This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft File: s3fRc_TqOk-bJT7lLrnugUaxDj4.mft (raw, json) Hash identifier: ugSIHdq6cC95O1XxKq84FSS+ek4RuG9UykYyyTKhy2w= Subject key identifier: C8:47:9D:70:EE:8A:42:A8:60:B0:3E:76:3D:6D:83:84:F2:92:D5:5A Authority key identifier: B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E Certificate issuer: /CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e Certificate serial: 019B21766FB75F5A0747770A4B5114A9C18B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft Manifest number: 13B2 Signing time: Mon 15 Dec 2025 10:02:48 +0000 Manifest this update: Mon 15 Dec 2025 10:02:48 +0000 Manifest next update: Tue 16 Dec 2025 10:02:48 +0000 Files and hashes: 1: s3fRc_TqOk-bJT7lLrnugUaxDj4.crl (hash: K4eOQv62Xymaju41Znj6DqO4HO/VBxPmc5KC/43Sgks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:6f:b7:5f:5a:07:47:77:0a:4b:51:14:a9:c1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e Validity Not Before: Dec 15 10:02:48 2025 GMT Not After : Dec 16 10:02:48 2025 GMT Subject: CN=c8479d70ee8a42a860b03e763d6d8384f292d55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0e:63:dd:10:6f:4a:f7:48:6d:67:60:bd:99: 8f:8f:17:43:cc:00:8f:bd:f5:9e:8b:4a:97:30:5e: 36:95:9f:45:06:00:07:c0:e0:19:a8:43:88:73:82: e3:c0:40:ca:ba:a0:f6:4b:53:f2:c5:a7:51:26:1e: ff:e4:88:28:44:f5:40:22:56:b5:6d:84:f2:76:dc: 6e:b5:d1:9b:1e:49:a8:3b:9c:58:cf:96:06:65:dc: 87:57:87:4a:9c:9a:bb:3c:30:d9:55:d5:d0:11:7a: b2:af:c1:55:ca:ea:b3:54:af:89:59:dd:b1:83:f4: 5f:7f:0b:3f:02:07:ed:30:54:91:ce:d7:30:9f:8a: 5b:ef:6b:ba:84:39:6d:65:ad:2c:9e:3e:b7:86:e4: 5f:ed:89:fb:cf:83:21:1a:61:b1:05:dd:c9:be:16: fb:66:7b:8a:9a:2a:ae:49:da:0f:85:f3:a2:ad:03: 3b:e0:d6:48:c2:5b:26:f7:f9:84:98:94:8c:d8:91: c8:f1:2e:8d:45:76:40:89:cc:e2:4b:ec:87:98:5d: 5f:20:98:51:b4:24:33:97:6d:56:e4:9f:c5:05:31: 18:91:92:39:32:37:41:1c:03:f7:ab:87:42:ff:ea: b3:4c:b4:00:73:e7:1b:77:f5:ee:83:6b:66:fb:bf: 47:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:47:9D:70:EE:8A:42:A8:60:B0:3E:76:3D:6D:83:84:F2:92:D5:5A X509v3 Authority Key Identifier: keyid:B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:5f:ca:d5:87:af:be:7b:1e:8b:f2:3f:ce:fa:1e:2a:fe:7c: 57:35:21:3f:54:06:fb:18:99:87:b4:c3:17:d4:27:04:37:ad: ef:86:7b:75:45:7f:aa:ff:f5:59:58:bb:e1:c7:cd:15:8a:cd: 4d:19:0e:d6:cb:0b:99:5c:4d:ad:4a:ad:d3:a5:83:38:e1:42: 26:11:58:a2:61:a9:fb:ce:cb:51:39:25:3f:26:a0:0f:3d:d3: 9e:dc:2b:21:6f:c4:c8:46:08:ac:f8:a7:d6:32:66:c8:c8:61: aa:88:92:0a:66:97:d3:b2:80:7c:ab:02:0e:41:53:79:8f:8d: ba:5a:3b:d6:e6:06:b6:cb:b0:2c:2a:df:d2:df:72:ab:fe:9b: 41:59:48:0e:6b:01:a5:08:d0:14:a5:94:f9:2f:ca:67:05:ba: ed:ed:1c:10:ed:b0:a6:d1:a9:6a:3b:71:f3:69:22:40:55:65: 0d:1c:56:e0:66:46:72:d9:91:a9:cc:56:59:0c:eb:df:22:1b: 6f:72:5a:1b:3d:e7:07:4b:f4:e6:81:93:4a:a5:1e:86:d2:01: 93:d4:42:b0:16:e9:e9:40:41:73:6c:4a:26:66:ea:62:3e:25: ba:10:c2:b7:05:4b:fc:2b:b8:cc:bf:f1:da:f8:47:98:f6:99: 56:5b:fd:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdm+3X1oHR3cKS1EUqcGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNzdkMTczZjRlYTNhNGY5YjI1M2VlNTJlYjllZTgxNDZi MTBlM2UwHhcNMjUxMjE1MTAwMjQ4WhcNMjUxMjE2MTAwMjQ4WjAzMTEwLwYDVQQD EyhjODQ3OWQ3MGVlOGE0MmE4NjBiMDNlNzYzZDZkODM4NGYyOTJkNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ5j3RBvSvdIbWdgvZmPjxdDzACP vfWei0qXMF42lZ9FBgAHwOAZqEOIc4LjwEDKuqD2S1PyxadRJh7/5IgoRPVAIla1 bYTydtxutdGbHkmoO5xYz5YGZdyHV4dKnJq7PDDZVdXQEXqyr8FVyuqzVK+JWd2x g/Rffws/AgftMFSRztcwn4pb72u6hDltZa0snj63huRf7Yn7z4MhGmGxBd3Jvhb7 ZnuKmiquSdoPhfOirQM74NZIwlsm9/mEmJSM2JHI8S6NRXZAicziS+yHmF1fIJhR tCQzl21W5J/FBTEYkZI5MjdBHAP3q4dC/+qzTLQAc+cbd/Xug2tm+79H2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhHnXDuikKoYLA+dj1tg4TyktVaMB8GA1UdIwQY MBaAFLN30XP06jpPmyU+5S657oFGsQ4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczNmUmNfVHFPay1iSlQ3bExybnVnVWF4RGo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wZTIxNDYtOTc4YS00MzlmLTk1NzAt Nzk2MDk4NWQzNWEzLzEvczNmUmNfVHFPay1iSlQ3bExybnVnVWF4RGo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8wZTIxNDYtOTc4YS00MzlmLTk1NzAtNzk2MDk4NWQzNWEz LzEvczNmUmNfVHFPay1iSlQ3bExybnVnVWF4RGo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1/K1Yev vnsei/I/zvoeKv58VzUhP1QG+xiZh7TDF9QnBDet74Z7dUV/qv/1WVi74cfNFYrN TRkO1ssLmVxNrUqt06WDOOFCJhFYomGp+87LUTklPyagDz3TntwrIW/EyEYIrPin 1jJmyMhhqoiSCmaX07KAfKsCDkFTeY+Nulo71uYGtsuwLCrf0t9yq/6bQVlIDmsB pQjQFKWU+S/KZwW67e0cEO2wptGpajtx82kiQFVlDRxW4GZGctmRqcxWWQzr3yIb b3JaGz3nB0v05oGTSqUehtIBk9RCsBbp6UBBc2xKJmbqYj4luhDCtwVL/Cu4zL/x 2vhHmPaZVlv9lA== -----END CERTIFICATE-----Generated at Mon Dec 15 18:59:00 2025 by rpki-client