This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json) Hash identifier: qdeLUwSwLuGmYuFj7wzQ7+uNiESHEdRva7rqZkaJhc4= Subject key identifier: C7:DC:48:4E:18:B3:9C:E3:08:27:D5:74:43:3A:9A:F7:0A:8A:85:8A Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c Certificate serial: 019B33E884D1495BF0408CC1D4BA65E225F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 00:00:34 +0000 Manifest this update: Fri 19 Dec 2025 00:00:34 +0000 Manifest next update: Sat 20 Dec 2025 00:00:34 +0000 Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: U5INvak5wdr0FXGbY/RcDutB5t3QwA+uRjNyN+FdqgY=) 2: 5395RGU-O7_Y-Wk8o5ckF03TEl8.roa (hash: 2x9LkbbQVmDZR4+CDqZEC8HuaScYKr9cs6YHpuOZlvY=) 3: JRT-ehjK87EWSX2wN_VxdPNgZVU.roa (hash: FFbMq3Jl0t/JwkKVVNHldSFfVrz4m+b2CW8bGskb98A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:84:d1:49:5b:f0:40:8c:c1:d4:ba:65:e2:25:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c Validity Not Before: Dec 19 00:00:34 2025 GMT Not After : Dec 20 00:00:34 2025 GMT Subject: CN=c7dc484e18b39ce30827d574433a9af70a8a858a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:72:97:f2:6f:48:12:a3:13:69:d7:05:f6:b4: f4:0e:73:a9:31:0b:dc:db:5d:d6:c1:81:b1:e0:6a: 1c:ab:59:cd:ab:f0:e0:09:bd:7e:02:32:ae:fa:e2: f8:85:ac:11:78:34:79:03:c6:a3:b2:07:cf:6f:12: 9c:8f:d0:2a:c2:19:b8:3a:3b:1f:c3:16:ae:1d:14: fd:c9:ca:ef:cd:c3:b8:5b:93:59:12:5a:e4:36:79: 01:9e:16:95:a0:58:8e:a3:f3:33:2b:6c:8b:e6:d5: f8:a5:a6:b4:65:d6:85:29:a8:fe:85:0f:99:4a:d2: fc:94:68:d9:0d:7c:e0:36:1d:ce:66:8e:a7:3a:f3: dc:e5:0e:48:fb:c7:e5:b9:24:3f:e5:df:7c:b8:d4: 01:d8:a0:2a:ab:e3:c1:76:d7:b5:b7:4a:e4:93:7e: 55:bb:8c:bf:5d:47:ed:53:69:54:3c:7b:39:d2:41: cf:ba:c4:7f:4e:71:2a:e4:43:5b:c1:b4:10:fd:24: 06:92:e9:ac:e4:77:b2:cc:f7:d9:d6:81:07:2c:ff: 4d:44:f7:31:6a:40:ef:e8:0c:9e:d3:70:ff:47:75: fe:4b:be:f9:9b:cc:57:e5:84:f5:49:e9:3f:33:98: 4c:da:89:f9:ad:16:2c:33:c5:3f:2d:0c:f3:32:ef: ad:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DC:48:4E:18:B3:9C:E3:08:27:D5:74:43:3A:9A:F7:0A:8A:85:8A X509v3 Authority Key Identifier: keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:24:96:82:9f:56:da:85:d9:c8:a5:5c:19:24:b2:ba:4a:b9: 75:a7:61:a0:9c:1b:a7:9e:db:07:a4:bf:79:1f:4d:4a:2d:94: 74:6d:3c:2b:46:f2:85:a5:88:0c:7d:08:61:de:b0:35:98:e5: ad:83:8a:a6:24:23:ed:78:1f:4f:c5:3d:77:fe:ba:59:9c:1c: 80:d7:08:1e:1f:8b:97:35:c4:bc:fc:12:23:64:e7:52:a5:0a: ea:96:6d:cb:dc:b2:c3:9a:be:8a:30:91:de:51:99:a6:c2:3a: 12:b8:92:63:9c:6a:ef:5f:09:fe:d3:cc:e6:b5:48:e6:93:40: 7a:b8:89:bf:05:7a:7f:73:79:cc:64:60:b0:0d:50:96:bf:96: 90:a9:70:ad:87:d5:ad:ed:c8:55:3a:f2:04:06:ff:57:b9:f9: ac:64:8c:35:f1:b5:d8:71:46:e5:b2:4c:cc:a4:8f:ac:5c:cc: 30:1c:6c:a0:8e:4b:07:f4:57:f8:07:96:7d:aa:44:eb:ab:7f: 7f:ee:53:46:d5:f5:a8:fa:2a:a2:0d:36:bf:9e:f0:9a:7c:f1: 32:42:53:20:49:25:ec:56:52:4c:04:25:93:e7:05:6f:f6:4e: 6e:0a:4b:ae:01:e3:bc:7f:43:76:6d:9f:ce:3f:f8:e4:93:b6: 8b:5a:fd:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6ITRSVvwQIzB1Lpl4iX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjFkZjU5OGY0YThmM2EyZDA3NGNjYjZmNmQxNmI1NGQx ZDExMWMwHhcNMjUxMjE5MDAwMDM0WhcNMjUxMjIwMDAwMDM0WjAzMTEwLwYDVQQD EyhjN2RjNDg0ZTE4YjM5Y2UzMDgyN2Q1NzQ0MzNhOWFmNzBhOGE4NThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nKX8m9IEqMTadcF9rT0DnOpMQvc 213WwYGx4Gocq1nNq/DgCb1+AjKu+uL4hawReDR5A8ajsgfPbxKcj9Aqwhm4Ojsf wxauHRT9ycrvzcO4W5NZElrkNnkBnhaVoFiOo/MzK2yL5tX4paa0ZdaFKaj+hQ+Z StL8lGjZDXzgNh3OZo6nOvPc5Q5I+8fluSQ/5d98uNQB2KAqq+PBdte1t0rkk35V u4y/XUftU2lUPHs50kHPusR/TnEq5ENbwbQQ/SQGkums5HeyzPfZ1oEHLP9NRPcx akDv6Aye03D/R3X+S775m8xX5YT1Sek/M5hM2on5rRYsM8U/LQzzMu+tLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfcSE4Ys5zjCCfVdEM6mvcKioWKMB8GA1UdIwQY MBaAFN3x31mPSo86LQdMy29tFrVNHREcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YjhiY2UtNTg0Yy00OTJjLWJkN2Ut ZDBmMzFiYzkzMDc5LzEvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82YjhiY2UtNTg0Yy00OTJjLWJkN2UtZDBmMzFiYzkzMDc5 LzEvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSSWgp9W 2oXZyKVcGSSyukq5dadhoJwbp57bB6S/eR9NSi2UdG08K0byhaWIDH0IYd6wNZjl rYOKpiQj7XgfT8U9d/66WZwcgNcIHh+LlzXEvPwSI2TnUqUK6pZty9yyw5q+ijCR 3lGZpsI6EriSY5xq718J/tPM5rVI5pNAeriJvwV6f3N5zGRgsA1Qlr+WkKlwrYfV re3IVTryBAb/V7n5rGSMNfG12HFG5bJMzKSPrFzMMBxsoI5LB/RX+AeWfapE66t/ f+5TRtX1qPoqog02v57wmnzxMkJTIEkl7FZSTAQlk+cFb/ZObgpLrgHjvH9Ddm2f zj/45JO2i1r9hA== -----END CERTIFICATE-----Generated at Fri Dec 19 05:43:22 2025 by rpki-client