This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json) Hash identifier: q86UMMD4IVsKWR90uaOdwCZFGc2E5g7L98oYgoX5NOI= Subject key identifier: 2F:83:5B:33:56:A3:3D:6B:39:D1:0A:D9:38:6D:C8:E2:EA:36:0D:49 Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96 Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796 Certificate serial: 019B1B3C25208C17079C611AFF33957E2E49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft Manifest number: 0F5F Signing time: Sun 14 Dec 2025 05:01:25 +0000 Manifest this update: Sun 14 Dec 2025 05:01:25 +0000 Manifest next update: Mon 15 Dec 2025 05:01:25 +0000 Files and hashes: 1: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: o3NTtZHwMB6M35F9lGVl6A5p7iuBKvHE0t8Wt0xAVao=) 2: plkAs-IyDZJCIAE40BkNI36hTng.roa (hash: wOkXtaw5IC+9zxwCff906pm32/bh8wTs2La7fXktK8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3c:25:20:8c:17:07:9c:61:1a:ff:33:95:7e:2e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796 Validity Not Before: Dec 14 05:01:25 2025 GMT Not After : Dec 15 05:01:25 2025 GMT Subject: CN=2f835b3356a33d6b39d10ad9386dc8e2ea360d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:81:4a:5a:10:b0:1d:4e:16:f7:22:d9:bc:4c: f3:6b:34:bc:b0:11:9e:6a:fa:31:92:fb:97:58:45: cc:b8:03:53:bd:e7:59:82:f3:1c:c9:46:dc:fb:8d: 7b:ef:09:5c:29:a8:c2:5f:44:20:49:93:25:52:42: 36:2b:66:d1:3f:c2:c1:8c:59:d1:89:1e:23:6b:8a: 12:50:74:c1:c3:0b:24:69:a5:52:03:49:8c:27:e8: 75:ba:98:e8:9b:a0:1c:40:6f:e1:b3:15:79:b6:00: 08:67:41:9e:7e:19:48:62:f7:45:7d:30:c7:28:16: 5f:69:76:24:ec:86:04:9f:e9:a0:3e:3a:26:74:a8: aa:79:84:5d:4b:3a:15:3c:8f:cb:ee:e8:c8:e0:88: 6b:3f:f0:63:f5:6f:f4:1f:61:33:5c:0e:b0:f0:4c: 57:6f:14:b6:23:78:88:57:01:1d:9f:cc:75:c1:9e: a3:b4:c4:5f:a7:3d:4e:ee:31:ea:55:e0:24:33:71: c4:9c:d4:2d:45:56:5d:b9:c1:69:c7:37:b0:7b:31: e0:a3:a1:3b:d3:34:f5:4c:54:d7:28:25:f9:6a:ca: 55:21:48:93:15:bb:15:37:2e:de:0a:7e:d1:fb:b1: 75:7a:4c:8b:e6:27:f5:97:c3:77:e6:00:94:7f:5e: c9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:83:5B:33:56:A3:3D:6B:39:D1:0A:D9:38:6D:C8:E2:EA:36:0D:49 X509v3 Authority Key Identifier: keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ff:35:f0:59:fc:7d:c2:14:0e:6c:f5:7d:bc:e5:b4:53:01: 31:e0:a1:80:f8:ae:43:00:b5:b4:e6:ce:03:e1:36:51:35:70: a7:aa:07:db:8a:16:55:2b:1c:9b:61:fc:1c:ca:40:6a:b6:82: a4:d0:19:eb:6b:2a:ec:3c:3a:ed:cc:38:32:81:8d:b5:d1:3d: 5f:5a:82:b6:08:28:22:9e:c6:c5:0d:30:ca:0c:b0:97:9c:6f: 60:68:6e:79:50:dd:00:7a:05:80:e4:4b:bb:38:ea:59:6d:b8: 2d:56:0d:14:55:67:2b:a5:89:44:80:d1:1d:f1:ba:48:a0:ca: 8e:b7:ac:1e:6c:5b:a2:fc:f4:fc:54:74:c3:34:d0:3c:3b:47: 44:bf:bf:3a:9b:23:30:e0:e3:43:a5:ed:eb:58:c7:52:5d:7b: c9:f1:e9:ee:c0:ea:d0:e9:8d:f4:6f:72:04:4b:88:42:a5:25: 48:50:98:f8:5e:48:c8:97:f9:23:03:93:52:0e:40:2e:8b:8d: 7a:ae:f5:48:48:9c:ed:e6:bf:93:8e:ca:fb:23:7e:6f:63:fb: 62:97:8b:a6:50:5c:5b:67:6a:30:77:07:cc:17:a5:c1:55:a9: 96:08:64:a6:40:1a:2b:22:ff:ce:a4:94:62:39:f8:5c:f3:d6: f4:f6:19:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbPCUgjBcHnGEa/zOVfi5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNjQwMzM5ZTU5YWRkYzc1ZmQ5NzgxMDFiNDAwODJiNWQy Yjg3OTYwHhcNMjUxMjE0MDUwMTI1WhcNMjUxMjE1MDUwMTI1WjAzMTEwLwYDVQQD EygyZjgzNWIzMzU2YTMzZDZiMzlkMTBhZDkzODZkYzhlMmVhMzYwZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IFKWhCwHU4W9yLZvEzzazS8sBGe avoxkvuXWEXMuANTvedZgvMcyUbc+4177wlcKajCX0QgSZMlUkI2K2bRP8LBjFnR iR4ja4oSUHTBwwskaaVSA0mMJ+h1upjom6AcQG/hsxV5tgAIZ0GefhlIYvdFfTDH KBZfaXYk7IYEn+mgPjomdKiqeYRdSzoVPI/L7ujI4IhrP/Bj9W/0H2EzXA6w8ExX bxS2I3iIVwEdn8x1wZ6jtMRfpz1O7jHqVeAkM3HEnNQtRVZducFpxzewezHgo6E7 0zT1TFTXKCX5aspVIUiTFbsVNy7eCn7R+7F1ekyL5if1l8N35gCUf17J6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+DWzNWoz1rOdEK2ThtyOLqNg1JMB8GA1UdIwQY MBaAFN1kAznlmt3HX9l4EBtACCtdK4eWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAt NjFiNzMzNTRhYmRiLzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAtNjFiNzMzNTRhYmRi LzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiv818Fn8 fcIUDmz1fbzltFMBMeChgPiuQwC1tObOA+E2UTVwp6oH24oWVSscm2H8HMpAaraC pNAZ62sq7Dw67cw4MoGNtdE9X1qCtggoIp7GxQ0wygywl5xvYGhueVDdAHoFgORL uzjqWW24LVYNFFVnK6WJRIDRHfG6SKDKjresHmxbovz0/FR0wzTQPDtHRL+/Opsj MODjQ6Xt61jHUl17yfHp7sDq0OmN9G9yBEuIQqUlSFCY+F5IyJf5IwOTUg5ALouN eq71SEic7ea/k47K+yN+b2P7YpeLplBcW2dqMHcHzBelwVWplghkpkAaKyL/zqSU Yjn4XPPW9PYZKQ== -----END CERTIFICATE-----Generated at Sun Dec 14 11:46:13 2025 by rpki-client