This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json) Hash identifier: HowrSCpnbiZ5x77pPXRj+cutrQFnPMvMwBk+sfbPFzE= Subject key identifier: BC:EC:4A:52:E4:DA:AD:41:13:03:2B:02:19:7D:B3:CC:85:2D:20:01 Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee Certificate serial: 019AF31DA83E8E3F7BA894FD0985331306A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft Manifest number: 0DF6 Signing time: Sat 06 Dec 2025 10:03:18 +0000 Manifest this update: Sat 06 Dec 2025 10:03:18 +0000 Manifest next update: Sun 07 Dec 2025 10:03:18 +0000 Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: BW81VWuAw6cRDff0GUm9ZLX5ld6xRQS74vdNRbm9jGQ=) 2: 8miIDeBQxB0aKJY-TlsIuuJ2hww.roa (hash: mQmM8Cjnfx5WSvhPSj11m+hm6JvBiNUtIRExWbof9J8=) 3: IRGnT1eQmUBmgR6_xtusELr-83s.roa (hash: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=) 4: aw3P8V17V992wZUulFnFkkVrMmo.roa (hash: O9AIELr13JUWTjKqPnJ8lbjYgl5+VRQqDU69j3HTMwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:a8:3e:8e:3f:7b:a8:94:fd:09:85:33:13:06:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee Validity Not Before: Dec 6 10:03:18 2025 GMT Not After : Dec 7 10:03:18 2025 GMT Subject: CN=bcec4a52e4daad4113032b02197db3cc852d2001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:68:21:96:e4:99:d7:c5:35:d0:22:c4:74:2b: 22:6e:81:2d:68:09:9d:54:68:f4:51:a6:dd:fc:b5: 3f:95:09:c5:4c:d0:96:ec:78:31:5f:55:f6:55:a5: aa:1a:13:f0:0c:3a:e2:4b:f7:97:4e:c5:fe:a7:38: 9e:39:f9:29:96:1c:bb:9d:8b:0b:65:67:1e:dd:16: e9:29:c8:4f:73:22:43:be:34:db:8c:82:4f:21:01: 39:a5:a2:7b:56:c6:a6:ea:40:af:25:4b:75:0b:19: 98:22:0a:7e:74:b9:f7:02:9f:0e:30:d5:83:69:6b: 67:20:65:1b:23:25:82:be:47:16:8e:b0:66:c1:ae: 92:2b:a8:ef:a2:56:41:35:82:d3:d4:48:74:a1:14: 43:52:05:22:0b:ee:c5:a8:dd:e5:e6:82:36:f7:75: 87:ea:41:2b:4c:7b:c1:fe:40:51:f6:67:2a:a7:55: 3c:54:5e:18:9e:07:2d:fc:ae:13:a4:ed:e1:fc:60: 17:7e:fc:42:cc:9c:25:4e:ad:b9:0e:ea:1d:b7:f8: 45:ea:28:f9:cf:ae:8d:f4:b2:82:5d:d3:9b:58:f6: 09:4d:60:aa:49:2a:24:10:92:fc:e9:52:ee:81:8a: 4f:e7:c9:89:07:35:89:06:19:c7:0c:ae:92:c3:f9: d4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EC:4A:52:E4:DA:AD:41:13:03:2B:02:19:7D:B3:CC:85:2D:20:01 X509v3 Authority Key Identifier: keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:79:c9:70:9c:7c:f4:9e:71:e9:b0:ef:af:88:b1:f8:6a:18: f1:31:ab:e2:36:d8:95:db:19:93:aa:20:63:ec:53:63:a2:8c: 3f:b0:a7:6e:9f:1b:98:fa:59:b1:7f:50:ca:e7:8d:f8:d1:2c: 7f:14:2d:4a:48:18:96:c9:8c:d5:df:d5:55:8d:fe:e8:48:f5: 4f:0e:6a:2e:dc:d8:74:d0:c0:6b:04:49:c3:93:a7:76:62:46: e2:66:d7:e6:e2:5d:7b:78:ea:c5:4d:c1:12:17:84:7a:6f:34: 2f:ac:13:9b:92:cb:36:f3:2d:c3:e1:ea:91:d4:05:34:99:c9: a5:3a:f3:74:e1:12:af:7f:0b:b3:15:a7:6a:dc:0e:24:6b:0d: bc:6a:80:8d:e0:bb:2b:8d:ba:11:20:67:41:0a:18:d7:06:66: 53:15:fa:bb:02:88:e6:ef:c8:2e:4d:0f:a7:c1:96:05:a2:59: fd:ac:f7:1d:e1:dd:18:7a:bb:55:55:9b:30:d5:09:0c:52:40: 68:e9:fd:8d:e3:13:98:f7:bc:08:c1:dd:0f:82:c0:f3:9f:ff: c5:4b:1c:2b:30:99:b5:2b:e9:d1:32:c7:f4:0f:8d:57:c8:ca: 5b:3c:40:94:7e:3b:66:02:d7:41:97:72:a8:9b:57:0b:e0:41: 66:a0:03:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHag+jj97qJT9CYUzEwalMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJi NWJlZWUwHhcNMjUxMjA2MTAwMzE4WhcNMjUxMjA3MTAwMzE4WjAzMTEwLwYDVQQD EyhiY2VjNGE1MmU0ZGFhZDQxMTMwMzJiMDIxOTdkYjNjYzg1MmQyMDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGghluSZ18U10CLEdCsiboEtaAmd VGj0Uabd/LU/lQnFTNCW7HgxX1X2VaWqGhPwDDriS/eXTsX+pzieOfkplhy7nYsL ZWce3RbpKchPcyJDvjTbjIJPIQE5paJ7Vsam6kCvJUt1CxmYIgp+dLn3Ap8OMNWD aWtnIGUbIyWCvkcWjrBmwa6SK6jvolZBNYLT1Eh0oRRDUgUiC+7FqN3l5oI293WH 6kErTHvB/kBR9mcqp1U8VF4Yngct/K4TpO3h/GAXfvxCzJwlTq25Duodt/hF6ij5 z66N9LKCXdObWPYJTWCqSSokEJL86VLugYpP58mJBzWJBhnHDK6Sw/nUxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzsSlLk2q1BEwMrAhl9s8yFLSABMB8GA1UdIwQY MBaAFN23FHE3O7BgPDVu7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgt NjIxMmFjNDljYTNiLzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNi LzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHnJcJx8 9J5x6bDvr4ix+GoY8TGr4jbYldsZk6ogY+xTY6KMP7Cnbp8bmPpZsX9QyueN+NEs fxQtSkgYlsmM1d/VVY3+6Ej1Tw5qLtzYdNDAawRJw5OndmJG4mbX5uJde3jqxU3B EheEem80L6wTm5LLNvMtw+HqkdQFNJnJpTrzdOESr38LsxWnatwOJGsNvGqAjeC7 K426ESBnQQoY1wZmUxX6uwKI5u/ILk0Pp8GWBaJZ/az3HeHdGHq7VVWbMNUJDFJA aOn9jeMTmPe8CMHdD4LA85//xUscKzCZtSvp0TLH9A+NV8jKWzxAlH47ZgLXQZdy qJtXC+BBZqAD8A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:59 2025 by rpki-client