This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json) Hash identifier: v51knVCEtsy3j1ctLJ3iSS8G+YVoJgAX6g3RqEgo+KM= Subject key identifier: A0:40:F8:6D:1B:D0:1C:71:77:87:E4:27:E0:61:26:D5:80:09:E8:FE Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d Certificate serial: 019B5975C113BBB94E841B0850BEC1B7C64E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft Manifest number: 11AD Signing time: Fri 26 Dec 2025 07:00:47 +0000 Manifest this update: Fri 26 Dec 2025 07:00:47 +0000 Manifest next update: Sat 27 Dec 2025 07:00:47 +0000 Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: FWiIiMeIpWo06BPYAEtyLvyU1iBU+doY6L22L3CQ8+k=) 2: 9yOwmAU645k5B-2q5IOc7M05GTo.roa (hash: E7bgo02yf2p1Xr2S53fCsY3j/+dXZDb8jPxeB97qfpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:c1:13:bb:b9:4e:84:1b:08:50:be:c1:b7:c6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d Validity Not Before: Dec 26 07:00:47 2025 GMT Not After : Dec 27 07:00:47 2025 GMT Subject: CN=a040f86d1bd01c717787e427e06126d58009e8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:25:3f:d1:f2:01:81:89:56:c3:57:f5:a3: ef:d1:ec:45:e6:71:90:bb:2e:89:fe:b2:dc:46:66: f4:99:50:85:79:ed:9f:91:ad:d6:9b:45:9d:96:84: 29:8a:40:83:50:b4:d4:bd:42:2c:84:90:77:f0:75: 95:22:0d:13:01:d9:fb:5b:b9:42:a3:54:95:f2:65: f4:8d:b2:bc:4e:f8:c7:fe:12:7a:16:b5:11:02:45: 74:d9:69:31:8a:56:0e:95:a7:3b:7a:45:36:e3:9c: f8:fb:b4:d4:60:58:3c:b3:f1:d4:10:c6:04:fd:da: 68:8f:e4:d8:b3:b7:d7:e1:5e:14:63:48:7e:4b:95: 6f:f7:0b:2c:19:6a:c2:40:52:f6:3c:d4:d8:5e:fc: c1:e3:ca:46:39:68:d1:25:3e:54:e1:c0:49:ea:3f: 37:09:9c:e9:b6:c7:85:a6:ed:ed:07:ea:70:bb:51: e4:7b:62:81:4e:b3:c9:ab:56:13:eb:1f:f3:67:d9: 0c:bc:f0:6b:e9:a3:47:b8:b0:50:e9:b0:4a:9e:e5: ef:8b:9b:fd:08:e0:95:51:9d:c3:f3:cf:e5:c0:e5: 00:d8:f8:3c:ff:bb:e8:c0:08:09:a9:6a:9f:f9:e9: 43:df:cf:0d:83:e9:e6:47:1f:bf:2b:7a:36:13:98: 6a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:40:F8:6D:1B:D0:1C:71:77:87:E4:27:E0:61:26:D5:80:09:E8:FE X509v3 Authority Key Identifier: keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ff:7a:c0:39:7e:00:e7:a8:53:24:4e:e1:06:ce:00:59:52: a8:0a:d3:3b:d5:29:e6:ed:5e:4d:4e:a6:3d:e3:3c:15:86:8e: c7:4a:7f:a0:c6:c8:55:fd:d5:d2:ce:67:74:eb:ef:8b:97:d8: 1e:9c:cc:a4:04:8a:ee:dc:b4:f3:65:c8:11:46:2e:a8:dc:55: 6a:34:20:aa:06:93:ef:dc:83:ad:6d:b9:d6:a9:de:b9:27:4c: 93:d1:9d:e9:e3:cd:f3:a8:5d:3d:26:f5:4d:62:25:b0:6f:61: 8a:11:53:2d:04:3a:2f:f3:cc:1d:4a:54:b4:dd:20:1f:ac:2e: b5:82:58:25:66:d3:04:3f:62:5a:72:b7:35:7a:80:7c:bf:29: 4c:b0:a0:6b:ed:e7:92:63:90:e9:34:fe:5d:56:f0:a3:49:f4: 0c:db:05:04:8f:48:8f:3c:10:b5:e6:9a:7e:be:c1:a7:b2:a8: 34:dc:3a:7f:92:4b:48:15:4d:03:bc:7c:a7:99:32:4e:26:c7: c1:b6:17:f5:f6:6e:55:b5:fd:3f:35:fe:7c:25:96:f5:95:0c: b9:89:12:31:7c:b9:b4:d0:12:c1:09:55:1d:3c:70:6f:97:06: 26:92:9b:8b:79:ad:55:fd:07:77:6f:89:6e:cd:e0:47:6a:9c: 0d:1e:30:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdcETu7lOhBsIUL7Bt8ZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkM2Q0MDExMTc1ZTVkZjdhM2Y1N2QzOGU3ODE1MGEyYzA1 ZmRkMWQwHhcNMjUxMjI2MDcwMDQ3WhcNMjUxMjI3MDcwMDQ3WjAzMTEwLwYDVQQD EyhhMDQwZjg2ZDFiZDAxYzcxNzc4N2U0MjdlMDYxMjZkNTgwMDllOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE4lP9HyAYGJVsNX9aPv0exF5nGQ uy6J/rLcRmb0mVCFee2fka3Wm0WdloQpikCDULTUvUIshJB38HWVIg0TAdn7W7lC o1SV8mX0jbK8TvjH/hJ6FrURAkV02WkxilYOlac7ekU245z4+7TUYFg8s/HUEMYE /dpoj+TYs7fX4V4UY0h+S5Vv9wssGWrCQFL2PNTYXvzB48pGOWjRJT5U4cBJ6j83 CZzptseFpu3tB+pwu1Hke2KBTrPJq1YT6x/zZ9kMvPBr6aNHuLBQ6bBKnuXvi5v9 COCVUZ3D88/lwOUA2Pg8/7vowAgJqWqf+elD388Ng+nmRx+/K3o2E5hqqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBA+G0b0Bxxd4fkJ+BhJtWACej+MB8GA1UdIwQY MBaAFN09QBEXXl33o/V9OOeBUKLAX90dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQt MmQwYTc4YmU4OTJkLzEvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQtMmQwYTc4YmU4OTJk LzEvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjP96wDl+ AOeoUyRO4QbOAFlSqArTO9Up5u1eTU6mPeM8FYaOx0p/oMbIVf3V0s5ndOvvi5fY HpzMpASK7ty082XIEUYuqNxVajQgqgaT79yDrW251qneuSdMk9Gd6ePN86hdPSb1 TWIlsG9hihFTLQQ6L/PMHUpUtN0gH6wutYJYJWbTBD9iWnK3NXqAfL8pTLCga+3n kmOQ6TT+XVbwo0n0DNsFBI9IjzwQteaafr7Bp7KoNNw6f5JLSBVNA7x8p5kyTibH wbYX9fZuVbX9PzX+fCWW9ZUMuYkSMXy5tNASwQlVHTxwb5cGJpKbi3mtVf0Hd2+J bs3gR2qcDR4whw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:24 2025 by rpki-client