This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft File: 3mZANXrkrhD8Cz6dmPKgywEYkDw.mft (raw, json) Hash identifier: HTFjCbFbRsxTYcN+Nmx+VMpxnbGna4NgR143fvjucoI= Subject key identifier: 3A:A8:CC:E6:44:66:5F:94:43:B2:D1:F4:C4:0A:01:A8:22:76:E7:9A Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C Certificate issuer: /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c Certificate serial: 019B25F66F278D8FD3D0E036793F9A106EAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft Manifest number: 0C6E Signing time: Tue 16 Dec 2025 07:01:05 +0000 Manifest this update: Tue 16 Dec 2025 07:01:05 +0000 Manifest next update: Wed 17 Dec 2025 07:01:05 +0000 Files and hashes: 1: 3mZANXrkrhD8Cz6dmPKgywEYkDw.crl (hash: g5ch3kfLUoeehl0HiyMHxjdSItLgPz4kYTeP49z1G6Q=) 2: 9Ht1WS_vqd6PGFgJgGHqYQxnzds.roa (hash: jy6H59LUS5waYqQP6Dhp+2VxxeHkS9j62qw0M1cdA/g=) 3: HWj4rrIG5yLx-R7YJHriQZkaHlU.roa (hash: w4NJmcaVn2AcPxlAH9mW36Xv6MPv2ne3C9Tmp8J45QY=) 4: Ja-mDUtTmKTc_5z3WZikEzgxnO0.roa (hash: OHF3bECjzb4WxileHvkYP3598NMiRQdCX4l/f2//5yI=) 5: gizPDPJlnHFMwdNkDj4bjEHwsOM.roa (hash: s+HhHFRsrWXDsklXWcH/16ndefegRFDZvIRvtU1bOnQ=) 6: o4UdTzK11yn9790w6aFya-CRsYk.roa (hash: 5gJHsN2PGfagg0XX4Yhkkp3hRI4hmN+LCY9ILQ0xCTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:6f:27:8d:8f:d3:d0:e0:36:79:3f:9a:10:6e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c Validity Not Before: Dec 16 07:01:05 2025 GMT Not After : Dec 17 07:01:05 2025 GMT Subject: CN=3aa8cce644665f9443b2d1f4c40a01a82276e79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e0:f3:48:11:68:c3:87:3c:d4:cf:1b:19:dc: 41:48:43:e3:8b:bf:2e:0d:3b:ea:e6:bd:d3:79:7e: c9:17:08:22:e1:4b:52:64:64:06:aa:30:66:22:8a: 7e:b8:22:7a:d4:41:03:4f:b6:c2:bc:22:7d:d1:99: 9f:47:ba:33:84:db:03:2b:8c:75:5c:f3:75:02:2d: 98:bc:9f:cc:c2:24:5d:60:1c:4f:67:f2:2d:f2:6c: c0:ec:37:ab:bf:4c:ac:a7:83:50:de:a4:2c:03:0e: 26:3e:2d:8f:26:56:6f:f1:d4:49:a4:0d:bd:c0:27: 91:72:ed:a2:05:63:86:c6:33:7e:c9:c6:ca:a0:bf: ff:1d:fa:b4:66:f2:84:ec:57:b9:22:75:12:15:b7: f1:dd:8d:ca:74:61:69:01:e8:1c:68:6d:79:fa:a6: 01:de:ee:eb:9d:53:6f:12:39:c8:88:a6:22:22:b3: 86:50:fe:06:90:73:cc:bb:21:23:16:c6:26:e2:ec: 2d:55:1d:53:96:50:cc:64:b4:9b:3c:9a:c8:77:98: 12:e5:be:80:48:a0:85:f2:d4:c2:9b:d6:8e:16:a3: ed:e6:0a:c7:fc:fa:2a:74:ec:86:02:00:52:e7:38: b8:09:4f:3a:00:05:17:6e:e6:8f:c6:49:5d:31:85: 7e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A8:CC:E6:44:66:5F:94:43:B2:D1:F4:C4:0A:01:A8:22:76:E7:9A X509v3 Authority Key Identifier: keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:38:43:85:da:9a:39:3f:69:a1:ac:02:cb:e4:d0:73:75:3a: ab:b2:d2:51:a9:c8:b4:4d:db:ac:6a:35:74:80:3d:14:7d:09: 19:aa:3d:a5:03:e1:a4:a7:b6:84:f1:cc:e8:ab:9f:32:a2:14: 89:4a:aa:b7:a4:10:7a:75:f8:a2:f7:28:52:15:17:83:5e:25: ea:47:b0:fb:dd:1e:d7:fe:2f:bd:c2:aa:25:b3:78:38:13:ad: d3:92:28:92:59:f1:15:4e:81:e4:88:74:e4:54:ad:23:61:f5: 60:72:63:e5:71:88:32:8f:79:40:cd:5d:fa:51:83:6d:27:85: 2e:65:41:56:4a:0a:a9:1c:2f:87:4e:55:4d:73:6d:82:53:c1: 64:a5:e7:55:07:22:57:c2:f5:17:6f:35:78:7f:84:27:d9:76: 15:f6:08:d2:28:84:43:70:75:ff:5d:c6:98:45:ac:cc:8e:14: eb:2e:ce:97:b4:f5:b5:bf:15:f5:1a:c7:4a:07:b2:29:2d:91: b8:1e:6a:8c:76:ca:6d:8d:bf:2d:f0:a4:e6:3c:ee:16:b4:3e: f5:fa:5f:7a:a8:40:09:fa:f2:c0:c3:5f:5e:23:19:91:2b:11: 7d:37:1c:aa:93:59:5c:e5:d8:14:ee:07:94:a5:fe:ce:62:4b: b1:10:23:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9m8njY/T0OA2eT+aEG6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNjY0MDM1N2FlNGFlMTBmYzBiM2U5ZDk4ZjJhMGNiMDEx ODkwM2MwHhcNMjUxMjE2MDcwMTA1WhcNMjUxMjE3MDcwMTA1WjAzMTEwLwYDVQQD EygzYWE4Y2NlNjQ0NjY1Zjk0NDNiMmQxZjRjNDBhMDFhODIyNzZlNzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApODzSBFow4c81M8bGdxBSEPji78u DTvq5r3TeX7JFwgi4UtSZGQGqjBmIop+uCJ61EEDT7bCvCJ90ZmfR7ozhNsDK4x1 XPN1Ai2YvJ/MwiRdYBxPZ/It8mzA7Derv0ysp4NQ3qQsAw4mPi2PJlZv8dRJpA29 wCeRcu2iBWOGxjN+ycbKoL//Hfq0ZvKE7Fe5InUSFbfx3Y3KdGFpAegcaG15+qYB 3u7rnVNvEjnIiKYiIrOGUP4GkHPMuyEjFsYm4uwtVR1TllDMZLSbPJrId5gS5b6A SKCF8tTCm9aOFqPt5grH/PoqdOyGAgBS5zi4CU86AAUXbuaPxkldMYV+xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqozOZEZl+UQ7LR9MQKAagidueaMB8GA1UdIwQY MBaAFN5mQDV65K4Q/As+nZjyoMsBGJA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAt ZmY5N2Y2MmEwOTQ1LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAtZmY5N2Y2MmEwOTQ1 LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzhDhdqa OT9poawCy+TQc3U6q7LSUanItE3brGo1dIA9FH0JGao9pQPhpKe2hPHM6KufMqIU iUqqt6QQenX4ovcoUhUXg14l6kew+90e1/4vvcKqJbN4OBOt05IoklnxFU6B5Ih0 5FStI2H1YHJj5XGIMo95QM1d+lGDbSeFLmVBVkoKqRwvh05VTXNtglPBZKXnVQci V8L1F281eH+EJ9l2FfYI0iiEQ3B1/13GmEWszI4U6y7Ol7T1tb8V9RrHSgeyKS2R uB5qjHbKbY2/LfCk5jzuFrQ+9fpfeqhACfrywMNfXiMZkSsRfTccqpNZXOXYFO4H lKX+zmJLsRAjEQ== -----END CERTIFICATE-----Generated at Tue Dec 16 13:48:38 2025 by rpki-client