This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json) Hash identifier: ba/y6DiefTFX4CN1h8P5rPqXamtkrrTcV2y4euNNm7o= Subject key identifier: 5A:DB:EB:49:91:80:21:60:06:9B:0F:75:72:EF:BD:BD:01:E7:4C:B1 Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5 Certificate issuer: /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5 Certificate serial: 019B2EFA989FE1855E82BB8A8B38311AFB69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft Manifest number: 04A9 Signing time: Thu 18 Dec 2025 01:02:13 +0000 Manifest this update: Thu 18 Dec 2025 01:02:13 +0000 Manifest next update: Fri 19 Dec 2025 01:02:13 +0000 Files and hashes: 1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: fUIATHFWh0MnsF+bUzLQ4hPQzxARs+6B+shndUuNU3g=) 2: rsRHcAQsRZm8xo329vRETKcxCzw.roa (hash: F0s62aCweEs8uI/ziYG0x/wHrK8NMTpGhS7dtiI2LHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:98:9f:e1:85:5e:82:bb:8a:8b:38:31:1a:fb:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5 Validity Not Before: Dec 18 01:02:13 2025 GMT Not After : Dec 19 01:02:13 2025 GMT Subject: CN=5adbeb4991802160069b0f7572efbdbd01e74cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:6f:43:c8:90:c8:d6:cd:a3:f7:ab:c0:c5: c8:e6:e3:e3:60:68:5a:72:d3:af:3b:17:8d:71:3a: e1:93:60:bc:fc:2e:fe:3b:97:01:a8:58:04:31:b4: 6f:5c:fd:bf:fd:20:99:22:96:e4:ad:c0:3a:d0:5a: 2c:41:15:e2:da:ed:4f:fb:50:48:f7:ec:7f:40:69: be:65:cd:a5:8d:c0:3f:90:95:99:b8:6e:38:ed:4b: 18:ac:30:bb:99:b1:f3:a5:c4:ac:ca:93:93:35:4d: 4c:aa:3c:2d:7f:83:18:fe:22:f9:e5:83:5e:17:81: 02:1e:0b:25:e3:f4:34:69:28:33:26:b1:bb:8a:54: 7e:50:eb:ed:c7:c2:f1:45:a7:0b:84:d0:79:5b:ce: 56:76:da:16:a2:34:46:16:ed:95:c1:56:e3:7e:7a: 32:12:a2:18:90:f2:3a:53:ee:d9:65:ee:a1:ad:f5: 34:89:58:0a:76:e1:9a:15:5b:73:9f:68:0f:99:cd: c1:b9:42:78:44:27:70:7b:86:96:89:07:39:b4:b0: 52:8f:5c:28:76:f3:6c:ce:fd:83:96:60:fd:f3:ef: 2e:cf:51:0b:e5:d7:a9:3a:55:7b:1a:9b:d5:f4:36: 11:f3:93:94:6b:c4:84:c6:57:94:57:aa:79:be:05: 55:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DB:EB:49:91:80:21:60:06:9B:0F:75:72:EF:BD:BD:01:E7:4C:B1 X509v3 Authority Key Identifier: keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d6:08:cc:24:1f:26:6e:57:13:ae:40:0e:7e:22:7b:ce:02: 40:9b:1a:7c:ad:55:af:a9:22:c1:44:34:24:33:08:c0:55:fd: 3a:89:9c:9c:9b:8c:92:dd:40:9f:83:45:87:bc:8d:f5:1f:75: a1:b5:21:39:79:8f:7f:77:e7:b5:ef:8d:53:15:bc:35:5c:dd: 1a:89:0c:7c:c5:c6:52:c2:ff:a3:d9:20:bc:5d:33:63:c8:fe: 5d:e3:33:7a:77:b8:f5:b1:47:55:e1:3d:d2:bb:e1:7d:9b:66: c0:23:cb:63:c5:c8:a3:87:b8:d1:47:a7:8a:28:84:56:31:3b: 62:e8:85:ea:6c:74:4f:c5:9d:0e:ec:a8:1b:4a:c8:e0:55:c7: d1:cb:d4:d2:8c:eb:0d:09:ea:03:3d:cb:d9:6d:9a:30:b4:82: 60:a3:05:e8:e7:4a:bd:f9:af:a7:19:26:84:6b:6f:53:1c:69: 86:34:43:8f:14:8c:d5:64:9b:f2:eb:b4:6b:ee:87:4d:47:6c: c8:58:fb:77:e1:8c:e5:9b:e8:08:70:47:b0:a7:69:76:7b:d9: e4:cf:36:30:8e:3a:6a:e6:49:cd:32:26:d9:e0:75:09:70:82: f3:a8:52:0a:a7:30:88:15:97:8b:93:9e:1b:a3:63:4e:0b:50: e5:2c:53:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+pif4YVegruKizgxGvtpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTE1OGUzZTQxZjYwZmZiZjdlY2FmZjcyMzA3ZDNkYzk1 Mjc3ZjUwHhcNMjUxMjE4MDEwMjEzWhcNMjUxMjE5MDEwMjEzWjAzMTEwLwYDVQQD Eyg1YWRiZWI0OTkxODAyMTYwMDY5YjBmNzU3MmVmYmRiZDAxZTc0Y2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAordvQ8iQyNbNo/erwMXI5uPjYGha ctOvOxeNcTrhk2C8/C7+O5cBqFgEMbRvXP2//SCZIpbkrcA60FosQRXi2u1P+1BI 9+x/QGm+Zc2ljcA/kJWZuG447UsYrDC7mbHzpcSsypOTNU1Mqjwtf4MY/iL55YNe F4ECHgsl4/Q0aSgzJrG7ilR+UOvtx8LxRacLhNB5W85WdtoWojRGFu2VwVbjfnoy EqIYkPI6U+7ZZe6hrfU0iVgKduGaFVtzn2gPmc3BuUJ4RCdwe4aWiQc5tLBSj1wo dvNszv2DlmD98+8uz1EL5depOlV7GpvV9DYR85OUa8SExleUV6p5vgVVFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrb60mRgCFgBpsPdXLvvb0B50yxMB8GA1UdIwQY MBaAFN2RWOPkH2D/v37K/3IwfT3JUnf1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUt NDNkN2ViNzI1NTFkLzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82NjkwYzEtMGE2NC00MjJkLWJiMGUtNDNkN2ViNzI1NTFk LzEvM1pGWTQtUWZZUC1fZnNyX2NqQjlQY2xTZF9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtYIzCQf Jm5XE65ADn4ie84CQJsafK1Vr6kiwUQ0JDMIwFX9OomcnJuMkt1An4NFh7yN9R91 obUhOXmPf3fnte+NUxW8NVzdGokMfMXGUsL/o9kgvF0zY8j+XeMzene49bFHVeE9 0rvhfZtmwCPLY8XIo4e40UeniiiEVjE7YuiF6mx0T8WdDuyoG0rI4FXH0cvU0ozr DQnqAz3L2W2aMLSCYKMF6OdKvfmvpxkmhGtvUxxphjRDjxSM1WSb8uu0a+6HTUds yFj7d+GM5ZvoCHBHsKdpdnvZ5M82MI46auZJzTIm2eB1CXCC86hSCqcwiBWXi5Oe G6NjTgtQ5SxTAw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:48 2025 by rpki-client