This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft File: 3pj4NjKYKX-6uupodyArXEQOWpA.mft (raw, json) Hash identifier: R0jHdlr71jKHhKUTfMTzmqjkk634Cn2eymlrXgsQJyo= Subject key identifier: 07:6C:20:82:AD:56:51:0A:50:88:75:79:62:FA:18:53:86:15:C8:6A Authority key identifier: DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90 Certificate issuer: /CN=de98f8363298297fbabaea6877202b5c440e5a90 Certificate serial: 019B481442CF4DF5D3D5F2CB12B900D1E372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft Manifest number: 0E1D Signing time: Mon 22 Dec 2025 22:00:45 +0000 Manifest this update: Mon 22 Dec 2025 22:00:45 +0000 Manifest next update: Tue 23 Dec 2025 22:00:45 +0000 Files and hashes: 1: 3pj4NjKYKX-6uupodyArXEQOWpA.crl (hash: Fqi/AKM4jkaN+tTm3ZxIMWnibYEMTv0VyOl2GWmunXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:42:cf:4d:f5:d3:d5:f2:cb:12:b9:00:d1:e3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de98f8363298297fbabaea6877202b5c440e5a90 Validity Not Before: Dec 22 22:00:45 2025 GMT Not After : Dec 23 22:00:45 2025 GMT Subject: CN=076c2082ad56510a5088757962fa18538615c86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ca:4c:53:1c:97:5e:4c:c0:f5:87:09:a1:99: 2a:b2:a9:2f:7d:5e:15:12:28:25:73:b1:12:44:cd: 0c:6b:fd:2d:09:f2:c1:07:21:42:68:6a:be:a0:56: d5:b5:2e:16:1e:29:ef:62:00:fb:85:13:7e:e0:c1: 49:f7:6d:07:29:7f:6d:37:05:57:b6:21:e8:9a:ed: f1:5b:5a:12:2b:10:b1:19:95:05:f9:5b:10:c0:d4: b1:50:8e:6c:27:6a:43:29:a7:13:9f:e7:80:88:9d: 9a:09:f7:e5:0f:f4:d8:5a:f8:83:0d:a3:9a:c4:ba: a7:49:cb:ad:a1:1a:0f:ba:87:d4:88:ee:60:8e:7e: 48:3a:d5:bb:04:eb:9c:7c:9c:9a:0a:5d:67:d8:f7: 52:e7:31:b7:83:d2:f2:dd:68:5b:b1:62:1d:1b:83: 5e:ec:b2:09:ef:c8:7c:35:2c:8d:0e:79:10:89:08: 04:49:9f:cd:dd:c8:dc:34:53:fa:7d:dc:7e:0b:0d: e3:7e:7a:7b:c3:d7:e8:56:e9:40:2d:22:85:4e:de: ad:b9:fd:e3:6e:50:fa:b9:49:8c:96:1d:31:a6:fe: 3c:2d:6f:0d:47:97:64:cc:7e:1a:b8:f5:39:54:c0: 69:36:91:31:1b:9f:d4:0b:4e:f9:cb:32:7c:f2:0b: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6C:20:82:AD:56:51:0A:50:88:75:79:62:FA:18:53:86:15:C8:6A X509v3 Authority Key Identifier: keyid:DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e9:6f:54:98:5e:d7:db:83:65:d5:d3:7b:2d:71:4f:5a:87: e5:7a:a6:f1:f8:de:7a:e0:10:01:9e:3f:39:78:9e:ab:98:c6: 0b:33:45:6b:a3:6c:08:02:78:e5:99:d2:33:d6:e0:21:73:4e: ae:33:3c:8c:4f:2d:94:d3:1b:0d:51:96:3f:4b:32:11:e8:b3: 9b:11:dd:cb:f8:3f:9e:c0:20:48:45:c7:f2:ec:40:4c:ac:df: 44:14:b6:e5:0e:79:d7:d1:0b:2f:d8:85:9b:ad:23:84:f8:ee: 83:b3:74:79:89:95:52:d9:f2:23:12:64:38:ac:cf:38:34:63: c2:f8:c4:a7:cd:3d:43:02:75:37:11:eb:ee:67:7f:3b:67:66: 9c:47:06:d9:f2:3e:ae:60:12:6e:ea:d0:20:fc:67:c7:d5:e5: 70:43:0b:25:6d:88:59:17:1f:88:42:77:a1:0e:cd:71:d7:03: 52:26:7a:99:0b:d4:bb:04:60:20:6e:d5:77:60:f7:8e:17:d7: ce:ba:5b:15:e7:5e:9c:fb:cf:ba:a5:57:1f:c4:d4:a1:b3:44: 96:b3:60:7c:cf:45:f5:c5:3e:13:bc:2e:13:a2:dd:25:5f:75: bf:5c:7d:58:84:b7:40:74:74:65:8e:87:f1:5b:60:b9:ae:c0: 02:f2:eb:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFELPTfXT1fLLErkA0eNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOThmODM2MzI5ODI5N2ZiYWJhZWE2ODc3MjAyYjVjNDQw ZTVhOTAwHhcNMjUxMjIyMjIwMDQ1WhcNMjUxMjIzMjIwMDQ1WjAzMTEwLwYDVQQD EygwNzZjMjA4MmFkNTY1MTBhNTA4ODc1Nzk2MmZhMTg1Mzg2MTVjODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcpMUxyXXkzA9YcJoZkqsqkvfV4V Eiglc7ESRM0Ma/0tCfLBByFCaGq+oFbVtS4WHinvYgD7hRN+4MFJ920HKX9tNwVX tiHomu3xW1oSKxCxGZUF+VsQwNSxUI5sJ2pDKacTn+eAiJ2aCfflD/TYWviDDaOa xLqnScutoRoPuofUiO5gjn5IOtW7BOucfJyaCl1n2PdS5zG3g9Ly3WhbsWIdG4Ne 7LIJ78h8NSyNDnkQiQgESZ/N3cjcNFP6fdx+Cw3jfnp7w9foVulALSKFTt6tuf3j blD6uUmMlh0xpv48LW8NR5dkzH4auPU5VMBpNpExG5/UC075yzJ88gtsTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdsIIKtVlEKUIh1eWL6GFOGFchqMB8GA1UdIwQY MBaAFN6Y+DYymCl/urrqaHcgK1xEDlqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ODBlMjktN2Q4My00NTU4LWI0MTEt ZTdmYmQ1MGUwMzQ5LzEvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82ODBlMjktN2Q4My00NTU4LWI0MTEtZTdmYmQ1MGUwMzQ5 LzEvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQulvVJhe 19uDZdXTey1xT1qH5Xqm8fjeeuAQAZ4/OXieq5jGCzNFa6NsCAJ45ZnSM9bgIXNO rjM8jE8tlNMbDVGWP0syEeizmxHdy/g/nsAgSEXH8uxATKzfRBS25Q5519ELL9iF m60jhPjug7N0eYmVUtnyIxJkOKzPODRjwvjEp809QwJ1NxHr7md/O2dmnEcG2fI+ rmASburQIPxnx9XlcEMLJW2IWRcfiEJ3oQ7NcdcDUiZ6mQvUuwRgIG7Vd2D3jhfX zrpbFedenPvPuqVXH8TUobNElrNgfM9F9cU+E7wuE6LdJV91v1x9WIS3QHR0ZY6H 8Vtgua7AAvLrPw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:42:03 2025 by rpki-client