This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft File: 3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json) Hash identifier: nJYh/5WWSP0e/wkKhVZMXLo0Db78L3ZscGlJK3zrJsc= Subject key identifier: 58:49:3C:35:A1:3D:02:F7:51:56:F4:A3:52:4F:8A:CB:E5:0C:5A:64 Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96 Certificate issuer: /CN=de747196cb8c9dc642337afebf04b204dcd19696 Certificate serial: 019AF1D22AF3F1790FE7793AC4B393914FF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft Manifest number: 0648 Signing time: Sat 06 Dec 2025 04:01:13 +0000 Manifest this update: Sat 06 Dec 2025 04:01:13 +0000 Manifest next update: Sun 07 Dec 2025 04:01:13 +0000 Files and hashes: 1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: Kz7tm8/X74oJiUEY3THAWw5To8qVy6Dv3LLIn8spcK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2a:f3:f1:79:0f:e7:79:3a:c4:b3:93:91:4f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696 Validity Not Before: Dec 6 04:01:13 2025 GMT Not After : Dec 7 04:01:13 2025 GMT Subject: CN=58493c35a13d02f75156f4a3524f8acbe50c5a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:80:2c:28:31:24:5c:94:2a:21:79:72:db: e4:eb:9f:c1:92:a6:9d:92:4f:72:66:33:23:04:90: 00:df:f2:c6:9e:63:8b:d2:b9:3a:e0:ce:de:e1:ab: b9:a6:6c:46:3a:a2:c6:ac:96:ef:80:bf:12:64:8a: 4d:9d:c7:61:00:1c:66:34:bc:38:7a:6d:5b:01:cd: 3d:f3:4a:af:e6:46:f1:6f:10:b1:84:e0:7f:60:be: c6:ae:f3:c1:a2:ba:4d:47:63:1e:07:8b:1f:d1:07: f2:07:ed:72:8d:58:19:af:48:6f:89:18:87:6a:2a: 09:fb:4d:32:66:02:ad:d2:59:c6:ae:6e:00:34:0f: 4c:2e:79:1a:5a:b0:5e:90:ba:7c:f2:90:c8:35:35: 4a:45:ff:33:bf:2f:b9:f1:fa:e7:2c:ae:21:c9:24: a6:1a:6f:78:5d:72:9f:13:ba:b3:b2:02:ec:80:c4: af:e3:45:97:66:8c:6a:c8:45:a1:39:a5:a7:cc:87: 5c:d5:c4:fe:f7:35:f8:c4:9c:5c:41:7a:2d:88:91: 7f:b4:44:d1:02:46:b6:2d:c1:0d:fa:60:7d:49:7d: 95:b0:c1:92:bf:ae:1f:39:52:ec:e8:c5:a7:ed:ea: 47:68:dd:6e:d4:90:4b:c2:cf:42:ad:0b:b1:42:2a: f0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:49:3C:35:A1:3D:02:F7:51:56:F4:A3:52:4F:8A:CB:E5:0C:5A:64 X509v3 Authority Key Identifier: keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e4:e7:0e:be:5c:07:3d:78:14:f1:16:1b:88:63:36:35:65: 3a:25:39:10:52:27:2f:2d:cf:6a:00:a4:30:5a:96:a2:84:70: b6:0d:6f:f7:a9:10:48:0b:1c:f9:92:ac:59:4c:34:33:2d:2c: 3e:d6:6a:71:d1:ff:fc:e6:a7:fb:03:3f:74:ab:f0:b8:d9:4a: 1e:43:01:c1:6b:49:ee:8f:cc:35:3c:a3:36:bb:35:e0:13:cc: a9:ec:e6:f8:e8:37:4d:d1:0c:75:34:e2:79:e6:5e:90:16:4c: 06:dc:3f:95:e4:e9:72:8d:df:e2:b8:ab:72:39:49:96:0a:03: 35:82:2c:25:0a:c1:5c:46:15:cb:85:4b:96:b0:b4:a2:0b:0a: 0f:fa:62:74:d6:3f:13:00:ac:0c:a7:a8:20:ca:69:b8:7a:7d: 01:93:06:bc:ff:b3:cd:b3:1f:da:e0:62:42:4e:25:f2:f0:9a: c6:8f:4c:21:81:89:fa:bb:e6:44:39:3d:73:4f:e1:0b:14:71: d7:a4:4a:fe:8c:21:56:0f:f5:c3:0d:5d:54:19:28:40:3b:58: ef:2d:dc:62:c0:d5:5c:5d:a1:fc:45:26:7b:20:c2:66:85:3b: f7:93:5d:de:4c:fc:9e:ea:01:09:d0:92:9c:fc:4f:e5:d1:8d: 9c:df:2f:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0irz8XkP53k6xLOTkU/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNzQ3MTk2Y2I4YzlkYzY0MjMzN2FmZWJmMDRiMjA0ZGNk MTk2OTYwHhcNMjUxMjA2MDQwMTEzWhcNMjUxMjA3MDQwMTEzWjAzMTEwLwYDVQQD Eyg1ODQ5M2MzNWExM2QwMmY3NTE1NmY0YTM1MjRmOGFjYmU1MGM1YTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM2ALCgxJFyUKiF5ctvk65/Bkqad kk9yZjMjBJAA3/LGnmOL0rk64M7e4au5pmxGOqLGrJbvgL8SZIpNncdhABxmNLw4 em1bAc0980qv5kbxbxCxhOB/YL7GrvPBorpNR2MeB4sf0QfyB+1yjVgZr0hviRiH aioJ+00yZgKt0lnGrm4ANA9MLnkaWrBekLp88pDINTVKRf8zvy+58frnLK4hySSm Gm94XXKfE7qzsgLsgMSv40WXZoxqyEWhOaWnzIdc1cT+9zX4xJxcQXotiJF/tETR Aka2LcEN+mB9SX2VsMGSv64fOVLs6MWn7epHaN1u1JBLws9CrQuxQirwDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhJPDWhPQL3UVb0o1JPisvlDFpkMB8GA1UdIwQY MBaAFN50cZbLjJ3GQjN6/r8EsgTc0ZaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85NzFjMjQtNmIyYi00NmE1LWE3NTEt ZDNlOGE4Njg5ZGMzLzEvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85NzFjMjQtNmIyYi00NmE1LWE3NTEtZDNlOGE4Njg5ZGMz LzEvM25SeGxzdU1uY1pDTTNyLXZ3U3lCTnpSbHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+TnDr5c Bz14FPEWG4hjNjVlOiU5EFInLy3PagCkMFqWooRwtg1v96kQSAsc+ZKsWUw0My0s PtZqcdH//Oan+wM/dKvwuNlKHkMBwWtJ7o/MNTyjNrs14BPMqezm+Og3TdEMdTTi eeZekBZMBtw/leTpco3f4rircjlJlgoDNYIsJQrBXEYVy4VLlrC0ogsKD/pidNY/ EwCsDKeoIMppuHp9AZMGvP+zzbMf2uBiQk4l8vCaxo9MIYGJ+rvmRDk9c0/hCxRx 16RK/owhVg/1ww1dVBkoQDtY7y3cYsDVXF2h/EUmeyDCZoU795Nd3kz8nuoBCdCS nPxP5dGNnN8v1g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:30 2025 by rpki-client