:40:47:3c:62:8f:49:66:44:ae:d0: 6c:ff:84:ef:51:e8:4c:22:98:24:dc:3f:2a:c3:95:6a:0e:c3: 76:2a:5d:05:58:33:e3:af:13:1f:0c:d9:0a:bc:08:97:fe:58: e9:04:f5:52:ae:ab:29:6a:af:23:e4:41:fb:53:a2:04:f0:e3: 21:8d:89:81:9f:00:40:ed:8d:5c:1a:94:28:65:be:28:84:d2: c2:9d:ae:91:50:96:18:65:d6:1f:2a:ec:20:be:5d:0c:ce:a8: 1b:97:c3:15:7d:73:26:ab:41:9d:17:93:20:ea:2c:fe:27:db: 6d:ec:ba:cf:dd:3d:b8:7f:3f:3b:93:d0:40:9c:25:05:2b:e3: 11:7b:56:16:50:a0:8b:68:58:3e:a6:70:bc:3e:02:f4:b1:70: 39:0b:91:30:d5:53:4e:ac:03:84:50:b2:25:63:9c:dc:77:3b: 24:e6:07:e4:fd:07:84:9a:e5:f6:83:1f:1c:6c:a8:c4:0a:12: 60:36:70:8a:ca:fc:43:9f:e6:45:fb:1b:a3:17:91:cf:1f:a7: f1:2b:13:fe:66:95:b0:ba:0a:6c:e3:83:80:57:87:8b:83:43: 0c:ee:6b:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aISyG8vJvSGPH2ZAMCRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMjA2YjhiZDIyMTU3NGM5NjU5MjQ0MzE5NWI5MDA1NzY5 YzcyNGQwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD EyhiMjNiZGNmNGUzM2JjNWYyNGM2NTM4NGIzMWJlYmVjMDQ0OGE4YzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8xdKra2d6HngbNTG4E8KLloHgaT HaIkBNNJa2+0T26skInJNhlFthnllaWdgrVVZsPB23hyxjhJE2T6YuQ9pDD7wOs6 rBY1cnKitbDn+fC5r4FJVwBxKjrjOtmFo1RS0FZHJetEnZ/mRmHYaUIuZNgt9lt7 Dlh5rQltCRvmLWQhoS+cdR94jaWt6HH5gXzvRf+PSomt6oQvl+O6tHsskzlojuhB C0dNlkS0Nw6UDio0f3OU/vVChH9KVOMAB4LoL6j4PqGsnk2tT9jqX1A5o6eljGfz eX6AD8/oVo2bvgoHN3RdyNI0WKYYDmXzF/BbWu8Z0P73QFubRFN45I8BCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLI73PTjO8XyTGU4SzG+vsBEioxZMB8GA1UdIwQY MBaAFN0ga4vSIVdMllkkQxlbkAV2nHJNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NCcmk5SWhWMHlXV1NSREdWdVFCWGFjY2swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lYmM3OGItNTc4Yy00YTRmLTlhNGUt ZTI5MTU3Njc5NjA0LzEvM1NCcmk5SWhWMHlXV1NSREdWdVFCWGFjY2swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lYmM3OGItNTc4Yy00YTRmLTlhNGUtZTI5MTU3Njc5NjA0 LzEvM1NCcmk5SWhWMHlXV1NSREdWdVFCWGFjY2swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAODbgk6 ayoVYTzxV/Lj0VhLWheYKPPYPuFARzxij0lmRK7QbP+E71HoTCKYJNw/KsOVag7D dipdBVgz468THwzZCrwIl/5Y6QT1Uq6rKWqvI+RB+1OiBPDjIY2JgZ8AQO2NXBqU KGW+KITSwp2ukVCWGGXWHyrsIL5dDM6oG5fDFX1zJqtBnReTIOos/ifbbey6z909 uH8/O5PQQJwlBSvjEXtWFlCgi2hYPqZwvD4C9LFwOQuRMNVTTqwDhFCyJWOc3Hc7 JOYH5P0HhJrl9oMfHGyoxAoSYDZwisr8Q5/mRfsboxeRzx+n8SsT/maVsLoKbOOD gFeHi4NDDO5rkA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:12 2025 by rpki-client