This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json) Hash identifier: HKxBTvejOY+dxFARmkiMb0ztpOlvXURqN2wgaRliQc4= Subject key identifier: 5D:71:DA:5C:8B:61:88:F5:00:D6:B9:2D:6A:D0:A8:B7:39:8D:54:35 Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1 Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1 Certificate serial: 019AEE9A5400063204959988F96A15109796 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 13:01:22 +0000 Manifest this update: Fri 05 Dec 2025 13:01:22 +0000 Manifest next update: Sat 06 Dec 2025 13:01:22 +0000 Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: a06VBMG4doy4qWFoMrLnhNijiQgwppyYzfS9WTEDks8=) 2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=) 3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:9a:54:00:06:32:04:95:99:88:f9:6a:15:10:97:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1 Validity Not Before: Dec 5 13:01:22 2025 GMT Not After : Dec 6 13:01:22 2025 GMT Subject: CN=5d71da5c8b6188f500d6b92d6ad0a8b7398d5435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:af:a2:f4:f6:59:99:46:d5:39:c2:2e:5e:a7: 8a:ef:e9:10:57:4a:ed:47:50:89:34:6f:ef:03:52: 2a:8d:66:08:77:4b:3a:a5:88:9d:9d:ce:b3:83:69: 62:c4:9f:32:63:ad:99:b2:3e:8e:b7:fb:03:8e:77: 81:b1:da:98:e6:7b:2f:40:2c:34:42:24:c7:e3:0d: ae:1d:f6:41:30:6a:2f:fc:bd:da:08:06:77:1d:4d: 24:a0:ac:cc:55:e3:a7:a5:41:82:8e:7c:5c:52:3f: a1:c9:f7:91:29:a6:5d:0a:d0:88:54:9d:1a:31:2b: ec:50:13:76:8d:6a:9b:f7:e9:26:88:9e:24:8b:ea: a9:8c:6c:23:e6:1d:d0:f5:27:6f:02:3c:a0:ee:46: 40:40:fc:e0:d5:66:60:f3:6b:c8:bb:a0:b2:67:a2: 7c:d7:28:d8:80:3e:25:60:b3:72:24:11:79:06:0e: 6a:91:40:50:73:33:25:fb:69:f1:1f:90:43:b1:31: 0c:ec:04:28:5c:4f:cc:5e:25:94:86:01:83:5e:f5: 0c:6e:88:71:c1:a8:c7:b1:dc:6f:db:45:56:45:b4: b9:92:58:8d:41:13:30:fe:7f:17:9d:f0:1a:43:be: eb:e3:35:0a:0f:5b:cd:dc:25:0e:14:13:44:4a:c6: a2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:71:DA:5C:8B:61:88:F5:00:D6:B9:2D:6A:D0:A8:B7:39:8D:54:35 X509v3 Authority Key Identifier: keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f7:18:13:37:4a:30:d3:ad:d7:84:3c:c6:c7:b7:52:9b:5a: 6d:85:3b:bf:97:e9:f0:fb:b4:26:86:59:43:a4:3b:20:db:24: b9:74:3e:70:75:ed:82:fc:3d:0d:c1:a9:06:0d:7a:90:39:c6: 8c:65:ea:d2:a2:06:59:a1:12:7c:8c:9a:9d:e1:c1:dc:d5:01: f2:2e:a2:4a:37:d2:c7:0b:10:9e:7c:b0:70:64:9f:37:bf:a0: 32:f1:70:7c:84:5a:3f:1a:f9:2c:05:e3:aa:4a:73:47:a4:b5: 3a:0b:84:b8:5d:a2:41:71:4c:84:36:a5:e0:08:e6:3b:6e:80: cf:94:7e:5f:01:75:de:fc:c8:b8:36:0f:a7:35:2b:9a:cc:df: d5:ed:25:f2:34:51:92:97:3b:d9:fe:b0:6f:5a:a7:7b:27:66: 74:c7:61:9a:4e:2f:f4:fe:8d:c1:6a:23:27:b3:83:e5:08:de: 7c:c6:5a:c0:6d:f8:76:1a:18:9b:28:d3:e5:f3:df:e9:29:10: 98:95:e7:a8:5d:7a:c1:6b:35:73:8d:7b:12:76:8c:e7:fc:32: 5d:c1:b7:13:f1:41:84:68:67:70:ec:95:e5:48:5d:22:f2:a2: 95:f1:55:6d:23:93:a6:9a:c5:d1:bb:db:4f:ac:da:4c:29:66: 5a:bb:44:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrumlQABjIElZmI+WoVEJeWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYTQ2ZWFhZTdhZWYyZjQ0ZmU2NjAxNjJiYjlkYzcwZDY1 MjVhZjEwHhcNMjUxMjA1MTMwMTIyWhcNMjUxMjA2MTMwMTIyWjAzMTEwLwYDVQQD Eyg1ZDcxZGE1YzhiNjE4OGY1MDBkNmI5MmQ2YWQwYThiNzM5OGQ1NDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9q+i9PZZmUbVOcIuXqeK7+kQV0rt R1CJNG/vA1IqjWYId0s6pYidnc6zg2lixJ8yY62Zsj6Ot/sDjneBsdqY5nsvQCw0 QiTH4w2uHfZBMGov/L3aCAZ3HU0koKzMVeOnpUGCjnxcUj+hyfeRKaZdCtCIVJ0a MSvsUBN2jWqb9+kmiJ4ki+qpjGwj5h3Q9SdvAjyg7kZAQPzg1WZg82vIu6CyZ6J8 1yjYgD4lYLNyJBF5Bg5qkUBQczMl+2nxH5BDsTEM7AQoXE/MXiWUhgGDXvUMbohx wajHsdxv20VWRbS5kliNQRMw/n8XnfAaQ77r4zUKD1vN3CUOFBNESsaiEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1x2lyLYYj1ANa5LWrQqLc5jVQ1MB8GA1UdIwQY MBaAFN6kbqrnrvL0T+ZgFiu53HDWUlrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEt MWZhOWFjNTgwYjhlLzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEtMWZhOWFjNTgwYjhl LzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvcYEzdK MNOt14Q8xse3UptabYU7v5fp8Pu0JoZZQ6Q7INskuXQ+cHXtgvw9DcGpBg16kDnG jGXq0qIGWaESfIyaneHB3NUB8i6iSjfSxwsQnnywcGSfN7+gMvFwfIRaPxr5LAXj qkpzR6S1OguEuF2iQXFMhDal4AjmO26Az5R+XwF13vzIuDYPpzUrmszf1e0l8jRR kpc72f6wb1qneydmdMdhmk4v9P6NwWojJ7OD5QjefMZawG34dhoYmyjT5fPf6SkQ mJXnqF16wWs1c417EnaM5/wyXcG3E/FBhGhncOyV5UhdIvKilfFVbSOTpprF0bvb T6zaTClmWrtE2g== -----END CERTIFICATE-----Generated at Fri Dec 5 19:32:21 2025 by rpki-client