This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json) Hash identifier: +WdExD2nLrLX2KeBYIOaQ4vpA83TQgSJCoOG75rkydg= Subject key identifier: 51:77:7A:8F:C4:7F:9B:1F:58:47:C6:E7:90:33:2E:4F:47:8A:C7:C3 Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c Certificate serial: 019B24080476E3BC91D467071AC165CD4C38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft Manifest number: 128D Signing time: Mon 15 Dec 2025 22:01:03 +0000 Manifest this update: Mon 15 Dec 2025 22:01:03 +0000 Manifest next update: Tue 16 Dec 2025 22:01:03 +0000 Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: J7mXjZEuqzGKHoANOh7be6K1RmwtnwIfHmNJo8VdMkk=) 2: ruyaJPOfuuheWzXgHxMIwRIiRmI.roa (hash: dOziRNC4DuCftQxbewVCKgY2HoDJCSSxS8NFyfVWRc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:08:04:76:e3:bc:91:d4:67:07:1a:c1:65:cd:4c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c Validity Not Before: Dec 15 22:01:03 2025 GMT Not After : Dec 16 22:01:03 2025 GMT Subject: CN=51777a8fc47f9b1f5847c6e790332e4f478ac7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e3:ac:fa:1c:a0:08:91:d6:41:c7:01:e4:32: ad:b8:c3:de:49:99:e4:8f:4f:87:9e:32:8f:d8:d8: 59:2a:47:4d:f0:b5:d8:8b:65:d7:06:57:81:0f:fe: 3f:2e:0d:b3:14:3a:e7:d4:90:9e:96:ca:7d:a3:0d: 65:19:40:84:ce:8e:c5:18:7b:96:b5:76:59:fb:f0: b6:2e:7b:0e:34:d4:31:04:c3:58:d8:04:ee:3c:78: 4c:fa:1b:c4:55:1c:7d:02:8b:f8:b2:55:8b:a7:bd: 98:e0:5e:c2:77:60:91:c5:5a:d3:27:88:02:3d:f6: 78:0f:34:d7:b4:ce:c9:d5:b8:1b:48:74:be:9e:8f: ed:1e:3e:27:91:78:fb:fb:75:7e:ca:4c:d2:bb:ae: 29:d8:c3:8c:20:4e:eb:61:18:aa:2a:8f:26:01:98: 97:de:ea:8e:6c:0f:00:0a:bd:3f:0c:54:e6:34:e8: 64:fa:10:96:54:20:d0:2e:69:49:04:19:93:f5:9c: 8f:f3:e6:d2:c5:25:6a:19:26:53:30:5a:df:83:e4: 21:8b:80:64:c6:af:ef:ad:0c:1f:01:af:40:33:7c: 5a:5f:80:de:c4:cd:33:2e:da:96:d6:13:6b:0c:09: 3b:23:ba:09:d4:bb:0c:ea:63:c4:c7:be:de:eb:c3: 40:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:77:7A:8F:C4:7F:9B:1F:58:47:C6:E7:90:33:2E:4F:47:8A:C7:C3 X509v3 Authority Key Identifier: keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:05:84:be:de:60:00:2f:f0:8b:68:43:5d:d5:45:6a:c1:38: 8b:bf:9f:18:8f:72:e1:78:8b:80:a5:83:00:50:44:15:cb:ee: 82:d8:12:4a:92:16:09:61:9c:cf:56:53:a8:34:72:42:3c:7f: ff:d1:e3:32:16:80:07:6c:e9:04:13:84:b9:94:b2:e2:9e:32: 72:3e:e5:fc:04:a3:17:d1:c1:f9:2d:64:97:b5:2a:75:76:01: bf:fb:65:f4:1d:80:0c:11:cd:ba:98:3f:71:a9:aa:ef:2e:5b: cd:4c:16:cf:b3:c5:bc:e1:50:29:58:9f:e0:00:1b:0d:af:bf: c4:58:cd:23:eb:cb:08:ab:13:7c:99:24:d1:e6:a9:46:08:9b: 06:9f:08:44:d4:93:ba:20:67:14:5c:c3:f1:e4:06:46:e2:e2: 57:3b:f8:69:76:68:09:0d:e5:f7:db:55:89:0c:fc:9c:e5:b6: 91:54:6b:21:93:b5:73:56:92:79:9e:6a:37:b7:65:bb:09:2f: 3f:e3:0a:57:7f:62:b5:69:62:8b:4e:18:97:35:29:de:ab:2f: 7b:8f:14:79:3e:73:e8:5c:a4:99:5c:8b:80:b8:cc:3d:21:12: 83:65:ad:73:e9:b6:1c:52:41:07:96:95:52:e4:b7:5c:2f:ca: 92:64:1e:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskCAR247yR1GcHGsFlzUw4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGUxYjkwZDUxMmNjMzQwMmY3NjE0MTQwNjI5Nzk1ZTRk NGFjNGMwHhcNMjUxMjE1MjIwMTAzWhcNMjUxMjE2MjIwMTAzWjAzMTEwLwYDVQQD Eyg1MTc3N2E4ZmM0N2Y5YjFmNTg0N2M2ZTc5MDMzMmU0ZjQ3OGFjN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeOs+hygCJHWQccB5DKtuMPeSZnk j0+HnjKP2NhZKkdN8LXYi2XXBleBD/4/Lg2zFDrn1JCelsp9ow1lGUCEzo7FGHuW tXZZ+/C2LnsONNQxBMNY2ATuPHhM+hvEVRx9Aov4slWLp72Y4F7Cd2CRxVrTJ4gC PfZ4DzTXtM7J1bgbSHS+no/tHj4nkXj7+3V+ykzSu64p2MOMIE7rYRiqKo8mAZiX 3uqObA8ACr0/DFTmNOhk+hCWVCDQLmlJBBmT9ZyP8+bSxSVqGSZTMFrfg+Qhi4Bk xq/vrQwfAa9AM3xaX4DexM0zLtqW1hNrDAk7I7oJ1LsM6mPEx77e68NAOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFF3eo/Ef5sfWEfG55AzLk9HisfDMB8GA1UdIwQY MBaAFNwOG5DVEsw0AvdhQUBil5Xk1KxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYt MTZmNTJjZWE0ZWIxLzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYtMTZmNTJjZWE0ZWIx LzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAWEvt5g AC/wi2hDXdVFasE4i7+fGI9y4XiLgKWDAFBEFcvugtgSSpIWCWGcz1ZTqDRyQjx/ /9HjMhaAB2zpBBOEuZSy4p4ycj7l/ASjF9HB+S1kl7UqdXYBv/tl9B2ADBHNupg/ camq7y5bzUwWz7PFvOFQKVif4AAbDa+/xFjNI+vLCKsTfJkk0eapRgibBp8IRNST uiBnFFzD8eQGRuLiVzv4aXZoCQ3l99tViQz8nOW2kVRrIZO1c1aSeZ5qN7dluwkv P+MKV39itWlii04YlzUp3qsve48UeT5z6FykmVyLgLjMPSESg2Wtc+m2HFJBB5aV UuS3XC/KkmQe7Q== -----END CERTIFICATE-----Generated at Tue Dec 16 00:26:59 2025 by rpki-client