This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft File: a3tUza1xENOJd_mlkmCzkxLkSH0.mft (raw, json) Hash identifier: U0dnVC0R/VOfg8hS/MzYmYJKnSio2S0RCT6GBR0meW8= Subject key identifier: 74:88:68:52:68:B4:10:4E:4B:B6:EC:7E:06:A1:EF:A5:F8:90:AA:8F Authority key identifier: 6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D Certificate issuer: /CN=6b7b54cdad7110d38977f9a59260b39312e4487d Certificate serial: 019B42B7425D9D3AFC882C23768DCB3FBFF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft Manifest number: 1266 Signing time: Sun 21 Dec 2025 21:01:04 +0000 Manifest this update: Sun 21 Dec 2025 21:01:04 +0000 Manifest next update: Mon 22 Dec 2025 21:01:04 +0000 Files and hashes: 1: a3tUza1xENOJd_mlkmCzkxLkSH0.crl (hash: KCuocYmaCRbRzMS4how2qynj7yKNFQXiUqfJfU59QEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:42:5d:9d:3a:fc:88:2c:23:76:8d:cb:3f:bf:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7b54cdad7110d38977f9a59260b39312e4487d Validity Not Before: Dec 21 21:01:04 2025 GMT Not After : Dec 22 21:01:04 2025 GMT Subject: CN=7488685268b4104e4bb6ec7e06a1efa5f890aa8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:18:f0:34:a4:bd:85:ac:d9:12:f5:b2:40:0a: 77:50:57:77:30:65:d7:68:ca:7d:c1:8c:da:98:c1: 48:1a:ac:8c:72:f3:a9:aa:2c:05:1c:99:69:34:10: 49:6a:8a:8a:e7:cc:ed:63:f5:12:e9:bc:9a:63:b3: 48:ff:dc:4d:de:de:c5:26:3c:d9:ab:46:da:27:5e: 7f:81:a7:a0:db:e3:f6:e5:9a:5a:e0:b1:5d:d1:7d: 07:f2:9c:b7:9f:d8:7a:ad:f9:f2:d4:e3:95:be:a1: 33:cb:51:85:5b:e1:a9:92:11:f0:9a:bb:20:89:f9: ab:26:49:c8:ee:91:9b:c6:fd:f6:03:12:52:21:99: d7:76:97:e1:5c:6e:09:9c:ed:1c:72:1c:8d:35:16: b1:02:13:f7:8f:78:a3:fc:d1:25:ce:6f:d9:7f:34: b3:44:78:2c:2d:ef:9c:06:4e:3b:ec:30:69:d8:ff: dd:cc:c7:95:4e:6c:36:32:08:d0:60:a1:89:05:df: 87:40:74:29:bc:0f:63:dd:ca:94:5d:2c:77:ca:31: e8:5b:f7:58:70:ad:7a:81:cf:b4:6b:2f:ad:37:0c: 26:91:aa:11:41:93:98:35:20:45:0e:ea:02:1b:3d: 40:f3:73:af:e6:60:7e:46:a0:c3:13:7e:c6:5c:c4: 86:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:88:68:52:68:B4:10:4E:4B:B6:EC:7E:06:A1:EF:A5:F8:90:AA:8F X509v3 Authority Key Identifier: keyid:6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9f:c0:05:e9:59:a5:a5:cc:19:ba:54:7d:b0:08:53:fc:89: 75:dc:6f:bd:9a:d3:74:b4:40:1f:fe:7a:e2:de:dc:b4:09:0a: d7:98:c5:a1:b2:57:3b:5a:23:1d:dc:90:b8:b9:74:39:f8:c1: a4:57:ae:68:e7:16:a5:43:e5:5e:ec:75:62:b8:46:17:67:8d: 84:01:90:48:34:cd:77:2a:e0:5f:4e:f0:21:56:99:dc:83:81: b6:d7:3f:ab:91:94:f0:1c:1f:ad:6d:a9:fc:76:1e:b7:88:aa: 52:92:67:00:cb:4d:02:82:bf:e3:67:c8:16:ac:85:db:3a:ab: 38:b4:2a:4e:22:c6:ef:99:d7:27:d4:cc:a2:6b:f7:f4:a7:d7: c0:89:67:76:63:17:27:fa:d1:ea:19:b7:9d:6a:90:80:03:bf: f7:58:e9:fc:fc:8b:16:af:ec:65:65:eb:77:16:ae:33:a9:69: 2d:34:31:c6:13:c9:22:2a:06:9e:38:0f:a0:fe:1f:f2:14:8b: b5:12:07:9e:84:4a:4a:89:24:bf:11:71:07:49:59:3d:2b:6a: d1:20:34:68:20:17:bc:4c:32:13:79:c5:23:5e:a9:63:f2:a6: e4:4a:02:35:86:31:8b:5f:b9:f8:2b:47:1c:68:01:41:29:26: 64:da:de:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt0JdnTr8iCwjdo3LP7/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2I1NGNkYWQ3MTEwZDM4OTc3ZjlhNTkyNjBiMzkzMTJl NDQ4N2QwHhcNMjUxMjIxMjEwMTA0WhcNMjUxMjIyMjEwMTA0WjAzMTEwLwYDVQQD Eyg3NDg4Njg1MjY4YjQxMDRlNGJiNmVjN2UwNmExZWZhNWY4OTBhYThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BjwNKS9hazZEvWyQAp3UFd3MGXX aMp9wYzamMFIGqyMcvOpqiwFHJlpNBBJaoqK58ztY/US6byaY7NI/9xN3t7FJjzZ q0baJ15/gaeg2+P25Zpa4LFd0X0H8py3n9h6rfny1OOVvqEzy1GFW+GpkhHwmrsg ifmrJknI7pGbxv32AxJSIZnXdpfhXG4JnO0cchyNNRaxAhP3j3ij/NElzm/ZfzSz RHgsLe+cBk477DBp2P/dzMeVTmw2MgjQYKGJBd+HQHQpvA9j3cqUXSx3yjHoW/dY cK16gc+0ay+tNwwmkaoRQZOYNSBFDuoCGz1A83Ov5mB+RqDDE37GXMSGJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSIaFJotBBOS7bsfgah76X4kKqPMB8GA1UdIwQY MBaAFGt7VM2tcRDTiXf5pZJgs5MS5Eh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTN0VXphMXhFTk9KZF9tbGttQ3preExrU0gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82MjgxZGMtOWI1Zi00OWM4LWI0NTUt NDFkNzE3OWVkOTUxLzEvYTN0VXphMXhFTk9KZF9tbGttQ3preExrU0gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My82MjgxZGMtOWI1Zi00OWM4LWI0NTUtNDFkNzE3OWVkOTUx LzEvYTN0VXphMXhFTk9KZF9tbGttQ3preExrU0gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5/ABelZ paXMGbpUfbAIU/yJddxvvZrTdLRAH/564t7ctAkK15jFobJXO1ojHdyQuLl0OfjB pFeuaOcWpUPlXux1YrhGF2eNhAGQSDTNdyrgX07wIVaZ3IOBttc/q5GU8BwfrW2p /HYet4iqUpJnAMtNAoK/42fIFqyF2zqrOLQqTiLG75nXJ9TMomv39KfXwIlndmMX J/rR6hm3nWqQgAO/91jp/PyLFq/sZWXrdxauM6lpLTQxxhPJIioGnjgPoP4f8hSL tRIHnoRKSokkvxFxB0lZPStq0SA0aCAXvEwyE3nFI16pY/Km5EoCNYYxi1+5+CtH HGgBQSkmZNregg== -----END CERTIFICATE-----Generated at Mon Dec 22 07:19:11 2025 by rpki-client