This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json) Hash identifier: gr09zP6X9A4uZ997y78ry4aDAh4ONGl9XVjVTZPBT8Y= Subject key identifier: 59:9B:CB:58:79:8A:75:D4:50:5B:23:03:EE:4A:EA:40:B7:CF:89:5A Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86 Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786 Certificate serial: 019AF2768F30D11A9A4E23C764347CAF84F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft Manifest number: 0566 Signing time: Sat 06 Dec 2025 07:00:47 +0000 Manifest this update: Sat 06 Dec 2025 07:00:47 +0000 Manifest next update: Sun 07 Dec 2025 07:00:47 +0000 Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: WQI5Qsm1+NRU5e7O8wFguTGl/0qdcWPZiHF6dGD5zHQ=) 2: PT68lLdfHWq61L0p7mbOXLRwHhw.roa (hash: A4keDsv/7uOGmjAx+h6C5RlssIOEsmTqNcUP9OgH66s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8f:30:d1:1a:9a:4e:23:c7:64:34:7c:af:84:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786 Validity Not Before: Dec 6 07:00:47 2025 GMT Not After : Dec 7 07:00:47 2025 GMT Subject: CN=599bcb58798a75d4505b2303ee4aea40b7cf895a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:73:1e:2a:70:84:12:89:57:f5:f3:9e:a0:de: 78:b2:45:d0:37:5c:f2:94:79:66:9e:85:6c:19:31: 7f:a6:10:d9:84:0d:e9:e8:68:02:4a:db:8a:b8:43: 4c:01:d7:cd:e0:97:3e:a5:a3:42:76:50:62:91:93: b7:2f:67:d4:a7:a7:b4:cc:9c:d1:15:d1:7c:d0:9d: 7f:69:f9:5f:fa:b1:75:1d:c2:ac:73:ae:8a:f4:ab: 89:1b:25:7e:1c:6b:77:69:3a:e7:28:1f:f9:8a:87: f8:c5:40:a3:4e:d6:07:d9:b3:37:3f:32:84:7e:f5: 27:98:af:ff:94:f1:d7:77:1c:bd:1f:d2:29:0a:9e: 65:4c:e9:fd:4f:3f:28:ff:08:40:9c:be:0d:96:bf: 89:24:fd:2d:0c:a7:9b:75:4f:d2:9f:58:c0:07:fe: 89:94:f6:a4:eb:3b:8b:85:47:6a:ef:3d:26:d7:b9: 6a:4c:0a:c8:30:70:5c:ef:00:a0:5c:56:89:a5:e2: 44:4a:d0:cb:0a:5c:9b:26:ed:3a:dd:40:78:35:74: 92:01:ae:df:13:cf:0c:0a:80:9b:a2:44:da:c8:88: 1d:11:43:24:73:4f:ef:a0:0e:b3:f5:54:60:b1:7d: 63:82:b9:ce:d8:89:eb:48:2e:d1:49:a2:74:bb:a6: c1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9B:CB:58:79:8A:75:D4:50:5B:23:03:EE:4A:EA:40:B7:CF:89:5A X509v3 Authority Key Identifier: keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a7:b8:4a:7a:75:55:85:d6:11:93:0b:a3:36:2b:68:06:fb: 99:bb:81:08:bd:58:c8:02:dd:41:ee:75:16:e3:aa:3e:b1:5d: 42:94:b3:67:2d:2b:7e:9a:cf:c5:2b:fd:86:87:18:e8:96:28: e0:c9:7b:c8:65:47:97:19:f5:93:b5:00:68:5a:ee:c8:41:75: 26:ea:a7:05:9a:e0:8c:51:8e:8a:83:58:2d:2d:d4:f5:be:10: 5d:a3:62:b0:c0:1e:be:9c:0f:83:5e:f6:97:a4:d7:b0:af:62: 01:23:bf:d1:d1:25:96:da:60:c4:6f:f6:12:55:36:b5:3d:2d: 2b:02:2d:2a:aa:2a:fe:55:ae:34:96:bc:75:19:5c:7c:99:ee: d0:53:6f:6c:b5:29:dc:d3:93:01:f2:e6:dc:80:6f:59:88:18: 4d:cc:1d:48:63:fe:42:08:b4:b1:0f:fb:e0:ce:e7:4d:ab:9a: 8f:eb:1d:99:ee:a7:58:5f:d0:d8:96:1a:42:e0:20:44:27:3e: 90:cc:af:2c:a4:0b:b4:0d:f7:1f:78:fe:72:aa:5b:b6:54:bf: 74:52:08:f5:9f:2f:5e:e3:2f:e1:a0:25:3c:dc:57:ec:90:f7: 10:35:92:46:99:a0:bb:c5:b4:91:0c:9d:75:49:26:80:33:a0: 87:fb:ef:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydo8w0RqaTiPHZDR8r4T3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNGY5MGE5M2RjOTQyNzg1NTY0NDkwM2NiNzBjMWY3NGI5 MzE3ODYwHhcNMjUxMjA2MDcwMDQ3WhcNMjUxMjA3MDcwMDQ3WjAzMTEwLwYDVQQD Eyg1OTliY2I1ODc5OGE3NWQ0NTA1YjIzMDNlZTRhZWE0MGI3Y2Y4OTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63MeKnCEEolX9fOeoN54skXQN1zy lHlmnoVsGTF/phDZhA3p6GgCStuKuENMAdfN4Jc+paNCdlBikZO3L2fUp6e0zJzR FdF80J1/aflf+rF1HcKsc66K9KuJGyV+HGt3aTrnKB/5iof4xUCjTtYH2bM3PzKE fvUnmK//lPHXdxy9H9IpCp5lTOn9Tz8o/whAnL4Nlr+JJP0tDKebdU/Sn1jAB/6J lPak6zuLhUdq7z0m17lqTArIMHBc7wCgXFaJpeJEStDLClybJu063UB4NXSSAa7f E88MCoCbokTayIgdEUMkc0/voA6z9VRgsX1jgrnO2InrSC7RSaJ0u6bB3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmby1h5inXUUFsjA+5K6kC3z4laMB8GA1UdIwQY MBaAFNxPkKk9yUJ4VWRJA8twwfdLkxeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUt NjMxNzdmYjE5YWJlLzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUtNjMxNzdmYjE5YWJl LzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKe4Snp1 VYXWEZMLozYraAb7mbuBCL1YyALdQe51FuOqPrFdQpSzZy0rfprPxSv9hocY6JYo 4Ml7yGVHlxn1k7UAaFruyEF1JuqnBZrgjFGOioNYLS3U9b4QXaNisMAevpwPg172 l6TXsK9iASO/0dElltpgxG/2ElU2tT0tKwItKqoq/lWuNJa8dRlcfJnu0FNvbLUp 3NOTAfLm3IBvWYgYTcwdSGP+Qgi0sQ/74M7nTauaj+sdme6nWF/Q2JYaQuAgRCc+ kMyvLKQLtA33H3j+cqpbtlS/dFII9Z8vXuMv4aAlPNxX7JD3EDWSRpmgu8W0kQyd dUkmgDOgh/vvPA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:29:26 2025 by rpki-client