This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json) Hash identifier: WDV1BCLJEyAZGvRussl/LJvRcGpMdbaHHAZI35y8SC8= Subject key identifier: 3C:69:B1:CE:DF:20:21:D7:AC:CE:50:CB:D9:61:EE:DE:65:A8:73:50 Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6 Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6 Certificate serial: 019B59ACE3DED5F521A97D750EF71C4B4E02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 08:01:00 +0000 Manifest this update: Fri 26 Dec 2025 08:01:00 +0000 Manifest next update: Sat 27 Dec 2025 08:01:00 +0000 Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: qfMT1ZT+Q0+cd8p2qARjfY2XZshmPxcXDcuqSX1JOKI=) 2: d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa (hash: nYxY8j7ezJA29gwV9RA7AxL4/U9w5nA29rCzIVbR+bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:e3:de:d5:f5:21:a9:7d:75:0e:f7:1c:4b:4e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6 Validity Not Before: Dec 26 08:01:00 2025 GMT Not After : Dec 27 08:01:00 2025 GMT Subject: CN=3c69b1cedf2021d7acce50cbd961eede65a87350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3a:c4:34:45:a2:c0:55:43:5c:78:75:82:fa: d2:15:00:8a:cc:f3:ca:ba:43:58:9f:e2:6c:08:7c: b5:9a:b9:fd:8a:5e:bd:5a:e0:7b:09:6c:b6:9c:50: ab:0f:20:08:9d:7c:a2:74:88:aa:22:0d:98:e7:d9: 11:8e:75:06:ee:db:60:00:7b:33:31:a2:95:61:e5: 0f:c2:1d:96:e3:54:6c:d9:3e:1c:b1:61:2a:27:11: ad:94:d8:bd:28:67:13:62:2d:b5:c3:7b:9e:70:2e: c0:79:c5:a5:a8:20:fe:86:3e:94:77:1c:89:34:08: c9:4c:ac:35:7f:ba:ad:3b:e9:b5:3d:78:32:42:02: 05:02:b8:d3:5f:7f:92:58:10:c9:0e:03:1c:28:29: a9:26:2c:c4:09:4c:6b:de:b3:ca:70:f6:e5:5c:3e: 7e:00:f5:6d:a0:1b:e9:83:e4:d7:aa:9c:3d:3d:ca: 30:ff:5b:fc:6f:d8:e6:22:f3:8e:fe:d7:f9:b1:f2: 25:53:85:97:c4:87:91:bb:36:d9:12:e8:2d:17:ab: 59:be:fe:06:2e:84:76:41:3b:a2:0b:0b:f7:39:54: 99:d6:19:f9:d4:bf:3d:b3:bc:73:73:97:5d:75:91: 4f:17:b9:17:6c:12:78:e7:8f:ba:c8:c3:f5:f2:91: b5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:69:B1:CE:DF:20:21:D7:AC:CE:50:CB:D9:61:EE:DE:65:A8:73:50 X509v3 Authority Key Identifier: keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:27:01:83:5c:36:8d:63:e6:84:51:07:85:b8:33:e9:56:80: 2c:68:ea:50:d7:c5:38:d0:50:71:95:42:72:e4:c7:87:ab:43: 4c:34:70:cd:58:13:3f:b6:b9:08:1a:e8:85:43:2b:1c:4d:09: 9e:fa:85:db:5b:8a:14:ad:ba:7a:0e:75:a6:16:66:26:3a:66: 2c:10:27:5d:7c:94:dd:4b:ea:4a:dd:7c:61:4e:93:d6:94:86: b2:d9:5d:93:a7:30:f8:5b:03:fe:4a:25:81:77:6d:9f:d8:f9: a0:0e:73:ee:06:5a:41:d9:c7:9d:22:fa:49:25:d4:21:51:93: a0:3f:bd:56:f4:66:34:ed:dd:3a:24:45:21:d3:97:71:af:04: 3a:3a:9f:47:b9:30:91:7a:13:df:35:98:c3:39:27:d0:66:ce: 1f:c9:76:12:7e:c4:ae:cc:15:a9:bd:7d:74:41:f8:10:21:69: 56:ca:e7:7a:4a:22:8c:7d:fa:d8:48:35:87:1a:98:69:a8:0f: 69:17:fa:bb:ca:ab:47:2f:5e:56:5a:02:6b:de:8b:9e:d9:a9: b8:00:13:9a:17:2a:86:ec:0f:c4:11:77:35:a6:1d:3b:d9:8e: 92:4d:eb:1e:d2:8a:63:85:50:da:bb:19:23:96:4e:44:80:87: 1f:7f:19:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrOPe1fUhqX11DvccS04CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzM0ZjgzNzNiZTdmZmIxYTM1ZWIzODg2MDU2NWJjM2M0 NTFiZTYwHhcNMjUxMjI2MDgwMTAwWhcNMjUxMjI3MDgwMTAwWjAzMTEwLwYDVQQD EygzYzY5YjFjZWRmMjAyMWQ3YWNjZTUwY2JkOTYxZWVkZTY1YTg3MzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTrENEWiwFVDXHh1gvrSFQCKzPPK ukNYn+JsCHy1mrn9il69WuB7CWy2nFCrDyAInXyidIiqIg2Y59kRjnUG7ttgAHsz MaKVYeUPwh2W41Rs2T4csWEqJxGtlNi9KGcTYi21w3uecC7AecWlqCD+hj6UdxyJ NAjJTKw1f7qtO+m1PXgyQgIFArjTX3+SWBDJDgMcKCmpJizECUxr3rPKcPblXD5+ APVtoBvpg+TXqpw9Pcow/1v8b9jmIvOO/tf5sfIlU4WXxIeRuzbZEugtF6tZvv4G LoR2QTuiCwv3OVSZ1hn51L89s7xzc5dddZFPF7kXbBJ454+6yMP18pG1ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxpsc7fICHXrM5Qy9lh7t5lqHNQMB8GA1UdIwQY MBaAFALDT4Nzvn/7GjXrOIYFZbw8RRvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yZjVhMWQtZjk0YS00YmIwLWEwMTQt ZTQ1MWI1OTA3ZWE0LzEvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8yZjVhMWQtZjk0YS00YmIwLWEwMTQtZTQ1MWI1OTA3ZWE0 LzEvQXNOUGczTy1mX3NhTmVzNGhnVmx2RHhGRy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEScBg1w2 jWPmhFEHhbgz6VaALGjqUNfFONBQcZVCcuTHh6tDTDRwzVgTP7a5CBrohUMrHE0J nvqF21uKFK26eg51phZmJjpmLBAnXXyU3UvqSt18YU6T1pSGstldk6cw+FsD/kol gXdtn9j5oA5z7gZaQdnHnSL6SSXUIVGToD+9VvRmNO3dOiRFIdOXca8EOjqfR7kw kXoT3zWYwzkn0GbOH8l2En7ErswVqb19dEH4ECFpVsrnekoijH362Eg1hxqYaagP aRf6u8qrRy9eVloCa96LntmpuAATmhcqhuwPxBF3NaYdO9mOkk3rHtKKY4VQ2rsZ I5ZORICHH38ZHg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:19 2025 by rpki-client