This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json) Hash identifier: QNoWy93s/SrQQnn63W1ZTGSdVCtVrzjT1WzRHQ2jEQA= Subject key identifier: FD:29:43:71:94:EC:62:5C:96:EA:4A:29:3A:10:5E:44:A8:96:05:B1 Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f Certificate serial: 019B3A911FB5B0321B6150AF45C05438A9EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 07:02:27 +0000 Manifest this update: Sat 20 Dec 2025 07:02:27 +0000 Manifest next update: Sun 21 Dec 2025 07:02:27 +0000 Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: WqXstULj821qZhErqpgyrf21sIToe8uK0X0k8mwWX/g=) 2: NopP_ZIwxAVnz5Xq3F8YDJ6XlSQ.roa (hash: klfGz6i2JiivKFDVhsCpWAOF20m0ZYcMb/uXv3sHlTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:1f:b5:b0:32:1b:61:50:af:45:c0:54:38:a9:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f Validity Not Before: Dec 20 07:02:27 2025 GMT Not After : Dec 21 07:02:27 2025 GMT Subject: CN=fd29437194ec625c96ea4a293a105e44a89605b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bd:df:5e:e9:f1:96:ab:01:14:9b:cf:b7:75: f9:41:70:6d:ba:bd:d1:d4:5f:cc:3b:58:70:9c:56: ff:2a:1f:65:6c:9a:2a:fa:50:ba:0e:18:37:1b:7e: 68:0e:ff:9e:4e:e2:37:ea:84:58:16:3f:c6:58:41: ba:01:c2:c2:bc:ef:8d:af:b2:02:1c:d7:c2:bd:7a: ee:25:6c:93:b9:5f:7d:aa:d0:60:62:37:b7:31:70: eb:73:23:7a:b3:11:10:ce:22:40:f0:a9:27:cb:80: fc:a4:58:b4:6e:18:cc:f2:35:0e:ec:11:3b:4c:0c: 4c:7f:90:86:57:f3:12:e8:10:dd:24:4f:18:d8:c9: 2c:a5:ef:81:38:47:36:48:fa:1c:15:6f:f8:66:4c: 52:7a:c9:4e:13:3d:da:eb:2a:fd:74:f2:25:b2:6b: 95:0d:57:f3:8f:92:15:43:19:7b:73:96:76:2d:47: 15:74:ad:e8:da:cb:c5:9d:da:49:f4:14:97:bd:3f: 1a:64:62:73:3b:59:e5:42:38:79:0e:58:6b:b1:f3: a2:67:e6:b2:95:77:30:7a:72:f1:20:b2:ce:c3:38: 5d:91:55:05:fb:08:0f:db:c6:64:d4:60:8b:88:07: 73:6c:50:78:af:a1:c1:ee:3b:f0:ed:e7:7e:1b:4e: f5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:29:43:71:94:EC:62:5C:96:EA:4A:29:3A:10:5E:44:A8:96:05:B1 X509v3 Authority Key Identifier: keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:86:9f:b6:6b:38:10:9d:3b:5d:ca:a1:4d:67:cb:c8:54:46: de:c7:52:9a:53:f1:e6:b6:a8:0c:14:6d:9e:78:e2:1e:d1:32: c1:57:28:60:88:d3:ef:33:65:02:58:34:e0:68:af:1d:72:21: 83:28:9e:68:71:91:5b:ff:29:5c:f1:4a:b7:e7:df:09:7c:44: ea:25:24:45:b5:d4:8c:04:17:3e:9f:fa:20:b4:63:6d:18:d3: 33:4b:7a:e3:8d:61:d5:94:b5:06:4d:ef:fb:0d:48:3c:ea:13: 00:df:1f:b1:04:f6:9b:06:b2:c4:d7:cb:51:36:88:cf:0a:69: 19:f6:e8:11:55:a4:52:ed:40:c7:16:ca:5a:92:20:35:1a:c3: d4:18:36:d3:f7:8d:65:04:48:b1:35:64:89:9b:cb:4d:c7:a2: 65:8c:19:ae:95:1c:b9:a4:03:1d:9e:1f:7a:ff:ae:d3:ec:06: e4:f7:cf:6c:16:8d:d1:f2:2e:db:ce:55:81:b5:61:4a:df:1f: 5c:04:52:e3:6d:bb:68:47:6b:73:a1:16:e3:9b:28:46:81:ea: 10:72:22:3c:fb:34:ae:27:b7:b3:f2:63:7d:87:fb:e5:e3:ea: 27:a9:b5:b3:83:3a:4b:69:5c:8f:a9:c0:af:9c:67:30:01:62: 41:ae:dd:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kR+1sDIbYVCvRcBUOKnrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2I4MjAwNWZkYmU5NjEwMjBmNzQwYWI0M2M1NTRlNWEz ODQ1MWYwHhcNMjUxMjIwMDcwMjI3WhcNMjUxMjIxMDcwMjI3WjAzMTEwLwYDVQQD EyhmZDI5NDM3MTk0ZWM2MjVjOTZlYTRhMjkzYTEwNWU0NGE4OTYwNWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb3fXunxlqsBFJvPt3X5QXBtur3R 1F/MO1hwnFb/Kh9lbJoq+lC6Dhg3G35oDv+eTuI36oRYFj/GWEG6AcLCvO+Nr7IC HNfCvXruJWyTuV99qtBgYje3MXDrcyN6sxEQziJA8Kkny4D8pFi0bhjM8jUO7BE7 TAxMf5CGV/MS6BDdJE8Y2Mkspe+BOEc2SPocFW/4ZkxSeslOEz3a6yr9dPIlsmuV DVfzj5IVQxl7c5Z2LUcVdK3o2svFndpJ9BSXvT8aZGJzO1nlQjh5DlhrsfOiZ+ay lXcwenLxILLOwzhdkVUF+wgP28Zk1GCLiAdzbFB4r6HB7jvw7ed+G071QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0pQ3GU7GJclupKKToQXkSolgWxMB8GA1UdIwQY MBaAFN87ggBf2+lhAg90CrQ8VU5aOEUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAt MzdjMTQwOTJlYjI3LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zOGZmMzYtN2Q3My00ODVjLTg5MTAtMzdjMTQwOTJlYjI3 LzEvM3p1Q0FGX2I2V0VDRDNRS3REeFZUbG80UlI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtIaftms4 EJ07XcqhTWfLyFRG3sdSmlPx5raoDBRtnnjiHtEywVcoYIjT7zNlAlg04GivHXIh gyieaHGRW/8pXPFKt+ffCXxE6iUkRbXUjAQXPp/6ILRjbRjTM0t6441h1ZS1Bk3v +w1IPOoTAN8fsQT2mwayxNfLUTaIzwppGfboEVWkUu1AxxbKWpIgNRrD1Bg20/eN ZQRIsTVkiZvLTceiZYwZrpUcuaQDHZ4fev+u0+wG5PfPbBaN0fIu285VgbVhSt8f XARS4227aEdrc6EW45soRoHqEHIiPPs0rie3s/JjfYf75ePqJ6m1s4M6S2lcj6nA r5xnMAFiQa7dyQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:00:53 2025 by rpki-client