This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json) Hash identifier: KkzOKsuSUIrNUYUnP9Nwhs5BDGr4JajQkFWSA8XspV8= Subject key identifier: D8:0B:33:92:D1:8D:DD:6D:C4:E5:A5:02:CA:0A:37:FD:A0:51:42:E0 Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c Certificate serial: 019B25883551FCDBD37E6D3AE2451FA39A42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft Manifest number: 16BD Signing time: Tue 16 Dec 2025 05:00:42 +0000 Manifest this update: Tue 16 Dec 2025 05:00:42 +0000 Manifest next update: Wed 17 Dec 2025 05:00:42 +0000 Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: Hc7pRuKYjN2YCJelsntCaDZPvEwsI/v7lMcDfMehvxY=) 2: i93FbkwGzwrRV5pk719Azh7mnco.roa (hash: FbLtCYorp5+hnW87pG1j3ZHIdaixJG9L/nchejMVUes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:35:51:fc:db:d3:7e:6d:3a:e2:45:1f:a3:9a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c Validity Not Before: Dec 16 05:00:42 2025 GMT Not After : Dec 17 05:00:42 2025 GMT Subject: CN=d80b3392d18ddd6dc4e5a502ca0a37fda05142e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:34:e6:1f:82:f7:52:fc:9b:71:41:13:5c: 41:4c:0d:c4:ab:b8:0e:de:81:7b:30:f6:90:6f:91: 65:fc:56:fe:11:bc:a0:0e:c3:ad:7a:85:75:2e:ff: 7a:bb:17:8c:e0:a3:71:4e:67:91:7a:70:dd:b9:f9: 4c:31:ed:97:11:e5:31:a8:5b:2a:c5:8e:c6:1e:a1: 14:b5:0a:61:81:36:dc:f3:01:cd:25:bc:c3:31:3f: 50:eb:48:56:0b:f6:0c:f0:45:35:d2:0f:2e:fb:14: e1:1a:e5:d2:d8:b4:63:6d:34:d5:a5:4c:da:9e:49: 7b:fa:59:06:fa:7c:2f:d8:c5:99:a8:62:6f:75:42: 9f:72:2c:42:2b:97:21:08:9e:8e:3e:f2:be:ce:03: 7b:6d:88:01:c2:af:d4:01:c8:e6:84:b4:55:96:46: ae:f6:cf:6d:08:23:b6:9d:c4:b1:af:c1:7a:d3:fe: 99:74:4d:50:f2:98:c0:30:5a:b5:20:e9:8c:45:51: f8:10:14:88:6b:87:4a:ed:31:44:c8:6a:1b:ce:5f: d2:f7:74:ed:ec:c8:9b:9a:a1:8c:c5:e1:77:e8:60: 5a:90:f5:de:c9:a7:f3:78:da:e4:81:11:16:df:df: 00:e3:aa:27:99:16:0d:f1:be:06:b8:01:e5:77:5f: 2b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0B:33:92:D1:8D:DD:6D:C4:E5:A5:02:CA:0A:37:FD:A0:51:42:E0 X509v3 Authority Key Identifier: keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d7:5e:75:85:9e:93:5a:69:e4:5a:4c:71:53:02:b3:af:f5: 1c:0e:45:0e:b8:f5:e6:cf:52:c3:0b:40:9f:96:aa:4c:7c:75: 6a:91:26:86:c2:d6:3d:4f:2c:86:2b:22:b0:59:9d:83:60:32: b8:f2:b5:65:41:27:90:92:13:3a:47:32:96:a8:dd:b7:9a:88: 30:6a:6a:59:43:ec:14:ac:73:0e:71:a8:9a:a8:6f:df:5c:23: 39:57:c9:27:f6:da:52:7d:73:3c:69:30:af:53:1c:87:42:29: 71:0e:a1:62:68:ae:bf:cb:45:14:25:c5:03:ed:ea:da:e8:26: c2:37:5d:6b:7a:fa:9a:60:75:89:69:bd:60:5e:48:c1:a0:9f: 55:35:e3:e8:ad:ec:f9:e9:83:19:fd:30:ab:38:94:5a:0f:fe: 2e:7a:3f:02:26:df:62:30:2c:90:5a:79:56:65:dd:cf:e8:ab: 88:28:73:45:f4:d9:42:cb:df:c3:f6:b0:d6:a4:d5:71:d9:56: 83:69:a7:c1:15:12:48:9f:40:2c:2e:ed:aa:96:e5:ad:f5:04: 98:54:fc:d3:89:08:ca:b7:25:d3:19:10:bf:bd:d8:28:b2:5e: d2:0b:e9:4f:14:82:b4:db:dc:13:9d:4e:69:0a:66:e3:40:31: 76:fe:e1:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliDVR/NvTfm064kUfo5pCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZmY4NWJiOGEzNzU5NTIzZTBjYzlmOGE5MWRiZGFmNDc0 ZDZiN2MwHhcNMjUxMjE2MDUwMDQyWhcNMjUxMjE3MDUwMDQyWjAzMTEwLwYDVQQD EyhkODBiMzM5MmQxOGRkZDZkYzRlNWE1MDJjYTBhMzdmZGEwNTE0MmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aA05h+C91L8m3FBE1xBTA3Eq7gO 3oF7MPaQb5Fl/Fb+EbygDsOteoV1Lv96uxeM4KNxTmeRenDduflMMe2XEeUxqFsq xY7GHqEUtQphgTbc8wHNJbzDMT9Q60hWC/YM8EU10g8u+xThGuXS2LRjbTTVpUza nkl7+lkG+nwv2MWZqGJvdUKfcixCK5chCJ6OPvK+zgN7bYgBwq/UAcjmhLRVlkau 9s9tCCO2ncSxr8F60/6ZdE1Q8pjAMFq1IOmMRVH4EBSIa4dK7TFEyGobzl/S93Tt 7MibmqGMxeF36GBakPXeyafzeNrkgREW398A46onmRYN8b4GuAHld18rtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgLM5LRjd1txOWlAsoKN/2gUULgMB8GA1UdIwQY MBaAFNz/hbuKN1lSPgzJ+Kkdva9HTWt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYt NWJjMzAyYjRiNWZjLzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYtNWJjMzAyYjRiNWZj LzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActdedYWe k1pp5FpMcVMCs6/1HA5FDrj15s9SwwtAn5aqTHx1apEmhsLWPU8shisisFmdg2Ay uPK1ZUEnkJITOkcylqjdt5qIMGpqWUPsFKxzDnGomqhv31wjOVfJJ/baUn1zPGkw r1Mch0IpcQ6hYmiuv8tFFCXFA+3q2ugmwjdda3r6mmB1iWm9YF5IwaCfVTXj6K3s +emDGf0wqziUWg/+Lno/AibfYjAskFp5VmXdz+iriChzRfTZQsvfw/aw1qTVcdlW g2mnwRUSSJ9ALC7tqpblrfUEmFT804kIyrcl0xkQv73YKLJe0gvpTxSCtNvcE51O aQpm40Axdv7hSA== -----END CERTIFICATE-----Generated at Tue Dec 16 09:45:21 2025 by rpki-client