This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft File: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft (raw, json) Hash identifier: 6uw4peYBJyyymqMLcL+ZH+CLFS3q33bwWYD0OGwfAZ0= Subject key identifier: 25:CD:19:FB:C4:B6:E9:08:AE:A0:7C:5D:6C:E5:0F:A5:5B:7A:F1:24 Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A Certificate issuer: /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a Certificate serial: 019B59AC6B6DFF0DBE8A1F86B45CF35621F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft Manifest number: 84 Signing time: Fri 26 Dec 2025 08:00:30 +0000 Manifest this update: Fri 26 Dec 2025 08:00:30 +0000 Manifest next update: Sat 27 Dec 2025 08:00:30 +0000 Files and hashes: 1: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl (hash: dvXu1KvFJ04sVdeqxUp/xZjgyTKhPI2m/pxCE5bJYQU=) 2: gLtRgaxc3dQh-hyBwzctMY8Z2Kg.roa (hash: kQ5eH+OBT0t4XuJxKyLguz534gAGBpghvIPZ6PMDpiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:6b:6d:ff:0d:be:8a:1f:86:b4:5c:f3:56:21:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a Validity Not Before: Dec 26 08:00:30 2025 GMT Not After : Dec 27 08:00:30 2025 GMT Subject: CN=25cd19fbc4b6e908aea07c5d6ce50fa55b7af124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:89:95:da:69:e8:f4:76:1a:8f:b7:96:9b:36: 30:08:d2:a2:c6:94:56:e5:93:62:62:f8:b6:61:d3: 2d:93:be:8d:19:cc:4d:0a:fe:35:cf:ab:1c:c2:de: f7:31:a1:e3:fe:25:63:fb:de:3c:e3:59:a5:ea:ab: ba:ca:3e:42:5b:17:be:ce:6e:6c:3a:5a:73:29:d6: c4:45:a2:0f:56:10:b4:53:41:ed:3e:b1:65:88:a4: 4d:a7:5c:a4:89:68:2a:d7:93:01:31:de:83:d8:35: 65:ca:5a:6e:2a:bf:dd:4c:d4:e9:81:55:1d:33:f8: 5b:22:c4:3a:a9:59:89:e0:ce:ae:7b:d2:1f:4b:ec: 6a:cc:3f:6d:7c:5c:a9:f7:a7:a0:fc:43:d8:f7:38: 59:df:89:f7:b6:42:5e:cf:48:3e:df:fd:2a:ea:8d: 66:18:d4:ef:55:a5:9b:ed:3a:ea:ef:89:a4:a8:62: 24:69:90:91:2a:f8:dc:67:9f:ce:42:b0:ad:d4:36: 98:de:04:23:d7:76:45:83:33:c6:11:2f:fe:9c:52: d4:13:88:3a:6e:f1:8e:95:2a:6f:9f:33:73:8b:40: 1a:7c:31:56:b0:bc:2e:c2:26:bd:7b:1d:1b:aa:e8: d2:8f:49:2b:32:af:df:1f:e8:63:ca:a2:0c:da:68: 8a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CD:19:FB:C4:B6:E9:08:AE:A0:7C:5D:6C:E5:0F:A5:5B:7A:F1:24 X509v3 Authority Key Identifier: keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:29:ba:8a:fb:51:d2:eb:38:eb:d2:e9:52:03:65:04:c1:89: 87:eb:77:84:ad:65:0c:59:ce:d0:6d:0e:e5:ce:ba:10:a4:35: 6c:af:ef:42:e7:13:31:f6:21:ec:30:47:5f:97:b1:f6:7b:c3: 44:3b:90:b5:7a:4a:d6:fc:82:ea:be:07:8d:86:a4:60:71:c4: f5:00:61:af:cc:68:c3:76:2f:5c:54:4b:27:2e:02:09:4a:c9: e4:de:36:88:07:ab:56:47:49:9b:93:88:e4:89:1e:33:c7:1b: 90:af:51:1a:b7:82:84:72:59:42:ac:e9:35:57:4b:13:09:14: b8:02:96:f3:89:80:4b:84:b1:73:cd:93:8d:32:f2:18:c2:bd: 03:b6:10:83:88:e0:c7:a4:7b:64:3d:06:c1:56:88:e2:23:92: cd:08:f0:7c:22:f8:42:bd:c1:ed:1a:47:1e:36:0a:f5:6e:77: 4b:c6:48:97:53:63:38:cb:ec:60:87:e4:9c:65:58:60:d4:7f: a8:7e:d2:e4:2a:4f:b4:96:90:5a:9e:2b:30:8a:3f:cb:ec:e1: d4:2a:d6:16:e7:d1:57:a2:de:19:7b:9b:c1:fa:a4:8d:c6:ae: 78:1f:35:cc:b3:eb:e2:78:3e:06:0e:17:2b:8a:bd:0a:94:12: cf:dd:ab:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrGtt/w2+ih+GtFzzViH0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMmJjNTQwM2FiMzUzZDVmYzI1ZTVhYWRjZTA5MzJiMjlm NDE3NmEwHhcNMjUxMjI2MDgwMDMwWhcNMjUxMjI3MDgwMDMwWjAzMTEwLwYDVQQD EygyNWNkMTlmYmM0YjZlOTA4YWVhMDdjNWQ2Y2U1MGZhNTViN2FmMTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64mV2mno9HYaj7eWmzYwCNKixpRW 5ZNiYvi2YdMtk76NGcxNCv41z6scwt73MaHj/iVj+94841ml6qu6yj5CWxe+zm5s OlpzKdbERaIPVhC0U0HtPrFliKRNp1ykiWgq15MBMd6D2DVlylpuKr/dTNTpgVUd M/hbIsQ6qVmJ4M6ue9IfS+xqzD9tfFyp96eg/EPY9zhZ34n3tkJez0g+3/0q6o1m GNTvVaWb7Trq74mkqGIkaZCRKvjcZ5/OQrCt1DaY3gQj13ZFgzPGES/+nFLUE4g6 bvGOlSpvnzNzi0AafDFWsLwuwia9ex0bqujSj0krMq/fH+hjyqIM2miKKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXNGfvEtukIrqB8XWzlD6VbevEkMB8GA1UdIwQY MBaAFN0rxUA6s1PV/CXlqtzgkysp9BdqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1N2RlFEcXpVOVg4SmVXcTNPQ1RLeW4wRjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMjU2NTAtNDcyNy00Zjg4LThmMjEt Yzk5N2FlNmM1YmQ0LzEvM1N2RlFEcXpVOVg4SmVXcTNPQ1RLeW4wRjJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9jMjU2NTAtNDcyNy00Zjg4LThmMjEtYzk5N2FlNmM1YmQ0 LzEvM1N2RlFEcXpVOVg4SmVXcTNPQ1RLeW4wRjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSm6ivtR 0us469LpUgNlBMGJh+t3hK1lDFnO0G0O5c66EKQ1bK/vQucTMfYh7DBHX5ex9nvD RDuQtXpK1vyC6r4HjYakYHHE9QBhr8xow3YvXFRLJy4CCUrJ5N42iAerVkdJm5OI 5IkeM8cbkK9RGreChHJZQqzpNVdLEwkUuAKW84mAS4Sxc82TjTLyGMK9A7YQg4jg x6R7ZD0GwVaI4iOSzQjwfCL4Qr3B7RpHHjYK9W53S8ZIl1NjOMvsYIfknGVYYNR/ qH7S5CpPtJaQWp4rMIo/y+zh1CrWFufRV6LeGXubwfqkjcaueB81zLPr4ng+Bg4X K4q9CpQSz92rdg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:25 2025 by rpki-client