This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json) Hash identifier: i+TZ6+Y8z6Q8Zu7J8aZjy+xzGNE1AvAYth/bTQqOC6c= Subject key identifier: FB:1B:F2:1A:98:3D:82:37:76:62:EE:EA:00:6F:B8:B0:A7:B1:C9:84 Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c Certificate serial: 019B187151852328BEDA5C89661AA8532D14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft Manifest number: 1287 Signing time: Sat 13 Dec 2025 16:00:38 +0000 Manifest this update: Sat 13 Dec 2025 16:00:38 +0000 Manifest next update: Sun 14 Dec 2025 16:00:38 +0000 Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: JaD4vY4c9PlfNQEgVx5c4HHo6ItcF/BqtsgZu1gIN9Q=) 2: ruyaJPOfuuheWzXgHxMIwRIiRmI.roa (hash: dOziRNC4DuCftQxbewVCKgY2HoDJCSSxS8NFyfVWRc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:51:85:23:28:be:da:5c:89:66:1a:a8:53:2d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c Validity Not Before: Dec 13 16:00:38 2025 GMT Not After : Dec 14 16:00:38 2025 GMT Subject: CN=fb1bf21a983d82377662eeea006fb8b0a7b1c984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:7d:88:08:6b:7c:82:f6:7e:01:fa:dc:9f: 67:45:b8:75:7e:f4:e1:67:33:e3:87:7c:13:58:a6: 51:c9:f9:3b:3a:88:52:76:5e:08:e2:10:83:6a:3c: 10:61:04:3e:02:d5:da:41:fb:38:14:4e:97:4e:8b: a7:90:76:2d:d8:a1:c0:6f:06:07:dc:2f:8b:06:72: 39:e7:6c:62:c3:c9:7e:c5:e9:0e:36:13:0d:52:6c: 3d:98:6a:b9:e7:d8:d9:4b:47:42:9d:30:7c:ed:e7: ea:9d:1d:49:04:05:f8:ae:52:36:52:0e:67:3e:4a: e7:4a:f0:68:25:c1:c3:3a:c5:22:82:93:74:cd:45: a6:a4:1a:ad:c3:63:bb:8f:d9:90:66:be:56:72:ac: 04:f9:82:49:44:83:f1:42:0a:78:30:82:8e:3e:2b: 5f:cf:c5:17:da:c5:e8:35:2c:fe:a8:62:ff:0f:21: af:1c:82:58:cf:d5:7c:d0:cf:92:9a:34:a8:fa:45: fb:67:8f:22:b0:47:ef:b2:d8:92:eb:0a:3f:62:2e: 50:04:b6:3d:67:3c:fd:d4:88:15:49:29:d0:74:97: 3d:89:62:d0:11:f5:dc:ea:a3:aa:e0:10:b5:ad:b2: a7:a1:3b:f9:6f:3f:5d:f6:5a:d2:d9:65:5e:57:87: 9f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1B:F2:1A:98:3D:82:37:76:62:EE:EA:00:6F:B8:B0:A7:B1:C9:84 X509v3 Authority Key Identifier: keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:82:16:cf:45:bb:a4:f5:f8:c8:b9:f8:27:4c:ac:84:55:fb: 5f:8b:c9:60:08:68:e0:1c:fc:f6:cb:7c:cb:b5:d9:35:4f:98: af:15:89:4e:72:ed:47:0e:a9:ba:8b:27:df:ab:8a:8d:9f:41: 5a:04:38:f9:72:59:1c:b5:36:de:c4:f2:52:73:45:d4:f7:44: 99:1f:37:74:9a:0d:7d:78:f3:ad:86:62:d5:53:a2:0d:71:09: 67:dc:f2:b0:8d:88:1d:a6:78:d3:e3:d4:f1:45:36:62:f3:40: 88:3d:db:26:2b:ab:dc:ca:7d:5f:1c:11:1e:4e:a6:77:8f:95: fe:82:c4:fd:81:7a:b4:3f:8b:74:76:ee:b2:23:00:e3:a7:f2: e8:ad:98:c0:a0:c1:a5:0f:5e:65:92:94:eb:c6:cb:fe:fe:64: c9:3d:cf:21:cb:a5:bd:f0:e7:01:47:b5:5e:2d:13:89:de:cb: 5c:1d:82:bb:29:8c:8e:56:fc:26:fd:14:1e:10:52:ac:5c:3a: 56:84:43:b8:2b:03:ed:f4:ca:b8:e9:a5:a5:34:88:13:f4:a6: f9:a6:3d:c9:61:44:7d:6a:e8:68:a5:00:43:6a:bd:a2:b3:4f: be:09:e3:d3:b6:e2:0c:04:b8:d9:59:be:d2:90:e5:31:a6:5c: ef:fe:43:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcVGFIyi+2lyJZhqoUy0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGUxYjkwZDUxMmNjMzQwMmY3NjE0MTQwNjI5Nzk1ZTRk NGFjNGMwHhcNMjUxMjEzMTYwMDM4WhcNMjUxMjE0MTYwMDM4WjAzMTEwLwYDVQQD EyhmYjFiZjIxYTk4M2Q4MjM3NzY2MmVlZWEwMDZmYjhiMGE3YjFjOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkB9iAhrfIL2fgH63J9nRbh1fvTh ZzPjh3wTWKZRyfk7OohSdl4I4hCDajwQYQQ+AtXaQfs4FE6XTounkHYt2KHAbwYH 3C+LBnI552xiw8l+xekONhMNUmw9mGq559jZS0dCnTB87efqnR1JBAX4rlI2Ug5n PkrnSvBoJcHDOsUigpN0zUWmpBqtw2O7j9mQZr5WcqwE+YJJRIPxQgp4MIKOPitf z8UX2sXoNSz+qGL/DyGvHIJYz9V80M+SmjSo+kX7Z48isEfvstiS6wo/Yi5QBLY9 Zzz91IgVSSnQdJc9iWLQEfXc6qOq4BC1rbKnoTv5bz9d9lrS2WVeV4efvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsb8hqYPYI3dmLu6gBvuLCnscmEMB8GA1UdIwQY MBaAFNwOG5DVEsw0AvdhQUBil5Xk1KxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYt MTZmNTJjZWE0ZWIxLzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYtMTZmNTJjZWE0ZWIx LzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4IWz0W7 pPX4yLn4J0yshFX7X4vJYAho4Bz89st8y7XZNU+YrxWJTnLtRw6puosn36uKjZ9B WgQ4+XJZHLU23sTyUnNF1PdEmR83dJoNfXjzrYZi1VOiDXEJZ9zysI2IHaZ40+PU 8UU2YvNAiD3bJiur3Mp9XxwRHk6md4+V/oLE/YF6tD+LdHbusiMA46fy6K2YwKDB pQ9eZZKU68bL/v5kyT3PIculvfDnAUe1Xi0Tid7LXB2CuymMjlb8Jv0UHhBSrFw6 VoRDuCsD7fTKuOmlpTSIE/Sm+aY9yWFEfWroaKUAQ2q9orNPvgnj07biDAS42Vm+ 0pDlMaZc7/5DcA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:03:27 2025 by rpki-client