This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json) Hash identifier: MNKeczzHHkCdXDWBEz/ScNIVPjs2PY2yJ22jUKQ0pxk= Subject key identifier: 00:7A:A3:02:62:FE:DA:86:14:60:D4:B6:BC:4F:C0:1D:9E:DD:7C:FB Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03 Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203 Certificate serial: 019B3DC7DB9DC3F86383440961C3997B1C9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft Manifest number: 0559 Signing time: Sat 20 Dec 2025 22:01:06 +0000 Manifest this update: Sat 20 Dec 2025 22:01:06 +0000 Manifest next update: Sun 21 Dec 2025 22:01:06 +0000 Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: zTrftERjttzWXcJpnP+rs2gZ52gDiSMI2dTHkmJniS4=) 2: Opp8U8aeHzNwIE0mPBiUqooeCJQ.roa (hash: V/D3sQNgSw6lGL7igciFA6sJiWbs7FF9hEBFUMCcvFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:db:9d:c3:f8:63:83:44:09:61:c3:99:7b:1c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203 Validity Not Before: Dec 20 22:01:06 2025 GMT Not After : Dec 21 22:01:06 2025 GMT Subject: CN=007aa30262feda861460d4b6bc4fc01d9edd7cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:79:d3:2c:5b:95:72:09:3d:62:73:56:ca:6e: dc:ac:c6:ac:8f:9a:0c:74:dd:2a:ea:9c:02:c3:1d: 71:91:0d:2d:83:ad:59:2e:8f:4f:58:9d:d0:d7:01: 77:7f:3f:b5:86:c9:b9:d5:48:70:64:b0:84:aa:5e: 61:bc:e6:ad:80:6b:74:31:5c:14:fd:c0:52:c1:49: 0a:2d:8d:26:de:e7:4f:c7:40:78:8c:8a:3d:cc:57: 47:67:57:9f:1d:55:84:c0:6c:9a:21:83:33:8b:b8: 8c:c1:2c:08:bd:b9:2a:88:0c:66:60:c9:1e:dc:fc: ee:a7:f1:6f:08:cd:53:ad:0d:c1:0b:d7:c8:21:ec: 23:5c:ca:c4:5f:1d:8d:24:80:97:c6:99:ac:1a:d2: 50:0b:85:55:2b:92:05:7c:4e:cb:1b:d7:d3:4a:45: 7c:4f:50:73:05:af:b8:27:c3:f8:95:bf:52:d5:8e: fb:76:db:0a:fc:df:70:a1:08:ae:32:3a:e6:ad:23: 5f:43:82:81:42:d7:0f:d7:21:fe:70:20:2b:db:58: 2e:b6:b6:24:54:4d:d6:0e:37:7a:8a:a9:a9:d3:f0: 38:79:10:f6:9a:68:61:69:2c:61:fe:de:ed:d1:87: 73:04:fb:36:66:49:68:00:37:08:22:73:5d:43:84: 44:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7A:A3:02:62:FE:DA:86:14:60:D4:B6:BC:4F:C0:1D:9E:DD:7C:FB X509v3 Authority Key Identifier: keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2e:1d:71:4d:15:cd:72:cf:f3:0f:49:73:78:9c:75:21:81: 01:ac:bb:02:01:8d:72:19:c6:0d:a3:3c:8b:87:ad:b5:3a:b8: 20:8c:2b:ee:15:74:da:d8:a7:58:6b:97:2c:9d:1a:c0:a0:cd: 2f:0d:61:4d:b1:9e:37:85:c8:e0:ee:72:f5:68:fc:60:11:0c: 04:6b:a1:6c:42:2e:2b:25:ed:c6:84:7d:58:1f:ff:00:dc:b1: 8c:7d:9e:9b:7d:33:32:7c:79:c4:c0:fc:ef:ea:67:d3:a2:0d: 57:91:7c:27:ed:7e:90:ec:50:9f:0a:e7:fd:05:a7:ad:e2:08: 14:20:59:58:86:91:17:cb:a9:5a:97:36:21:16:21:6e:a3:ad: 42:b3:a6:73:32:01:47:65:9c:56:36:02:50:f7:2d:50:0e:6d: da:04:c8:6b:22:db:b3:46:7a:ff:8b:71:16:7a:a2:de:07:7f: 70:67:82:02:6d:f5:0e:39:6d:a1:4d:f7:de:99:ec:48:b4:1b: ec:5e:6c:c8:be:15:f4:54:a3:fd:2c:99:a5:cc:59:53:60:d9: b2:35:3f:07:7e:d8:8e:5f:ce:50:6d:40:24:c3:f6:f4:57:28: 0f:07:e0:f5:54:36:35:fd:d5:f9:b4:d2:1a:e9:a4:7c:f1:bf: 6f:8e:1f:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x9udw/hjg0QJYcOZexydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZGVkM2VhM2JhNjczYTgwOGNmNWU2YWRjYjUxZWE3ZjMz ZjQyMDMwHhcNMjUxMjIwMjIwMTA2WhcNMjUxMjIxMjIwMTA2WjAzMTEwLwYDVQQD EygwMDdhYTMwMjYyZmVkYTg2MTQ2MGQ0YjZiYzRmYzAxZDllZGQ3Y2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3nTLFuVcgk9YnNWym7crMasj5oM dN0q6pwCwx1xkQ0tg61ZLo9PWJ3Q1wF3fz+1hsm51UhwZLCEql5hvOatgGt0MVwU /cBSwUkKLY0m3udPx0B4jIo9zFdHZ1efHVWEwGyaIYMzi7iMwSwIvbkqiAxmYMke 3Pzup/FvCM1TrQ3BC9fIIewjXMrEXx2NJICXxpmsGtJQC4VVK5IFfE7LG9fTSkV8 T1BzBa+4J8P4lb9S1Y77dtsK/N9woQiuMjrmrSNfQ4KBQtcP1yH+cCAr21gutrYk VE3WDjd6iqmp0/A4eRD2mmhhaSxh/t7t0YdzBPs2ZkloADcIInNdQ4REhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAB6owJi/tqGFGDUtrxPwB2e3Xz7MB8GA1UdIwQY MBaAFNze0+o7pnOoCM9eaty1HqfzP0IDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMt MTU3MzBlMjQ2YmE2LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMtMTU3MzBlMjQ2YmE2 LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATC4dcU0V zXLP8w9Jc3icdSGBAay7AgGNchnGDaM8i4ettTq4IIwr7hV02tinWGuXLJ0awKDN Lw1hTbGeN4XI4O5y9Wj8YBEMBGuhbEIuKyXtxoR9WB//ANyxjH2em30zMnx5xMD8 7+pn06INV5F8J+1+kOxQnwrn/QWnreIIFCBZWIaRF8upWpc2IRYhbqOtQrOmczIB R2WcVjYCUPctUA5t2gTIayLbs0Z6/4txFnqi3gd/cGeCAm31DjltoU333pnsSLQb 7F5syL4V9FSj/SyZpcxZU2DZsjU/B37Yjl/OUG1AJMP29FcoDwfg9VQ2Nf3V+bTS GumkfPG/b44fEg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:59:19 2025 by rpki-client