This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json) Hash identifier: uymtcngjyC6uolYfWzme/vgQFd7EeiikO/xrVHDX5Ak= Subject key identifier: 0D:86:E4:AA:C9:E1:14:37:48:C9:07:C2:54:AC:B6:8E:EC:77:31:2B Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55 Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55 Certificate serial: 019B32319E49A514BA361E1EA5DC29BBED4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft Manifest number: 0E1A Signing time: Thu 18 Dec 2025 16:01:11 +0000 Manifest this update: Thu 18 Dec 2025 16:01:11 +0000 Manifest next update: Fri 19 Dec 2025 16:01:11 +0000 Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: Rs9vb2QAFFlz6m1hURmvSzqVpfl6jHXNWEbm9DkRcUU=) 2: mKsKKQCdLodyBncOeNIhWtaYAoQ.roa (hash: fizUUsz/TAb+LHuegB83yr/hnzwxKplkZhpso2ufXV4=) 3: xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa (hash: GuaLpdFfqfVEq3DS5+BP2JqM2gB3tItjQlR22xolKBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:9e:49:a5:14:ba:36:1e:1e:a5:dc:29:bb:ed:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55 Validity Not Before: Dec 18 16:01:11 2025 GMT Not After : Dec 19 16:01:11 2025 GMT Subject: CN=0d86e4aac9e1143748c907c254acb68eec77312b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:69:7e:8c:41:ca:9f:60:b7:d5:32:c9:e4:c3: 62:46:43:6a:26:f5:97:78:d0:b5:4c:c6:b0:60:ac: 76:cb:55:3a:49:24:29:20:0a:09:7a:b3:d6:49:41: de:f8:e3:f6:73:02:e6:26:ab:53:f9:b3:d6:da:29: 74:11:d2:fc:40:2e:70:43:2a:e5:93:69:90:7a:83: 41:e3:28:eb:56:b6:b6:fb:8d:84:62:f2:65:b3:6c: d3:cb:03:f0:04:48:a6:0e:8d:11:4e:f2:3c:5d:3a: 74:71:e7:eb:b7:46:14:c4:69:5f:b9:ec:66:81:64: 0c:01:d0:20:21:ba:b7:41:f0:06:a2:7b:f7:1f:78: a6:2c:4d:12:5e:83:c4:c7:6a:78:75:60:f8:22:1f: 9e:1c:4f:d4:03:e4:58:31:f4:1c:b5:27:ed:5f:65: da:06:48:5e:a3:3a:36:6d:6a:96:c1:bb:13:e4:f0: e3:6f:6f:d8:5e:b2:ec:d6:6d:03:9b:cf:34:a8:63: e8:0b:fb:ad:dd:ea:f8:e3:bc:24:94:f3:84:64:99: ce:24:d1:25:00:3b:2d:37:bd:77:e5:a2:36:17:e1: 03:de:b8:7d:22:62:4a:00:3e:2e:9e:40:cc:7b:5d: 69:e5:51:bc:59:bd:40:b8:8b:1f:82:45:6c:e2:f5: b1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:86:E4:AA:C9:E1:14:37:48:C9:07:C2:54:AC:B6:8E:EC:77:31:2B X509v3 Authority Key Identifier: keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:78:0f:81:ca:7f:da:9c:ec:c7:8b:b0:ae:58:b1:e3:78:71: c5:22:1a:28:51:9a:51:c0:5d:e7:bb:4a:4e:64:b4:85:76:c7: 5d:c4:ed:64:af:a9:87:6f:b4:8a:0d:e7:88:9b:c2:09:a7:c9: 88:34:b4:ee:4b:99:2b:4a:46:16:33:81:37:c5:5a:bc:02:a7: 7f:be:b2:b7:2a:86:ba:28:69:2b:0e:ad:da:40:39:45:c9:f6: cc:b6:77:d9:44:6c:e0:1b:ce:c3:41:da:ba:89:d8:9a:de:00: e0:8c:1e:6a:3c:c7:e6:91:82:61:9b:86:34:bd:14:a5:20:72: 0c:31:38:18:50:16:9e:6a:bb:26:c3:cf:82:2a:d6:b1:28:c6: 58:0f:0b:d9:90:5b:47:29:bc:45:3b:b8:fb:25:83:70:4c:91: 97:ed:45:08:80:19:86:bc:82:09:71:c7:3a:64:2f:0d:4a:40: 6e:3d:08:03:db:d1:d3:ee:62:9c:66:f9:7b:0f:ca:35:ea:e4: 78:cc:ef:1d:39:b9:7f:fa:e0:9b:d2:ef:6d:bb:cf:19:fa:42: 60:71:32:1e:8b:48:76:d0:0e:c8:1f:f1:e9:0a:8c:bc:7c:74: aa:d0:63:35:54:84:4d:07:af:39:53:ea:93:f3:92:92:77:56: 03:d3:be:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMZ5JpRS6Nh4epdwpu+1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOGNiNGExMWNhYmFjMjA0YWRmYjhhNWI1ODdlMzJmZWU0 YTFiNTUwHhcNMjUxMjE4MTYwMTExWhcNMjUxMjE5MTYwMTExWjAzMTEwLwYDVQQD EygwZDg2ZTRhYWM5ZTExNDM3NDhjOTA3YzI1NGFjYjY4ZWVjNzczMTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWl+jEHKn2C31TLJ5MNiRkNqJvWX eNC1TMawYKx2y1U6SSQpIAoJerPWSUHe+OP2cwLmJqtT+bPW2il0EdL8QC5wQyrl k2mQeoNB4yjrVra2+42EYvJls2zTywPwBEimDo0RTvI8XTp0cefrt0YUxGlfuexm gWQMAdAgIbq3QfAGonv3H3imLE0SXoPEx2p4dWD4Ih+eHE/UA+RYMfQctSftX2Xa Bkheozo2bWqWwbsT5PDjb2/YXrLs1m0Dm880qGPoC/ut3er447wklPOEZJnOJNEl ADstN7135aI2F+ED3rh9ImJKAD4unkDMe11p5VG8Wb1AuIsfgkVs4vWx4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2G5KrJ4RQ3SMkHwlSsto7sdzErMB8GA1UdIwQY MBaAFNyMtKEcq6wgSt+4pbWH4y/uShtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDIt OTlkNWUwN2JhZTc2LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDItOTlkNWUwN2JhZTc2 LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHgPgcp/ 2pzsx4uwrlix43hxxSIaKFGaUcBd57tKTmS0hXbHXcTtZK+ph2+0ig3niJvCCafJ iDS07kuZK0pGFjOBN8VavAKnf76ytyqGuihpKw6t2kA5Rcn2zLZ32URs4BvOw0Ha uonYmt4A4IweajzH5pGCYZuGNL0UpSByDDE4GFAWnmq7JsPPgirWsSjGWA8L2ZBb Rym8RTu4+yWDcEyRl+1FCIAZhryCCXHHOmQvDUpAbj0IA9vR0+5inGb5ew/KNerk eMzvHTm5f/rgm9LvbbvPGfpCYHEyHotIdtAOyB/x6QqMvHx0qtBjNVSETQevOVPq k/OSkndWA9O+JQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:45 2025 by rpki-client