This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft File: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json) Hash identifier: HhUtY4kDtq0BJP+IVSrYkGzxj8aJgVWzr0hOsZFWGjk= Subject key identifier: 13:67:B5:CB:FA:05:E2:08:A3:91:DB:81:11:4E:FD:39:E5:B8:DD:D8 Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64 Certificate issuer: /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64 Certificate serial: 019AF68AC27A8F7B6D69A12DD3D4FE676E3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft Manifest number: 1329 Signing time: Sun 07 Dec 2025 02:01:20 +0000 Manifest this update: Sun 07 Dec 2025 02:01:20 +0000 Manifest next update: Mon 08 Dec 2025 02:01:20 +0000 Files and hashes: 1: TImGbHFcysH3yKCENp7I2KDKakw.roa (hash: wV738mzWH7BpaMNjeVJLX60iXYrXwr7zU2chvPIlwaE=) 2: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: 0Bs1g7OqpQLk1nND2awT+wefz3IAXcDuvV+of4vgafQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:c2:7a:8f:7b:6d:69:a1:2d:d3:d4:fe:67:6e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64 Validity Not Before: Dec 7 02:01:20 2025 GMT Not After : Dec 8 02:01:20 2025 GMT Subject: CN=1367b5cbfa05e208a391db81114efd39e5b8ddd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:63:84:0b:b5:0f:1f:e8:53:11:de:e0:6f:fe: b9:ef:da:f9:93:38:64:34:90:da:3e:75:98:2e:53: ab:88:52:e1:6e:e4:fb:05:83:b2:ee:57:b7:13:f0: 28:1d:42:9c:a6:8e:67:16:ea:8a:2d:5e:5f:c2:e8: 9f:4f:51:62:19:32:ed:88:9c:38:7c:e3:01:79:53: 7d:91:16:0b:d8:f8:ad:33:3a:2e:b8:f4:25:86:71: 29:65:bc:44:e1:f0:9f:69:0e:26:5e:51:3d:57:d1: 45:48:ef:03:3e:91:ad:68:8b:d2:cc:71:a2:2c:12: 96:5b:ed:f2:0e:a8:fd:6c:03:02:a8:72:6d:b3:42: 46:2b:c4:91:44:29:9d:54:09:37:e9:91:01:8f:91: 04:9b:27:57:04:61:22:0b:b2:40:19:67:cf:5f:c8: 57:c7:79:60:40:03:a6:98:08:9e:3b:e5:16:ae:85: a2:d7:1c:d9:54:38:00:8f:34:c4:a5:5e:b6:65:cf: 6a:cd:a7:a2:da:33:13:4a:51:66:bf:4a:73:73:04: e8:41:8b:69:1e:d2:01:3e:43:e4:e0:d2:7f:56:c6: 59:c5:b6:52:75:49:b8:f4:7d:1b:7a:06:b9:d1:1b: 7e:57:20:10:31:3c:29:36:05:73:c5:f4:43:db:b4: 00:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:67:B5:CB:FA:05:E2:08:A3:91:DB:81:11:4E:FD:39:E5:B8:DD:D8 X509v3 Authority Key Identifier: keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:11:fa:ca:39:e7:6e:fc:ea:42:12:a2:b1:d3:fc:e9:3d:97: 98:10:c3:03:1e:9a:3f:18:9e:fc:de:cf:ed:38:30:05:a0:46: a4:92:9b:93:e3:2a:d1:3d:ac:4a:09:40:1c:72:08:16:df:7a: 5f:ea:55:b9:c4:6f:12:fa:15:0a:64:85:d5:0e:03:d6:50:49: b8:ce:ec:8e:57:63:98:e4:11:0c:e3:84:97:8e:57:a8:fd:da: 74:bf:19:16:cd:34:4b:b0:14:dc:f9:3a:41:c4:42:53:17:08: e6:50:22:45:03:4d:4f:4b:2f:04:5a:6a:66:a3:62:ef:90:3a: 0e:f2:00:08:aa:76:85:aa:e4:a6:28:74:4e:43:b4:3b:55:05: f9:1a:73:bd:ee:44:29:b1:97:d4:34:c9:72:22:62:1b:35:14: 12:22:b4:9a:7c:d1:fd:c2:08:3d:46:b0:b8:6a:02:0e:cf:40: ef:b9:86:e1:6f:7f:65:11:4f:dd:66:f9:2e:77:ec:c0:e5:88: c8:ba:18:cd:a5:81:db:67:75:6b:e8:d7:b5:e5:99:fa:64:50: d6:ac:50:8c:9c:9d:8b:12:50:56:e2:52:4d:57:c1:e9:87:02: 09:01:66:90:00:f3:77:82:99:ca:6c:c2:82:de:f7:29:1c:45: 6c:ca:3d:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2isJ6j3ttaaEt09T+Z247MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkM2RkOGQzMmNmYzcxN2E2ZTY5MGViZTNlMWRiNDM4NmQ4 ZjZjNjQwHhcNMjUxMjA3MDIwMTIwWhcNMjUxMjA4MDIwMTIwWjAzMTEwLwYDVQQD EygxMzY3YjVjYmZhMDVlMjA4YTM5MWRiODExMTRlZmQzOWU1YjhkZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmOEC7UPH+hTEd7gb/6579r5kzhk NJDaPnWYLlOriFLhbuT7BYOy7le3E/AoHUKcpo5nFuqKLV5fwuifT1FiGTLtiJw4 fOMBeVN9kRYL2PitMzouuPQlhnEpZbxE4fCfaQ4mXlE9V9FFSO8DPpGtaIvSzHGi LBKWW+3yDqj9bAMCqHJts0JGK8SRRCmdVAk36ZEBj5EEmydXBGEiC7JAGWfPX8hX x3lgQAOmmAieO+UWroWi1xzZVDgAjzTEpV62Zc9qzaei2jMTSlFmv0pzcwToQYtp HtIBPkPk4NJ/VsZZxbZSdUm49H0bega50Rt+VyAQMTwpNgVzxfRD27QA2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNntcv6BeIIo5HbgRFO/TnluN3YMB8GA1UdIwQY MBaAFK092NMs/HF6bmkOvj4dtDhtj2xkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQt M2JjZDIzOTllZTY0LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQtM2JjZDIzOTllZTY0 LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRH6yjnn bvzqQhKisdP86T2XmBDDAx6aPxie/N7P7TgwBaBGpJKbk+Mq0T2sSglAHHIIFt96 X+pVucRvEvoVCmSF1Q4D1lBJuM7sjldjmOQRDOOEl45XqP3adL8ZFs00S7AU3Pk6 QcRCUxcI5lAiRQNNT0svBFpqZqNi75A6DvIACKp2harkpih0TkO0O1UF+Rpzve5E KbGX1DTJciJiGzUUEiK0mnzR/cIIPUawuGoCDs9A77mG4W9/ZRFP3Wb5LnfswOWI yLoYzaWB22d1a+jXteWZ+mRQ1qxQjJydixJQVuJSTVfB6YcCCQFmkADzd4KZymzC gt73KRxFbMo9Zg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:30:20 2025 by rpki-client