This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json) Hash identifier: rwrJgELr6uTduSJxotHQqOSokRT+n0IyauAlMvnM7f4= Subject key identifier: B6:BD:13:B1:33:80:33:C6:C7:6A:ED:02:93:56:1C:61:6E:49:C7:78 Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95 Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395 Certificate serial: 019B59E40589B51D4C0BDFBB4E94F71E795D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 09:01:14 +0000 Manifest this update: Fri 26 Dec 2025 09:01:14 +0000 Manifest next update: Sat 27 Dec 2025 09:01:14 +0000 Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: RPRe5+1EvzqZEXeLNNOe8E/Gu7tBhuqCmhmLUEU382o=) 2: 6GNxdzK9UE9bHySiQzQ4c2EkGfY.roa (hash: xWTUJszNKd3dbNHz1f2JomMkK2hd4V6IPZrJaK6VjKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:05:89:b5:1d:4c:0b:df:bb:4e:94:f7:1e:79:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395 Validity Not Before: Dec 26 09:01:14 2025 GMT Not After : Dec 27 09:01:14 2025 GMT Subject: CN=b6bd13b1338033c6c76aed0293561c616e49c778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5b:2e:fb:d5:d1:12:69:18:3d:5c:a0:c4:ee: 9f:e0:d5:a2:a4:54:28:89:88:a1:be:0b:22:1f:a9: 0d:7e:55:53:63:ea:58:e2:1d:86:4a:71:16:17:7f: af:00:9f:4b:9d:c7:40:b4:98:e2:25:22:93:12:a7: 4d:92:e4:a1:29:65:2f:c7:c6:11:54:f6:af:ba:ea: 10:8d:5e:91:2d:7c:82:76:d6:6d:ee:57:74:a4:f5: 79:86:87:52:f4:d1:b4:d7:f9:5d:75:76:78:40:45: e3:62:7d:91:df:ce:1c:94:64:bd:bc:61:97:50:32: e2:51:ca:02:a7:09:c4:b3:bb:c7:b3:e7:4e:b6:98: 6e:d0:8c:29:d5:cc:cc:a9:55:64:69:35:44:40:0f: 61:a0:1b:36:28:5c:93:9e:8c:5e:6f:ed:25:db:75: 56:4b:94:8e:34:b2:f7:4d:ac:7b:98:a0:8f:80:c6: 1e:07:ff:c0:c5:aa:1a:56:f3:c1:1e:df:53:26:0a: c6:17:2a:16:59:bf:43:4f:9c:f7:29:44:2c:bc:2d: 42:fb:a6:c4:bf:ba:65:38:c5:d6:a8:6f:50:26:fa: 52:29:d3:a0:ea:55:6c:d3:7e:58:35:4a:98:7a:f1: f6:86:d9:cc:a0:26:db:d5:d2:2b:cf:88:ae:a1:39: 25:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BD:13:B1:33:80:33:C6:C7:6A:ED:02:93:56:1C:61:6E:49:C7:78 X509v3 Authority Key Identifier: keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:7b:00:72:c0:d0:76:30:61:18:f1:a5:55:49:57:56:6a:5e: f2:38:8c:e5:b6:fd:ef:f2:9c:f2:e3:cf:40:ba:c6:3c:ea:0f: 8a:a5:e3:80:f4:26:db:b5:71:cf:72:46:20:7c:02:a5:a0:7c: 5f:6e:3b:d6:26:f3:82:06:b5:24:91:2f:bf:75:4c:ab:ca:e5: a6:08:b1:08:02:63:ba:37:5c:99:8f:26:49:10:e7:18:71:06: 22:8a:44:01:ac:62:f6:04:51:45:56:9d:67:43:53:f4:d5:18: bf:8c:e8:b4:8f:03:ef:c5:37:86:e0:b7:fc:a1:28:e8:27:e3: f1:66:62:34:64:9c:e8:87:db:27:0a:12:9a:dd:dc:6f:c7:b2: c9:12:fb:37:f6:31:42:ef:a8:24:da:8b:11:87:db:60:b8:99: 3a:98:5c:a2:83:e6:a8:45:53:bc:15:1b:2e:bc:3c:0e:9b:53: e5:b2:be:95:6c:a3:75:55:61:25:72:63:e5:e9:87:85:11:35: 64:e4:69:3b:10:85:7a:f4:f9:00:f7:b1:d6:f4:27:97:3a:0e: 8d:a8:31:af:bd:58:70:c9:e9:fc:b1:64:9a:a9:25:56:1a:ec: 32:a3:45:aa:12:fc:39:ad:fb:77:36:72:2d:00:6d:69:aa:e8: 1f:0f:f1:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5AWJtR1MC9+7TpT3HnldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGNjZDIzOTFmYTMyYzBhZGUyOTdjNWZjODgzMDkwYjM5 OTEzOTUwHhcNMjUxMjI2MDkwMTE0WhcNMjUxMjI3MDkwMTE0WjAzMTEwLwYDVQQD EyhiNmJkMTNiMTMzODAzM2M2Yzc2YWVkMDI5MzU2MWM2MTZlNDljNzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVsu+9XREmkYPVygxO6f4NWipFQo iYihvgsiH6kNflVTY+pY4h2GSnEWF3+vAJ9LncdAtJjiJSKTEqdNkuShKWUvx8YR VPavuuoQjV6RLXyCdtZt7ld0pPV5hodS9NG01/lddXZ4QEXjYn2R384clGS9vGGX UDLiUcoCpwnEs7vHs+dOtphu0Iwp1czMqVVkaTVEQA9hoBs2KFyTnoxeb+0l23VW S5SONLL3Tax7mKCPgMYeB//AxaoaVvPBHt9TJgrGFyoWWb9DT5z3KUQsvC1C+6bE v7plOMXWqG9QJvpSKdOg6lVs035YNUqYevH2htnMoCbb1dIrz4iuoTklgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLa9E7EzgDPGx2rtApNWHGFuScd4MB8GA1UdIwQY MBaAFN4MzSOR+jLAreKXxfyIMJCzmROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQt NjdjMWE2M2M1MTUwLzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQtNjdjMWE2M2M1MTUw LzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtHsAcsDQ djBhGPGlVUlXVmpe8jiM5bb97/Kc8uPPQLrGPOoPiqXjgPQm27Vxz3JGIHwCpaB8 X2471ibzgga1JJEvv3VMq8rlpgixCAJjujdcmY8mSRDnGHEGIopEAaxi9gRRRVad Z0NT9NUYv4zotI8D78U3huC3/KEo6Cfj8WZiNGSc6IfbJwoSmt3cb8eyyRL7N/Yx Qu+oJNqLEYfbYLiZOphcooPmqEVTvBUbLrw8DptT5bK+lWyjdVVhJXJj5emHhRE1 ZORpOxCFevT5APex1vQnlzoOjagxr71YcMnp/LFkmqklVhrsMqNFqhL8Oa37dzZy LQBtaaroHw/xbA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:48 2025 by rpki-client