This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json) Hash identifier: BZpHElJayUpN5gNglxKbnmw+cCQo/jMR8sjxoK/v6hk= Subject key identifier: 60:98:D9:C6:9E:1F:18:07:39:66:C4:10:DE:6E:5F:4B:8A:8E:F2:D5 Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27 Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227 Certificate serial: 019B41A4AA116705E3B7DE70C221190F499D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft Manifest number: 11C5 Signing time: Sun 21 Dec 2025 16:01:09 +0000 Manifest this update: Sun 21 Dec 2025 16:01:09 +0000 Manifest next update: Mon 22 Dec 2025 16:01:09 +0000 Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: 11IC2wXuTg3thfUUSPXdsIF2iRJ1k8h2F9VGeWsHWDA=) 2: AuGSVrNkGgUtthLzU1YbunCRJmA.roa (hash: N+p3SVnY5s1RjPh5Td733eJn6W460syQCiw/MVZ+pqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:aa:11:67:05:e3:b7:de:70:c2:21:19:0f:49:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227 Validity Not Before: Dec 21 16:01:09 2025 GMT Not After : Dec 22 16:01:09 2025 GMT Subject: CN=6098d9c69e1f18073966c410de6e5f4b8a8ef2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7b:02:c7:a4:0d:79:c8:87:08:fe:65:cf:ac: 77:41:f8:52:b2:77:5f:67:2f:51:0a:33:4b:df:32: b4:e5:a4:ad:9d:4c:5c:5b:84:7c:f0:b6:2f:98:13: 2c:80:00:e0:c8:31:c7:c9:39:fc:1e:35:9e:0d:04: 29:57:22:9f:10:3f:7f:07:4f:6e:25:e6:ce:9e:dc: de:5a:23:fc:9b:9e:36:ce:13:53:76:54:72:f7:8f: 20:28:a2:51:f5:74:36:57:64:4a:95:3f:c3:5e:80: 94:3c:e9:a6:e3:47:c9:ff:e5:6d:16:ed:35:73:0b: 99:27:a6:59:04:71:1b:c2:90:1b:cb:40:4a:31:76: 9b:75:9c:65:a8:a2:7b:ee:ee:05:b2:96:e6:ce:85: 5f:a8:f4:ef:98:ac:2c:7f:9f:31:9d:5a:11:3a:56: b6:f3:74:d2:88:1a:7a:24:54:f9:ed:42:80:4f:55: b3:6d:24:5a:a7:86:f1:c9:20:db:9a:26:ca:8f:c0: 5b:01:40:c4:e8:88:e3:0e:ea:93:6b:8b:3d:23:c6: ac:33:9d:c2:39:fa:01:8b:2b:5f:d0:bc:dd:eb:46: e9:9e:92:e8:65:8e:a5:48:5f:71:7a:68:06:42:4f: 26:97:f7:34:d2:19:53:93:cc:73:90:67:c5:db:34: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:98:D9:C6:9E:1F:18:07:39:66:C4:10:DE:6E:5F:4B:8A:8E:F2:D5 X509v3 Authority Key Identifier: keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:fc:05:28:b8:86:91:7a:ba:46:f1:46:df:7f:4c:09:a2:2a: d4:81:bb:44:cc:57:77:5a:bd:5d:8b:7b:52:71:35:76:82:5a: 7f:83:4d:b9:c3:a9:df:88:b7:c4:08:c7:1f:a6:eb:2e:41:0e: ba:22:f3:de:ea:ca:38:b4:ee:4a:c6:ff:07:da:25:62:c1:d1: 44:99:1a:32:61:5d:e6:5e:0c:e3:b4:bf:f6:19:66:28:39:ef: aa:05:41:de:c8:4d:c7:1b:14:e2:5a:8e:11:4d:24:9c:77:cc: ec:41:7a:c0:92:17:73:cf:0d:2a:89:bb:34:96:9f:30:d2:e5: dc:a6:e6:50:ed:37:68:7a:9c:57:4b:b4:5f:c6:f0:fb:98:02: 72:32:ed:6c:22:6b:44:69:b7:d8:7a:de:85:af:dc:b4:5f:3e: 92:b9:5f:1c:0f:41:95:42:2e:23:93:aa:ad:97:be:8d:fc:35: a8:d2:c5:cd:74:7b:3c:73:47:2f:93:c6:15:1e:13:4d:68:54: ff:21:43:4a:53:a9:62:ef:91:be:47:38:14:78:32:06:be:da: cf:f4:4a:67:5e:76:ba:34:f1:8f:1f:3a:f5:c6:d3:12:26:9f: b6:10:39:66:99:d5:70:08:e7:8a:07:61:19:ff:03:bf:8a:19: 09:56:ce:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpKoRZwXjt95wwiEZD0mdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZjg1YzM2YzY5NmQ1ZGIyY2JiNDhmZDQzZTgyMTczN2Vl MzQyMjcwHhcNMjUxMjIxMTYwMTA5WhcNMjUxMjIyMTYwMTA5WjAzMTEwLwYDVQQD Eyg2MDk4ZDljNjllMWYxODA3Mzk2NmM0MTBkZTZlNWY0YjhhOGVmMmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XsCx6QNeciHCP5lz6x3QfhSsndf Zy9RCjNL3zK05aStnUxcW4R88LYvmBMsgADgyDHHyTn8HjWeDQQpVyKfED9/B09u JebOntzeWiP8m542zhNTdlRy948gKKJR9XQ2V2RKlT/DXoCUPOmm40fJ/+VtFu01 cwuZJ6ZZBHEbwpAby0BKMXabdZxlqKJ77u4FspbmzoVfqPTvmKwsf58xnVoROla2 83TSiBp6JFT57UKAT1WzbSRap4bxySDbmibKj8BbAUDE6IjjDuqTa4s9I8asM53C OfoBiytf0Lzd60bpnpLoZY6lSF9xemgGQk8ml/c00hlTk8xzkGfF2zTA3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCY2caeHxgHOWbEEN5uX0uKjvLVMB8GA1UdIwQY MBaAFNz4XDbGltXbLLtI/UPoIXN+40InMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jZmJjNjItNWQ1NC00MzI3LWIwNzIt MGY1MmY4NjcxNzhkLzEvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9jZmJjNjItNWQ1NC00MzI3LWIwNzItMGY1MmY4NjcxNzhk LzEvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyvwFKLiG kXq6RvFG339MCaIq1IG7RMxXd1q9XYt7UnE1doJaf4NNucOp34i3xAjHH6brLkEO uiLz3urKOLTuSsb/B9olYsHRRJkaMmFd5l4M47S/9hlmKDnvqgVB3shNxxsU4lqO EU0knHfM7EF6wJIXc88NKom7NJafMNLl3KbmUO03aHqcV0u0X8bw+5gCcjLtbCJr RGm32Hreha/ctF8+krlfHA9BlUIuI5OqrZe+jfw1qNLFzXR7PHNHL5PGFR4TTWhU /yFDSlOpYu+Rvkc4FHgyBr7az/RKZ152ujTxjx869cbTEiafthA5ZpnVcAjnigdh Gf8Dv4oZCVbOcw== -----END CERTIFICATE-----Generated at Sun Dec 21 21:49:10 2025 by rpki-client