This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft File: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft (raw, json) Hash identifier: VGkeDYCuD0U7PySIUl7O7Z/aJcq94lCZvxVBhnEt7+M= Subject key identifier: 45:97:C7:86:30:01:61:35:12:C3:72:AA:71:03:15:E1:D1:03:5C:FF Authority key identifier: DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F Certificate issuer: /CN=df3b1d2773a03d317a7703193d2f45429a94ba9f Certificate serial: 019B59763E22E495BAA97BB1E2060B38A897 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft Manifest number: 017D Signing time: Fri 26 Dec 2025 07:01:19 +0000 Manifest this update: Fri 26 Dec 2025 07:01:19 +0000 Manifest next update: Sat 27 Dec 2025 07:01:19 +0000 Files and hashes: 1: 1OnAxERvwCdnk__Rn-ReVSlbcoM.roa (hash: aqwsdMgIbP4mFzFG0p4x2dQgO0GnM+i3JMeyA55YC7E=) 2: 3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl (hash: JHm9/XBiiFSoUg2T0kNk9g/27B6ik2OT2IU5Jg/7Oo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:3e:22:e4:95:ba:a9:7b:b1:e2:06:0b:38:a8:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3b1d2773a03d317a7703193d2f45429a94ba9f Validity Not Before: Dec 26 07:01:19 2025 GMT Not After : Dec 27 07:01:19 2025 GMT Subject: CN=4597c7863001613512c372aa710315e1d1035cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9f:c4:5a:2c:a2:01:1b:98:62:29:91:97:88: 27:57:76:e8:c6:ed:ee:e3:e3:3e:f7:65:35:75:93: ed:e6:29:08:0e:f4:7f:80:0b:6c:fa:a3:a5:2c:27: 70:cb:6c:56:a8:51:34:74:7a:c1:dd:48:79:3a:05: 11:4d:c5:aa:a4:a7:4a:6a:4d:d0:27:29:94:71:b8: 3c:8d:86:12:78:5a:2b:7d:94:d3:91:7c:9c:21:57: 86:e6:f8:da:0c:af:cb:29:25:7c:60:75:34:ad:ba: c1:5b:12:94:b5:6c:63:7e:6c:e9:8e:af:92:86:a0: a2:f7:d1:94:90:01:75:90:2a:5a:d6:b8:f9:88:3a: 6d:97:ac:2b:94:34:fc:bf:a9:45:77:d3:81:25:42: cf:3d:19:07:e1:b1:88:ac:40:fd:99:a5:0c:9d:07: bb:aa:3a:46:12:85:b7:89:11:3c:f1:06:fb:9e:76: b7:75:2f:95:28:e8:d5:a9:83:e2:b3:3e:7b:90:93: 74:6d:15:6d:ff:30:7a:6e:19:1b:bb:8f:7d:f9:04: 55:ac:74:53:3d:5b:f2:e6:44:4e:44:67:5e:b9:e4: 61:78:2a:08:74:40:21:74:42:5e:5a:42:db:14:df: a5:63:45:ee:0b:c1:51:64:f7:00:8a:12:6c:09:91: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:97:C7:86:30:01:61:35:12:C3:72:AA:71:03:15:E1:D1:03:5C:FF X509v3 Authority Key Identifier: keyid:DF:3B:1D:27:73:A0:3D:31:7A:77:03:19:3D:2F:45:42:9A:94:BA:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zsdJ3OgPTF6dwMZPS9FQpqUup8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/52d088-6989-4e89-8777-526dcb2a23bd/1/3zsdJ3OgPTF6dwMZPS9FQpqUup8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:4a:a9:2b:4d:01:be:0b:6b:98:12:52:f9:a5:b8:4f:4a:4e: 35:8d:45:9c:82:53:a2:5b:85:54:d2:6f:f3:0e:56:98:31:1f: 82:df:25:3e:10:e3:f0:8b:2a:0c:64:9c:1f:13:af:0e:3e:7e: e0:32:bc:b0:60:44:9a:0f:5a:7c:1c:23:10:e0:a8:63:a6:1a: d9:47:b2:f3:81:57:8c:e5:ba:1a:1b:68:04:53:b5:7c:be:f4: dc:47:b5:b7:28:a1:14:ab:da:aa:31:77:77:ae:8e:3b:9a:41: 0e:e9:d1:d5:ca:5e:f6:2f:a2:08:78:c0:c1:49:49:c0:01:7b: a3:87:88:08:50:d9:bd:50:23:f5:4d:33:84:49:f3:2f:ac:fa: fd:b7:13:f8:69:7c:85:dd:ef:7c:20:64:c9:2f:d5:b4:d1:f4: a7:c9:49:ea:c2:01:30:90:15:b6:0a:2a:0f:e9:2f:7b:fb:bd: 94:81:dc:b9:fb:96:f7:1c:8a:08:90:7b:32:2f:d6:ea:07:f0: 88:fa:fc:8b:b2:79:5e:08:eb:61:7e:69:ca:26:64:aa:b5:f1: ce:3b:cb:15:2a:5c:f2:fa:fc:0f:25:fd:10:4f:16:51:29:2f: 5c:5c:77:23:d0:65:e5:97:7f:e3:fb:b3:61:85:2e:b1:76:c7: e4:a1:b4:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdj4i5JW6qXux4gYLOKiXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2IxZDI3NzNhMDNkMzE3YTc3MDMxOTNkMmY0NTQyOWE5 NGJhOWYwHhcNMjUxMjI2MDcwMTE5WhcNMjUxMjI3MDcwMTE5WjAzMTEwLwYDVQQD Eyg0NTk3Yzc4NjMwMDE2MTM1MTJjMzcyYWE3MTAzMTVlMWQxMDM1Y2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ/EWiyiARuYYimRl4gnV3boxu3u 4+M+92U1dZPt5ikIDvR/gAts+qOlLCdwy2xWqFE0dHrB3Uh5OgURTcWqpKdKak3Q JymUcbg8jYYSeForfZTTkXycIVeG5vjaDK/LKSV8YHU0rbrBWxKUtWxjfmzpjq+S hqCi99GUkAF1kCpa1rj5iDptl6wrlDT8v6lFd9OBJULPPRkH4bGIrED9maUMnQe7 qjpGEoW3iRE88Qb7nna3dS+VKOjVqYPisz57kJN0bRVt/zB6bhkbu499+QRVrHRT PVvy5kRORGdeueRheCoIdEAhdEJeWkLbFN+lY0XuC8FRZPcAihJsCZHXGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWXx4YwAWE1EsNyqnEDFeHRA1z/MB8GA1UdIwQY MBaAFN87HSdzoD0xencDGT0vRUKalLqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3pzZEozT2dQVEY2ZHdNWlBTOUZRcHFVdXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81MmQwODgtNjk4OS00ZTg5LTg3Nzct NTI2ZGNiMmEyM2JkLzEvM3pzZEozT2dQVEY2ZHdNWlBTOUZRcHFVdXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi81MmQwODgtNjk4OS00ZTg5LTg3NzctNTI2ZGNiMmEyM2Jk LzEvM3pzZEozT2dQVEY2ZHdNWlBTOUZRcHFVdXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEqpK00B vgtrmBJS+aW4T0pONY1FnIJToluFVNJv8w5WmDEfgt8lPhDj8IsqDGScHxOvDj5+ 4DK8sGBEmg9afBwjEOCoY6Ya2Uey84FXjOW6GhtoBFO1fL703Ee1tyihFKvaqjF3 d66OO5pBDunR1cpe9i+iCHjAwUlJwAF7o4eICFDZvVAj9U0zhEnzL6z6/bcT+Gl8 hd3vfCBkyS/VtNH0p8lJ6sIBMJAVtgoqD+kve/u9lIHcufuW9xyKCJB7Mi/W6gfw iPr8i7J5XgjrYX5pyiZkqrXxzjvLFSpc8vr8DyX9EE8WUSkvXFx3I9Bl5Zd/4/uz YYUusXbH5KG0GQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:32 2025 by rpki-client