This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json) Hash identifier: moEXFusZBiYND97vuhH/PTGnSHMRURlQHwvey9hpCV4= Subject key identifier: F8:28:05:2B:03:1C:16:11:7E:B9:44:D5:6E:EF:C6:4A:68:9F:8E:AB Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff Certificate serial: 019AF31C1412BB7AD6BF4FBE9B4857763E63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft Manifest number: 1438 Signing time: Sat 06 Dec 2025 10:01:34 +0000 Manifest this update: Sat 06 Dec 2025 10:01:34 +0000 Manifest next update: Sun 07 Dec 2025 10:01:34 +0000 Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: zBNSWZDlo7deCdffdFNnuvmaH5jfbuifsVVDxoXhkjQ=) 2: K668RnN8R9Zt_BhcvITxrQRhBNs.roa (hash: 8wo0Wz+L+phQUblwdU8c4kneYF4uQyTcefZ7CpD7SsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:14:12:bb:7a:d6:bf:4f:be:9b:48:57:76:3e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff Validity Not Before: Dec 6 10:01:34 2025 GMT Not After : Dec 7 10:01:34 2025 GMT Subject: CN=f828052b031c16117eb944d56eefc64a689f8eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8d:c5:b6:9d:57:fe:46:97:47:7c:bd:e3:c2: 82:ae:2a:a3:0e:45:a1:f7:54:0d:b8:64:5a:72:79: ed:2e:19:3b:f2:17:e0:7c:50:6a:91:63:a6:60:a9: a2:d3:19:76:61:ec:8b:e1:d4:27:09:e2:e2:2b:d7: 32:f0:43:71:ef:66:ef:59:a5:94:da:d2:9e:84:79: 3e:eb:1a:20:5e:c0:de:74:00:a4:c9:5b:84:82:9a: 02:3d:91:e4:a0:55:a7:8d:12:f8:8e:d3:f5:87:f4: 53:9d:97:4c:16:53:35:6c:3a:c9:d3:94:fa:f9:e2: fe:48:25:08:00:75:2e:16:80:be:14:21:79:04:13: 5d:d4:ce:b8:f4:23:b1:73:e3:d9:e5:fd:6a:ed:c0: a1:17:00:94:aa:13:0b:c6:e3:47:82:b3:e9:ae:62: b1:ed:2f:38:82:8e:63:a3:7f:68:1d:84:ca:22:f3: bf:71:26:17:34:57:1e:22:f4:44:5b:1d:87:39:b0: d1:81:dd:ed:84:0a:48:7d:5c:24:f9:a8:2b:3b:2e: db:97:a0:c7:29:e1:79:e9:73:b7:0d:f8:79:12:9b: 69:d1:ef:64:00:c6:97:2e:a4:2c:2e:d0:6f:fa:ea: 16:e0:b2:ce:37:dc:42:8f:2c:24:26:61:2b:74:c2: 12:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:28:05:2B:03:1C:16:11:7E:B9:44:D5:6E:EF:C6:4A:68:9F:8E:AB X509v3 Authority Key Identifier: keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2b:75:e0:5b:6c:58:29:94:a3:5d:c1:bf:a1:40:ce:32:df: 11:1e:3e:5b:68:23:2e:96:ff:8c:20:1e:4c:3e:ae:0c:79:2a: 25:68:2c:a2:34:0d:c6:d7:8a:23:52:b0:e4:dd:62:8a:ae:67: ff:83:a0:f7:8e:fb:7a:a0:ec:e0:46:f0:8d:f1:3d:ac:13:12: 98:87:bb:15:23:b7:08:8b:65:2b:c0:da:ce:20:4f:65:24:93: 79:e4:db:62:65:dc:a4:39:1c:47:ef:c5:27:c0:d0:38:4a:46: 23:20:c7:8b:c0:73:70:bb:e6:af:17:c3:96:25:c3:5c:96:08: 17:d7:20:90:92:41:b2:4d:e4:7a:ed:e9:fc:e0:ec:77:60:9c: 5c:d4:9a:d3:4d:17:cf:a4:8a:59:36:0a:f4:5e:94:f5:eb:d1: 76:55:a2:16:35:75:75:99:02:fc:19:85:bb:fe:9f:4f:08:1f: 39:83:18:63:93:d6:d0:ae:21:58:73:c0:96:b9:85:d6:2f:ac: 79:3b:4f:8b:f5:cf:d5:c1:af:2c:30:ef:f7:67:7a:42:0c:74: 38:4b:29:56:6b:ae:70:11:2f:c8:6b:bf:12:61:ec:be:fa:de: 06:79:0b:07:5c:7b:4d:55:b8:77:6a:bd:43:04:20:17:10:5e: d5:f8:5b:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBQSu3rWv0++m0hXdj5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOWZmNjE5NTA5NmEwOThjMTkyODE1NDhlNDEwN2I4Njdj NzNhZmYwHhcNMjUxMjA2MTAwMTM0WhcNMjUxMjA3MTAwMTM0WjAzMTEwLwYDVQQD EyhmODI4MDUyYjAzMWMxNjExN2ViOTQ0ZDU2ZWVmYzY0YTY4OWY4ZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY3Ftp1X/kaXR3y948KCriqjDkWh 91QNuGRacnntLhk78hfgfFBqkWOmYKmi0xl2YeyL4dQnCeLiK9cy8ENx72bvWaWU 2tKehHk+6xogXsDedACkyVuEgpoCPZHkoFWnjRL4jtP1h/RTnZdMFlM1bDrJ05T6 +eL+SCUIAHUuFoC+FCF5BBNd1M649COxc+PZ5f1q7cChFwCUqhMLxuNHgrPprmKx 7S84go5jo39oHYTKIvO/cSYXNFceIvREWx2HObDRgd3thApIfVwk+agrOy7bl6DH KeF56XO3Dfh5Eptp0e9kAMaXLqQsLtBv+uoW4LLON9xCjywkJmErdMISBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgoBSsDHBYRfrlE1W7vxkpon46rMB8GA1UdIwQY MBaAFN6f9hlQlqCYwZKBVI5BB7hnxzr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83MzY3OWEtY2IwMS00M2NkLTkyNDUt YTI5YzZkYWUzNWMwLzEvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83MzY3OWEtY2IwMS00M2NkLTkyNDUtYTI5YzZkYWUzNWMw LzEvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCt14Fts WCmUo13Bv6FAzjLfER4+W2gjLpb/jCAeTD6uDHkqJWgsojQNxteKI1Kw5N1iiq5n /4Og9477eqDs4EbwjfE9rBMSmIe7FSO3CItlK8DaziBPZSSTeeTbYmXcpDkcR+/F J8DQOEpGIyDHi8BzcLvmrxfDliXDXJYIF9cgkJJBsk3keu3p/ODsd2CcXNSa000X z6SKWTYK9F6U9evRdlWiFjV1dZkC/BmFu/6fTwgfOYMYY5PW0K4hWHPAlrmF1i+s eTtPi/XP1cGvLDDv92d6Qgx0OEspVmuucBEvyGu/EmHsvvreBnkLB1x7TVW4d2q9 QwQgFxBe1fhbdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:12 2025 by rpki-client