This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json) Hash identifier: eFMhVfTqucWoaAlCNCQArSnhKVgv0AKWJGlCOR3l2UU= Subject key identifier: 02:8C:25:49:A2:0B:44:1A:83:CA:49:10:08:78:49:47:A9:15:C5:48 Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70 Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370 Certificate serial: 019AFB429E92A59CAD717747D6780BA36851 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft Manifest number: 1772 Signing time: Mon 08 Dec 2025 00:00:38 +0000 Manifest this update: Mon 08 Dec 2025 00:00:38 +0000 Manifest next update: Tue 09 Dec 2025 00:00:38 +0000 Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: 5VMd827aUgoTugsm9ELow+si+Q+ITzZzwaBneN1y6pA=) 2: mrfRDaiKMwuO0e_yVpeGak1wsx8.roa (hash: PAF6iPVsRLbh23Q2SPC9mq243Z3PJUwXufedOLJEEqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:42:9e:92:a5:9c:ad:71:77:47:d6:78:0b:a3:68:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370 Validity Not Before: Dec 8 00:00:38 2025 GMT Not After : Dec 9 00:00:38 2025 GMT Subject: CN=028c2549a20b441a83ca491008784947a915c548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:40:98:b3:0c:de:e3:75:8e:98:d1:8c:bb:cc: 2d:a8:5a:cf:ab:a9:df:71:76:bd:5f:2d:cf:89:18: 5b:5f:f9:60:90:4b:b7:4e:83:b6:f7:db:f1:73:81: 75:7c:f6:ea:06:65:e5:a5:40:fa:df:98:90:07:76: ba:76:ce:d8:4a:df:8d:2e:37:6a:58:c5:e0:5b:30: 2b:09:30:25:53:f0:88:81:a1:a1:f8:23:6f:4f:6c: 68:8b:74:b3:df:d6:5d:7d:b1:7d:ae:42:9d:45:df: 1e:6c:b8:7a:38:ff:2c:8d:e1:20:d5:6c:35:e9:53: d5:ea:a6:d3:fc:93:ec:21:44:ed:aa:10:c7:7b:d7: fd:d6:44:df:a5:17:76:27:b4:b6:fa:c6:89:8f:69: 1b:02:d1:24:e6:8f:6e:15:e8:17:45:e7:45:69:80: 26:aa:1f:f2:c0:c0:38:b5:b2:9c:03:ae:b6:b6:47: 50:8d:1e:98:c6:8d:e1:d2:30:1c:9f:ff:f4:1d:08: 39:33:2e:a9:30:31:c8:0c:96:75:fa:a2:ab:63:69: 8e:d1:6d:1c:17:df:37:d2:68:c5:e9:be:56:64:ff: df:a7:bf:af:c6:9d:34:b3:00:c8:5f:62:d2:d5:4c: 4f:de:8c:11:12:64:e2:6f:d0:3a:b2:f9:96:21:65: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8C:25:49:A2:0B:44:1A:83:CA:49:10:08:78:49:47:A9:15:C5:48 X509v3 Authority Key Identifier: keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:7c:fe:bd:b6:42:0b:22:8b:c5:c4:8d:e3:1b:8b:88:ec:fa: 5a:e2:d6:b4:41:6e:fe:cf:f2:ac:3a:55:49:25:6a:b2:ba:5a: b2:39:82:04:61:21:14:f3:d4:e2:1a:14:13:78:e7:8f:a0:a9: c7:ab:a1:b2:48:48:c1:93:9b:be:74:a9:63:a5:f2:08:c5:5b: 26:19:56:14:79:02:af:6d:9b:85:b0:ab:c5:ab:09:c7:76:e3: b6:33:47:2c:5f:b8:c2:56:bf:eb:0b:bf:11:16:66:e3:90:d2: cd:b5:80:c8:88:5a:ec:70:0c:2c:63:09:f7:04:ae:ee:0d:4a: 3a:18:a1:7e:f9:f8:88:a9:f8:29:03:8f:97:61:2a:2e:4f:0e: 88:b7:b7:40:0d:58:6c:8b:b7:ff:26:41:a0:ce:a6:10:57:bb: f7:2e:3b:2b:15:70:b2:44:6a:07:62:a5:3f:8e:00:a6:6b:af: 35:17:48:ce:b8:50:4b:33:28:3b:4b:59:58:97:51:d7:c8:9f: 35:81:30:45:1b:0a:7e:ff:54:bd:5b:75:8d:e8:11:29:83:92: 22:a3:7f:5c:d7:be:c3:bb:ce:e0:06:11:0b:d3:c4:9d:28:24: 9b:39:a1:43:e2:49:fc:dc:f4:3b:bf:59:12:e2:fe:89:96:8e: 6f:1d:19:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7Qp6SpZytcXdH1ngLo2hRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYTQ2YjFmY2Q5MmI0N2Y0ZjU1ZmFkMDM4Yzk1ODEzNDBh OWQzNzAwHhcNMjUxMjA4MDAwMDM4WhcNMjUxMjA5MDAwMDM4WjAzMTEwLwYDVQQD EygwMjhjMjU0OWEyMGI0NDFhODNjYTQ5MTAwODc4NDk0N2E5MTVjNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UCYswze43WOmNGMu8wtqFrPq6nf cXa9Xy3PiRhbX/lgkEu3ToO299vxc4F1fPbqBmXlpUD635iQB3a6ds7YSt+NLjdq WMXgWzArCTAlU/CIgaGh+CNvT2xoi3Sz39ZdfbF9rkKdRd8ebLh6OP8sjeEg1Ww1 6VPV6qbT/JPsIUTtqhDHe9f91kTfpRd2J7S2+saJj2kbAtEk5o9uFegXRedFaYAm qh/ywMA4tbKcA662tkdQjR6Yxo3h0jAcn//0HQg5My6pMDHIDJZ1+qKrY2mO0W0c F9830mjF6b5WZP/fp7+vxp00swDIX2LS1UxP3owREmTib9A6svmWIWWQtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKMJUmiC0Qag8pJEAh4SUepFcVIMB8GA1UdIwQY MBaAFNykax/NkrR/T1X60DjJWBNAqdNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmIt YzZkMmI4ZDFmNTY2LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmItYzZkMmI4ZDFmNTY2 LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHz+vbZC CyKLxcSN4xuLiOz6WuLWtEFu/s/yrDpVSSVqsrpasjmCBGEhFPPU4hoUE3jnj6Cp x6uhskhIwZObvnSpY6XyCMVbJhlWFHkCr22bhbCrxasJx3bjtjNHLF+4wla/6wu/ ERZm45DSzbWAyIha7HAMLGMJ9wSu7g1KOhihfvn4iKn4KQOPl2EqLk8OiLe3QA1Y bIu3/yZBoM6mEFe79y47KxVwskRqB2KlP44ApmuvNRdIzrhQSzMoO0tZWJdR18if NYEwRRsKfv9UvVt1jegRKYOSIqN/XNe+w7vO4AYRC9PEnSgkmzmhQ+JJ/Nz0O79Z EuL+iZaObx0ZwA== -----END CERTIFICATE-----Generated at Mon Dec 8 05:58:39 2025 by rpki-client