This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json) Hash identifier: U6b239FQgdMacT8g79EmPPY1sydDxiHIVgdVqd0VFLI= Subject key identifier: 12:C1:08:40:0D:43:44:E7:29:B4:C2:8E:C6:20:9E:2B:97:F4:54:35 Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6 Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6 Certificate serial: 019B48F03D77E14578A37B586D9D038C2CCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft Manifest number: 0E6E Signing time: Tue 23 Dec 2025 02:01:02 +0000 Manifest this update: Tue 23 Dec 2025 02:01:02 +0000 Manifest next update: Wed 24 Dec 2025 02:01:02 +0000 Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: IBUPxdLhnXvnPkXtbEeMJMBKjCFIiJ0OTfQZWd8Ztnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:3d:77:e1:45:78:a3:7b:58:6d:9d:03:8c:2c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6 Validity Not Before: Dec 23 02:01:02 2025 GMT Not After : Dec 24 02:01:02 2025 GMT Subject: CN=12c108400d4344e729b4c28ec6209e2b97f45435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:71:b5:ee:88:ae:59:70:db:9a:c3:f9:af:db: 27:a4:b5:ee:df:1f:cd:1c:fe:c0:c9:44:4f:0d:78: 23:86:f0:7a:40:92:fa:3a:bc:27:7e:d7:9f:f3:96: fa:89:9e:36:88:cb:4e:59:2d:ad:d6:87:66:50:c5: 4b:10:18:d1:17:83:b3:e2:18:83:7d:6e:4e:e1:d5: de:8d:4c:40:0b:1c:66:10:56:c9:ad:a4:20:57:73: 9c:fd:dc:94:47:fc:b6:05:a3:7c:96:f0:16:13:09: ad:95:a7:80:c1:8a:86:e7:25:87:18:e2:43:d0:20: 0e:6b:01:2a:ff:0b:f8:3c:68:62:6f:1b:35:a5:51: f0:57:fc:43:4c:74:3b:45:22:f2:9d:34:6c:fc:df: e9:33:54:c1:61:87:80:42:fe:f2:de:f7:af:73:6a: 45:1e:d2:6b:fb:3c:7c:c9:e8:14:2c:45:6a:80:b4: 39:a6:56:6c:08:eb:6c:f5:27:46:d6:72:8c:bd:6e: 53:06:fd:a0:6b:53:fa:bc:28:10:11:f3:16:87:e9: 08:d0:c3:44:c3:16:ec:73:44:7c:05:f1:8a:7c:3b: 6b:7f:83:92:ab:37:3b:d9:d6:8b:47:75:6b:52:55: ca:9b:fd:80:50:75:56:63:d7:11:13:ef:78:9b:6c: 2b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C1:08:40:0D:43:44:E7:29:B4:C2:8E:C6:20:9E:2B:97:F4:54:35 X509v3 Authority Key Identifier: keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:91:f6:59:dc:3b:b8:2d:ad:b5:cf:38:67:20:ab:ba:98:49: d6:7b:b1:3b:28:6e:11:0a:9a:57:2f:29:5e:b2:e5:fa:c3:3e: 50:60:5c:a7:d4:81:9f:41:36:aa:a1:d1:ac:4a:a0:b8:5a:57: fb:8b:50:f2:fa:f4:8f:e3:89:34:b1:41:4e:e8:7a:6d:73:1c: dd:47:63:50:62:6c:e8:d5:90:31:0e:cb:1e:84:19:ae:54:41: 44:99:11:4c:b1:db:62:c1:db:35:de:aa:81:5a:e7:f3:66:7b: 9b:d7:d0:e0:f2:25:57:7b:0e:4b:3a:50:8d:f8:f3:0d:58:93: 13:67:21:b0:a3:d8:2c:7f:ae:8d:86:e6:9c:27:6f:f8:42:15: c9:43:69:75:3a:11:36:1a:99:ca:ba:78:0d:af:a6:24:9f:2e: ab:1b:8a:1a:39:82:65:43:0c:17:7b:e8:7a:0c:bf:a1:cd:fb: 2e:f5:22:73:e2:05:d1:b1:3a:ce:cc:7f:f6:2e:f4:ce:a9:c7: 47:46:5c:1b:f4:0d:15:3e:0b:1e:54:9b:74:52:6a:b3:8d:67: a8:2a:a5:5b:4f:ea:f9:1d:fc:e6:3e:d0:87:2d:f4:87:e6:e5: 54:0d:8f:1a:b3:c6:5c:31:97:aa:98:6a:31:9b:59:86:e7:6f: e2:0c:e7:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8D134UV4o3tYbZ0DjCzPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlYzQzMzk3N2M3MmI0YmU1ZDg4OGY1Njg1M2VkMzFhMWZm MWVmYzYwHhcNMjUxMjIzMDIwMTAyWhcNMjUxMjI0MDIwMTAyWjAzMTEwLwYDVQQD EygxMmMxMDg0MDBkNDM0NGU3MjliNGMyOGVjNjIwOWUyYjk3ZjQ1NDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3G17oiuWXDbmsP5r9snpLXu3x/N HP7AyURPDXgjhvB6QJL6Orwnftef85b6iZ42iMtOWS2t1odmUMVLEBjRF4Oz4hiD fW5O4dXejUxACxxmEFbJraQgV3Oc/dyUR/y2BaN8lvAWEwmtlaeAwYqG5yWHGOJD 0CAOawEq/wv4PGhibxs1pVHwV/xDTHQ7RSLynTRs/N/pM1TBYYeAQv7y3vevc2pF HtJr+zx8yegULEVqgLQ5plZsCOts9SdG1nKMvW5TBv2ga1P6vCgQEfMWh+kI0MNE wxbsc0R8BfGKfDtrf4OSqzc72daLR3VrUlXKm/2AUHVWY9cRE+94m2wrRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLBCEANQ0TnKbTCjsYgniuX9FQ1MB8GA1UdIwQY MBaAFN7EM5d8crS+XYiPVoU+0xof8e/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYt MjIzZjUwOGMwNTVhLzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYtMjIzZjUwOGMwNTVh LzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5H2Wdw7 uC2ttc84ZyCruphJ1nuxOyhuEQqaVy8pXrLl+sM+UGBcp9SBn0E2qqHRrEqguFpX +4tQ8vr0j+OJNLFBTuh6bXMc3UdjUGJs6NWQMQ7LHoQZrlRBRJkRTLHbYsHbNd6q gVrn82Z7m9fQ4PIlV3sOSzpQjfjzDViTE2chsKPYLH+ujYbmnCdv+EIVyUNpdToR NhqZyrp4Da+mJJ8uqxuKGjmCZUMMF3voegy/oc37LvUic+IF0bE6zsx/9i70zqnH R0ZcG/QNFT4LHlSbdFJqs41nqCqlW0/q+R385j7Qhy30h+blVA2PGrPGXDGXqphq MZtZhudv4gznKw== -----END CERTIFICATE-----Generated at Tue Dec 23 04:14:37 2025 by rpki-client