This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json) Hash identifier: KmgFJ2OBH4VM6wcJ4jtOz/h1dWb4S9M0aB0VUkGpMOU= Subject key identifier: B6:0B:B7:DF:94:97:25:71:3D:B7:7D:AE:65:D2:92:D7:07:FA:73:53 Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e Certificate serial: 019B59AD0712760A2768788DF1D387A75974 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 08:01:10 +0000 Manifest this update: Fri 26 Dec 2025 08:01:10 +0000 Manifest next update: Sat 27 Dec 2025 08:01:10 +0000 Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: Gup+CEaZLw8TdrzfJc95DwHRwT28SlPjT0PAu7fMd4o=) 2: aUaxmc4yn8DWQgssucohLW2GTOs.roa (hash: SOdn4BM+lJeHsX2EdSBfNJjI/S1sYp7gdR+GcCunEpg=) 3: v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa (hash: 0sTmm1OvDNHW8cfRGw9gOppSFK5VfYqSrXVw8T0yJBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:07:12:76:0a:27:68:78:8d:f1:d3:87:a7:59:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e Validity Not Before: Dec 26 08:01:10 2025 GMT Not After : Dec 27 08:01:10 2025 GMT Subject: CN=b60bb7df949725713db77dae65d292d707fa7353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:1d:86:01:b6:dc:55:f1:0a:01:88:8a:0e: db:11:e7:cf:cb:ae:7e:34:a9:d8:9a:84:95:1d:81: fc:eb:4f:ea:c7:3f:d1:1c:0f:45:8e:f9:3b:b4:eb: 72:64:f0:83:1a:75:1c:8e:82:58:96:ab:b6:e3:ff: af:e9:70:27:70:81:50:e7:b6:bd:b1:21:af:6f:c2: b3:03:ad:3d:d7:1b:6e:51:7c:4d:5b:5a:42:2e:3f: 40:60:8d:f6:41:d8:de:b4:09:82:6c:9e:45:81:62: 1d:06:54:64:b5:b4:e5:51:b9:9b:71:fb:5c:57:5d: 43:06:7b:41:ab:61:c7:28:10:3b:e0:bc:e4:45:84: a4:f9:f5:8a:75:5b:fc:03:48:d0:0e:af:24:b7:26: 56:3c:f1:bd:4a:7b:c4:9c:c5:0f:67:2b:02:db:a3: ef:5f:1f:a4:3c:b2:52:eb:c8:34:6e:62:8f:0f:58: 6f:87:94:18:f2:c2:97:f4:93:3e:6f:31:a9:12:fc: b5:2a:1f:c5:96:70:8a:f9:b4:32:d0:3a:da:d0:c7: 19:48:6c:cc:2f:9e:5b:1d:45:e4:b6:2e:46:96:5a: 02:f9:2c:28:d2:64:be:a9:2c:34:b5:4a:8e:00:d2: 29:aa:df:44:34:44:49:16:9a:a2:f6:b3:45:8c:c9: a5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0B:B7:DF:94:97:25:71:3D:B7:7D:AE:65:D2:92:D7:07:FA:73:53 X509v3 Authority Key Identifier: keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:0b:77:24:d0:61:43:1c:bc:93:9a:cd:65:0c:11:2b:01:71: 45:14:61:23:97:00:c0:dc:02:e7:03:c8:22:07:3c:9a:bd:97: 48:73:af:c3:fc:60:13:1a:79:fd:7b:c8:f8:5a:06:86:1f:3d: 9d:ea:5e:cc:bb:98:c1:ff:a5:06:44:24:0d:f4:4d:d0:25:b9: 3f:75:5f:26:3b:99:2c:3f:48:b9:29:74:da:8c:e1:27:62:a9: 48:7f:6a:85:53:b6:b9:d4:5e:c7:9f:f4:be:25:ba:9f:cd:47: a6:7a:5b:f8:47:a4:11:a3:4b:d3:1b:f5:a1:cd:3d:9e:b1:e2: 93:d2:99:02:ac:0b:fb:af:fd:a7:85:3c:86:e6:e2:eb:ff:37: 49:8a:46:ee:98:6a:0b:f8:ec:83:8b:50:00:60:06:6d:1c:16: 85:3b:d7:06:34:ad:20:b5:ef:ae:f4:52:5b:76:2f:f3:63:64: 93:65:80:66:5c:bd:be:e7:33:ae:e3:a3:fd:9b:dd:3a:d4:ef: 61:8a:bf:d5:68:21:53:bc:2c:c6:48:2e:43:b9:97:50:3d:c9: cb:17:c0:f7:71:e9:ad:e5:c0:5c:b9:52:f1:57:bd:bb:8a:87: 26:db:91:6c:49:aa:aa:32:1f:2e:21:33:c9:c0:ba:e0:16:58: 31:77:b4:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrQcSdgonaHiN8dOHp1l0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNTFkYTMyNzYyYTZmOWMxMjZkNjNiYTcwNWQ2MmMwNTBi ODQ4NGUwHhcNMjUxMjI2MDgwMTEwWhcNMjUxMjI3MDgwMTEwWjAzMTEwLwYDVQQD EyhiNjBiYjdkZjk0OTcyNTcxM2RiNzdkYWU2NWQyOTJkNzA3ZmE3MzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQcdhgG23FXxCgGIig7bEefPy65+ NKnYmoSVHYH860/qxz/RHA9Fjvk7tOtyZPCDGnUcjoJYlqu24/+v6XAncIFQ57a9 sSGvb8KzA6091xtuUXxNW1pCLj9AYI32QdjetAmCbJ5FgWIdBlRktbTlUbmbcftc V11DBntBq2HHKBA74LzkRYSk+fWKdVv8A0jQDq8ktyZWPPG9SnvEnMUPZysC26Pv Xx+kPLJS68g0bmKPD1hvh5QY8sKX9JM+bzGpEvy1Kh/FlnCK+bQy0Dra0McZSGzM L55bHUXkti5GlloC+Swo0mS+qSw0tUqOANIpqt9ENERJFpqi9rNFjMml5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYLt9+UlyVxPbd9rmXSktcH+nNTMB8GA1UdIwQY MBaAFN5R2jJ2Km+cEm1junBdYsBQuEhOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTkt Y2RmYTYwMTIyNjkwLzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTktY2RmYTYwMTIyNjkw LzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgt3JNBh Qxy8k5rNZQwRKwFxRRRhI5cAwNwC5wPIIgc8mr2XSHOvw/xgExp5/XvI+FoGhh89 nepezLuYwf+lBkQkDfRN0CW5P3VfJjuZLD9IuSl02ozhJ2KpSH9qhVO2udRex5/0 viW6n81Hpnpb+EekEaNL0xv1oc09nrHik9KZAqwL+6/9p4U8hubi6/83SYpG7phq C/jsg4tQAGAGbRwWhTvXBjStILXvrvRSW3Yv82Nkk2WAZly9vuczruOj/ZvdOtTv YYq/1WghU7wsxkguQ7mXUD3JyxfA93HpreXAXLlS8Ve9u4qHJtuRbEmqqjIfLiEz ycC64BZYMXe03A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:16 2025 by rpki-client