This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json) Hash identifier: UIvpgyH6G5WfC5i/yoB6do+hYewn/+kZZxocO8Xo2Ts= Subject key identifier: D1:34:2E:68:5E:43:9B:2F:D8:97:86:74:47:B2:91:AC:92:D6:B2:2D Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3 Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3 Certificate serial: 019AF2091FB4C4E8C5CD6E52F0354CF5477F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft Manifest number: 06DA Signing time: Sat 06 Dec 2025 05:01:15 +0000 Manifest this update: Sat 06 Dec 2025 05:01:15 +0000 Manifest next update: Sun 07 Dec 2025 05:01:15 +0000 Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: ILpbMlv7gZKKx6NiGBzIgzb98yFxlFQh35IYYUJNAaA=) 2: LhFRmWbupiZRrTcY1BMgZx0XNm0.roa (hash: 1sSu4Xw0ICcOgnrgocU5c3W/gRE/T8H+tT4ltd3ayqM=) 3: RVm4PleqV8m6zGkcPiKBRGWO1cI.roa (hash: 3p0hXdk+JmHhQEiq1MExor2f3lGKmZyobEJTxOu9buE=) 4: ZqlSlV8xEjtTIPrwJS75wdXWNMY.roa (hash: IHSrkovQ51TOwmRPUF5AIxkAHRZYZBJiA4cpIYri+jU=) 5: eHnC0ZqJNqxv3y7mak9QRJMJw-o.roa (hash: +LqAwsdmA3jPuO+2IgsX5kZHBO+HuvNtjbjVsU8ziig=) 6: f25v4uVZY4JbTyMqNXKXGA35WKk.roa (hash: Cmqw5364kiAvR31aujca3rQebhgV1WXm34C80bI/lTU=) 7: l05lA3ihNrsbi6O1jQgYe6U6RiI.roa (hash: cFNLHeKumGIo0r4P/u4GyYnqlWIoiMqc4hH4vqv6oWg=) 8: xJ0_FRg6EplS-mzoDbYvP1y_mUw.roa (hash: 7evtOJQCPXqekbIigyPzPGbzquzgJixLY3c438GOL/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1f:b4:c4:e8:c5:cd:6e:52:f0:35:4c:f5:47:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3 Validity Not Before: Dec 6 05:01:15 2025 GMT Not After : Dec 7 05:01:15 2025 GMT Subject: CN=d1342e685e439b2fd897867447b291ac92d6b22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:40:4c:2f:8b:a5:07:54:bd:22:3f:f4:e6: 5e:27:61:7a:2d:89:00:2f:ff:cb:27:6b:8c:8a:7d: 96:cb:ad:1a:13:17:04:78:47:2b:0c:0f:bf:5f:13: 7a:8f:55:9b:4d:97:97:95:e1:80:39:24:1a:3b:c4: 73:61:19:34:44:06:d8:c3:0c:f0:e5:da:51:26:c6: 4e:0e:86:80:00:ca:a2:24:30:b6:86:47:1a:c4:fc: 97:55:a7:2f:b6:cc:d5:da:61:94:06:00:bf:c7:37: a5:bd:b0:4a:97:9a:3f:ee:85:ca:7a:6c:1b:73:4c: 01:90:86:f5:12:ff:95:df:9e:4d:6f:04:cb:50:f2: 6c:ff:4d:79:c6:a6:1e:e7:44:41:ff:73:97:21:41: 85:f2:75:98:ed:69:00:eb:ea:53:cd:38:dc:77:6a: 65:98:40:1d:36:55:ac:fa:55:26:a0:4e:54:0e:a6: 7e:48:19:76:0f:d0:ca:31:ab:00:2c:57:11:5d:88: 19:3a:dd:4f:62:33:0a:5e:35:51:97:7d:1d:c5:3c: 87:4e:60:e2:38:4b:7d:a7:cb:7e:85:f9:b9:72:28: a5:d6:25:ca:da:0b:d6:31:c5:75:d4:35:d9:3a:76: 09:db:c2:da:a6:72:42:da:1e:1a:c6:69:74:2b:81: cb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:34:2E:68:5E:43:9B:2F:D8:97:86:74:47:B2:91:AC:92:D6:B2:2D X509v3 Authority Key Identifier: keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:25:0b:2b:32:47:7a:4a:65:45:47:0c:3f:1f:0e:70:f1:ed: b9:ae:87:c5:bc:2d:08:fa:7a:87:3b:aa:8a:a0:18:71:04:69: e7:22:52:e6:05:ee:90:c1:a3:06:32:88:77:da:a0:05:49:7c: 5d:e1:41:e6:7e:e0:f3:0c:58:bc:56:b7:93:be:ab:a1:79:cc: 0a:39:12:c3:06:9f:bd:a1:bd:e6:6b:9a:16:ea:61:39:7e:95: bf:13:fb:a9:aa:7d:50:27:d2:61:17:dd:b2:c3:44:cd:30:7d: 6c:10:33:d8:a7:29:4c:97:d5:7d:05:77:26:0d:08:04:eb:49: fc:ee:63:77:67:d8:dc:d8:76:71:39:53:75:0a:c9:6d:0f:fe: bb:1a:e1:ba:92:21:f8:fe:1a:88:c8:5e:6a:9c:0f:02:4b:ac: ec:da:e5:03:e4:8c:8d:8d:88:77:54:64:c1:2f:3a:07:f5:b9: a7:72:ec:ce:cb:0a:9d:7d:58:af:a6:dc:36:10:b6:77:34:8c: 24:6a:d8:7f:b4:c0:4d:3c:b9:52:f2:51:72:0c:4b:e0:9a:a0: dc:d7:bc:60:ac:81:cf:b2:6c:a5:60:c1:7d:de:0f:78:ec:9c: 17:25:2c:ab:f3:4f:f7:07:51:13:cd:ec:15:2c:3f:23:10:2f: 53:f6:d2:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCR+0xOjFzW5S8DVM9Ud/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2ZkYzRiZjMzYmQ4MGZlMTI4ZDc1Njg0M2Y2MGIzOWQ1 YmVlZTMwHhcNMjUxMjA2MDUwMTE1WhcNMjUxMjA3MDUwMTE1WjAzMTEwLwYDVQQD EyhkMTM0MmU2ODVlNDM5YjJmZDg5Nzg2NzQ0N2IyOTFhYzkyZDZiMjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPlATC+LpQdUvSI/9OZeJ2F6LYkA L//LJ2uMin2Wy60aExcEeEcrDA+/XxN6j1WbTZeXleGAOSQaO8RzYRk0RAbYwwzw 5dpRJsZODoaAAMqiJDC2hkcaxPyXVacvtszV2mGUBgC/xzelvbBKl5o/7oXKemwb c0wBkIb1Ev+V355NbwTLUPJs/015xqYe50RB/3OXIUGF8nWY7WkA6+pTzTjcd2pl mEAdNlWs+lUmoE5UDqZ+SBl2D9DKMasALFcRXYgZOt1PYjMKXjVRl30dxTyHTmDi OEt9p8t+hfm5ciil1iXK2gvWMcV11DXZOnYJ28LapnJC2h4axml0K4HL9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNE0LmheQ5sv2JeGdEeykayS1rItMB8GA1UdIwQY MBaAFN8/3EvzO9gP4SjXVoQ/YLOdW+7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMt YTQ3M2VjNTQxMGMzLzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMtYTQ3M2VjNTQxMGMz LzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiULKzJH ekplRUcMPx8OcPHtua6HxbwtCPp6hzuqiqAYcQRp5yJS5gXukMGjBjKId9qgBUl8 XeFB5n7g8wxYvFa3k76roXnMCjkSwwafvaG95muaFuphOX6VvxP7qap9UCfSYRfd ssNEzTB9bBAz2KcpTJfVfQV3Jg0IBOtJ/O5jd2fY3Nh2cTlTdQrJbQ/+uxrhupIh +P4aiMheapwPAkus7NrlA+SMjY2Id1RkwS86B/W5p3LszssKnX1Yr6bcNhC2dzSM JGrYf7TATTy5UvJRcgxL4Jqg3Ne8YKyBz7JspWDBfd4PeOycFyUsq/NP9wdRE83s FSw/IxAvU/bSAw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:44 2025 by rpki-client