This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json) Hash identifier: YTBM36DXZL4gP9k1GIaEdu0uqV6hz8juNufL8O/pE0M= Subject key identifier: E9:8C:84:C2:37:79:D4:43:53:7B:6A:68:15:F0:8B:54:ED:C9:58:A8 Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef Certificate serial: 019B19BC56A581BA396B6ED76DF76D74C63A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 22:02:11 +0000 Manifest this update: Sat 13 Dec 2025 22:02:11 +0000 Manifest next update: Sun 14 Dec 2025 22:02:11 +0000 Files and hashes: 1: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: zPQLIQTgZVnmXI3KpEkajUI1mqb1EOS+XNp910e5f+M=) 2: KW800OmJGIdT7uikc0QcQ975IG4.roa (hash: dwHKNqVSICACPiCia+yUDPbsR26gug+E9f0Pra0zV6s=) 3: cEC9bPBmfz9Z43qJKU1IUGSC0lI.roa (hash: 4mEdeYIHzDK/DCJ4cVdrdS7DkgcRn2OeioiYgUbofOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:56:a5:81:ba:39:6b:6e:d7:6d:f7:6d:74:c6:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef Validity Not Before: Dec 13 22:02:11 2025 GMT Not After : Dec 14 22:02:11 2025 GMT Subject: CN=e98c84c23779d443537b6a6815f08b54edc958a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d7:dc:a6:c0:d5:a0:f9:44:b0:65:42:1f:cf: 0f:33:be:87:93:c9:c6:64:aa:75:7b:c8:6b:f9:26: 3a:92:e9:89:a6:05:9f:ca:b3:41:49:ba:57:cd:05: 44:a1:18:df:94:3e:e2:63:a6:d4:2d:ab:ff:34:76: 4a:4e:65:9c:97:01:60:7d:59:15:92:51:25:47:af: 7b:5a:b7:89:50:c5:45:0c:b7:64:e9:2a:2b:f4:f5: fc:16:57:f5:f1:c2:14:6c:da:09:ef:74:6f:0f:70: 17:0c:0e:9a:a2:e1:ff:89:7b:4c:ab:5f:eb:8a:dd: b2:2a:ea:16:7a:c0:ec:6d:af:2d:61:c9:ec:88:7f: 32:71:33:18:00:36:43:62:63:ed:a3:5a:2e:3e:c5: 05:93:13:08:e2:03:06:36:77:51:46:53:c8:2e:f2: df:94:9c:d5:bc:be:94:26:e6:1e:12:6f:e0:cd:ed: a5:bd:3c:98:7b:5f:0b:1e:a8:b1:4a:df:8c:c3:c1: 9f:7f:05:04:4a:bc:2d:42:3c:e6:84:43:65:cc:8c: b5:2a:1a:27:de:67:9d:22:a2:05:24:cb:98:54:7f: 35:c5:c4:df:66:9c:aa:75:42:5b:8a:ef:ae:06:30: 37:c7:57:b7:aa:23:53:7a:13:6e:e8:fd:93:9e:86: 16:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8C:84:C2:37:79:D4:43:53:7B:6A:68:15:F0:8B:54:ED:C9:58:A8 X509v3 Authority Key Identifier: keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8d:41:a1:b7:98:8f:68:fa:96:70:07:7b:7a:4a:1f:e6:21: 32:00:92:3a:1e:96:ac:3e:a4:35:ff:fe:78:dd:a8:be:e9:e9: 35:26:ea:7c:9d:fc:5c:1f:22:08:2f:77:7e:a6:29:0d:eb:ef: 02:3b:72:01:06:05:1e:0c:a3:06:ad:d5:07:b3:3f:79:6a:f8: d7:1b:17:2d:4a:64:58:be:62:31:7c:4c:38:ba:13:85:7b:fa: f6:02:cc:de:4e:95:a5:0d:b8:a7:08:9f:f7:90:58:d6:51:e6: ec:4b:71:bb:51:0e:03:24:13:92:7d:44:c1:1d:8c:84:5d:e5: 7d:6b:84:f8:90:07:ec:a1:f7:7f:bc:53:d3:a0:f4:22:0c:2f: da:9c:4c:61:c1:db:8b:05:4f:6c:96:95:c4:e8:aa:7f:fe:b3: 8d:71:5f:28:b5:f9:c0:e4:4d:c5:9e:e3:94:cb:6b:fb:4f:4f: fb:66:93:92:c0:59:cf:e2:e7:0c:52:88:30:b6:f3:16:8d:3f: d1:2b:7c:a8:28:8b:2b:ac:47:ef:af:38:19:ca:bd:3e:ea:9e: 15:21:02:ea:d7:b1:72:7c:76:70:7b:50:1d:31:ba:a0:9d:07: 6e:55:36:aa:f6:c4:1d:65:fe:12:5a:d1:a8:f8:cd:63:1f:9c: 68:bf:9d:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvFalgbo5a27XbfdtdMY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTliYWE4Yzg4MGE5NDU5ZGM1ZjQ0ZDY3NWRlYTRlZjk2 ZGJkZWYwHhcNMjUxMjEzMjIwMjExWhcNMjUxMjE0MjIwMjExWjAzMTEwLwYDVQQD EyhlOThjODRjMjM3NzlkNDQzNTM3YjZhNjgxNWYwOGI1NGVkYzk1OGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29fcpsDVoPlEsGVCH88PM76Hk8nG ZKp1e8hr+SY6kumJpgWfyrNBSbpXzQVEoRjflD7iY6bULav/NHZKTmWclwFgfVkV klElR697WreJUMVFDLdk6Sor9PX8Flf18cIUbNoJ73RvD3AXDA6aouH/iXtMq1/r it2yKuoWesDsba8tYcnsiH8ycTMYADZDYmPto1ouPsUFkxMI4gMGNndRRlPILvLf lJzVvL6UJuYeEm/gze2lvTyYe18LHqixSt+Mw8GffwUESrwtQjzmhENlzIy1Khon 3medIqIFJMuYVH81xcTfZpyqdUJbiu+uBjA3x1e3qiNTehNu6P2TnoYWLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmMhMI3edRDU3tqaBXwi1TtyVioMB8GA1UdIwQY MBaAFN4ZuqjIgKlFncX0TWdd6k75bb3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjct ODk0OWU3NTFiMjE5LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjctODk0OWU3NTFiMjE5 LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAao1BobeY j2j6lnAHe3pKH+YhMgCSOh6WrD6kNf/+eN2ovunpNSbqfJ38XB8iCC93fqYpDevv AjtyAQYFHgyjBq3VB7M/eWr41xsXLUpkWL5iMXxMOLoThXv69gLM3k6VpQ24pwif 95BY1lHm7Etxu1EOAyQTkn1EwR2MhF3lfWuE+JAH7KH3f7xT06D0Igwv2pxMYcHb iwVPbJaVxOiqf/6zjXFfKLX5wORNxZ7jlMtr+09P+2aTksBZz+LnDFKIMLbzFo0/ 0St8qCiLK6xH7684Gcq9PuqeFSEC6texcnx2cHtQHTG6oJ0HblU2qvbEHWX+ElrR qPjNYx+caL+dAA== -----END CERTIFICATE-----Generated at Sun Dec 14 03:32:53 2025 by rpki-client