This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft File: 3mZANXrkrhD8Cz6dmPKgywEYkDw.mft (raw, json) Hash identifier: 56mWZpJBoc6awfBwVmBjJ3bVfs4Hh39D++50eCMl140= Subject key identifier: E7:2C:FC:D5:EC:AB:71:3C:A2:A7:79:35:01:23:04:67:59:E6:10:85 Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C Certificate issuer: /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c Certificate serial: 019AF1D265286FE219E277E4C4EBAF5FCB16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft Manifest number: 0C53 Signing time: Sat 06 Dec 2025 04:01:28 +0000 Manifest this update: Sat 06 Dec 2025 04:01:28 +0000 Manifest next update: Sun 07 Dec 2025 04:01:28 +0000 Files and hashes: 1: 3mZANXrkrhD8Cz6dmPKgywEYkDw.crl (hash: XpJiNuJEZ3BBQEM+CmjaP2NU3rz6TElY34rLdraG0qc=) 2: 9Ht1WS_vqd6PGFgJgGHqYQxnzds.roa (hash: jy6H59LUS5waYqQP6Dhp+2VxxeHkS9j62qw0M1cdA/g=) 3: HWj4rrIG5yLx-R7YJHriQZkaHlU.roa (hash: w4NJmcaVn2AcPxlAH9mW36Xv6MPv2ne3C9Tmp8J45QY=) 4: Ja-mDUtTmKTc_5z3WZikEzgxnO0.roa (hash: OHF3bECjzb4WxileHvkYP3598NMiRQdCX4l/f2//5yI=) 5: gizPDPJlnHFMwdNkDj4bjEHwsOM.roa (hash: s+HhHFRsrWXDsklXWcH/16ndefegRFDZvIRvtU1bOnQ=) 6: o4UdTzK11yn9790w6aFya-CRsYk.roa (hash: 5gJHsN2PGfagg0XX4Yhkkp3hRI4hmN+LCY9ILQ0xCTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:65:28:6f:e2:19:e2:77:e4:c4:eb:af:5f:cb:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c Validity Not Before: Dec 6 04:01:28 2025 GMT Not After : Dec 7 04:01:28 2025 GMT Subject: CN=e72cfcd5ecab713ca2a779350123046759e61085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:28:b9:9e:da:0f:11:8c:a9:ad:8c:fa:d4:35: 56:71:1a:4d:7b:56:69:3b:49:75:03:2d:fe:7e:91: 1d:e5:61:ad:06:41:c8:31:a5:e9:6b:b7:ab:31:64: 16:a4:b3:ed:99:12:e8:6f:a7:16:3d:44:ed:d3:80: ab:9a:e6:de:f1:f2:dd:6b:e3:61:77:b8:ae:a8:2a: 7e:7a:1b:3a:1c:9c:7e:2b:5e:a9:41:e2:42:96:6a: f9:9f:d5:b3:26:24:6b:3c:7d:88:a2:a3:75:aa:85: e1:a0:f0:25:f4:89:b1:e8:2e:d8:45:47:02:96:fa: 74:53:f9:ac:99:33:d1:5b:e7:4e:14:99:83:90:b6: 14:1e:ea:d8:f6:8c:ee:fc:86:6f:bf:f3:c3:8c:9f: 93:7b:fe:26:06:c5:fc:93:f9:b1:59:b5:09:04:92: d8:7c:5f:11:55:07:8b:10:6c:5d:3f:0b:0e:06:9c: de:0c:41:a0:09:23:f1:b1:9f:99:5e:f5:18:59:4a: 9a:32:a8:e2:fc:be:cf:57:a6:9b:0e:b3:d8:cc:b4: 7d:7e:c1:ad:fd:85:ed:04:13:f3:7e:d0:41:44:74: 1c:8b:10:ce:9f:0b:ac:a5:de:1d:64:a9:49:6f:4d: 56:90:87:ae:cf:81:b9:b3:73:01:a7:bc:b0:d6:c9: 7c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2C:FC:D5:EC:AB:71:3C:A2:A7:79:35:01:23:04:67:59:E6:10:85 X509v3 Authority Key Identifier: keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b7:18:3e:a6:b6:78:61:0d:5c:2e:63:d5:8d:67:26:a7:7b: f2:91:aa:cd:8d:be:24:5f:29:c4:16:d8:d0:cc:ea:b0:10:63: 5e:4a:47:a3:dc:f9:8f:14:f6:65:d8:99:70:d6:35:55:d8:29: 7f:24:ba:80:d6:9f:7c:95:8c:8b:af:eb:e5:51:b0:16:c8:ea: 90:cd:df:12:6c:ff:bb:2f:a5:d2:db:59:be:87:11:b3:44:1c: 40:f1:33:b0:f6:34:5d:95:55:16:2b:dd:fc:22:9b:e2:00:05: f6:ae:d1:d7:ec:e3:4d:46:6d:2e:87:2f:bb:17:a4:51:4e:04: c6:cd:a8:6b:ab:5e:18:51:d7:89:e6:2a:5c:64:cf:87:be:91: 3f:27:e9:3b:dc:65:33:18:24:46:b1:5f:b4:3f:ad:8e:b7:59: 56:8a:79:55:e8:fc:d9:ec:ed:6c:dc:0a:24:0b:6d:ca:b4:21: 55:05:a5:fa:14:f6:83:ea:f5:5d:cd:2b:c5:cf:32:a8:a5:8b: af:b3:7b:3c:ac:51:a6:cb:3c:f7:ae:00:4c:df:43:79:8c:59: 53:7c:0e:ef:54:e1:c1:f4:9d:ab:a7:ff:cf:fd:62:5d:c5:10: 7c:4d:68:7a:94:68:3e:e6:d7:74:17:43:2b:92:be:0b:37:00: 9a:53:88:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mUob+IZ4nfkxOuvX8sWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNjY0MDM1N2FlNGFlMTBmYzBiM2U5ZDk4ZjJhMGNiMDEx ODkwM2MwHhcNMjUxMjA2MDQwMTI4WhcNMjUxMjA3MDQwMTI4WjAzMTEwLwYDVQQD EyhlNzJjZmNkNWVjYWI3MTNjYTJhNzc5MzUwMTIzMDQ2NzU5ZTYxMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ii5ntoPEYyprYz61DVWcRpNe1Zp O0l1Ay3+fpEd5WGtBkHIMaXpa7erMWQWpLPtmRLob6cWPUTt04Crmube8fLda+Nh d7iuqCp+ehs6HJx+K16pQeJClmr5n9WzJiRrPH2IoqN1qoXhoPAl9Imx6C7YRUcC lvp0U/msmTPRW+dOFJmDkLYUHurY9ozu/IZvv/PDjJ+Te/4mBsX8k/mxWbUJBJLY fF8RVQeLEGxdPwsOBpzeDEGgCSPxsZ+ZXvUYWUqaMqji/L7PV6abDrPYzLR9fsGt /YXtBBPzftBBRHQcixDOnwuspd4dZKlJb01WkIeuz4G5s3MBp7yw1sl8RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcs/NXsq3E8oqd5NQEjBGdZ5hCFMB8GA1UdIwQY MBaAFN5mQDV65K4Q/As+nZjyoMsBGJA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAt ZmY5N2Y2MmEwOTQ1LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAtZmY5N2Y2MmEwOTQ1 LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7cYPqa2 eGENXC5j1Y1nJqd78pGqzY2+JF8pxBbY0MzqsBBjXkpHo9z5jxT2ZdiZcNY1Vdgp fyS6gNaffJWMi6/r5VGwFsjqkM3fEmz/uy+l0ttZvocRs0QcQPEzsPY0XZVVFivd /CKb4gAF9q7R1+zjTUZtLocvuxekUU4Exs2oa6teGFHXieYqXGTPh76RPyfpO9xl MxgkRrFftD+tjrdZVop5Vej82eztbNwKJAttyrQhVQWl+hT2g+r1Xc0rxc8yqKWL r7N7PKxRpss8964ATN9DeYxZU3wO71ThwfSdq6f/z/1iXcUQfE1oepRoPubXdBdD K5K+CzcAmlOIZg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:44 2025 by rpki-client