This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json) Hash identifier: vw2/4y3FWJX7I5AWnbiKN2VVn8NYF7523RcKJIqktjU= Subject key identifier: 34:9C:34:A5:2F:24:F1:6A:11:B4:ED:CB:C9:D3:87:C2:48:15:33:8F Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Certificate serial: 019B3C102F6505610F5ADCE35160A5651539 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft Manifest number: 17A5 Signing time: Sat 20 Dec 2025 14:00:52 +0000 Manifest this update: Sat 20 Dec 2025 14:00:52 +0000 Manifest next update: Sun 21 Dec 2025 14:00:52 +0000 Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: c0L/MwklAZqJ2D35moR1S4+CATa/SVJhaHFYMYyE08U=) 2: 6vn0S84Of3Am641RtQSWgEcI8LQ.roa (hash: liXU+EaS34eLz4h7mt5PwqdMf8bXjU0VdoViqn9V7yA=) 3: 8CNNYBbzQiDFPTM1tjqp5lUESM8.roa (hash: FKMYJ+6HiuRFIY6sbk4LB3mHseE0YsFT5neIU8ZSV0A=) 4: SgwPvwknub36baQ9KcDiF10XVjg.roa (hash: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=) 5: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (hash: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=) 6: YJiS4qGuwLN_Sg41RSYko6CqAYU.roa (hash: 2h4yWiYaNQUsbtMp+bAg/Hr+KrDeiT3A2mqFfxK9yew=) 7: goC_YpQrwJcU48WyzOg3OlsUAbY.roa (hash: OHpeanfXRy8bamPYQwO5dLykWIe4C63dtCxwNHxZdBc=) 8: lXMs99__wPFL_tQdoxzgPhccZK0.roa (hash: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:2f:65:05:61:0f:5a:dc:e3:51:60:a5:65:15:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Validity Not Before: Dec 20 14:00:52 2025 GMT Not After : Dec 21 14:00:52 2025 GMT Subject: CN=349c34a52f24f16a11b4edcbc9d387c24815338f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dc:66:95:28:89:c1:c8:e0:18:ec:11:55:2a: c7:19:47:e1:e9:08:f6:43:d6:c4:a8:63:6d:7c:b5: fd:68:89:14:2e:83:50:75:85:d0:3f:22:29:79:d5: 92:c9:7f:ed:dc:53:e4:33:fd:e3:60:97:ee:02:91: 24:ef:d3:d6:bb:0a:96:04:d8:aa:9b:83:9f:f1:cc: 0c:4c:31:33:de:5e:15:6f:a5:72:e6:68:3e:78:eb: 4e:71:c8:69:4a:89:94:19:75:3a:09:a0:fc:8f:c0: 71:30:73:24:7c:fd:cb:7d:8e:39:c9:39:32:62:b9: e6:e8:ad:b2:62:9b:e8:a0:a9:43:62:e4:c2:ea:ff: 76:04:20:2c:5c:05:80:ae:1b:1b:fe:00:85:24:5a: 5d:fe:66:01:ae:a2:9a:47:b2:1d:74:6f:2f:60:20: fe:c0:8f:02:25:67:b3:40:f0:57:e4:b0:07:b3:92: df:49:ef:01:51:97:f6:79:3b:89:9a:52:2f:e5:f3: fb:f0:67:f7:25:f9:6f:46:c5:10:a2:99:d8:14:6f: 86:e3:a3:6b:9a:12:74:7f:94:b9:7f:16:58:7a:da: b2:87:0c:10:65:e6:dc:f7:e4:75:68:cd:26:04:2b: 1f:96:e4:08:26:21:a1:54:aa:99:16:3e:d1:de:af: 14:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9C:34:A5:2F:24:F1:6A:11:B4:ED:CB:C9:D3:87:C2:48:15:33:8F X509v3 Authority Key Identifier: keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:47:4a:13:fa:26:18:ad:bd:3f:7f:3f:84:80:0a:90:a3:15: 34:03:47:cd:87:aa:98:a6:65:a1:88:85:0b:bb:e6:3d:e9:39: a6:e6:86:b6:6e:e8:4a:5a:0b:df:40:ac:e0:aa:05:d3:1d:43: 70:8d:4b:23:24:86:09:5c:15:d0:a1:e5:7f:7f:ff:3a:e3:9a: 38:d5:d0:c6:87:74:5b:43:89:39:0b:56:c0:00:c4:96:83:76: 68:95:da:e4:a1:fb:77:be:7d:cb:1a:da:28:2d:6c:64:b8:df: 78:fe:59:fe:79:16:7a:34:83:51:53:62:47:0c:32:32:ff:e6: c2:29:1f:ff:a1:5d:20:06:af:4e:62:e5:23:79:56:89:f9:c1: ee:7c:80:3a:26:37:5e:2a:8f:15:4b:ee:2b:03:3a:47:94:7d: 92:b7:42:0d:61:35:55:5e:fc:a4:70:3e:4a:da:15:c1:71:8a: 46:06:ab:c6:e8:05:1e:6a:fa:88:38:37:9f:bd:c5:78:c2:b3: 28:2e:20:b9:1d:b9:c2:ee:08:e1:68:a4:ec:4e:9b:24:ed:f7: a5:d6:35:36:3c:76:e0:24:73:b3:5f:5d:08:33:23:e1:70:aa: ab:d1:33:6c:f4:8d:c7:18:54:0e:df:c7:3a:b0:2a:0c:03:26: 14:f3:04:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EC9lBWEPWtzjUWClZRU5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0 OWQ3NGQwHhcNMjUxMjIwMTQwMDUyWhcNMjUxMjIxMTQwMDUyWjAzMTEwLwYDVQQD EygzNDljMzRhNTJmMjRmMTZhMTFiNGVkY2JjOWQzODdjMjQ4MTUzMzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49xmlSiJwcjgGOwRVSrHGUfh6Qj2 Q9bEqGNtfLX9aIkULoNQdYXQPyIpedWSyX/t3FPkM/3jYJfuApEk79PWuwqWBNiq m4Of8cwMTDEz3l4Vb6Vy5mg+eOtOcchpSomUGXU6CaD8j8BxMHMkfP3LfY45yTky Yrnm6K2yYpvooKlDYuTC6v92BCAsXAWArhsb/gCFJFpd/mYBrqKaR7IddG8vYCD+ wI8CJWezQPBX5LAHs5LfSe8BUZf2eTuJmlIv5fP78Gf3JflvRsUQopnYFG+G46Nr mhJ0f5S5fxZYetqyhwwQZebc9+R1aM0mBCsfluQIJiGhVKqZFj7R3q8UYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDScNKUvJPFqEbTty8nTh8JIFTOPMB8GA1UdIwQY MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt NjY0ZjA0ZDJhNjhkLzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0dKE/om GK29P38/hIAKkKMVNANHzYeqmKZloYiFC7vmPek5puaGtm7oSloL30Cs4KoF0x1D cI1LIySGCVwV0KHlf3//OuOaONXQxod0W0OJOQtWwADEloN2aJXa5KH7d759yxra KC1sZLjfeP5Z/nkWejSDUVNiRwwyMv/mwikf/6FdIAavTmLlI3lWifnB7nyAOiY3 XiqPFUvuKwM6R5R9krdCDWE1VV78pHA+StoVwXGKRgarxugFHmr6iDg3n73FeMKz KC4guR25wu4I4Wik7E6bJO33pdY1Njx24CRzs19dCDMj4XCqq9EzbPSNxxhUDt/H OrAqDAMmFPME5A== -----END CERTIFICATE-----Generated at Sat Dec 20 19:53:03 2025 by rpki-client