This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json) Hash identifier: r9R3/AJ0taR8oXGGKPx/lM05wYHM8TxV2yKEugJn628= Subject key identifier: 81:CB:FB:85:57:D0:8E:30:86:3F:3C:F2:33:42:0F:B8:3E:73:0A:89 Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10 Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410 Certificate serial: 019AF12D992D829E9EF555BCD53F22814E8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft Manifest number: 0E46 Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: NayE+wzN8yX/DFtyeK+zpEGt4YDWFO3QayePCiSrJFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:99:2d:82:9e:9e:f5:55:bc:d5:3f:22:81:4e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410 Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=81cbfb8557d08e30863f3cf233420fb83e730a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:bf:73:6b:8d:83:d2:53:eb:ee:64:02:76: d6:35:8f:a7:66:89:4f:dc:55:a0:ab:02:d9:1e:d8: 69:27:a1:17:f4:c7:dc:98:16:3c:86:43:fb:2f:a7: 79:66:9d:d3:d2:67:32:8e:c7:70:f8:c8:06:45:5f: 4b:bd:1f:0b:b1:8c:21:8a:45:b6:c3:fa:92:55:3a: e9:14:a3:8c:cf:0d:99:bc:5f:f8:3d:ba:de:a1:19: 04:8a:c9:12:00:53:74:d0:10:3b:5e:07:b5:58:7c: 7c:65:1b:fc:13:7b:e3:5c:9d:cb:c3:be:4d:52:fd: 5f:67:77:16:b4:13:c9:72:9a:ee:f5:51:36:fc:bb: d6:e5:d7:fc:d8:a2:b9:eb:91:c5:2c:63:e8:65:86: dc:74:71:5d:04:dd:48:fb:a9:2b:f1:4e:05:a7:a9: 48:9f:fe:aa:78:45:79:6a:67:53:90:bc:2b:ea:67: c0:ea:5c:a5:3e:98:5b:19:ce:d3:0a:c4:b1:20:f0: 40:fc:89:bf:ec:06:31:95:0c:8c:77:64:8d:12:e6: 84:8a:e6:35:b5:39:59:86:f3:c1:5c:e2:f0:0d:a0: a3:71:0b:e5:8a:43:ac:1d:f3:51:a3:71:fd:bd:e3: 9e:98:d7:1a:62:54:63:fc:4f:79:2a:1d:e3:32:9f: 02:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CB:FB:85:57:D0:8E:30:86:3F:3C:F2:33:42:0F:B8:3E:73:0A:89 X509v3 Authority Key Identifier: keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:97:4e:f2:ac:6f:af:a6:2b:c3:f1:08:25:3b:2f:4d:86:9b: 28:e8:11:a2:e5:f7:30:36:a1:52:61:01:2d:76:4e:34:d5:1c: 0b:41:c0:4e:37:68:3d:22:08:ed:d9:b1:56:2c:34:5d:50:88: a8:ff:e8:b1:47:16:18:3a:86:0e:16:70:b8:04:55:0a:c6:db: 05:95:72:b3:8c:b2:0f:30:76:74:cb:09:0b:9b:58:7c:b7:e0: c3:95:d4:48:be:89:c1:e8:66:14:eb:68:f1:83:28:52:48:35: be:05:c4:0f:66:1c:01:67:a0:8a:aa:70:f2:6d:a0:a9:53:11: 0b:4a:ff:58:83:7b:57:d7:a4:9d:99:d7:d8:4f:55:5b:80:58: 36:9f:2e:6f:87:66:3e:e6:a8:f1:46:89:4b:dd:5d:8e:10:77: 47:2a:b2:2b:14:18:9f:f4:f8:38:67:ca:c6:88:c5:49:fd:ef: 24:c3:91:f8:bf:20:79:7f:5a:49:53:59:85:ce:db:86:aa:18: c8:43:fc:dc:9f:16:a4:cb:3d:07:5a:f4:35:e9:a7:3f:51:18: 50:e5:ae:9e:c1:68:f1:55:7a:ea:26:0a:29:9c:4f:6e:a2:0c: 9c:62:5b:f4:6e:3e:3e:78:ad:6d:1d:fa:e3:12:a2:7d:b9:bb: 52:c2:19:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZktgp6e9VW81T8igU6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNmU3MGU0MzZlMWMwMjVhYTBlMGUzZmJhODUyYjk4YWQz Yjg0MTAwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD Eyg4MWNiZmI4NTU3ZDA4ZTMwODYzZjNjZjIzMzQyMGZiODNlNzMwYTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpW/c2uNg9JT6+5kAnbWNY+nZolP 3FWgqwLZHthpJ6EX9MfcmBY8hkP7L6d5Zp3T0mcyjsdw+MgGRV9LvR8LsYwhikW2 w/qSVTrpFKOMzw2ZvF/4PbreoRkEiskSAFN00BA7Xge1WHx8ZRv8E3vjXJ3Lw75N Uv1fZ3cWtBPJcpru9VE2/LvW5df82KK565HFLGPoZYbcdHFdBN1I+6kr8U4Fp6lI n/6qeEV5amdTkLwr6mfA6lylPphbGc7TCsSxIPBA/Im/7AYxlQyMd2SNEuaEiuY1 tTlZhvPBXOLwDaCjcQvlikOsHfNRo3H9veOemNcaYlRj/E95Kh3jMp8CFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHL+4VX0I4whj888jNCD7g+cwqJMB8GA1UdIwQY MBaAFN1ucOQ24cAlqg4OP7qFK5itO4QQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1c1dzVEYmh3Q1dxRGc0X3VvVXJtSzA3aEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iNmFmYmItNWE2Yi00MzQ1LTkwYWUt N2I2MWE2OTVkMTMyLzEvM1c1dzVEYmh3Q1dxRGc0X3VvVXJtSzA3aEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iNmFmYmItNWE2Yi00MzQ1LTkwYWUtN2I2MWE2OTVkMTMy LzEvM1c1dzVEYmh3Q1dxRGc0X3VvVXJtSzA3aEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5dO8qxv r6Yrw/EIJTsvTYabKOgRouX3MDahUmEBLXZONNUcC0HATjdoPSII7dmxViw0XVCI qP/osUcWGDqGDhZwuARVCsbbBZVys4yyDzB2dMsJC5tYfLfgw5XUSL6JwehmFOto 8YMoUkg1vgXED2YcAWegiqpw8m2gqVMRC0r/WIN7V9eknZnX2E9VW4BYNp8ub4dm Puao8UaJS91djhB3RyqyKxQYn/T4OGfKxojFSf3vJMOR+L8geX9aSVNZhc7bhqoY yEP83J8WpMs9B1r0NemnP1EYUOWunsFo8VV66iYKKZxPbqIMnGJb9G4+PnitbR36 4xKifbm7UsIZjw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:41 2025 by rpki-client