This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json) Hash identifier: dUwez7Pq5SYYe0OQ80AdiCbmGQ+JnYGeO3/qCUfXVGo= Subject key identifier: 60:52:62:D9:DC:26:06:25:57:F0:97:E2:03:CD:33:F7:42:46:72:86 Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94 Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894 Certificate serial: 019AF1641BD79A1388A9CB4E0C248DA03804 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:00 +0000 Manifest this update: Sat 06 Dec 2025 02:01:00 +0000 Manifest next update: Sun 07 Dec 2025 02:01:00 +0000 Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: icGhtZ6FjwYtEGlDLbl10nvRDeezYf3MkM10ozqF3Dc=) 2: b5tCOGfZlXjj3Rp4LI2wyRIwTZc.roa (hash: Ux81ccFaPxD7MPa+kjPcqatGWLTvR5GEGbxi2D0f0BI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1b:d7:9a:13:88:a9:cb:4e:0c:24:8d:a0:38:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894 Validity Not Before: Dec 6 02:01:00 2025 GMT Not After : Dec 7 02:01:00 2025 GMT Subject: CN=605262d9dc26062557f097e203cd33f742467286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:66:76:e8:f8:2c:4d:23:e1:31:6b:9c:f7:75: e6:69:c4:f0:3a:db:ed:88:81:9d:68:a9:aa:e9:31: 6e:c5:d4:d7:a2:d2:41:45:11:a9:5a:b7:35:2d:89: c2:bd:a0:1b:b9:8c:77:47:bf:6c:f4:d0:66:f7:71: 42:3f:7c:97:b8:97:dd:77:92:01:d5:9b:9d:90:c7: 75:dc:cc:be:f4:5e:01:b5:4e:f5:55:6d:06:b8:67: 3d:b9:c7:d6:15:20:f5:4d:a8:9d:31:48:75:97:e7: 2d:a1:d8:0f:b7:12:b2:01:17:3d:11:2a:05:a8:e6: cf:c5:94:7d:87:90:1c:20:f3:b7:eb:ee:0f:09:e3: 3b:58:e1:7e:a7:2b:cc:ee:b2:23:b0:29:f1:4e:6b: cf:ee:5d:cf:5a:1a:63:8b:1a:a1:da:45:f5:87:e9: b7:94:8b:c3:f6:9a:90:a9:6a:8c:e5:2b:b7:25:39: 91:7e:03:f8:bb:c2:7b:d4:c4:c8:cb:b5:34:98:eb: 0e:12:aa:fe:03:c8:1f:4a:08:9e:24:2c:d3:eb:63: ce:b6:a9:6a:c7:73:a5:6e:15:a7:32:3a:84:83:48: 3a:81:2c:f4:b3:74:a3:63:8c:20:84:09:50:7b:eb: e8:27:b6:63:80:6d:7b:88:c0:26:17:13:89:b1:f7: 6c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:52:62:D9:DC:26:06:25:57:F0:97:E2:03:CD:33:F7:42:46:72:86 X509v3 Authority Key Identifier: keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:81:41:5c:0a:48:4a:08:a6:e1:dc:f3:56:84:05:a9:4d:eb: 1c:22:44:aa:7d:f1:c1:9b:23:59:9b:7c:aa:ad:3f:eb:94:6f: e8:fa:fe:8b:d6:01:68:b7:2f:c3:3d:37:eb:4e:ce:8a:ac:08: 86:60:6f:00:bd:cc:db:9b:fc:ef:4a:bc:7e:01:ce:32:c6:83: b6:2b:ec:77:5c:d4:83:8e:52:01:8f:e2:59:18:aa:ce:4b:f1: 96:62:a8:73:92:cf:e6:3b:fe:98:7f:d5:59:18:80:01:89:61: e8:2b:15:9b:9c:e2:74:66:e1:af:7e:60:fa:80:9d:a8:1c:88: d4:83:bd:27:e8:37:5b:41:01:52:52:de:60:80:90:55:c1:b7: b1:ec:64:bb:56:df:27:2a:a3:b5:77:0b:e4:e1:3d:f6:f0:71: 04:37:93:07:0d:40:59:17:48:40:73:22:88:70:e0:8f:a5:bd: e0:ef:d8:e0:09:09:c9:a2:0d:ee:71:72:b1:cd:9d:ee:8a:34: 58:55:d0:48:df:37:59:15:2f:08:82:cf:b6:cc:be:04:84:65: f4:9e:3a:d8:c9:8b:db:db:dc:6f:03:e7:8d:9c:16:9c:fb:5d: 63:b0:a8:db:92:ab:9d:f1:d7:3f:8e:12:9b:ce:24:0f:e3:a7: 69:b5:c1:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBvXmhOIqctODCSNoDgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTU3MmZjYmQ2NjVmNzJlMDBlNWZmZGI4ZGI4MDJkMWNi ZWM4OTQwHhcNMjUxMjA2MDIwMTAwWhcNMjUxMjA3MDIwMTAwWjAzMTEwLwYDVQQD Eyg2MDUyNjJkOWRjMjYwNjI1NTdmMDk3ZTIwM2NkMzNmNzQyNDY3Mjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2Z26PgsTSPhMWuc93XmacTwOtvt iIGdaKmq6TFuxdTXotJBRRGpWrc1LYnCvaAbuYx3R79s9NBm93FCP3yXuJfdd5IB 1ZudkMd13My+9F4BtU71VW0GuGc9ucfWFSD1TaidMUh1l+ctodgPtxKyARc9ESoF qObPxZR9h5AcIPO36+4PCeM7WOF+pyvM7rIjsCnxTmvP7l3PWhpjixqh2kX1h+m3 lIvD9pqQqWqM5Su3JTmRfgP4u8J71MTIy7U0mOsOEqr+A8gfSgieJCzT62POtqlq x3OlbhWnMjqEg0g6gSz0s3SjY4wghAlQe+voJ7ZjgG17iMAmFxOJsfdsKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBSYtncJgYlV/CX4gPNM/dCRnKGMB8GA1UdIwQY MBaAFN6Vcvy9Zl9y4A5f/bjbgC0cvsiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83OTIyMDAtMmRhMC00MWJmLTg1ODct YTkyOTM0Y2IxZGU4LzEvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83OTIyMDAtMmRhMC00MWJmLTg1ODctYTkyOTM0Y2IxZGU4 LzEvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIFBXApI Sgim4dzzVoQFqU3rHCJEqn3xwZsjWZt8qq0/65Rv6Pr+i9YBaLcvwz03607OiqwI hmBvAL3M25v870q8fgHOMsaDtivsd1zUg45SAY/iWRiqzkvxlmKoc5LP5jv+mH/V WRiAAYlh6CsVm5zidGbhr35g+oCdqByI1IO9J+g3W0EBUlLeYICQVcG3sexku1bf JyqjtXcL5OE99vBxBDeTBw1AWRdIQHMiiHDgj6W94O/Y4AkJyaIN7nFysc2d7oo0 WFXQSN83WRUvCILPtsy+BIRl9J462MmL29vcbwPnjZwWnPtdY7Co25KrnfHXP44S m84kD+OnabXBXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:40:05 2025 by rpki-client