This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft File: 3SoSF2c-sRypijUTlSBAfJdo38M.mft (raw, json) Hash identifier: s96R97EUNTHO3dE7iYfcfyrSx1Jk26+S5KVCo/2YURs= Subject key identifier: 3E:3F:B4:D6:2F:43:05:22:5A:BD:61:FC:BA:88:D4:A3:38:90:9E:CC Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3 Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3 Certificate serial: 019AF163EB5D4F693F612951BE6FEE36C741 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft Manifest number: 64 Signing time: Sat 06 Dec 2025 02:00:48 +0000 Manifest this update: Sat 06 Dec 2025 02:00:48 +0000 Manifest next update: Sun 07 Dec 2025 02:00:48 +0000 Files and hashes: 1: 3SoSF2c-sRypijUTlSBAfJdo38M.crl (hash: nOtGuedGcK1goLbqM5NZ87n+AT0CB+8gd3tA3c7ZYKE=) 2: CjQoEIYqa3VtH111fKEBqeleqlM.roa (hash: UvEWMazTA8cqsYu1UIhBAG0KtE9R4iCvRATXvg7Pnog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:eb:5d:4f:69:3f:61:29:51:be:6f:ee:36:c7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3 Validity Not Before: Dec 6 02:00:48 2025 GMT Not After : Dec 7 02:00:48 2025 GMT Subject: CN=3e3fb4d62f4305225abd61fcba88d4a338909ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:91:a1:9d:7f:fa:fb:97:93:95:b1:be:d4:71: 2b:7c:86:38:f8:37:06:b5:cb:29:6e:26:ae:04:33: 04:7b:31:40:0d:f1:4f:d0:52:21:94:b6:b8:36:61: 7e:04:b6:6f:85:b4:6c:d4:2c:fb:5f:bf:07:fb:f2: 13:9a:15:1c:0b:ad:de:3f:35:89:ce:fa:a6:59:d6: e1:e3:1d:ac:02:8a:9e:5e:6f:57:ac:a8:8d:0f:d4: 61:22:4a:4d:9a:1d:7c:7a:74:3c:55:a8:71:ec:ec: 32:a7:f7:93:36:60:43:aa:34:e6:44:ad:33:58:2b: a8:62:81:76:9a:17:95:b1:2a:7a:90:2a:0a:86:2a: 92:df:b8:09:96:19:ea:8b:78:c5:cc:9c:72:c2:45: 17:5d:66:2e:46:bb:30:62:da:0f:af:3b:5b:33:e1: e6:5a:27:88:cb:47:13:5e:80:33:2f:ae:84:4c:f9: e2:9a:9b:9e:65:60:b4:17:16:a4:92:02:eb:63:8a: 45:83:f0:1b:8f:aa:3d:ba:04:29:69:f8:9f:59:db: c9:f2:8c:0e:c7:e0:22:c0:8f:40:bd:08:76:69:9f: cb:13:11:2c:e0:82:4d:03:7c:18:87:4c:a0:4a:97: a6:60:14:86:11:0d:54:9e:34:a0:c4:c1:d3:b0:08: 58:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3F:B4:D6:2F:43:05:22:5A:BD:61:FC:BA:88:D4:A3:38:90:9E:CC X509v3 Authority Key Identifier: keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ff:93:1f:f5:12:79:f9:71:71:e7:b7:d0:32:ca:c5:a1:67: 57:5d:9c:e1:f0:fb:f5:8d:bd:56:c1:c7:29:a4:84:04:cd:8a: 1d:04:aa:0b:43:68:bb:f4:a3:93:93:86:63:91:f1:43:01:b5: ef:c3:03:72:10:9d:88:4d:d7:4f:f7:f4:f2:46:bd:91:93:71: 42:4b:ba:d9:32:40:5f:9a:40:b1:42:b4:09:9c:6c:56:1f:ae: 7c:dc:23:84:f3:a0:5e:b2:9b:99:1a:a9:01:c7:68:ab:50:85: d7:c6:2b:6f:df:55:dd:f6:10:19:a5:d9:6f:bf:4e:52:f7:80: cc:fb:67:61:cc:d1:9a:32:a0:4f:fe:20:f8:61:4f:b9:9e:bc: 65:4e:ec:89:84:6d:8b:09:a1:9e:28:64:64:4c:e8:63:60:76: 7b:1f:6f:6a:ff:60:ac:5d:eb:2d:49:6e:06:ac:a0:8c:fa:e9: de:d2:65:29:70:b5:0e:30:5d:8e:07:7b:d6:d6:0d:bb:f0:d7: ef:b0:ec:74:30:83:18:6c:0a:69:e1:b5:59:9f:b9:e8:1b:20: 0f:93:f4:8e:76:6b:32:8f:b8:e4:45:e7:52:65:47:52:4c:0d: a6:53:97:be:90:68:f0:01:1a:49:20:78:d0:8e:4b:28:eb:01: 93:d5:8a:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+tdT2k/YSlRvm/uNsdBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMmExMjE3NjczZWIxMWNhOThhMzUxMzk1MjA0MDdjOTc2 OGRmYzMwHhcNMjUxMjA2MDIwMDQ4WhcNMjUxMjA3MDIwMDQ4WjAzMTEwLwYDVQQD EygzZTNmYjRkNjJmNDMwNTIyNWFiZDYxZmNiYTg4ZDRhMzM4OTA5ZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pGhnX/6+5eTlbG+1HErfIY4+DcG tcspbiauBDMEezFADfFP0FIhlLa4NmF+BLZvhbRs1Cz7X78H+/ITmhUcC63ePzWJ zvqmWdbh4x2sAoqeXm9XrKiND9RhIkpNmh18enQ8Vahx7Owyp/eTNmBDqjTmRK0z WCuoYoF2mheVsSp6kCoKhiqS37gJlhnqi3jFzJxywkUXXWYuRrswYtoPrztbM+Hm WieIy0cTXoAzL66ETPnimpueZWC0FxakkgLrY4pFg/Abj6o9ugQpafifWdvJ8owO x+AiwI9AvQh2aZ/LExEs4IJNA3wYh0ygSpemYBSGEQ1UnjSgxMHTsAhYFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4/tNYvQwUiWr1h/LqI1KM4kJ7MMB8GA1UdIwQY MBaAFN0qEhdnPrEcqYo1E5UgQHyXaN/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NvU0YyYy1zUnlwaWpVVGxTQkFmSmRvMzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80YTkzYzYtMTcwYS00YWEyLThkZmMt NmI5NjQxODIzY2E0LzEvM1NvU0YyYy1zUnlwaWpVVGxTQkFmSmRvMzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80YTkzYzYtMTcwYS00YWEyLThkZmMtNmI5NjQxODIzY2E0 LzEvM1NvU0YyYy1zUnlwaWpVVGxTQkFmSmRvMzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgf+TH/US eflxcee30DLKxaFnV12c4fD79Y29VsHHKaSEBM2KHQSqC0Nou/Sjk5OGY5HxQwG1 78MDchCdiE3XT/f08ka9kZNxQku62TJAX5pAsUK0CZxsVh+ufNwjhPOgXrKbmRqp Acdoq1CF18Yrb99V3fYQGaXZb79OUveAzPtnYczRmjKgT/4g+GFPuZ68ZU7siYRt iwmhnihkZEzoY2B2ex9vav9grF3rLUluBqygjPrp3tJlKXC1DjBdjgd71tYNu/DX 77DsdDCDGGwKaeG1WZ+56BsgD5P0jnZrMo+45EXnUmVHUkwNplOXvpBo8AEaSSB4 0I5LKOsBk9WKWA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:44:07 2025 by rpki-client