This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json) Hash identifier: 5PZRsSK/wjs4BxN5OT+Qe64DyXsP5oPbqSDOj9OLB/I= Subject key identifier: CE:45:DD:F0:A7:9A:39:54:D4:2A:CB:06:3E:CC:53:50:5F:CE:3D:13 Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad Certificate serial: 019AF509DA9E8C0840DCCFC4053AFAD05DA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft Manifest number: 1216 Signing time: Sat 06 Dec 2025 19:00:54 +0000 Manifest this update: Sat 06 Dec 2025 19:00:54 +0000 Manifest next update: Sun 07 Dec 2025 19:00:54 +0000 Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: r1zmqQuLKe/uFF9d9Z2fRDaZHjmdM9UO+UFPa+87yyg=) 2: 4PgtcW6j7xPoaJPy67vk2tMAXu4.roa (hash: fufIwyPbWqbMyORM68+h1FhSNKXbFzjdgG7WcXkavWU=) 3: cUPSsBWZ4irx4TApxzbroJpf5do.roa (hash: 6GPPFraRfTGyKrm5jIIIVF8Jt+KHlsZR8YFMwLgpuuE=) 4: xqYP462dYCt-0eOV8zXikdtxg14.roa (hash: YzKJbzm4Szaaz/1aNRHY+rmqu5/8YwNywOTzBNgzdeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:da:9e:8c:08:40:dc:cf:c4:05:3a:fa:d0:5d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad Validity Not Before: Dec 6 19:00:54 2025 GMT Not After : Dec 7 19:00:54 2025 GMT Subject: CN=ce45ddf0a79a3954d42acb063ecc53505fce3d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:d6:5e:1d:2b:36:e7:22:c1:ee:01:aa:54: 0f:63:93:80:8b:41:a5:1e:75:8f:2e:22:46:a6:11: d6:2e:7c:b2:34:6d:86:2b:2b:c6:3b:14:86:fa:23: 99:28:88:28:21:1d:6b:59:68:1e:43:fb:68:4d:4d: ee:57:5f:86:15:de:9b:64:f0:ee:eb:23:95:68:a3: 5e:b7:28:cb:31:67:dd:8b:8e:a0:4d:6c:a4:2b:73: 56:2b:9c:86:c5:cb:88:45:22:8d:f3:84:e3:db:0e: 06:f3:ed:69:f2:50:32:96:5e:f5:24:42:1d:d0:86: 63:89:65:c7:17:b3:0d:c3:f6:d5:a9:e3:4d:13:a7: 0e:5a:d2:7d:b5:31:38:15:4e:91:c1:31:90:16:26: 1b:87:15:c2:ea:de:20:76:0c:60:bb:dd:8c:a4:79: 25:b0:f0:f5:74:22:00:2b:13:6c:c3:81:90:0e:76: 54:94:0b:01:1e:f5:c1:42:07:a1:27:6c:71:7d:53: ad:98:7c:f6:57:71:db:4c:66:2e:3d:ae:00:91:fd: 6c:c2:39:4d:cb:84:ec:fc:08:4c:84:fa:d9:4d:50: 46:07:75:d6:3e:e8:12:43:95:59:88:00:23:35:fc: 5a:f7:f6:8b:a1:92:15:80:cd:48:90:43:b0:51:93: 85:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:45:DD:F0:A7:9A:39:54:D4:2A:CB:06:3E:CC:53:50:5F:CE:3D:13 X509v3 Authority Key Identifier: keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a4:15:0d:57:dd:d2:d9:17:f7:ca:48:6a:ce:2c:a7:64:5f: a4:a9:41:cf:f8:80:fa:59:0f:1d:ee:71:29:3e:d1:9f:ae:f6: 82:ae:f7:14:3d:fa:a3:39:e7:9e:c3:a4:42:9e:b6:1e:bb:c7: 26:80:7f:f3:83:d8:6d:93:fe:02:66:b9:f9:f0:b2:e7:38:59: 36:7f:87:9b:87:32:56:97:c9:7c:6f:a6:5a:46:38:09:62:03: f1:84:da:32:a1:e6:fb:8a:a7:93:cc:c7:88:c9:9c:94:06:4c: f3:e0:b7:fa:24:83:be:6e:e9:d6:95:5f:73:d3:82:17:53:53: dc:47:c6:e5:30:23:74:15:2c:d9:58:52:dc:ce:c0:38:60:5a: 04:7b:61:85:91:ee:86:2f:86:bd:28:0b:79:67:7e:0e:05:2f: 1c:c0:5f:0b:7f:ee:d0:e6:6a:de:03:86:15:92:85:ab:5d:02: 0a:dd:43:5b:1a:c6:c8:61:01:11:9b:30:8e:bd:3f:b6:26:ab: e5:93:da:85:ae:fc:dc:59:1a:60:8f:d9:db:2d:a4:fe:70:23: 91:4d:d8:d8:84:dd:e7:34:d0:33:1c:8d:47:24:d4:77:1d:6a: 53:bc:c6:10:16:0a:30:b3:d9:45:25:62:cb:4f:ef:31:1f:91: b6:2f:19:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CdqejAhA3M/EBTr60F2kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMDE5OGE3YjNhZmRjZGQ3MDAzNTYyYTA4NzE4NzhlMjM4 NzYwYWQwHhcNMjUxMjA2MTkwMDU0WhcNMjUxMjA3MTkwMDU0WjAzMTEwLwYDVQQD EyhjZTQ1ZGRmMGE3OWEzOTU0ZDQyYWNiMDYzZWNjNTM1MDVmY2UzZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnvWXh0rNuciwe4BqlQPY5OAi0Gl HnWPLiJGphHWLnyyNG2GKyvGOxSG+iOZKIgoIR1rWWgeQ/toTU3uV1+GFd6bZPDu 6yOVaKNetyjLMWfdi46gTWykK3NWK5yGxcuIRSKN84Tj2w4G8+1p8lAyll71JEId 0IZjiWXHF7MNw/bVqeNNE6cOWtJ9tTE4FU6RwTGQFiYbhxXC6t4gdgxgu92MpHkl sPD1dCIAKxNsw4GQDnZUlAsBHvXBQgehJ2xxfVOtmHz2V3HbTGYuPa4Akf1swjlN y4Ts/AhMhPrZTVBGB3XWPugSQ5VZiAAjNfxa9/aLoZIVgM1IkEOwUZOFNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5F3fCnmjlU1CrLBj7MU1Bfzj0TMB8GA1UdIwQY MBaAFN8BmKezr9zdcANWKghxh44jh2CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQt MGZjYzZjMzAxMWZjLzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQtMGZjYzZjMzAxMWZj LzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqQVDVfd 0tkX98pIas4sp2RfpKlBz/iA+lkPHe5xKT7Rn672gq73FD36oznnnsOkQp62HrvH JoB/84PYbZP+Ama5+fCy5zhZNn+Hm4cyVpfJfG+mWkY4CWID8YTaMqHm+4qnk8zH iMmclAZM8+C3+iSDvm7p1pVfc9OCF1NT3EfG5TAjdBUs2VhS3M7AOGBaBHthhZHu hi+GvSgLeWd+DgUvHMBfC3/u0OZq3gOGFZKFq10CCt1DWxrGyGEBEZswjr0/tiar 5ZPaha783FkaYI/Z2y2k/nAjkU3Y2ITd5zTQMxyNRyTUdx1qU7zGEBYKMLPZRSVi y0/vMR+Rti8ZSQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:38:16 2025 by rpki-client