This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft File: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json) Hash identifier: XJUdtyyjfk7x3tJQzVZ9oH3KnqSJnO780V150j8EPv4= Subject key identifier: 8D:2E:6D:25:44:C3:21:39:33:13:0B:56:58:5D:4B:E9:CA:73:84:4F Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64 Certificate issuer: /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64 Certificate serial: 019B499512E9D3FDC4437CAA287D0A4921BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft Manifest number: 1354 Signing time: Tue 23 Dec 2025 05:01:05 +0000 Manifest this update: Tue 23 Dec 2025 05:01:05 +0000 Manifest next update: Wed 24 Dec 2025 05:01:05 +0000 Files and hashes: 1: TImGbHFcysH3yKCENp7I2KDKakw.roa (hash: wV738mzWH7BpaMNjeVJLX60iXYrXwr7zU2chvPIlwaE=) 2: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: /tSzbzmaTmbZWfe49wtPzNvFnARLqL4LC3uU3EBnLew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:95:12:e9:d3:fd:c4:43:7c:aa:28:7d:0a:49:21:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64 Validity Not Before: Dec 23 05:01:05 2025 GMT Not After : Dec 24 05:01:05 2025 GMT Subject: CN=8d2e6d2544c3213933130b56585d4be9ca73844f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:83:a6:45:70:c2:ff:c3:40:08:36:b8:94:d3: 20:3a:66:ef:94:bb:35:d2:13:79:5f:7f:73:c7:d5: 2f:14:ec:7c:38:36:6d:41:d9:74:d8:49:9a:79:f7: 92:3c:e3:d4:b3:86:65:96:ee:33:15:d4:31:48:9d: 14:2a:f9:a4:5c:8e:39:10:52:ff:b4:04:e0:0a:41: 9e:a0:78:80:c3:c9:21:03:e0:e7:5d:49:72:cc:92: d3:fe:dc:71:57:b7:08:dc:54:a7:ee:5a:2e:39:a3: 32:50:a3:cf:5b:1f:ef:26:72:58:ac:96:44:b3:2c: 1c:0f:80:cd:d7:b1:9c:fe:46:e7:a1:28:4c:09:c4: 3e:f7:2d:63:57:3f:63:84:68:00:69:49:3a:c3:ee: 93:4c:5e:51:3b:9b:86:c9:7a:ce:1f:c8:ee:a1:c8: 13:77:1f:6b:70:92:21:b3:45:10:c9:dd:e1:ae:64: 87:b7:78:20:33:40:51:ec:9b:ef:64:2a:22:8e:d5: 1b:24:1e:fb:65:66:a4:c7:cd:a8:e0:2a:11:d6:ed: 81:1f:7d:9e:43:d2:e7:22:8d:40:95:e7:00:3b:4c: 39:c9:4e:69:e7:d5:0f:42:e5:32:bb:ab:4b:30:74: 62:1f:a9:76:04:37:ce:2f:d1:c8:ce:af:f2:59:06: fe:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2E:6D:25:44:C3:21:39:33:13:0B:56:58:5D:4B:E9:CA:73:84:4F X509v3 Authority Key Identifier: keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:53:80:49:23:e3:1d:2e:aa:c6:91:50:e3:88:88:2f:52:56: 6a:6a:53:e4:78:76:2f:1b:a1:67:a0:23:5b:63:20:e7:7a:01: 44:7e:f7:78:d5:de:62:f4:8f:9b:31:4b:63:0e:27:30:51:0b: e7:5b:57:b0:e0:e5:fa:2a:a6:45:04:26:d3:74:e9:7f:cd:af: be:8f:50:42:fb:69:2e:d2:66:6b:b2:aa:6e:ad:e9:c0:a8:b8: 6b:aa:34:f9:0a:59:96:cb:45:98:8e:0a:99:5e:4b:fc:6e:da: 48:cd:82:2a:6f:ba:4d:e1:bd:c5:fa:c0:0a:a7:09:d9:95:66: d1:94:a7:dd:bb:6c:96:61:d2:71:a6:65:2f:af:1b:aa:ca:24: 05:74:e3:7f:43:81:8e:1f:dc:d6:56:c0:ad:ec:23:97:5a:e2: 23:ab:b7:2c:da:f3:79:70:1c:ea:2d:39:05:93:77:37:e7:db: 00:02:69:e9:c4:cf:80:3e:2d:65:64:0b:eb:48:6a:f2:dd:fc: ac:5e:d0:1f:e5:35:07:18:dd:9a:8b:60:88:9d:0d:2d:64:3e: 79:19:3c:54:8d:4d:25:a4:f5:0f:74:a4:98:f2:4c:35:08:84: 61:d9:1e:d2:08:00:2d:3c:15:35:dd:4d:3e:5c:af:cc:6b:d5: c5:09:65:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlRLp0/3EQ3yqKH0KSSG9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkM2RkOGQzMmNmYzcxN2E2ZTY5MGViZTNlMWRiNDM4NmQ4 ZjZjNjQwHhcNMjUxMjIzMDUwMTA1WhcNMjUxMjI0MDUwMTA1WjAzMTEwLwYDVQQD Eyg4ZDJlNmQyNTQ0YzMyMTM5MzMxMzBiNTY1ODVkNGJlOWNhNzM4NDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYOmRXDC/8NACDa4lNMgOmbvlLs1 0hN5X39zx9UvFOx8ODZtQdl02EmaefeSPOPUs4Zllu4zFdQxSJ0UKvmkXI45EFL/ tATgCkGeoHiAw8khA+DnXUlyzJLT/txxV7cI3FSn7louOaMyUKPPWx/vJnJYrJZE sywcD4DN17Gc/kbnoShMCcQ+9y1jVz9jhGgAaUk6w+6TTF5RO5uGyXrOH8juocgT dx9rcJIhs0UQyd3hrmSHt3ggM0BR7JvvZCoijtUbJB77ZWakx82o4CoR1u2BH32e Q9LnIo1AlecAO0w5yU5p59UPQuUyu6tLMHRiH6l2BDfOL9HIzq/yWQb+4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0ubSVEwyE5MxMLVlhdS+nKc4RPMB8GA1UdIwQY MBaAFK092NMs/HF6bmkOvj4dtDhtj2xkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQt M2JjZDIzOTllZTY0LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQtM2JjZDIzOTllZTY0 LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFOASSPj HS6qxpFQ44iIL1JWampT5Hh2LxuhZ6AjW2Mg53oBRH73eNXeYvSPmzFLYw4nMFEL 51tXsODl+iqmRQQm03Tpf82vvo9QQvtpLtJma7Kqbq3pwKi4a6o0+QpZlstFmI4K mV5L/G7aSM2CKm+6TeG9xfrACqcJ2ZVm0ZSn3btslmHScaZlL68bqsokBXTjf0OB jh/c1lbArewjl1riI6u3LNrzeXAc6i05BZN3N+fbAAJp6cTPgD4tZWQL60hq8t38 rF7QH+U1BxjdmotgiJ0NLWQ+eRk8VI1NJaT1D3SkmPJMNQiEYdke0ggALTwVNd1N PlyvzGvVxQllGg== -----END CERTIFICATE-----Generated at Tue Dec 23 06:53:25 2025 by rpki-client