This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft File: 3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json) Hash identifier: wmTElofoZogm8cC8CE/njJIO9ZSJAvhUluOkqmUl69o= Subject key identifier: C4:B1:0D:9C:78:AF:B9:1D:7D:8A:57:06:6E:D3:C4:AA:5C:3E:33:6E Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30 Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30 Certificate serial: 019B0B24704E1B9DD857E16FD94A7E9D863D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 02:01:35 +0000 Manifest this update: Thu 11 Dec 2025 02:01:35 +0000 Manifest next update: Fri 12 Dec 2025 02:01:35 +0000 Files and hashes: 1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: EcwqojKzQqO6MYU9D0mXJ5PAyd9S+VzC088qUSIR8Cw=) 2: E2CYjkWjcDRjmlm-uGqq2cX3-bw.roa (hash: SlY4rIEahH8X3kEcUUwCddcbIz7/S16cK2GTdrw1N+Y=) 3: EpMLaYChUvPW43eW66M41o2KSpc.roa (hash: PU2MBAWGAP6VAtPvAGor5W80iPyTDbgTBn9WAJahQLs=) 4: w0PKwUFljbRq5uVzYVthjHLkXQY.roa (hash: 6g4grLiYtJiUu1m03msVb0si+AZ8cTE6ZMD8wFTtcLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 02:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:24:70:4e:1b:9d:d8:57:e1:6f:d9:4a:7e:9d:86:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30 Validity Not Before: Dec 11 02:01:35 2025 GMT Not After : Dec 12 02:01:35 2025 GMT Subject: CN=c4b10d9c78afb91d7d8a57066ed3c4aa5c3e336e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d4:bb:da:a1:e7:99:54:7b:4d:06:b8:3d:9b: 61:e9:0f:a2:75:9f:69:c1:ec:77:aa:0c:ae:25:19: cc:67:a0:d5:d9:28:51:70:a0:6e:3e:d3:3e:e8:79: cb:de:86:fd:38:c5:3c:55:8c:c8:81:bd:70:fa:7d: 96:aa:35:c8:57:44:c5:24:c5:56:c5:0b:28:9e:79: 63:ae:1d:25:fa:3a:94:d0:d8:a0:b2:e5:82:2d:02: b2:2f:b9:22:eb:6a:ab:fc:1d:f8:b3:5f:3a:f1:ac: bd:df:24:2d:d3:5c:b5:eb:df:f6:e2:c7:39:ea:64: 60:ea:be:75:85:f2:77:30:17:28:c7:79:48:1e:be: bb:d9:f9:70:61:aa:f1:05:b6:fa:53:ff:af:e7:b7: fd:8a:92:63:55:96:38:6f:30:f2:29:11:fd:28:42: a0:c1:b8:46:88:78:39:2b:38:13:4a:3d:01:5b:e1: b6:26:ed:d3:0c:dc:85:88:34:85:46:4c:6b:dd:22: 97:c5:8a:aa:55:17:ac:85:1e:33:1e:ac:e4:d7:0b: 5c:8c:28:0a:0a:f0:a2:b0:47:4a:37:9b:01:5f:aa: 34:d3:46:42:c3:5b:9e:60:54:38:70:13:d9:08:66: 8d:38:8c:4c:86:65:33:78:b7:1a:87:f6:62:3e:97: 16:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B1:0D:9C:78:AF:B9:1D:7D:8A:57:06:6E:D3:C4:AA:5C:3E:33:6E X509v3 Authority Key Identifier: keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d7:c0:82:f3:b7:59:12:8a:e2:7a:1f:9a:af:1f:17:65:2c: b3:9f:23:9e:fa:cd:b2:12:37:42:ba:a0:f2:de:6c:57:c8:8c: a9:df:29:19:ed:4d:6b:d8:cb:38:a8:69:32:f0:f8:f8:97:5b: 2b:37:e3:bd:24:fd:6e:6f:42:d5:24:6f:fb:0b:4f:25:a6:1a: c2:b3:83:53:61:86:93:3a:26:f9:84:06:c5:4e:fe:fd:32:3a: d0:67:2c:3f:9d:0d:8a:07:04:32:4a:46:58:ce:a9:01:aa:c5: 3e:2f:05:80:2b:f8:bb:ee:9a:71:f9:cb:be:98:dc:95:14:8f: bd:4c:cb:a4:2e:18:b3:6f:ae:db:cb:04:95:3b:9f:d9:5a:80: ce:67:dd:78:d3:02:43:79:06:1f:b7:e9:0b:62:82:fc:e5:fe: e8:fd:bd:f1:6c:a2:0d:13:25:c3:52:2c:fe:7f:ea:81:c8:6e: 86:3b:b2:6f:ba:3b:ec:29:7e:1d:62:99:f0:67:17:23:23:c9: 41:d6:b4:61:6a:5a:cd:89:40:13:e3:69:97:3d:02:7b:0a:7e: 8d:55:4a:4c:7d:96:5a:60:64:58:68:c3:8c:bb:66:2b:10:96: 3d:61:38:38:43:31:e9:77:38:95:13:7f:6c:56:1a:ec:c2:df: ce:bf:18:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLJHBOG53YV+Fv2Up+nYY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDcyMzlkYjgxZDYxZjk4ZDU4NjM4M2NjYzEyNWQ2NjEw NmNiMzAwHhcNMjUxMjExMDIwMTM1WhcNMjUxMjEyMDIwMTM1WjAzMTEwLwYDVQQD EyhjNGIxMGQ5Yzc4YWZiOTFkN2Q4YTU3MDY2ZWQzYzRhYTVjM2UzMzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9S72qHnmVR7TQa4PZth6Q+idZ9p wex3qgyuJRnMZ6DV2ShRcKBuPtM+6HnL3ob9OMU8VYzIgb1w+n2WqjXIV0TFJMVW xQsonnljrh0l+jqU0NigsuWCLQKyL7ki62qr/B34s1868ay93yQt01y169/24sc5 6mRg6r51hfJ3MBcox3lIHr672flwYarxBbb6U/+v57f9ipJjVZY4bzDyKRH9KEKg wbhGiHg5KzgTSj0BW+G2Ju3TDNyFiDSFRkxr3SKXxYqqVReshR4zHqzk1wtcjCgK CvCisEdKN5sBX6o000ZCw1ueYFQ4cBPZCGaNOIxMhmUzeLcah/ZiPpcWlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSxDZx4r7kdfYpXBm7TxKpcPjNuMB8GA1UdIwQY MBaAFN7XI524HWH5jVhjg8zBJdZhBsswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iNmM0MjYtNzZkNS00YTgyLTliNWYt ODU2YjY1Yzc1YzI2LzEvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iNmM0MjYtNzZkNS00YTgyLTliNWYtODU2YjY1Yzc1YzI2 LzEvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtfAgvO3 WRKK4nofmq8fF2Uss58jnvrNshI3Qrqg8t5sV8iMqd8pGe1Na9jLOKhpMvD4+Jdb KzfjvST9bm9C1SRv+wtPJaYawrODU2GGkzom+YQGxU7+/TI60GcsP50NigcEMkpG WM6pAarFPi8FgCv4u+6acfnLvpjclRSPvUzLpC4Ys2+u28sElTuf2VqAzmfdeNMC Q3kGH7fpC2KC/OX+6P298WyiDRMlw1Is/n/qgchuhjuyb7o77Cl+HWKZ8GcXIyPJ Qda0YWpazYlAE+Nplz0Cewp+jVVKTH2WWmBkWGjDjLtmKxCWPWE4OEMx6Xc4lRN/ bFYa7MLfzr8YKw== -----END CERTIFICATE-----Generated at Thu Dec 11 12:34:36 2025 by rpki-client