This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft File: 3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json) Hash identifier: p4j0e5EQEIjmjF0e9E1iNpmkkmryoGqlhJ5Q6MqONaA= Subject key identifier: AA:AE:C5:5E:4F:B1:2C:CD:52:FB:41:8A:60:17:F6:32:19:96:01:85 Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50 Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550 Certificate serial: 019B345674E1222BBDFBACACF8989D7274E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft Manifest number: 17A3 Signing time: Fri 19 Dec 2025 02:00:39 +0000 Manifest this update: Fri 19 Dec 2025 02:00:39 +0000 Manifest next update: Sat 20 Dec 2025 02:00:39 +0000 Files and hashes: 1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: /CocibGBiginDJWZVGPHIUv7Z38eol6T27GnVpmcSwE=) 2: B_dytxxDPRteZVWj_5GTAT9t8BE.roa (hash: T860Q+FQFzVWcjsZOe8dk9hmlbNKGPeSX6qfmd4Fuhk=) 3: eXzNPFB8evVF4M9GKM9iNp1CQKY.roa (hash: 3o1zQB3byjNP0T4iSERgx0SfW87i/ushB0KeeTR7qr4=) 4: ugt-KDKTow7I2OvsokQhSiya3XI.roa (hash: OVTlzU2wxqtsRIKxmANkEt2lrONo18X84ePf8/OFh9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:74:e1:22:2b:bd:fb:ac:ac:f8:98:9d:72:74:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550 Validity Not Before: Dec 19 02:00:39 2025 GMT Not After : Dec 20 02:00:39 2025 GMT Subject: CN=aaaec55e4fb12ccd52fb418a6017f63219960185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:69:ac:ba:f5:f6:39:c7:4c:97:3e:4b:ec:33: 26:44:dd:6d:16:0e:b1:b4:8b:e4:76:4e:8a:50:a2: e9:23:80:9a:32:72:7b:c7:59:f0:36:81:92:ce:dd: d5:af:aa:90:6d:aa:b4:27:0a:3c:e2:b7:3a:c8:77: e5:f1:f6:2e:88:87:cf:4f:58:0f:bd:c0:f0:63:95: 4e:f0:f0:67:7e:72:de:e4:dc:cc:3c:63:c8:67:b3: 99:70:5d:3a:d5:5b:46:ac:cb:2a:da:3d:9d:7c:c2: 18:3b:08:96:68:4e:ef:b1:13:18:26:0e:a2:0a:01: 11:b5:7b:c4:d4:c1:20:a5:f4:c8:7d:f6:47:62:fe: 36:5a:c6:41:a5:48:37:37:02:57:d7:e9:f1:a0:a4: 3e:a2:98:32:07:07:1e:ac:c0:90:ef:16:dc:22:9a: 91:f7:5d:9f:15:86:15:74:88:da:71:70:82:da:45: cc:bc:a5:a7:c7:24:38:ce:30:64:cc:29:15:9b:1d: c4:39:7c:3b:f4:08:d5:15:7d:06:8b:55:f1:04:f9: 4c:56:9c:25:f6:b6:e3:72:11:6a:b3:4b:d7:5e:49: a8:8f:9d:43:82:61:31:91:87:c5:c5:f6:3d:dd:3d: 19:33:cc:b1:0f:f6:72:82:f3:a6:72:1d:10:21:cf: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AE:C5:5E:4F:B1:2C:CD:52:FB:41:8A:60:17:F6:32:19:96:01:85 X509v3 Authority Key Identifier: keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:90:57:ae:d1:48:a1:2e:55:62:48:8f:17:de:18:dd:cb:e5: 0f:94:ef:7f:e3:78:25:5b:8a:40:d7:41:0e:be:45:7d:9d:b2: 1f:fe:3c:b0:7d:52:96:aa:ab:f9:90:c8:68:15:97:17:14:bb: 72:9c:42:4c:b2:76:ce:6b:a7:8e:2c:19:d5:12:1f:48:fb:81: eb:06:0e:42:0a:d2:a7:c5:b2:f4:66:f6:0f:25:0a:48:3e:7d: 8c:1e:78:9d:64:8c:77:5e:c4:56:62:8b:e8:03:9a:12:d7:56: e5:0d:cc:b7:28:60:01:a3:ef:e7:50:f0:d4:61:27:28:bb:3e: 13:8d:07:69:aa:d2:82:40:9e:0d:e7:06:5b:bd:44:bb:f6:e8: b0:d3:45:67:5a:b7:19:9d:71:c1:a9:de:64:9b:34:39:10:f8: f4:ab:53:07:62:25:4c:34:4d:e5:51:86:6e:f2:83:48:a5:43: 19:1d:72:07:ac:ee:76:d0:50:35:4d:21:24:80:01:42:a3:65: d8:df:34:47:58:0d:3e:4c:b0:17:70:fd:e6:2d:ca:bb:c3:a0: 8d:56:e8:4b:f1:2e:7e:4a:db:99:ba:a3:aa:34:76:2c:2e:b8: 20:4a:ac:e1:fc:ed:99:7c:2c:22:a5:6b:0a:91:9c:95:c1:63: 8e:47:3e:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VnThIiu9+6ys+JidcnTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTdjN2NhMDViY2MzZDZhMmFkMWJhMjM1YmVkOGZlYWI2 OTQ1NTAwHhcNMjUxMjE5MDIwMDM5WhcNMjUxMjIwMDIwMDM5WjAzMTEwLwYDVQQD EyhhYWFlYzU1ZTRmYjEyY2NkNTJmYjQxOGE2MDE3ZjYzMjE5OTYwMTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GmsuvX2OcdMlz5L7DMmRN1tFg6x tIvkdk6KUKLpI4CaMnJ7x1nwNoGSzt3Vr6qQbaq0Jwo84rc6yHfl8fYuiIfPT1gP vcDwY5VO8PBnfnLe5NzMPGPIZ7OZcF061VtGrMsq2j2dfMIYOwiWaE7vsRMYJg6i CgERtXvE1MEgpfTIffZHYv42WsZBpUg3NwJX1+nxoKQ+opgyBwcerMCQ7xbcIpqR 912fFYYVdIjacXCC2kXMvKWnxyQ4zjBkzCkVmx3EOXw79AjVFX0Gi1XxBPlMVpwl 9rbjchFqs0vXXkmoj51DgmExkYfFxfY93T0ZM8yxD/ZygvOmch0QIc92DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKquxV5PsSzNUvtBimAX9jIZlgGFMB8GA1UdIwQY MBaAFN2Xx8oFvMPWoq0bojW+2P6raUVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEt NGQ0YjE2MTQ0ZDY4LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEtNGQ0YjE2MTQ0ZDY4 LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5JBXrtFI oS5VYkiPF94Y3cvlD5Tvf+N4JVuKQNdBDr5FfZ2yH/48sH1Slqqr+ZDIaBWXFxS7 cpxCTLJ2zmunjiwZ1RIfSPuB6wYOQgrSp8Wy9Gb2DyUKSD59jB54nWSMd17EVmKL 6AOaEtdW5Q3MtyhgAaPv51Dw1GEnKLs+E40HaarSgkCeDecGW71Eu/bosNNFZ1q3 GZ1xwaneZJs0ORD49KtTB2IlTDRN5VGGbvKDSKVDGR1yB6zudtBQNU0hJIABQqNl 2N80R1gNPkywF3D95i3Ku8OgjVboS/EufkrbmbqjqjR2LC64IEqs4fztmXwsIqVr CpGclcFjjkc+Nw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:24:59 2025 by rpki-client