This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File: 3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier: 8bDRa7pns1OpmCP1rBu1SVScOsoiKVi+ErGPZHppTvE=
Subject key identifier: C0:D2:0B:82:C1:65:D4:C1:BA:A0:56:88:00:75:0C:DB:08:05:67:DE
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 019B1EAAB8F390C642A0FC9192C71462C6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number: 0EB4
Signing time: Sun 14 Dec 2025 21:01:03 +0000
Manifest this update: Sun 14 Dec 2025 21:01:03 +0000
Manifest next update: Mon 15 Dec 2025 21:01:03 +0000
Files and hashes: 1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: 2AcfPxDx5b6RdNZdK2QygHaQJ0D+Mdk5MjTIG05EM5Y=)
2: gR7sUG_8lonr2gVlkEM1ADj5WcE.roa (hash: UjAmmUt2kVRUK4S0rWxF0FYuOfHn0p6w6/7yryAGIf8=)
3: x5BcxByiZpVNAIlZM7Ls67DF_VI.roa (hash: JHq7GmHRUBUB9iENpddREelx6fHNpJzwzmpidFpFMBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1e:aa:b8:f3:90:c6:42:a0:fc:91:92:c7:14:62:c6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Dec 14 21:01:03 2025 GMT
Not After : Dec 15 21:01:03 2025 GMT
Subject: CN=c0d20b82c165d4c1baa0568800750cdb080567de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:0c:43:f9:f3:c3:72:3a:8c:f2:c4:be:71:
54:58:c1:7c:dd:b7:f7:38:dc:e7:02:c3:ef:08:c7:
de:8d:2f:e4:9a:f6:b2:99:de:83:91:00:02:43:f8:
67:f5:16:69:d0:c1:82:f7:cf:ce:d7:54:49:d4:1d:
2c:3a:ee:d8:5b:d8:70:c4:fe:e2:c4:4f:68:f9:85:
61:5c:38:f4:0b:23:11:46:4b:28:6b:7b:57:9d:44:
d4:4d:06:ca:06:38:6e:0c:c1:28:57:00:82:5b:5b:
97:03:dd:cf:4e:58:2c:e1:76:53:43:59:9b:6e:52:
38:ff:71:33:01:94:7a:1d:97:cf:7f:9a:28:8a:0c:
de:58:13:01:aa:ba:a5:b5:5b:0a:fe:3c:52:df:00:
32:74:e1:dd:c7:f9:fa:2f:1c:e1:53:fb:3d:08:c7:
03:01:26:7a:68:ab:49:a8:1f:69:ba:98:34:8f:ee:
4a:dd:15:6a:62:de:61:07:f9:6b:86:05:9b:e0:bd:
03:dd:e1:a6:0f:ae:8a:06:fa:3e:aa:ae:1f:19:11:
57:e6:96:cf:30:34:b9:66:63:14:6e:ac:74:c9:10:
7a:78:3e:21:ea:8c:33:ce:d1:fe:bd:29:35:99:72:
29:62:5b:e2:67:e1:d7:76:06:b3:fa:df:92:09:bc:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D2:0B:82:C1:65:D4:C1:BA:A0:56:88:00:75:0C:DB:08:05:67:DE
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c4:33:25:0b:b0:35:ce:ec:53:41:02:75:b8:b1:0e:5e:63:
35:a3:45:69:3c:b2:5f:88:89:fc:60:79:a2:33:fd:85:77:b6:
31:85:61:4a:5e:54:67:7e:21:64:09:b0:5a:6a:2e:9e:96:be:
f6:be:f6:ca:fc:78:2b:2d:cf:bb:07:5d:1c:16:4a:cd:9b:2f:
d1:51:66:4b:c7:7c:eb:3a:9d:62:20:a4:a0:bd:0d:b6:f6:6b:
6b:aa:39:8d:ff:af:cd:8c:8a:54:6c:2a:05:45:25:bd:10:a0:
06:13:96:8f:9c:50:7d:47:8c:01:10:ff:63:a1:c3:77:fb:e2:
84:e3:88:77:a1:8e:73:24:24:1d:1e:a7:cd:92:59:c5:56:38:
54:eb:9c:2b:32:8f:ee:e1:fe:33:b7:ac:91:3b:d0:03:1a:af:
e4:37:fb:cd:ff:a2:30:1f:20:14:db:9e:bf:1e:64:b9:a7:64:
a9:e3:50:b9:db:cd:bb:d6:cb:f7:67:da:3e:e9:59:56:d7:64:
fa:f5:90:be:85:62:43:e4:4f:c4:5a:a3:a1:79:67:0d:f6:98:
a4:3c:6a:97:64:63:76:24:7b:e4:ff:6c:03:3a:be:48:0a:5c:
19:0e:b2:fb:c9:9a:65:ec:25:18:e1:84:a5:a5:22:4c:86:d3:
0b:98:ba:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 22:57:41 2025 by rpki-client