This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json) Hash identifier: qTEFSr/HmfkF+9F4cVp8O0BGXwoA8Kb5N/8b3vsStjg= Subject key identifier: 62:73:AA:87:BC:E2:40:7C:12:B8:13:38:6C:8C:D3:A1:EE:93:C9:AC Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41 Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741 Certificate serial: 019B1B3BC187F9E2568FF7A98ACDCBA6F569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 05:00:59 +0000 Manifest this update: Sun 14 Dec 2025 05:00:59 +0000 Manifest next update: Mon 15 Dec 2025 05:00:59 +0000 Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: PW3dfVSCbZW7n78aew3j7/WD/t14B6plrVmCRAlew+c=) 2: L9b4ducPYyR6qc5uaeOni9YJQHA.roa (hash: vaOymUj3eUPmbh7xiKllx8KgzftTh5qvMK+aeen3RXg=) 3: kpbrBAbvkEz7iwjj9qvNJnx2KAI.roa (hash: EaUeR1cKI29E16jF0XdNnwUwftG+vurlmN50dR3srjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:c1:87:f9:e2:56:8f:f7:a9:8a:cd:cb:a6:f5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de63eb6319ba454d397645945ce5439576fac741 Validity Not Before: Dec 14 05:00:59 2025 GMT Not After : Dec 15 05:00:59 2025 GMT Subject: CN=6273aa87bce2407c12b813386c8cd3a1ee93c9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e6:78:05:26:ec:be:e4:af:69:a8:53:d3:fc: 15:79:5a:56:36:4c:38:b9:64:1d:8a:28:53:28:d3: 7d:85:6e:24:82:71:3e:1c:49:70:40:b3:30:df:ce: 5e:8e:65:8a:d5:c6:2e:1f:59:31:50:50:71:76:1f: 1b:13:ea:90:bb:24:73:34:7d:8f:e1:3c:9a:72:79: 7c:be:99:52:11:dd:c3:da:74:54:1f:18:4d:14:a6: b2:c1:24:74:d5:70:fc:a5:84:6b:1c:75:a0:10:68: 09:0d:44:6d:1d:63:ce:4b:60:1d:fd:2a:8c:32:a4: 85:26:5e:68:42:02:92:ef:e3:59:ba:2f:a2:82:b5: d3:10:56:1d:c3:93:5c:fa:bd:14:84:f4:90:90:15: 00:bc:56:a4:9d:fe:bd:30:9e:bc:35:04:85:d9:de: b8:66:1a:6c:10:73:9a:58:ea:cb:1b:84:af:01:52: 08:02:75:27:4b:9b:bc:14:c1:d7:08:d3:52:50:9e: fb:28:d7:3c:f6:a6:51:ca:c0:52:06:18:90:02:72: ea:cb:98:25:9e:f0:68:3c:b4:62:9e:1f:96:0f:00: 2b:78:8d:1b:68:49:ea:26:ae:62:e6:ac:e8:36:af: 70:8d:76:e1:bd:e2:a0:4b:4c:a0:56:14:7d:30:fa: 27:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:73:AA:87:BC:E2:40:7C:12:B8:13:38:6C:8C:D3:A1:EE:93:C9:AC X509v3 Authority Key Identifier: keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:aa:69:24:06:ef:56:20:b6:82:f8:4e:9b:96:31:20:41:1c: 0f:5d:30:dc:eb:60:b9:13:64:d3:8d:6b:1a:83:fe:75:76:b9: cd:af:5d:7c:ae:57:84:42:18:e0:88:cf:0c:77:e4:31:86:b3: 2e:3d:69:0f:62:ed:a8:75:ef:58:9d:93:e9:66:fd:dd:f1:70: fd:ac:7c:93:56:c5:a9:dd:83:e5:e6:95:3a:7f:28:82:86:16: 7e:17:9b:37:d5:28:4b:5c:bc:54:e2:6c:2d:75:9c:51:4f:f1: d8:5f:ed:96:83:a4:91:a9:5b:19:b1:56:4a:aa:dd:bf:99:96: e2:52:bb:8c:17:64:a6:ae:b2:8f:8b:09:ea:94:1f:f5:82:ca: 8f:8a:c0:b7:3f:17:d1:18:5e:23:f4:20:c4:fe:12:dd:86:a1: c5:01:1d:f9:97:82:8e:a1:4e:52:2e:04:02:8b:19:eb:03:1a: 3a:7c:1c:4b:c1:5a:3f:c7:dd:d9:9a:82:1a:36:bd:5c:83:c8: 3d:cd:73:1c:36:a9:e9:32:e8:a6:15:6c:74:e1:29:15:d3:62: 59:58:83:cd:c3:82:66:50:30:a6:e2:82:2d:3a:c2:e0:5c:8c: 63:44:62:e9:4c:e2:8f:7b:3a:18:70:c7:3f:a2:4b:8e:cd:af: 5f:25:45:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO8GH+eJWj/epis3LpvVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNjNlYjYzMTliYTQ1NGQzOTc2NDU5NDVjZTU0Mzk1NzZm YWM3NDEwHhcNMjUxMjE0MDUwMDU5WhcNMjUxMjE1MDUwMDU5WjAzMTEwLwYDVQQD Eyg2MjczYWE4N2JjZTI0MDdjMTJiODEzMzg2YzhjZDNhMWVlOTNjOWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeZ4BSbsvuSvaahT0/wVeVpWNkw4 uWQdiihTKNN9hW4kgnE+HElwQLMw385ejmWK1cYuH1kxUFBxdh8bE+qQuyRzNH2P 4Tyacnl8vplSEd3D2nRUHxhNFKaywSR01XD8pYRrHHWgEGgJDURtHWPOS2Ad/SqM MqSFJl5oQgKS7+NZui+igrXTEFYdw5Nc+r0UhPSQkBUAvFaknf69MJ68NQSF2d64 ZhpsEHOaWOrLG4SvAVIIAnUnS5u8FMHXCNNSUJ77KNc89qZRysBSBhiQAnLqy5gl nvBoPLRinh+WDwAreI0baEnqJq5i5qzoNq9wjXbhveKgS0ygVhR9MPoneQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJzqoe84kB8ErgTOGyM06Huk8msMB8GA1UdIwQY MBaAFN5j62MZukVNOXZFlFzlQ5V2+sdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMt MWUxOGY1YjQ5MDVkLzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMtMWUxOGY1YjQ5MDVk LzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6ppJAbv ViC2gvhOm5YxIEEcD10w3OtguRNk041rGoP+dXa5za9dfK5XhEIY4IjPDHfkMYaz Lj1pD2LtqHXvWJ2T6Wb93fFw/ax8k1bFqd2D5eaVOn8ogoYWfhebN9UoS1y8VOJs LXWcUU/x2F/tloOkkalbGbFWSqrdv5mW4lK7jBdkpq6yj4sJ6pQf9YLKj4rAtz8X 0RheI/QgxP4S3YahxQEd+ZeCjqFOUi4EAosZ6wMaOnwcS8FaP8fd2ZqCGja9XIPI Pc1zHDap6TLophVsdOEpFdNiWViDzcOCZlAwpuKCLTrC4FyMY0Ri6Uzij3s6GHDH P6JLjs2vXyVFFg== -----END CERTIFICATE-----Generated at Sun Dec 14 08:43:09 2025 by rpki-client