This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json) Hash identifier: 8CCayJJjbB60iYHHgUQWbf0eCLR7uhLqW8rFAH4dcDA= Subject key identifier: 98:1F:0E:8B:B0:BC:1E:6D:B2:E1:C2:31:B3:8A:06:42:9D:30:0C:1F Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82 Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382 Certificate serial: 019B1CF317CCE3DD67504F080E451BF7CAEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 13:00:51 +0000 Manifest this update: Sun 14 Dec 2025 13:00:51 +0000 Manifest next update: Mon 15 Dec 2025 13:00:51 +0000 Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: N5vK1Mnig1wpJ1ImZKAWzLquakSEAVK1KIHIuOaAN8U=) 2: VdIe0wje21xW6oNKzeMaUY1A5jg.roa (hash: XUGNAPMZMK284DVHv5fL8vRSHePLM5U6Cz3a1v6M6hk=) 3: iuKuxv9EBM2kBUoWOZrOGISOEXI.roa (hash: M7VP7rss/sZMOY+HK5CMR5G4/5a9JWWosQij25471bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:17:cc:e3:dd:67:50:4f:08:0e:45:1b:f7:ca:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382 Validity Not Before: Dec 14 13:00:51 2025 GMT Not After : Dec 15 13:00:51 2025 GMT Subject: CN=981f0e8bb0bc1e6db2e1c231b38a06429d300c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9a:f3:b7:1e:26:61:42:88:df:ab:7e:1d:47: f2:df:9d:89:65:55:ff:e6:83:5b:5a:ad:bc:14:8d: b3:e7:7b:ac:03:09:9a:df:a4:0c:d0:75:9f:1e:e7: 84:2f:08:40:fd:6e:6d:01:a1:09:e7:69:ae:a8:bf: ad:ef:e2:db:b3:fa:73:91:d9:e8:67:16:10:94:c5: e8:52:68:3f:84:5c:ea:81:42:0f:24:3a:66:80:35: a7:6a:65:6a:d6:ac:75:b3:52:e3:e0:63:dd:e0:38: 31:45:2a:89:36:b0:c4:70:39:3b:bb:16:f4:c4:6a: b3:5d:04:10:07:47:48:18:8e:57:65:34:7b:7d:e6: f7:e1:82:e4:62:43:ca:7b:dc:b0:93:b0:5c:30:83: b0:80:3d:37:d8:ce:98:d0:51:4e:74:cc:62:90:b2: b4:57:4e:39:f1:40:7f:ff:93:40:1f:52:d5:36:7b: 10:62:f5:16:83:d0:2d:b7:cf:68:b4:c4:97:9d:d2: 35:c2:c6:c1:f7:6c:6b:2a:54:6f:93:9e:5d:6e:d0: 05:66:c2:51:7b:24:0b:2f:6d:a4:9b:11:96:7a:0d: f3:c7:58:d9:a3:af:13:b5:8c:7a:8f:b4:8a:a5:fe: cf:60:50:0a:fb:bb:4f:f3:b0:9a:fb:d3:d7:6c:d2: 4e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1F:0E:8B:B0:BC:1E:6D:B2:E1:C2:31:B3:8A:06:42:9D:30:0C:1F X509v3 Authority Key Identifier: keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c7:db:05:a7:01:a3:d8:7c:c6:d3:70:5f:c7:70:11:48:23: aa:23:21:4d:18:98:75:87:d9:7d:74:9b:db:d1:2c:8b:1b:ae: 09:99:37:1d:34:1e:49:b9:94:7c:a5:73:66:79:74:0e:52:d2: 4d:22:37:5e:bb:18:97:b0:51:8d:12:95:2c:a9:91:bb:29:78: 6a:f4:d2:fc:ce:6d:50:85:19:74:d7:69:d4:cd:c9:a3:c6:78: 23:3b:20:4b:af:13:43:0c:b1:4a:c2:dc:70:e4:c0:94:58:a0: 63:05:fc:87:86:a1:f2:ed:fe:90:1f:04:5f:71:de:62:7f:fb: 23:95:d8:d7:23:ec:ea:af:71:07:54:46:93:63:f2:ae:4a:8f: b0:68:18:41:92:9b:f4:fd:97:f3:fc:3c:b4:e0:1b:e0:c9:77: 52:7d:b7:18:b1:bd:bc:fd:f0:c6:5d:97:a1:12:7e:7a:fa:9a: fc:6c:09:cb:90:46:ae:fc:cb:b0:0e:98:bc:82:85:3c:64:8b: 06:9a:6c:14:09:d2:6f:7a:0e:a9:09:71:bb:e6:09:0f:15:bc: c1:af:1b:46:48:b0:b7:16:7d:1e:8f:0d:6b:2a:93:8a:63:42: 7c:d9:26:8c:65:09:e0:24:c3:ee:57:a1:fa:91:e7:29:c7:49: aa:5b:ed:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc8xfM491nUE8IDkUb98rrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlM2QzNjg3ZmU3ZGY0OGMzYmU4Mzk4YWFkN2JkMjAxMDY1 NDUzODIwHhcNMjUxMjE0MTMwMDUxWhcNMjUxMjE1MTMwMDUxWjAzMTEwLwYDVQQD Eyg5ODFmMGU4YmIwYmMxZTZkYjJlMWMyMzFiMzhhMDY0MjlkMzAwYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5rztx4mYUKI36t+HUfy352JZVX/ 5oNbWq28FI2z53usAwma36QM0HWfHueELwhA/W5tAaEJ52muqL+t7+Lbs/pzkdno ZxYQlMXoUmg/hFzqgUIPJDpmgDWnamVq1qx1s1Lj4GPd4DgxRSqJNrDEcDk7uxb0 xGqzXQQQB0dIGI5XZTR7feb34YLkYkPKe9ywk7BcMIOwgD032M6Y0FFOdMxikLK0 V0458UB//5NAH1LVNnsQYvUWg9Att89otMSXndI1wsbB92xrKlRvk55dbtAFZsJR eyQLL22kmxGWeg3zx1jZo68TtYx6j7SKpf7PYFAK+7tP87Ca+9PXbNJOuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgfDouwvB5tsuHCMbOKBkKdMAwfMB8GA1UdIwQY MBaAFN49Nof+ffSMO+g5iq170gEGVFOCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2owMmhfNTk5SXc3NkRtS3JYdlNBUVpVVTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80MDBiNGYtMzY4OC00OTdjLTk3ODUt MjM0Y2JhZmFjODZhLzEvM2owMmhfNTk5SXc3NkRtS3JYdlNBUVpVVTRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy80MDBiNGYtMzY4OC00OTdjLTk3ODUtMjM0Y2JhZmFjODZh LzEvM2owMmhfNTk5SXc3NkRtS3JYdlNBUVpVVTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMfbBacB o9h8xtNwX8dwEUgjqiMhTRiYdYfZfXSb29EsixuuCZk3HTQeSbmUfKVzZnl0DlLS TSI3XrsYl7BRjRKVLKmRuyl4avTS/M5tUIUZdNdp1M3Jo8Z4IzsgS68TQwyxSsLc cOTAlFigYwX8h4ah8u3+kB8EX3HeYn/7I5XY1yPs6q9xB1RGk2PyrkqPsGgYQZKb 9P2X8/w8tOAb4Ml3Un23GLG9vP3wxl2XoRJ+evqa/GwJy5BGrvzLsA6YvIKFPGSL BppsFAnSb3oOqQlxu+YJDxW8wa8bRkiwtxZ9Ho8NayqTimNCfNkmjGUJ4CTD7leh +pHnKcdJqlvtzA== -----END CERTIFICATE-----Generated at Sun Dec 14 19:15:15 2025 by rpki-client