This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json) Hash identifier: PcFNMZhndHRF9sj1OZDMThKMUuQxZNIJM5jESjmEjz4= Subject key identifier: 83:73:26:C9:7B:32:60:35:78:7D:32:E9:2A:90:CE:B6:5A:D3:35:BB Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1 Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1 Certificate serial: 019B0F00E98D3CF8A0914C73FB770966DAE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft Manifest number: 16CA Signing time: Thu 11 Dec 2025 20:01:16 +0000 Manifest this update: Thu 11 Dec 2025 20:01:16 +0000 Manifest next update: Fri 12 Dec 2025 20:01:16 +0000 Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: jbhGnedLudr1biNlJ7NjHbxPAVocbb/0VgEkBpCaCvI=) 2: bPbl9DKxYJUxR3ZUVzukhGWYurM.roa (hash: FAnYMWhXeH8TjI8m2ivn5nzVc0hLKvZ4QbjQQh/aekU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:e9:8d:3c:f8:a0:91:4c:73:fb:77:09:66:da:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1 Validity Not Before: Dec 11 20:01:16 2025 GMT Not After : Dec 12 20:01:16 2025 GMT Subject: CN=837326c97b326035787d32e92a90ceb65ad335bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:09:9e:d0:7a:08:c4:43:74:b5:f7:b3:c0:1b: e9:01:a7:79:8c:27:48:ff:8a:24:a4:bb:c2:9d:d5: 7b:9d:a7:fe:20:73:b3:3d:17:ba:67:a6:81:f2:c0: d4:b1:37:de:58:90:0e:a7:dc:61:49:5b:0d:3f:7f: ff:48:bc:97:cf:c8:6c:6a:03:5d:f0:55:7f:8e:b8: 3e:99:be:90:71:d5:8a:2e:b1:df:0a:13:6f:fd:93: 84:2a:96:e8:bf:91:9d:56:80:40:73:3b:6e:75:24: d0:64:6c:d0:9b:81:c5:35:19:70:81:a0:bb:43:05: 6d:28:db:cf:a8:08:7c:7a:06:e3:02:cb:cd:3f:e7: 1e:c6:6a:76:21:05:55:a1:ab:df:6f:cd:2c:d0:63: 9d:89:b7:a3:96:c9:50:79:23:dd:1a:93:14:97:bb: c2:cd:3b:1f:74:be:66:81:c4:58:fc:e2:21:98:73: bb:bc:d2:5f:a5:a8:23:94:40:fe:0f:88:db:8c:23: 20:65:5d:85:55:ef:a3:be:6b:b2:2e:72:53:ae:57: 96:9b:db:d7:dd:cc:b2:f2:69:70:96:4f:f6:f9:f4: 6e:35:c0:40:12:81:27:75:61:34:24:7f:36:1b:46: 03:75:c4:18:b9:5d:68:dc:38:8e:20:28:41:83:52: 14:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:73:26:C9:7B:32:60:35:78:7D:32:E9:2A:90:CE:B6:5A:D3:35:BB X509v3 Authority Key Identifier: keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7d:f0:5f:f6:f2:e9:2f:b4:ae:d4:60:a2:92:b2:11:26:2e: d6:f8:34:f5:94:8e:64:07:c5:51:4d:96:cf:97:c4:a8:ed:b7: 4f:e3:37:91:fb:2b:2c:6b:3e:0f:dd:60:b3:56:22:7b:96:18: 31:85:71:25:c4:6d:06:82:44:3b:88:f5:ee:3e:b3:c8:7f:65: 09:42:8a:f9:14:bd:c2:14:0e:0a:a9:3b:bc:5d:38:d1:25:18: 72:90:af:19:d0:ba:56:13:a5:87:ff:cd:2b:72:db:72:60:cc: 68:70:56:c2:b0:ef:ea:ef:4f:1a:90:7d:cd:de:67:29:f6:42: 3b:8c:ee:c1:83:ac:de:03:9a:c0:88:81:68:11:05:de:32:6d: eb:94:f9:51:d3:84:4c:b3:aa:e7:81:d0:50:99:bf:4d:78:03: 11:2b:15:13:d4:63:bc:44:09:4f:43:19:9a:9a:0b:7c:71:41: 5b:3e:71:0c:c7:60:63:05:52:be:29:11:ba:ba:87:4a:e3:10: e4:fb:28:44:be:d3:1c:13:cd:7d:9d:10:f9:c6:e6:32:8f:de: 6e:82:87:70:5c:3f:e5:73:d8:36:f7:ed:86:c8:51:18:43:b3: 49:d5:43:35:40:c4:0c:bd:94:93:81:02:21:bf:46:89:c6:80: b2:d8:73:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAOmNPPigkUxz+3cJZtrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDIyYzI0MTQ3ZWM3OWZhOTA2NDY0YWIxNDNmZDQ3ZTNi ZWIzYTEwHhcNMjUxMjExMjAwMTE2WhcNMjUxMjEyMjAwMTE2WjAzMTEwLwYDVQQD Eyg4MzczMjZjOTdiMzI2MDM1Nzg3ZDMyZTkyYTkwY2ViNjVhZDMzNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwme0HoIxEN0tfezwBvpAad5jCdI /4okpLvCndV7naf+IHOzPRe6Z6aB8sDUsTfeWJAOp9xhSVsNP3//SLyXz8hsagNd 8FV/jrg+mb6QcdWKLrHfChNv/ZOEKpbov5GdVoBAcztudSTQZGzQm4HFNRlwgaC7 QwVtKNvPqAh8egbjAsvNP+cexmp2IQVVoavfb80s0GOdibejlslQeSPdGpMUl7vC zTsfdL5mgcRY/OIhmHO7vNJfpagjlED+D4jbjCMgZV2FVe+jvmuyLnJTrleWm9vX 3cyy8mlwlk/2+fRuNcBAEoEndWE0JH82G0YDdcQYuV1o3DiOIChBg1IURQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINzJsl7MmA1eH0y6SqQzrZa0zW7MB8GA1UdIwQY MBaAFNxCLCQUfsefqQZGSrFD/UfjvrOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMt MjE2NTEzNmM5ZDlhLzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMtMjE2NTEzNmM5ZDlh LzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe33wX/by 6S+0rtRgopKyESYu1vg09ZSOZAfFUU2Wz5fEqO23T+M3kfsrLGs+D91gs1Yie5YY MYVxJcRtBoJEO4j17j6zyH9lCUKK+RS9whQOCqk7vF040SUYcpCvGdC6VhOlh//N K3LbcmDMaHBWwrDv6u9PGpB9zd5nKfZCO4zuwYOs3gOawIiBaBEF3jJt65T5UdOE TLOq54HQUJm/TXgDESsVE9RjvEQJT0MZmpoLfHFBWz5xDMdgYwVSvikRurqHSuMQ 5PsoRL7THBPNfZ0Q+cbmMo/eboKHcFw/5XPYNvfthshRGEOzSdVDNUDEDL2Uk4EC Ib9GicaAsthzZw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:02:05 2025 by rpki-client