This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft File: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json) Hash identifier: P+ClfBLNuz4HouMQZenPLFcmDBYiZ4R/ZKmq8JvDrZ8= Subject key identifier: 11:07:75:B9:28:F2:74:EE:54:17:73:D7:B4:5D:FF:E0:53:3A:71:35 Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37 Certificate issuer: /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037 Certificate serial: 019B1A60335D0D2AA15A1C0808C4D67F4955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft Manifest number: 1780 Signing time: Sun 14 Dec 2025 01:01:10 +0000 Manifest this update: Sun 14 Dec 2025 01:01:10 +0000 Manifest next update: Mon 15 Dec 2025 01:01:10 +0000 Files and hashes: 1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: 2Qafwq2JfFR8dyHBbA93WklsZq+t8f19ucSyhk0a7wY=) 2: X_yuCbgOElk7t0Nndlrc9uLk_XU.roa (hash: zPioyhAie2r6Wx7GGJYyupW2bQRy/+no7AIsLRygNz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:60:33:5d:0d:2a:a1:5a:1c:08:08:c4:d6:7f:49:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037 Validity Not Before: Dec 14 01:01:10 2025 GMT Not After : Dec 15 01:01:10 2025 GMT Subject: CN=110775b928f274ee541773d7b45dffe0533a7135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:ee:79:5a:1f:35:fb:d8:e7:40:dc:86:44: 37:0d:ae:f3:64:1f:5d:3b:ce:a1:29:76:14:e1:62: fd:21:09:e0:a9:59:0d:0f:0f:c1:04:35:10:b6:85: 8d:02:1f:65:e1:bb:0e:c8:eb:4d:3b:98:93:fd:33: 96:ed:d8:28:a1:63:ba:1c:dd:a4:64:2d:94:d1:43: b9:48:94:f9:89:6f:6f:0f:f0:82:fa:d9:b2:e7:da: 2a:b3:fe:5d:6d:1f:83:bd:2f:df:9c:2d:d8:65:68: f6:62:d3:70:e4:41:58:dc:e1:5e:9a:7b:85:32:ae: b3:18:86:6f:ea:aa:08:10:5b:90:8f:a1:c1:cf:6d: cf:e9:e8:42:42:fd:98:63:20:07:b3:d2:1a:e6:a3: 2b:75:92:0d:33:58:c6:7a:f6:33:27:64:48:e1:c3: 6a:6c:6c:2e:c0:0f:5b:68:6e:26:74:f7:3a:40:6f: a4:d5:5d:0b:4e:e9:ef:aa:50:1d:79:b1:26:f7:de: fe:34:fa:b1:d5:a9:46:28:17:72:30:c6:01:39:f2: 53:da:cb:7b:72:5d:c2:ca:90:ab:84:a2:c5:a7:98: 3c:78:c7:5d:b5:bb:aa:30:fe:e0:cf:96:bd:24:8c: 27:5d:e2:f7:7f:67:ee:42:37:15:40:b2:35:62:23: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:07:75:B9:28:F2:74:EE:54:17:73:D7:B4:5D:FF:E0:53:3A:71:35 X509v3 Authority Key Identifier: keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a8:f7:c9:5c:58:7e:f1:9c:b4:56:97:53:79:4f:d8:b7:d4: b1:c1:da:03:23:2d:70:8d:83:9d:34:3c:45:7c:7b:f1:96:2e: 24:25:95:a5:ab:68:88:d0:ca:dc:6b:82:96:54:cc:f8:38:fb: f0:98:06:4e:07:b3:e1:95:0a:a1:42:5d:92:2b:7d:bc:5a:72: fb:7f:a8:03:02:8a:b3:fe:41:ef:a9:fe:e1:0d:23:43:44:1a: 55:e5:09:83:f1:8e:87:4b:a7:f9:da:b3:2e:7a:b1:7b:f7:d5: 20:2a:1b:76:72:78:79:6c:83:b7:77:19:a2:c5:c1:88:5d:4d: b0:ad:e6:30:40:81:ca:4f:70:32:e8:b1:e7:6e:28:b4:9c:8e: cc:27:27:33:91:32:d8:70:c9:db:fa:c2:3c:82:61:83:85:94: cb:33:08:8d:d0:0e:c4:6d:cc:75:1a:80:6e:88:c9:df:36:b5: ae:f3:90:77:d8:a0:59:79:a8:0b:7d:92:61:b3:e8:af:1c:26: a6:d7:c8:b1:a8:cb:50:b0:be:b4:43:9a:42:3a:4b:57:45:b6: 1a:2f:dd:93:2c:f1:2a:20:45:4e:6a:e7:90:c8:ef:57:b0:26: ff:74:7b:36:ce:86:12:28:62:66:f2:00:46:11:91:6d:17:e2: bf:c9:32:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaYDNdDSqhWhwICMTWf0lVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMzc3YjVkMDIyYmYwYmU0YTYyMjRiNDdlZWE2Y2EwYjgx YmYwMzcwHhcNMjUxMjE0MDEwMTEwWhcNMjUxMjE1MDEwMTEwWjAzMTEwLwYDVQQD EygxMTA3NzViOTI4ZjI3NGVlNTQxNzczZDdiNDVkZmZlMDUzM2E3MTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSLueVofNfvY50DchkQ3Da7zZB9d O86hKXYU4WL9IQngqVkNDw/BBDUQtoWNAh9l4bsOyOtNO5iT/TOW7dgooWO6HN2k ZC2U0UO5SJT5iW9vD/CC+tmy59oqs/5dbR+DvS/fnC3YZWj2YtNw5EFY3OFemnuF Mq6zGIZv6qoIEFuQj6HBz23P6ehCQv2YYyAHs9Ia5qMrdZINM1jGevYzJ2RI4cNq bGwuwA9baG4mdPc6QG+k1V0LTunvqlAdebEm997+NPqx1alGKBdyMMYBOfJT2st7 cl3CypCrhKLFp5g8eMddtbuqMP7gz5a9JIwnXeL3f2fuQjcVQLI1YiPmBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEHdbko8nTuVBdz17Rd/+BTOnE1MB8GA1UdIwQY MBaAFNw3e10CK/C+SmIktH7qbKC4G/A3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0RkN1hRSXI4TDVLWWlTMGZ1cHNvTGdiOERjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jYzU1OGMtMzVlNS00ZGQ2LTg2N2It OGIwNWI3NzhlMGQ1LzEvM0RkN1hRSXI4TDVLWWlTMGZ1cHNvTGdiOERjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jYzU1OGMtMzVlNS00ZGQ2LTg2N2ItOGIwNWI3NzhlMGQ1 LzEvM0RkN1hRSXI4TDVLWWlTMGZ1cHNvTGdiOERjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaj3yVxY fvGctFaXU3lP2LfUscHaAyMtcI2DnTQ8RXx78ZYuJCWVpatoiNDK3GuCllTM+Dj7 8JgGTgez4ZUKoUJdkit9vFpy+3+oAwKKs/5B76n+4Q0jQ0QaVeUJg/GOh0un+dqz Lnqxe/fVICobdnJ4eWyDt3cZosXBiF1NsK3mMECByk9wMuix524otJyOzCcnM5Ey 2HDJ2/rCPIJhg4WUyzMIjdAOxG3MdRqAbojJ3za1rvOQd9igWXmoC32SYbPorxwm ptfIsajLULC+tEOaQjpLV0W2Gi/dkyzxKiBFTmrnkMjvV7Am/3R7Ns6GEihiZvIA RhGRbRfiv8kyYQ== -----END CERTIFICATE-----Generated at Sun Dec 14 08:55:17 2025 by rpki-client