This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft File: 3gr32Dxe6w1DStdTxqX0dUlpizc.mft (raw, json) Hash identifier: XapqjuGCrOrdMiKyylp5CrMhI6Zo1FgJBsZ5RwVx2PU= Subject key identifier: CE:B1:E8:CE:56:03:BF:78:4A:1C:74:56:BE:C2:72:14:01:8F:9C:42 Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37 Certificate issuer: /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37 Certificate serial: 019AF16447D406DC39694AFB7C59D080124A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 02:01:12 +0000 Manifest this update: Sat 06 Dec 2025 02:01:12 +0000 Manifest next update: Sun 07 Dec 2025 02:01:12 +0000 Files and hashes: 1: 3gr32Dxe6w1DStdTxqX0dUlpizc.crl (hash: ydzbW9a2JTjCDmX5dLVXlf1xqax9LAZhFFG6rX6SEMc=) 2: Aqgmt-0kmHhTxI4TNwO6CqQUAvI.roa (hash: OT3qKlUhR0guc2qzeYETLZJZRi9SFdXOekAamRFDQh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:47:d4:06:dc:39:69:4a:fb:7c:59:d0:80:12:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37 Validity Not Before: Dec 6 02:01:12 2025 GMT Not After : Dec 7 02:01:12 2025 GMT Subject: CN=ceb1e8ce5603bf784a1c7456bec27214018f9c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:d7:af:4d:13:b3:67:a8:aa:01:72:a1:8e: b6:7c:3e:e4:cf:35:77:7f:e9:e0:b6:92:db:d0:5a: 81:95:50:88:ec:28:11:13:92:35:58:90:b5:2a:59: 93:08:de:60:eb:fd:15:d3:22:a2:04:ba:77:ba:d1: 4e:79:13:dc:f3:ff:ab:fd:f8:8e:9a:b2:55:76:85: 11:cc:c3:f4:d9:fc:b6:2a:14:ee:ba:9a:59:b2:8e: d3:53:f7:90:fe:06:50:5f:55:b4:1d:b8:7b:43:53: ea:69:41:25:3a:28:ae:6b:4f:65:ec:0c:44:37:1a: 15:db:38:af:8a:43:be:e6:19:5d:ef:c4:d3:7a:44: f3:ad:8f:38:c4:58:29:5e:3f:0d:ce:df:51:b1:73: 5a:06:6d:1b:51:35:c0:61:4d:01:c6:a5:bd:78:e4: fa:6f:af:0d:62:27:ab:f2:1b:6e:e5:fa:ee:2a:b0: 60:ba:08:b9:e2:f0:c8:8d:4a:48:39:70:ba:c0:82: 99:fb:82:30:02:b7:36:ea:ea:52:85:d5:e3:61:64: 4c:2a:76:2d:23:d9:dd:ce:d9:f6:41:37:b5:01:4c: fd:a0:ec:9e:d8:54:98:76:28:4d:70:b4:52:2a:9b: ac:24:23:10:8f:93:76:dc:f3:01:d9:6f:14:43:df: 3e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B1:E8:CE:56:03:BF:78:4A:1C:74:56:BE:C2:72:14:01:8F:9C:42 X509v3 Authority Key Identifier: keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7e:3d:af:4e:88:de:4d:fe:d6:e0:e0:18:09:ed:d9:a2:a7: 9a:07:aa:c3:1c:23:23:4e:85:6c:74:3a:56:71:f8:18:30:b6: af:ae:f2:3a:14:5c:32:6d:41:27:83:24:a2:bb:9f:ae:5d:86: a2:4f:70:5e:df:14:35:29:33:95:45:3b:0e:94:75:79:9f:88: a1:50:6b:90:54:51:08:c7:e5:f5:17:c3:cd:ca:2c:11:eb:7f: 6f:39:1d:05:7f:8d:31:b4:22:7a:bd:ca:50:43:f9:46:9b:a3: 18:dc:7e:aa:52:d9:5d:47:1b:28:dd:98:e1:7d:9b:79:b6:3e: 96:3b:62:a8:d6:ec:63:e5:f2:58:35:c3:8f:08:bf:75:df:de: 0c:dc:70:a0:6e:c4:ae:e1:03:a1:f2:67:2b:03:98:79:1f:72: 2a:ee:11:88:44:91:80:ab:ba:cb:5b:bd:16:bb:7f:05:35:e2: 78:f3:2c:dd:bc:6e:db:88:2a:61:da:d9:70:df:25:61:dd:70: 8c:eb:d2:3b:95:ef:05:a7:7b:63:0d:3a:84:ca:a9:ba:16:5e: 73:0a:43:30:22:b2:0c:73:4c:e8:6d:a3:4a:48:1a:89:e5:c9: a6:f9:10:ae:ec:75:7c:4b:61:9a:50:be:f3:4a:cc:99:f8:25: d8:46:e4:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEfUBtw5aUr7fFnQgBJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGFmN2Q4M2M1ZWViMGQ0MzRhZDc1M2M2YTVmNDc1NDk2 OThiMzcwHhcNMjUxMjA2MDIwMTEyWhcNMjUxMjA3MDIwMTEyWjAzMTEwLwYDVQQD EyhjZWIxZThjZTU2MDNiZjc4NGExYzc0NTZiZWMyNzIxNDAxOGY5YzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonHXr00Ts2eoqgFyoY62fD7kzzV3 f+ngtpLb0FqBlVCI7CgRE5I1WJC1KlmTCN5g6/0V0yKiBLp3utFOeRPc8/+r/fiO mrJVdoURzMP02fy2KhTuuppZso7TU/eQ/gZQX1W0Hbh7Q1PqaUElOiiua09l7AxE NxoV2zivikO+5hld78TTekTzrY84xFgpXj8Nzt9RsXNaBm0bUTXAYU0BxqW9eOT6 b68NYier8htu5fruKrBgugi54vDIjUpIOXC6wIKZ+4IwArc26upShdXjYWRMKnYt I9ndztn2QTe1AUz9oOye2FSYdihNcLRSKpusJCMQj5N23PMB2W8UQ98+iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6x6M5WA794Shx0Vr7CchQBj5xCMB8GA1UdIwQY MBaAFN4K99g8XusNQ0rXU8al9HVJaYs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lN2E3NzItOGIzOS00MzBkLWIxOTIt YTFiOGJjNWIyY2Q3LzEvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lN2E3NzItOGIzOS00MzBkLWIxOTItYTFiOGJjNWIyY2Q3 LzEvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANn49r06I 3k3+1uDgGAnt2aKnmgeqwxwjI06FbHQ6VnH4GDC2r67yOhRcMm1BJ4Mkorufrl2G ok9wXt8UNSkzlUU7DpR1eZ+IoVBrkFRRCMfl9RfDzcosEet/bzkdBX+NMbQier3K UEP5RpujGNx+qlLZXUcbKN2Y4X2bebY+ljtiqNbsY+XyWDXDjwi/dd/eDNxwoG7E ruEDofJnKwOYeR9yKu4RiESRgKu6y1u9Frt/BTXiePMs3bxu24gqYdrZcN8lYd1w jOvSO5XvBad7Yw06hMqpuhZecwpDMCKyDHNM6G2jSkgaieXJpvkQrux1fEthmlC+ 80rMmfgl2EbkAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:23 2025 by rpki-client