This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft File: 3tvumMupuOYloRR7s7VRl9LQoFc.mft (raw, json) Hash identifier: 1IrxRaPRX9TliRozTrStABySWy74AWXte774Xdo3NZY= Subject key identifier: 90:17:8A:4D:B0:4C:EF:8A:F8:FC:0A:9F:6B:A5:38:AD:1B:A9:4E:47 Authority key identifier: DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57 Certificate issuer: /CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057 Certificate serial: 019B405B1D22643F76EA5F596B203A16C11B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft Manifest number: 07F2 Signing time: Sun 21 Dec 2025 10:01:11 +0000 Manifest this update: Sun 21 Dec 2025 10:01:11 +0000 Manifest next update: Mon 22 Dec 2025 10:01:11 +0000 Files and hashes: 1: 3tvumMupuOYloRR7s7VRl9LQoFc.crl (hash: voz7/ZG6BitjbVChNPM8CSujPbqUw7hIP7IHshHp7gQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:1d:22:64:3f:76:ea:5f:59:6b:20:3a:16:c1:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dedbee98cba9b8e625a1147bb3b55197d2d0a057 Validity Not Before: Dec 21 10:01:11 2025 GMT Not After : Dec 22 10:01:11 2025 GMT Subject: CN=90178a4db04cef8af8fc0a9f6ba538ad1ba94e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:97:2a:9b:bf:f5:81:1a:98:65:bb:0e:f7:80: 33:59:25:be:8f:60:b6:a1:51:80:46:aa:aa:60:1e: d6:37:2a:ab:ab:cf:92:fe:f2:85:45:7f:b0:1f:52: de:10:14:fd:94:62:09:6b:03:27:0a:0f:e6:ee:28: 93:0a:e4:f0:71:7a:bc:26:62:78:85:9a:e9:94:ba: 85:a5:63:60:65:8a:05:88:34:3e:2a:1d:8a:9d:04: 29:d5:c3:9a:11:d0:1f:f3:6e:92:02:b8:62:a4:c8: b3:90:c8:ab:ae:a8:dc:26:d9:e8:44:59:80:ac:11: 25:2c:5f:5a:b0:b3:e9:a4:d5:6d:8c:dd:6d:ec:89: 11:03:20:f7:08:27:66:e7:f4:86:d1:ce:53:21:af: 69:fd:a7:d8:9d:cc:94:e5:ff:a4:86:98:95:22:a2: 63:dc:0f:85:ea:dd:ec:9e:b4:ee:a7:3d:02:7b:a8: f1:9a:48:32:ec:51:dc:7a:d5:af:b9:1d:62:b9:94: 13:37:57:07:66:9e:31:c6:c4:9d:fb:50:a1:55:b1: 40:14:c1:df:1f:ea:a7:69:b7:90:be:31:b5:4f:e6: f5:c8:b6:90:f3:0e:ba:b4:fe:ea:bf:c7:56:cd:4c: 58:38:70:65:de:33:a3:17:a7:70:6c:29:e8:cf:29: 41:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:17:8A:4D:B0:4C:EF:8A:F8:FC:0A:9F:6B:A5:38:AD:1B:A9:4E:47 X509v3 Authority Key Identifier: keyid:DE:DB:EE:98:CB:A9:B8:E6:25:A1:14:7B:B3:B5:51:97:D2:D0:A0:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tvumMupuOYloRR7s7VRl9LQoFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0ef678-7870-4e08-ab25-18f0b80f250d/1/3tvumMupuOYloRR7s7VRl9LQoFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f4:85:ae:5a:f8:9b:d5:e4:ff:b9:e7:65:2e:1e:e6:d5:cf: ff:03:3e:20:c0:31:e0:d5:4e:72:0b:14:42:a0:7b:60:ab:49: d6:be:2a:d4:9f:a4:06:34:58:27:d7:12:48:45:79:e6:e2:d1: d2:45:cb:68:78:71:c8:2c:0e:1c:20:06:6b:91:14:23:c1:7f: db:3f:76:f4:db:00:11:05:54:51:1e:3b:01:50:00:71:72:e6: 2a:6c:eb:8f:c9:2a:62:1d:f4:fb:57:de:84:94:de:df:26:e7: c7:76:f2:0e:0f:41:d4:dd:47:3a:a1:19:3f:14:4d:b5:5a:61: db:a4:75:70:f6:ed:6d:e9:69:cb:3d:5d:8b:ad:33:f9:fb:1b: 67:df:26:5e:19:91:8f:19:bf:bd:fa:3e:57:73:32:cf:40:93: 90:90:40:83:a2:f5:ba:ed:e0:fd:a6:59:94:6a:80:66:d7:29: 2a:a4:d5:52:c8:47:18:63:cf:08:ba:81:6a:50:52:6f:58:e7: 45:e6:76:c6:e1:47:e8:c4:1b:4a:30:a6:f7:75:d3:89:8b:f4: 4b:06:d0:3f:b8:cb:f8:3e:6d:d9:79:5b:9b:9a:fb:7a:e9:93: f7:eb:f9:df:66:e5:7e:9c:08:23:56:5f:55:9c:bd:42:29:eb: 65:e4:3f:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWx0iZD926l9ZayA6FsEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGJlZTk4Y2JhOWI4ZTYyNWExMTQ3YmIzYjU1MTk3ZDJk MGEwNTcwHhcNMjUxMjIxMTAwMTExWhcNMjUxMjIyMTAwMTExWjAzMTEwLwYDVQQD Eyg5MDE3OGE0ZGIwNGNlZjhhZjhmYzBhOWY2YmE1MzhhZDFiYTk0ZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pcqm7/1gRqYZbsO94AzWSW+j2C2 oVGARqqqYB7WNyqrq8+S/vKFRX+wH1LeEBT9lGIJawMnCg/m7iiTCuTwcXq8JmJ4 hZrplLqFpWNgZYoFiDQ+Kh2KnQQp1cOaEdAf826SArhipMizkMirrqjcJtnoRFmA rBElLF9asLPppNVtjN1t7IkRAyD3CCdm5/SG0c5TIa9p/afYncyU5f+khpiVIqJj 3A+F6t3snrTupz0Ce6jxmkgy7FHcetWvuR1iuZQTN1cHZp4xxsSd+1ChVbFAFMHf H+qnabeQvjG1T+b1yLaQ8w66tP7qv8dWzUxYOHBl3jOjF6dwbCnozylBiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAXik2wTO+K+PwKn2ulOK0bqU5HMB8GA1UdIwQY MBaAFN7b7pjLqbjmJaEUe7O1UZfS0KBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZWY2NzgtNzg3MC00ZTA4LWFiMjUt MThmMGI4MGYyNTBkLzEvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZWY2NzgtNzg3MC00ZTA4LWFiMjUtMThmMGI4MGYyNTBk LzEvM3R2dW1NdXB1T1lsb1JSN3M3VlJsOUxRb0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvSFrlr4 m9Xk/7nnZS4e5tXP/wM+IMAx4NVOcgsUQqB7YKtJ1r4q1J+kBjRYJ9cSSEV55uLR 0kXLaHhxyCwOHCAGa5EUI8F/2z929NsAEQVUUR47AVAAcXLmKmzrj8kqYh30+1fe hJTe3ybnx3byDg9B1N1HOqEZPxRNtVph26R1cPbtbelpyz1di60z+fsbZ98mXhmR jxm/vfo+V3Myz0CTkJBAg6L1uu3g/aZZlGqAZtcpKqTVUshHGGPPCLqBalBSb1jn ReZ2xuFH6MQbSjCm93XTiYv0SwbQP7jL+D5t2Xlbm5r7eumT9+v532blfpwII1Zf VZy9QinrZeQ/SA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:38:49 2025 by rpki-client