This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json) Hash identifier: datLvjKDrEcxAbR2dG663wzFs23KtypjmtvsFdopMdc= Subject key identifier: 69:DC:C1:A7:A6:AB:5A:68:64:8A:91:6A:41:89:03:BA:51:C5:85:20 Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55 Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55 Certificate serial: 019AF08825CD568B44AC309AE97167396F41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft Manifest number: 0DF8 Signing time: Fri 05 Dec 2025 22:00:45 +0000 Manifest this update: Fri 05 Dec 2025 22:00:45 +0000 Manifest next update: Sat 06 Dec 2025 22:00:45 +0000 Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: yoYo6PgpGm6L5uf7JcZ/7C+HDbe4r1AWPaTuT0o8O2U=) 2: mKsKKQCdLodyBncOeNIhWtaYAoQ.roa (hash: fizUUsz/TAb+LHuegB83yr/hnzwxKplkZhpso2ufXV4=) 3: xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa (hash: GuaLpdFfqfVEq3DS5+BP2JqM2gB3tItjQlR22xolKBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:25:cd:56:8b:44:ac:30:9a:e9:71:67:39:6f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55 Validity Not Before: Dec 5 22:00:45 2025 GMT Not After : Dec 6 22:00:45 2025 GMT Subject: CN=69dcc1a7a6ab5a68648a916a418903ba51c58520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c3:61:f5:65:24:81:79:a7:9e:37:51:51:9c: 42:d6:40:07:97:91:f1:2e:a0:eb:1d:ee:9c:61:bf: e2:1f:bc:f0:a4:90:c9:ab:4b:88:de:44:9d:50:5d: b0:5d:8e:46:60:2a:97:2b:7a:04:0e:e8:4e:8a:2a: 2d:96:8a:44:6c:df:1e:b5:ed:26:68:a6:57:33:8e: de:2e:77:7d:f9:ff:a9:9c:d7:b0:4c:94:ad:c3:1e: 6c:6b:83:05:9b:a8:a8:0c:7c:2f:72:93:26:03:d5: b9:d3:95:1a:6b:a0:67:4b:cc:07:b5:2c:a3:d4:56: ae:1e:f7:fe:44:c2:eb:1c:7c:dc:89:33:dc:fe:2c: 19:21:3a:db:f0:f4:ac:87:67:71:37:09:a6:84:68: 52:28:c9:3d:5e:d4:0e:6b:70:92:86:a7:82:18:ca: 6a:ea:0d:8a:77:ef:24:e9:1e:8c:37:f5:d9:9b:d6: e2:d5:b8:c9:99:5a:57:6f:9d:6c:b0:36:6b:2a:d4: 96:2a:1d:99:b3:35:32:a3:e6:dc:46:8e:ec:6c:4d: 2e:25:41:e0:9f:9b:4a:8b:1e:ef:92:1d:a3:9f:f6: d0:4f:9c:8a:f9:3d:af:83:eb:a0:c3:c1:2f:9c:b3: 98:aa:84:af:4a:29:de:ba:2b:23:cd:5a:08:12:47: 16:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DC:C1:A7:A6:AB:5A:68:64:8A:91:6A:41:89:03:BA:51:C5:85:20 X509v3 Authority Key Identifier: keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:bf:41:1c:b3:f7:4c:ed:d1:58:d9:5c:f7:bd:65:4d:8e:02: cf:f8:de:a6:dd:c8:a5:e4:d6:b5:78:44:73:bd:fb:12:da:99: b1:60:8f:95:1d:41:b9:bb:a4:b2:1b:e0:85:5f:53:dc:80:35: 8f:2a:29:1d:0b:47:57:16:0f:47:4a:7a:7d:2b:d3:85:ba:b7: fc:68:9c:f6:30:50:78:e8:f4:20:6e:51:a5:f7:85:1d:f9:67: b0:41:b2:4d:77:1f:5d:2b:ee:e8:46:1a:49:1c:72:c0:d2:98: 54:9e:f5:69:a7:6c:56:b3:d1:db:6e:c4:f5:ca:cd:f7:10:b0: 22:49:ba:0c:2d:ba:76:11:ec:98:1a:8f:b8:94:7f:b6:e6:8b: 4c:63:5d:cf:59:9b:d7:90:ab:ba:ad:a6:7c:37:b7:b5:e2:45: 77:8d:61:89:4b:52:eb:62:62:6d:b2:91:8f:6a:61:fa:93:e5: 63:bd:4a:d7:00:c3:3c:9a:04:3b:86:3e:8c:ec:c2:66:1a:04: d9:f6:59:b4:13:79:74:ad:94:5e:23:be:f7:1e:82:fd:8e:d0: 5f:94:68:fa:6a:82:5c:0c:3b:80:df:e2:7b:ae:33:a7:c5:60: 89:9d:0d:d3:bb:a9:21:66:82:e4:09:bd:f0:7d:38:c2:5b:4a: c4:83:8e:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiCXNVotErDCa6XFnOW9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOGNiNGExMWNhYmFjMjA0YWRmYjhhNWI1ODdlMzJmZWU0 YTFiNTUwHhcNMjUxMjA1MjIwMDQ1WhcNMjUxMjA2MjIwMDQ1WjAzMTEwLwYDVQQD Eyg2OWRjYzFhN2E2YWI1YTY4NjQ4YTkxNmE0MTg5MDNiYTUxYzU4NTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sNh9WUkgXmnnjdRUZxC1kAHl5Hx LqDrHe6cYb/iH7zwpJDJq0uI3kSdUF2wXY5GYCqXK3oEDuhOiiotlopEbN8ete0m aKZXM47eLnd9+f+pnNewTJStwx5sa4MFm6ioDHwvcpMmA9W505Uaa6BnS8wHtSyj 1FauHvf+RMLrHHzciTPc/iwZITrb8PSsh2dxNwmmhGhSKMk9XtQOa3CShqeCGMpq 6g2Kd+8k6R6MN/XZm9bi1bjJmVpXb51ssDZrKtSWKh2ZszUyo+bcRo7sbE0uJUHg n5tKix7vkh2jn/bQT5yK+T2vg+ugw8EvnLOYqoSvSineuisjzVoIEkcWrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGncwaemq1poZIqRakGJA7pRxYUgMB8GA1UdIwQY MBaAFNyMtKEcq6wgSt+4pbWH4y/uShtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDIt OTlkNWUwN2JhZTc2LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDItOTlkNWUwN2JhZTc2 LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGL9BHLP3 TO3RWNlc971lTY4Cz/jept3IpeTWtXhEc737EtqZsWCPlR1BubukshvghV9T3IA1 jyopHQtHVxYPR0p6fSvThbq3/Gic9jBQeOj0IG5RpfeFHflnsEGyTXcfXSvu6EYa SRxywNKYVJ71aadsVrPR227E9crN9xCwIkm6DC26dhHsmBqPuJR/tuaLTGNdz1mb 15Cruq2mfDe3teJFd41hiUtS62JibbKRj2ph+pPlY71K1wDDPJoEO4Y+jOzCZhoE 2fZZtBN5dK2UXiO+9x6C/Y7QX5Ro+mqCXAw7gN/ie64zp8VgiZ0N07upIWaC5Am9 8H04wltKxIOOUg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:13 2025 by rpki-client