This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json) Hash identifier: 2r3mt8jrBehBOufAbzG1yOhgWq6q8tgNNllMosevvqk= Subject key identifier: 50:CF:4C:58:FC:42:35:EB:3A:88:0A:09:C2:D0:97:D3:12:13:1C:E2 Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9 Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9 Certificate serial: 019B360E89DC1A176B7F9B908AFC593CAC2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft Manifest number: 0893 Signing time: Fri 19 Dec 2025 10:01:21 +0000 Manifest this update: Fri 19 Dec 2025 10:01:21 +0000 Manifest next update: Sat 20 Dec 2025 10:01:21 +0000 Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: v8/aNBqPIw/+Ory+SuxF8rC+SrAiA0/vBvJfByp+cMk=) 2: MpZzldQi5IW1vH72zsN86ALdCYo.roa (hash: hGLTyfZCRDqAerkM2L4I96QJCTHMEKoFxuiSvfkJH1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:89:dc:1a:17:6b:7f:9b:90:8a:fc:59:3c:ac:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9 Validity Not Before: Dec 19 10:01:21 2025 GMT Not After : Dec 20 10:01:21 2025 GMT Subject: CN=50cf4c58fc4235eb3a880a09c2d097d312131ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:02:85:5c:2a:0c:cb:1e:85:c6:3c:7f:8d:f7: 9e:70:04:4c:77:93:1f:08:ca:11:c4:fc:5e:1e:dc: ca:d9:26:6e:e5:eb:a8:d6:0b:5d:eb:e7:5c:e2:ba: 3e:86:72:53:05:5f:0e:c7:42:9c:5d:2d:fe:c2:81: 7a:b7:c9:01:d4:36:fa:54:01:02:82:e1:11:c8:8d: 55:0f:b7:84:f1:62:f2:0e:c1:8c:2b:74:d3:60:f3: 65:cf:3e:f4:03:18:c2:23:a0:59:06:5d:27:57:df: 65:ec:64:09:75:8a:fb:a1:ec:fd:1e:ce:63:77:45: c7:e0:fb:21:10:cf:c3:1c:b2:14:f8:ef:40:a7:83: 2b:06:f1:68:de:9b:ad:95:f9:48:77:cf:34:e3:49: d4:ac:8c:ee:b2:64:7c:7a:e8:51:04:c4:e4:fd:ad: da:21:ef:62:a2:21:0d:e5:78:a8:65:34:26:d6:d6: f1:18:68:99:bf:15:e4:5c:f6:0a:58:b9:09:ab:05: ee:6e:26:39:b2:8d:92:bd:3f:db:44:f1:d4:5e:7a: 04:dc:a4:82:1f:77:d3:63:a6:f4:4f:57:7c:66:62: 69:e6:a7:58:91:ca:39:f8:d4:b3:b6:7f:c2:fd:2b: 93:70:bd:dd:4e:74:d6:0a:68:ab:a5:4e:2a:69:cd: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CF:4C:58:FC:42:35:EB:3A:88:0A:09:C2:D0:97:D3:12:13:1C:E2 X509v3 Authority Key Identifier: keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:2b:ac:cd:c1:3e:39:2f:f8:72:31:ef:9e:83:ec:34:be:a5: b7:10:05:6f:d8:18:a6:14:d7:0c:b4:35:c2:cb:5c:72:d3:8e: 48:ed:72:c4:82:db:7f:3c:c2:24:c0:b3:94:6c:fb:d4:e3:c3: e5:0a:f2:98:05:f5:d3:5a:29:08:e5:dc:ef:15:cc:83:8d:19: fa:77:fe:81:ef:a4:a8:1e:51:7b:ff:ac:1b:23:99:04:3e:97: 8b:07:5d:ec:dc:66:07:69:3c:ae:6a:d1:89:ba:2f:84:2b:83: 1d:43:a4:e3:ba:c5:d5:34:6f:b5:2e:b8:9e:11:4f:e4:49:47: 1d:67:bf:40:44:97:a8:cb:a1:ff:d9:07:99:99:4c:29:51:06: 6d:14:5d:9d:4a:26:4d:1d:e7:fd:3f:07:ee:2a:86:be:b7:52: 06:66:e2:a3:15:fa:24:6a:79:96:78:29:bd:86:c2:e2:62:54: a7:63:7d:35:d3:63:89:8a:73:c0:3c:8e:73:98:86:6c:a9:04: 7b:96:ae:02:fd:1a:e8:27:81:98:86:18:d6:0a:a0:16:c3:00: 7f:80:89:dd:c3:83:5f:45:4a:30:31:5e:34:d0:82:df:6f:54: f6:3d:e3:61:56:6d:40:f7:c0:21:f0:bf:6c:7b:20:7c:f0:b3: 9f:91:f9:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DoncGhdrf5uQivxZPKwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNmRhZWY2NjY0YTc1MjliNjI5ZjNmZDY1MDA0OTE1MjMw ZjFiZTkwHhcNMjUxMjE5MTAwMTIxWhcNMjUxMjIwMTAwMTIxWjAzMTEwLwYDVQQD Eyg1MGNmNGM1OGZjNDIzNWViM2E4ODBhMDljMmQwOTdkMzEyMTMxY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwKFXCoMyx6Fxjx/jfeecARMd5Mf CMoRxPxeHtzK2SZu5euo1gtd6+dc4ro+hnJTBV8Ox0KcXS3+woF6t8kB1Db6VAEC guERyI1VD7eE8WLyDsGMK3TTYPNlzz70AxjCI6BZBl0nV99l7GQJdYr7oez9Hs5j d0XH4PshEM/DHLIU+O9Ap4MrBvFo3putlflId88040nUrIzusmR8euhRBMTk/a3a Ie9ioiEN5XioZTQm1tbxGGiZvxXkXPYKWLkJqwXubiY5so2SvT/bRPHUXnoE3KSC H3fTY6b0T1d8ZmJp5qdYkco5+NSztn/C/SuTcL3dTnTWCmirpU4qac0KpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDPTFj8QjXrOogKCcLQl9MSExziMB8GA1UdIwQY MBaAFN1trvZmSnUptinz/WUASRUjDxvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83ZGQ0MmItNjZlZC00YzEzLWEzMzYt Y2ZlMTMzNWYyN2ZiLzEvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi83ZGQ0MmItNjZlZC00YzEzLWEzMzYtY2ZlMTMzNWYyN2Zi LzEvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAviuszcE+ OS/4cjHvnoPsNL6ltxAFb9gYphTXDLQ1wstcctOOSO1yxILbfzzCJMCzlGz71OPD 5QrymAX101opCOXc7xXMg40Z+nf+ge+kqB5Re/+sGyOZBD6Xiwdd7NxmB2k8rmrR ibovhCuDHUOk47rF1TRvtS64nhFP5ElHHWe/QESXqMuh/9kHmZlMKVEGbRRdnUom TR3n/T8H7iqGvrdSBmbioxX6JGp5lngpvYbC4mJUp2N9NdNjiYpzwDyOc5iGbKkE e5auAv0a6CeBmIYY1gqgFsMAf4CJ3cODX0VKMDFeNNCC329U9j3jYVZtQPfAIfC/ bHsgfPCzn5H5tQ== -----END CERTIFICATE-----Generated at Fri Dec 19 20:26:57 2025 by rpki-client