This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json) Hash identifier: lwgQlj+3G5vhVHWGDLHu5EoTO2btLuQZ147tf7zmFPE= Subject key identifier: 60:8C:53:16:EA:CF:8E:98:70:77:ED:8B:26:7E:9E:DE:EA:1C:EF:80 Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4 Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4 Certificate serial: 019AF276CB379A0852FA70F0455AD7EDC364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft Manifest number: 16BD Signing time: Sat 06 Dec 2025 07:01:02 +0000 Manifest this update: Sat 06 Dec 2025 07:01:02 +0000 Manifest next update: Sun 07 Dec 2025 07:01:02 +0000 Files and hashes: 1: 1-7jWzqH7wT1n-L8XkfK1kEabKfA.roa (hash: qrQpcX8LTv3WT8M/1yXwPjm8/udCR9jmZNcZtjA7oMg=) 2: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: KP6xf+WNPWuDWK2+hPDsik4x9cLxptMVwwyUkKoCRaQ=) 3: kSKdo2q0O6OXBsJw6ZYyr7eJXbs.roa (hash: IDSSisdvZb6ZBfLMmbXOfW59dICKAwsuQknOYmnY4dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:cb:37:9a:08:52:fa:70:f0:45:5a:d7:ed:c3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4 Validity Not Before: Dec 6 07:01:02 2025 GMT Not After : Dec 7 07:01:02 2025 GMT Subject: CN=608c5316eacf8e987077ed8b267e9edeea1cef80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bf:11:a5:2d:5f:33:af:6f:5c:63:5e:00:b3: b4:14:e3:08:b4:fa:62:ba:eb:76:d1:e6:75:cb:cf: 50:ee:60:53:f2:c6:3e:70:f1:3c:59:12:f3:66:71: ad:52:30:33:16:17:6b:87:0a:ce:6d:bf:8a:7e:7d: 77:87:ad:cb:83:93:83:b1:44:88:7a:ac:f8:bd:48: 1f:19:69:c6:e5:c5:a0:f2:f1:25:c5:75:1b:da:19: 5c:0f:dc:30:0e:63:8a:25:a6:95:b3:2f:6a:f4:f9: 7a:43:ae:f0:92:23:64:dc:36:a1:eb:d8:e9:f6:d3: 21:98:89:c9:dc:06:e0:cd:2e:23:55:af:81:8b:4a: 09:55:ce:a7:f0:09:19:9b:53:2f:f7:be:ea:13:e0: 2e:59:05:eb:a9:4f:ea:31:6d:87:c9:89:26:67:ce: 03:f0:29:ac:89:1f:30:b2:5c:4b:91:d7:05:79:c4: 3a:7a:46:69:13:15:7e:44:61:47:c2:51:70:4e:cd: 54:bd:3c:06:78:ec:62:d5:98:d5:86:a5:11:cf:b8: 67:55:d1:f3:26:66:b3:5f:51:ba:5b:5d:51:02:ba: 25:96:ae:94:0a:5e:80:54:b9:09:ac:96:7f:87:12: d7:8b:03:15:0e:a6:cd:b1:55:bc:94:dd:b8:40:96: e1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8C:53:16:EA:CF:8E:98:70:77:ED:8B:26:7E:9E:DE:EA:1C:EF:80 X509v3 Authority Key Identifier: keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:56:cd:21:e4:02:58:bc:2e:33:38:1c:10:37:1e:1e:ac:a5: 91:a0:f5:e5:3f:cb:35:67:f5:1c:37:e1:c2:09:f0:b2:e1:5d: 9c:79:dd:f2:f6:f9:75:ef:aa:fa:96:7f:82:c3:9f:5c:83:fe: 41:ec:de:a7:1c:0d:72:cf:0c:4b:d4:98:dd:79:0d:52:ff:22: bb:8e:42:e5:dc:8f:3f:57:3c:ca:88:61:ce:36:05:36:f4:a5: c3:b5:2f:b9:1f:13:7e:86:8d:ba:4f:2e:38:42:1c:e2:78:54: f9:b3:5a:7f:70:04:29:b3:9c:5a:a2:08:2b:af:3a:6f:80:48: 06:60:8b:27:6d:3c:1a:02:2d:72:3c:40:f2:96:26:ac:32:1d: c0:a8:5e:45:59:ac:12:03:12:3a:7c:e8:da:fc:08:2c:ee:fb: 04:4b:93:aa:d1:7f:18:c1:95:8f:34:62:61:c7:e4:db:d4:0d: 17:ef:8d:12:7a:0e:4c:35:99:f9:e3:35:8b:ac:ac:93:a9:42: 20:b0:07:89:5a:1f:e2:e0:d1:65:d8:32:f0:f5:3f:a3:f0:39: 44:ec:2a:cd:a5:d5:8d:8f:f3:61:6b:94:e6:a5:ac:9a:0e:b8: c4:e3:25:36:08:78:35:37:e7:ef:6a:7b:52:47:d5:a6:f0:18: f4:64:df:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydss3mghS+nDwRVrX7cNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYmNhYjQ4NTk1MzZjZjk5NjU5NmVmMTlkMmE2NDYxMWQw MzZmZTQwHhcNMjUxMjA2MDcwMTAyWhcNMjUxMjA3MDcwMTAyWjAzMTEwLwYDVQQD Eyg2MDhjNTMxNmVhY2Y4ZTk4NzA3N2VkOGIyNjdlOWVkZWVhMWNlZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8b8RpS1fM69vXGNeALO0FOMItPpi uut20eZ1y89Q7mBT8sY+cPE8WRLzZnGtUjAzFhdrhwrObb+Kfn13h63Lg5ODsUSI eqz4vUgfGWnG5cWg8vElxXUb2hlcD9wwDmOKJaaVsy9q9Pl6Q67wkiNk3Dah69jp 9tMhmInJ3AbgzS4jVa+Bi0oJVc6n8AkZm1Mv977qE+AuWQXrqU/qMW2HyYkmZ84D 8CmsiR8wslxLkdcFecQ6ekZpExV+RGFHwlFwTs1UvTwGeOxi1ZjVhqURz7hnVdHz JmazX1G6W11RArollq6UCl6AVLkJrJZ/hxLXiwMVDqbNsVW8lN24QJbhrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCMUxbqz46YcHftiyZ+nt7qHO+AMB8GA1UdIwQY MBaAFNy8q0hZU2z5lllu8Z0qZGEdA2/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTIt MjY2ZmUyNzM3YjhmLzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTItMjY2ZmUyNzM3Yjhm LzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElbNIeQC WLwuMzgcEDceHqylkaD15T/LNWf1HDfhwgnwsuFdnHnd8vb5de+q+pZ/gsOfXIP+ QezepxwNcs8MS9SY3XkNUv8iu45C5dyPP1c8yohhzjYFNvSlw7UvuR8TfoaNuk8u OEIc4nhU+bNaf3AEKbOcWqIIK686b4BIBmCLJ208GgItcjxA8pYmrDIdwKheRVms EgMSOnzo2vwILO77BEuTqtF/GMGVjzRiYcfk29QNF++NEnoOTDWZ+eM1i6ysk6lC ILAHiVof4uDRZdgy8PU/o/A5ROwqzaXVjY/zYWuU5qWsmg64xOMlNgh4NTfn72p7 UkfVpvAY9GTfKA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:45 2025 by rpki-client