This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft File: 3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json) Hash identifier: PjUvUMSXrt3XhHM4DKLUyVZxSpLfP5sIrv6Aoaiygo8= Subject key identifier: DD:6A:71:D1:40:38:53:4F:BF:F4:F4:76:DC:A9:C8:EE:93:F2:01:0A Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50 Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550 Certificate serial: 019B1B3BFEA66A7FB3C8C4393294A191D61D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft Manifest number: 1796 Signing time: Sun 14 Dec 2025 05:01:15 +0000 Manifest this update: Sun 14 Dec 2025 05:01:15 +0000 Manifest next update: Mon 15 Dec 2025 05:01:15 +0000 Files and hashes: 1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: RAQa7CpASZW7PhmaD9H9Xi8tK6OfgY1vUd0pJHwCSz8=) 2: B_dytxxDPRteZVWj_5GTAT9t8BE.roa (hash: T860Q+FQFzVWcjsZOe8dk9hmlbNKGPeSX6qfmd4Fuhk=) 3: eXzNPFB8evVF4M9GKM9iNp1CQKY.roa (hash: 3o1zQB3byjNP0T4iSERgx0SfW87i/ushB0KeeTR7qr4=) 4: ugt-KDKTow7I2OvsokQhSiya3XI.roa (hash: OVTlzU2wxqtsRIKxmANkEt2lrONo18X84ePf8/OFh9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:fe:a6:6a:7f:b3:c8:c4:39:32:94:a1:91:d6:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550 Validity Not Before: Dec 14 05:01:15 2025 GMT Not After : Dec 15 05:01:15 2025 GMT Subject: CN=dd6a71d14038534fbff4f476dca9c8ee93f2010a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5f:47:30:47:ab:c9:dd:65:82:95:bc:87:b1: a1:5e:8b:3f:e2:b4:c4:b5:5a:db:56:af:c2:25:82: 47:3e:36:ea:c3:fa:73:6c:be:64:18:16:5f:c9:f9: 6b:23:62:df:49:b9:9d:98:5e:74:74:d5:41:22:6b: c8:91:0e:fe:7d:75:cf:f9:3a:b6:b0:a5:07:fc:0c: e3:f8:bd:eb:b5:ac:29:18:74:30:92:51:8d:3f:58: 04:8f:92:4d:4e:77:00:95:ea:0f:22:9d:7a:e3:30: e6:ef:7a:e7:15:a7:d9:07:2e:95:89:3d:f5:48:bb: f6:a7:c0:cf:d6:09:e3:bc:d6:90:68:8c:6b:96:35: 0b:49:74:80:df:f4:f1:7c:90:9d:fa:89:0c:6f:f2: 9e:4a:07:63:1e:7e:9e:65:0a:ef:3e:59:7c:1d:8a: 24:e3:06:13:b3:78:2b:6a:86:f5:59:e8:3b:74:d4: 1d:6e:53:e8:73:e1:1f:e9:b3:97:31:ac:f7:19:73: f6:d0:8a:d8:ba:f2:bc:03:5f:59:a4:fa:14:b2:af: 6b:09:67:ff:6d:c4:4b:ce:37:0d:79:71:6b:42:1e: 1c:3c:6f:5d:7f:d1:3f:18:24:1c:c2:d6:31:f5:28: 7b:7c:eb:35:c6:f7:c2:00:bf:77:c3:93:3f:b2:d9: 2c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6A:71:D1:40:38:53:4F:BF:F4:F4:76:DC:A9:C8:EE:93:F2:01:0A X509v3 Authority Key Identifier: keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:82:ad:df:08:e0:77:89:76:f8:c4:52:d5:66:63:3e:5f:14: e8:2b:c8:b2:57:c1:63:f6:f6:1e:b5:6f:24:d9:c9:0e:ad:32: d7:37:3a:a6:11:45:d6:19:19:cc:ce:12:9a:d7:e8:42:29:8a: 37:af:93:0b:e8:3e:78:41:31:c5:3e:d2:3e:67:9c:15:fb:68: 67:e4:5d:26:80:e9:2d:33:36:26:36:97:bb:3b:60:e6:71:70: 51:65:27:8a:ab:4e:27:78:90:fc:e7:29:e9:be:78:90:9d:69: 56:9e:55:7e:88:d7:a9:74:ca:54:4e:76:4a:d2:f3:c2:12:82: 0e:7b:cc:73:7c:cd:b4:a1:b2:96:8e:fa:b0:9c:bd:b9:5c:21: ac:6a:05:ec:98:88:3f:ec:2b:87:b5:71:1b:a8:e5:74:8e:5d: cb:9c:ab:2e:4c:6c:1b:0b:12:c6:53:24:13:ce:3f:17:7f:c9: a3:05:58:31:f9:06:55:8f:b6:d2:5e:59:0e:f6:64:60:e8:39: 76:95:c5:16:30:60:59:fc:87:cf:6c:b0:af:27:a7:6d:2e:af: 5d:07:e2:12:76:64:9d:01:6f:dc:09:ec:d8:d1:30:e9:af:31: 4c:0e:b5:b1:fd:d2:31:79:16:2a:94:95:9e:0b:ff:47:76:55: e1:27:f6:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO/6man+zyMQ5MpShkdYdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTdjN2NhMDViY2MzZDZhMmFkMWJhMjM1YmVkOGZlYWI2 OTQ1NTAwHhcNMjUxMjE0MDUwMTE1WhcNMjUxMjE1MDUwMTE1WjAzMTEwLwYDVQQD EyhkZDZhNzFkMTQwMzg1MzRmYmZmNGY0NzZkY2E5YzhlZTkzZjIwMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV9HMEeryd1lgpW8h7GhXos/4rTE tVrbVq/CJYJHPjbqw/pzbL5kGBZfyflrI2LfSbmdmF50dNVBImvIkQ7+fXXP+Tq2 sKUH/Azj+L3rtawpGHQwklGNP1gEj5JNTncAleoPIp164zDm73rnFafZBy6ViT31 SLv2p8DP1gnjvNaQaIxrljULSXSA3/TxfJCd+okMb/KeSgdjHn6eZQrvPll8HYok 4wYTs3graob1Weg7dNQdblPoc+Ef6bOXMaz3GXP20IrYuvK8A19ZpPoUsq9rCWf/ bcRLzjcNeXFrQh4cPG9df9E/GCQcwtYx9Sh7fOs1xvfCAL93w5M/stksPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1qcdFAOFNPv/T0dtypyO6T8gEKMB8GA1UdIwQY MBaAFN2Xx8oFvMPWoq0bojW+2P6raUVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEt NGQ0YjE2MTQ0ZDY4LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEtNGQ0YjE2MTQ0ZDY4 LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIKt3wjg d4l2+MRS1WZjPl8U6CvIslfBY/b2HrVvJNnJDq0y1zc6phFF1hkZzM4SmtfoQimK N6+TC+g+eEExxT7SPmecFftoZ+RdJoDpLTM2JjaXuztg5nFwUWUniqtOJ3iQ/Ocp 6b54kJ1pVp5VfojXqXTKVE52StLzwhKCDnvMc3zNtKGylo76sJy9uVwhrGoF7JiI P+wrh7VxG6jldI5dy5yrLkxsGwsSxlMkE84/F3/JowVYMfkGVY+20l5ZDvZkYOg5 dpXFFjBgWfyHz2ywryenbS6vXQfiEnZknQFv3Ans2NEw6a8xTA61sf3SMXkWKpSV ngv/R3ZV4Sf2gQ== -----END CERTIFICATE-----Generated at Sun Dec 14 12:10:44 2025 by rpki-client