This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft File: 3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json) Hash identifier: 7RJ48ZEeyLFpr7HNsMvBiGxw1R31HXRB1og/rpJvaPk= Subject key identifier: 6F:47:F1:85:64:12:E9:3A:CB:3D:F3:38:15:F2:B4:4A:6A:BB:39:D1 Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05 Certificate issuer: /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05 Certificate serial: 019B32D77A2F25933702BFB17FE6178BF1BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft Manifest number: 0F9E Signing time: Thu 18 Dec 2025 19:02:20 +0000 Manifest this update: Thu 18 Dec 2025 19:02:20 +0000 Manifest next update: Fri 19 Dec 2025 19:02:20 +0000 Files and hashes: 1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: pvim1v7gp3Bw3px1GGTw8o5dMSxLl0ciPz6uHf8HBbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:7a:2f:25:93:37:02:bf:b1:7f:e6:17:8b:f1:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05 Validity Not Before: Dec 18 19:02:20 2025 GMT Not After : Dec 19 19:02:20 2025 GMT Subject: CN=6f47f1856412e93acb3df33815f2b44a6abb39d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:13:0d:29:78:2c:bd:20:82:73:13:d4:bf: d6:8d:e2:54:b1:8d:33:b0:83:c1:8b:6c:2d:b4:fb: d7:cf:82:a5:91:f1:d8:ea:c5:2d:fa:72:d1:b9:21: b5:24:c8:b7:d9:98:9e:ce:e7:ae:3e:51:91:ba:82: 5d:78:36:2a:ac:fa:74:60:a4:13:5b:ad:03:e8:d1: 48:7d:d3:44:3f:60:5c:55:aa:b4:55:49:b5:41:50: c1:11:ce:7c:a1:50:37:8d:8f:bf:fb:fb:1c:63:ac: 81:8f:cb:45:19:9e:ce:ca:93:01:9e:43:47:0a:b3: af:b2:73:4a:03:d3:be:4e:be:fa:94:7b:0e:69:4f: 5b:4f:b2:6d:67:ba:c7:e6:62:e2:de:c1:88:d5:49: 14:6d:92:58:5b:f4:94:35:63:55:74:6d:1a:14:74: 9b:a2:a9:8f:fc:ec:76:dd:ce:8c:dc:4e:47:16:38: 89:04:8f:cb:8e:45:cb:4f:5b:00:06:4d:26:5f:3d: 3a:99:6c:1d:62:da:02:26:c4:01:4a:80:af:1f:0e: 7a:bc:5e:cd:6f:b2:fc:f1:9d:12:d4:03:73:7b:33: 92:7b:4a:88:1e:a4:cf:f7:04:b4:dc:12:32:39:10: 86:0b:30:88:67:a7:7e:56:16:52:d5:95:80:53:9d: 11:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:47:F1:85:64:12:E9:3A:CB:3D:F3:38:15:F2:B4:4A:6A:BB:39:D1 X509v3 Authority Key Identifier: keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:55:f2:37:72:eb:84:13:9d:fb:54:f6:a3:51:d8:43:40:f1: 2d:73:91:5b:f4:9e:c8:45:5d:04:cc:05:f9:88:1b:12:8f:53: ad:9b:bd:c3:c1:3a:ae:57:3c:c0:85:6c:c8:70:28:f5:03:f6: 1c:99:50:29:f7:6c:77:9f:71:b2:3e:27:c9:0b:fb:51:ae:11: fa:e3:bf:e1:6b:a8:64:ee:77:01:b1:9b:94:70:2b:3f:33:c0: 79:c8:81:b3:c8:f4:75:99:a8:93:7b:0c:ad:72:d0:17:4c:3e: 68:f6:05:b0:d4:48:e3:04:59:37:7f:5a:e9:e5:55:65:ce:d1: 2c:a9:ab:bb:dc:f6:0e:55:20:e8:46:17:c8:ec:ce:65:5c:a4: ac:b9:9b:ff:59:1d:c7:bc:c5:27:00:4c:ff:2c:b3:fa:48:62: 9d:72:aa:9d:ae:96:b6:82:cf:10:1a:21:79:13:e3:65:a8:f4: b2:5f:0d:41:cf:2e:3e:36:32:61:71:b6:4a:af:06:96:fe:0d: e1:49:fe:21:49:92:36:de:aa:02:36:a4:49:b0:51:a8:dc:4b: aa:56:20:0a:78:3d:d0:af:bd:b9:46:a7:1f:69:4d:e6:33:14: df:31:5d:0a:09:c0:ee:c9:b0:eb:fe:01:cd:55:6e:3b:3c:77: 8e:80:07:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy13ovJZM3Ar+xf+YXi/G8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZjhhYjVmNzRkYzkwZTlmZmJhOGQ0Mjk4OGVkNWE3NzQ4 YzFkMDUwHhcNMjUxMjE4MTkwMjIwWhcNMjUxMjE5MTkwMjIwWjAzMTEwLwYDVQQD Eyg2ZjQ3ZjE4NTY0MTJlOTNhY2IzZGYzMzgxNWYyYjQ0YTZhYmIzOWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+kTDSl4LL0ggnMT1L/WjeJUsY0z sIPBi2wttPvXz4KlkfHY6sUt+nLRuSG1JMi32ZiezueuPlGRuoJdeDYqrPp0YKQT W60D6NFIfdNEP2BcVaq0VUm1QVDBEc58oVA3jY+/+/scY6yBj8tFGZ7OypMBnkNH CrOvsnNKA9O+Tr76lHsOaU9bT7JtZ7rH5mLi3sGI1UkUbZJYW/SUNWNVdG0aFHSb oqmP/Ox23c6M3E5HFjiJBI/LjkXLT1sABk0mXz06mWwdYtoCJsQBSoCvHw56vF7N b7L88Z0S1ANzezOSe0qIHqTP9wS03BIyORCGCzCIZ6d+VhZS1ZWAU50RAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9H8YVkEuk6yz3zOBXytEpquznRMB8GA1UdIwQY MBaAFN74q1903JDp/7qNQpiO1ad0jB0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTcyNWEtNDJlNC00MjcwLWI1YWYt NDUzZmMxYmNiY2Q1LzEvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82YTcyNWEtNDJlNC00MjcwLWI1YWYtNDUzZmMxYmNiY2Q1 LzEvM3ZpclgzVGNrT25fdW8xQ21JN1ZwM1NNSFFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVXyN3Lr hBOd+1T2o1HYQ0DxLXORW/SeyEVdBMwF+YgbEo9TrZu9w8E6rlc8wIVsyHAo9QP2 HJlQKfdsd59xsj4nyQv7Ua4R+uO/4WuoZO53AbGblHArPzPAeciBs8j0dZmok3sM rXLQF0w+aPYFsNRI4wRZN39a6eVVZc7RLKmru9z2DlUg6EYXyOzOZVykrLmb/1kd x7zFJwBM/yyz+khinXKqna6WtoLPEBoheRPjZaj0sl8NQc8uPjYyYXG2Sq8Glv4N 4Un+IUmSNt6qAjakSbBRqNxLqlYgCng90K+9uUanH2lN5jMU3zFdCgnA7smw6/4B zVVuOzx3joAHaA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:02:45 2025 by rpki-client