This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft File: 3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json) Hash identifier: xWJiEBXq4D6mTv0Ci9dfxT9+efthC+2bRQ2YGmWRknA= Subject key identifier: F6:50:1E:F6:F5:4D:4A:5B:17:D2:24:37:93:25:01:DA:28:AA:9D:82 Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Certificate serial: 019B10B8443C4B770C4970A164167EB2EA7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft Manifest number: 177D Signing time: Fri 12 Dec 2025 04:01:10 +0000 Manifest this update: Fri 12 Dec 2025 04:01:10 +0000 Manifest next update: Sat 13 Dec 2025 04:01:10 +0000 Files and hashes: 1: 27nlRHwxg0E9Q8sg08KsIM7uurM.roa (hash: S/euVGTNqJg3LcazblgCESHTj7tHb3XsTieuaVZKJ7c=) 2: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: MCL13Zs8voIpc1WOvki4/era5EB4oVhdFnZioM5m4yM=) 3: KRrmKpMBCAuz0ycR3DqqV_RSLZI.roa (hash: 6JV0pm5KSl7dgRvcSyUz9iCbmsYOfYCoAcyuqvbgp6w=) 4: cb_zDnKlQ9maV_mcPiyN2HwpRxo.roa (hash: rr7OeDKsSm5RUPgVy2VLBciOmsBRvc5YKTQcvs96n0U=) 5: ph2FFZ9AUAY5f8HkJbk_3g9Wk8w.roa (hash: dL+5O6eKdQJWgkq0JqtkXhyJzAf/MU7XQ0/GDtElRTc=) 6: tXnSihcOVuv_2vztUkyTSpycPTE.roa (hash: Efwtt1HweEQTgxpNm/AGYJZxdg/P+K7yWvvbsl//zEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:44:3c:4b:77:0c:49:70:a1:64:16:7e:b2:ea:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Validity Not Before: Dec 12 04:01:10 2025 GMT Not After : Dec 13 04:01:10 2025 GMT Subject: CN=f6501ef6f54d4a5b17d22437932501da28aa9d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1e:06:98:c6:ff:6b:1f:47:3c:eb:38:d9:97: d0:51:8d:04:9d:14:30:cb:3b:0c:b0:57:ee:5c:8a: f9:78:6c:ac:8b:28:3b:26:07:43:8a:ca:b0:26:23: f7:65:9d:d9:d9:58:2e:b3:1f:89:0e:4a:f7:e1:fa: 0a:6d:c3:14:bf:40:55:04:39:1f:49:a1:3b:b1:fe: 0c:a5:84:88:88:b5:71:d5:f9:69:d3:8c:b3:f4:84: 01:9c:9e:c8:9f:eb:d8:bd:e1:24:a2:37:1c:3e:34: fc:c5:7b:0e:74:b0:95:0b:b3:4e:7a:3f:88:5b:3a: 83:d7:5d:80:c9:69:6b:e9:14:dc:03:5c:8d:c0:7a: 28:ec:5c:4a:5e:0c:a1:03:14:cd:48:65:28:a9:00: c4:f8:f1:f0:a3:d1:a3:8b:0c:b1:28:a4:6f:4f:d6: 20:93:e3:1a:69:b1:f6:e2:47:90:0b:cc:16:9b:a4: 09:3a:44:7f:67:cf:1f:b2:bb:ab:e1:96:ea:f7:22: 4b:d5:8d:e9:2d:69:b1:e1:48:c6:44:ab:1c:86:f8: 1e:de:47:5b:56:b8:97:91:92:dc:c8:98:0a:eb:71: bb:49:13:6b:f2:69:ce:db:dc:f7:61:54:ef:61:fd: 2f:8e:35:a3:b1:21:30:8b:27:e1:33:10:db:18:52: bd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:50:1E:F6:F5:4D:4A:5B:17:D2:24:37:93:25:01:DA:28:AA:9D:82 X509v3 Authority Key Identifier: keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ab:f8:94:3b:db:d9:1c:b7:28:22:a9:46:8b:ff:0f:7c:36: 82:7b:65:1f:c0:30:47:6d:2e:76:24:58:7e:f3:04:ec:12:e1: 9f:17:fc:0f:11:71:d8:90:11:0f:cf:7b:25:be:d6:23:a0:7f: 01:52:9f:54:f2:be:ef:84:a9:be:ea:7c:27:76:32:83:2f:9f: da:58:d9:9d:ac:87:6b:da:d3:da:bd:c4:0d:07:61:f6:f5:1e: 98:06:98:81:c6:b7:9c:08:ce:e6:9f:01:6a:37:ea:af:32:21: 14:67:86:8e:b4:46:b2:08:f5:d9:69:71:7f:32:7a:ad:4a:6b: 43:3f:58:cf:d3:90:b7:07:98:b1:96:fe:83:01:d2:e8:d0:a8: 07:55:02:ea:1a:5a:77:b1:72:61:05:a3:9c:85:1d:5d:38:6b: a6:fb:43:81:37:1c:7e:f0:d4:42:e4:ab:bb:7c:ad:73:16:17: 77:50:28:44:3a:79:6a:66:73:1f:01:b6:1c:b1:9b:ec:88:42: 86:9a:3c:08:a3:d8:20:c5:13:6f:34:32:87:a9:6e:4d:60:a5: 96:cc:0a:1d:74:9c:c8:1b:39:e4:8c:37:30:bf:ae:f9:25:2d: 79:39:63:b4:37:af:a1:41:ee:cd:a0:de:52:88:10:fc:b3:ef: 87:9a:36:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuEQ8S3cMSXChZBZ+sup6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz Zjc5MzAwHhcNMjUxMjEyMDQwMTEwWhcNMjUxMjEzMDQwMTEwWjAzMTEwLwYDVQQD EyhmNjUwMWVmNmY1NGQ0YTViMTdkMjI0Mzc5MzI1MDFkYTI4YWE5ZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B4GmMb/ax9HPOs42ZfQUY0EnRQw yzsMsFfuXIr5eGysiyg7JgdDisqwJiP3ZZ3Z2Vgusx+JDkr34foKbcMUv0BVBDkf SaE7sf4MpYSIiLVx1flp04yz9IQBnJ7In+vYveEkojccPjT8xXsOdLCVC7NOej+I WzqD112AyWlr6RTcA1yNwHoo7FxKXgyhAxTNSGUoqQDE+PHwo9GjiwyxKKRvT9Yg k+MaabH24keQC8wWm6QJOkR/Z88fsrur4Zbq9yJL1Y3pLWmx4UjGRKschvge3kdb VriXkZLcyJgK63G7SRNr8mnO29z3YVTvYf0vjjWjsSEwiyfhMxDbGFK9gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZQHvb1TUpbF9IkN5MlAdooqp2CMB8GA1UdIwQY MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt MDBiY2Q5YjkxYzFiLzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIav4lDvb 2Ry3KCKpRov/D3w2gntlH8AwR20udiRYfvME7BLhnxf8DxFx2JARD897Jb7WI6B/ AVKfVPK+74Spvup8J3Yygy+f2ljZnayHa9rT2r3EDQdh9vUemAaYgca3nAjO5p8B ajfqrzIhFGeGjrRGsgj12WlxfzJ6rUprQz9Yz9OQtweYsZb+gwHS6NCoB1UC6hpa d7FyYQWjnIUdXThrpvtDgTccfvDUQuSru3ytcxYXd1AoRDp5amZzHwG2HLGb7IhC hpo8CKPYIMUTbzQyh6luTWCllswKHXScyBs55Iw3ML+u+SUteTljtDevoUHuzaDe UogQ/LPvh5o2Gg== -----END CERTIFICATE-----Generated at Fri Dec 12 13:03:23 2025 by rpki-client