This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft File: 3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json) Hash identifier: iE7uOXfgGeg7FgxdkczOsXRJ7R2UpGIrp8zzOVqxbD4= Subject key identifier: C1:AC:97:14:63:0B:1D:57:33:11:4A:65:D7:11:50:C4:8C:66:C6:85 Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Certificate serial: 019B5B65E5A3F41810B745891B89D74BF51A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft Manifest number: 17A2 Signing time: Fri 26 Dec 2025 16:02:42 +0000 Manifest this update: Fri 26 Dec 2025 16:02:42 +0000 Manifest next update: Sat 27 Dec 2025 16:02:42 +0000 Files and hashes: 1: 0wxplS04ynQiI1r3ArdsiKBCEOI.roa (hash: WDNF73KtUANe5OGg5Z8hCbK6QAlz8jWNq6iQlKA1l4A=) 2: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: 1SJttJlvmeI+Zjy8MV0XNzcjyxn1dcWmCywhmjyS9ms=) 3: JIEsiChTD9veiUWmlJ3B4QQpFuc.roa (hash: G8sz8HlJFis3zSSNKaXy4CKewTagYcW3tdUbj5SB5rw=) 4: erY5eOsE13MYDYGdz-7KiRAOTog.roa (hash: NmXI2cVM6emkr8oTXJbXMbKgJl7gRO9hnwaW3QZ2P/k=) 5: g4ZCPviGonmRGPJlO9nSng_S-lo.roa (hash: NBfLnaWFnRjJb4HXfFDgN4fD3VeUZZnkBAnPok8zBDM=) 6: pt0lS1m3NLfN-ZlG6LR_u92_6So.roa (hash: 5VENDpQR+7VNnLE+YBum+RFRq29jqQtAdKpAJMhSuxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:e5:a3:f4:18:10:b7:45:89:1b:89:d7:4b:f5:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Validity Not Before: Dec 26 16:02:42 2025 GMT Not After : Dec 27 16:02:42 2025 GMT Subject: CN=c1ac9714630b1d5733114a65d71150c48c66c685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:05:2d:ca:8b:bf:e1:b0:8b:97:9e:e8:94: 0c:64:20:92:b9:93:1e:4c:7e:1c:a0:e2:97:08:a2: b6:d8:44:f9:b1:2c:d0:a6:74:8f:b5:38:6b:20:ba: fd:64:94:0e:a4:c8:8b:46:bb:0d:f7:ad:d6:6b:26: d1:1e:24:97:ac:c8:7a:fb:a2:c8:f8:b4:9f:2d:5c: 78:53:57:33:96:fc:9d:aa:00:7f:27:c5:7b:3a:f7: f0:e1:9d:0f:b3:00:09:4b:e8:86:bd:de:bb:38:65: 0d:80:3f:38:44:95:da:89:71:32:1c:25:fe:b1:00: 25:86:ae:21:25:fe:ec:03:4a:da:8d:b9:6c:fa:fc: 82:67:da:87:4c:9d:70:72:a9:75:96:8f:67:bb:69: 09:11:52:be:ea:ba:79:3d:0b:ea:19:f6:82:2d:f7: a9:be:44:81:ca:fc:09:7d:45:08:9c:8e:93:5e:6c: 6a:b5:de:89:a1:3a:3e:df:6a:a8:ac:14:67:0e:75: ad:89:80:d9:5a:e5:66:cb:1f:ad:e8:fb:dc:5b:d7: ed:e2:57:a8:1d:bb:c6:4d:bd:0c:30:86:79:1c:78: 5d:a7:34:b6:96:2e:ff:12:93:be:c1:66:5d:db:9c: db:63:b0:d9:a7:d9:e4:28:90:86:fc:a7:d4:d4:0d: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AC:97:14:63:0B:1D:57:33:11:4A:65:D7:11:50:C4:8C:66:C6:85 X509v3 Authority Key Identifier: keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d6:76:7d:08:ee:fd:be:3e:f1:9b:b1:5b:c2:22:69:26:b0: 84:40:2f:c6:32:0b:e6:ff:d2:9f:0f:9c:bb:9e:46:b6:c0:cc: 35:b6:c4:69:b9:26:bc:e1:b9:84:85:2c:b6:b0:62:50:d7:c0: 5a:1d:fc:b5:03:cb:99:25:da:7d:cb:11:4d:ef:1f:d0:7a:90: 6f:83:e8:d9:3f:b9:5a:5d:97:29:f4:6f:3d:20:64:70:5f:1a: c5:9a:08:42:c4:81:40:9a:4c:dd:e3:49:2a:69:02:f1:4f:bd: b1:1f:0f:15:27:a5:ca:71:a3:bf:cb:71:0c:05:57:fd:a6:a2: df:10:4b:48:8e:9a:74:e2:b9:ea:be:63:7c:d4:77:44:8f:7f: f9:3f:ca:88:c9:1b:6c:a9:bc:a3:28:35:a9:67:f4:3d:14:6d: a1:30:fe:c4:1f:d1:e9:52:07:88:0d:72:62:e4:4c:b8:68:89: 39:a2:fd:fd:b8:58:0e:09:0f:ea:93:07:53:0f:3e:a2:9e:31: 60:40:be:b6:88:f2:03:0e:27:75:46:89:05:e0:6e:fd:69:97: 56:a2:4a:1f:90:4b:d9:3a:24:e9:7c:b9:32:c3:67:86:91:6e: db:53:d9:3e:c6:c7:20:e1:cd:bf:ab:ab:07:9e:2a:01:55:0e: 59:50:7e:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZeWj9BgQt0WJG4nXS/UaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNDU2Y2RiNGQxNDAzNDVjM2RjYWViZmM3NjM0ZDRlN2Nk Y2I5MTMwHhcNMjUxMjI2MTYwMjQyWhcNMjUxMjI3MTYwMjQyWjAzMTEwLwYDVQQD EyhjMWFjOTcxNDYzMGIxZDU3MzMxMTRhNjVkNzExNTBjNDhjNjZjNjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8oFLcqLv+Gwi5ee6JQMZCCSuZMe TH4coOKXCKK22ET5sSzQpnSPtThrILr9ZJQOpMiLRrsN963WaybRHiSXrMh6+6LI +LSfLVx4U1czlvydqgB/J8V7Ovfw4Z0PswAJS+iGvd67OGUNgD84RJXaiXEyHCX+ sQAlhq4hJf7sA0rajbls+vyCZ9qHTJ1wcql1lo9nu2kJEVK+6rp5PQvqGfaCLfep vkSByvwJfUUInI6TXmxqtd6JoTo+32qorBRnDnWtiYDZWuVmyx+t6PvcW9ft4leo HbvGTb0MMIZ5HHhdpzS2li7/EpO+wWZd25zbY7DZp9nkKJCG/KfU1A18DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGslxRjCx1XMxFKZdcRUMSMZsaFMB8GA1UdIwQY MBaAFN5FbNtNFANFw9yuv8djTU583LkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEt OTI4ZTdiYzY5NTcwLzEvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEtOTI4ZTdiYzY5NTcw LzEvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtZ2fQju /b4+8ZuxW8IiaSawhEAvxjIL5v/Snw+cu55GtsDMNbbEabkmvOG5hIUstrBiUNfA Wh38tQPLmSXafcsRTe8f0HqQb4Po2T+5Wl2XKfRvPSBkcF8axZoIQsSBQJpM3eNJ KmkC8U+9sR8PFSelynGjv8txDAVX/aai3xBLSI6adOK56r5jfNR3RI9/+T/KiMkb bKm8oyg1qWf0PRRtoTD+xB/R6VIHiA1yYuRMuGiJOaL9/bhYDgkP6pMHUw8+op4x YEC+tojyAw4ndUaJBeBu/WmXVqJKH5BL2Tok6Xy5MsNnhpFu21PZPsbHIOHNv6ur B54qAVUOWVB+DA== -----END CERTIFICATE-----Generated at Fri Dec 26 22:35:40 2025 by rpki-client