This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json) Hash identifier: mPBbFH7qL6tq06mZVsE7bkPCtu21WRTlzEX0b5d/sTI= Subject key identifier: 18:89:2D:3F:40:13:94:1C:8E:27:60:F4:3D:44:23:8E:ED:3C:36:7D Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e Certificate serial: 019B462738474A2E428F020A7476DF4DAAD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft Manifest number: 0EC3 Signing time: Mon 22 Dec 2025 13:02:13 +0000 Manifest this update: Mon 22 Dec 2025 13:02:13 +0000 Manifest next update: Tue 23 Dec 2025 13:02:13 +0000 Files and hashes: 1: 3f1U8HcG3gg1d7c-AMV0OeLqnk4.roa (hash: 6g/YiGFM7SXH1avma+AWhdPQYeSM8xFquer6wIrnMrw=) 2: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: gMJ3bQ3md8itEFQr5fp8GouvU+mdPV4CRIE4HdRGdbc=) 3: LKSIMzg2qS8EWL02SO5YPjrz_I0.roa (hash: ZtwqDuK6zfdHnP5iApdAnlCr/naZTEL8mOtuOOiHgUY=) 4: uKO3HquanWKUmJ90M8YK1DIe1PA.roa (hash: XUrZ548wn+DveWLDDAs++NbjxnozKfTkNs4dRtLEX4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:38:47:4a:2e:42:8f:02:0a:74:76:df:4d:aa:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e Validity Not Before: Dec 22 13:02:13 2025 GMT Not After : Dec 23 13:02:13 2025 GMT Subject: CN=18892d3f4013941c8e2760f43d44238eed3c367d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:f9:d2:9b:01:1c:63:5d:34:a6:6d:4a:a6: b2:cd:27:40:9b:6b:26:86:74:41:8e:50:14:5a:91: 9c:a9:76:65:c9:1f:b4:c3:86:3e:91:b2:45:96:d3: a2:87:c6:69:bb:1a:f5:aa:b0:01:3d:ab:31:43:0e: 77:7e:3a:cb:5d:66:8c:af:38:30:14:c4:f6:c3:65: 3d:57:00:41:88:26:7e:44:02:c5:2e:4b:5c:ff:0f: 1d:20:3f:4b:24:9a:a8:a4:b2:82:a1:c9:d4:a3:c7: 3f:81:26:96:fe:25:a1:fa:f8:94:1d:9a:7c:66:34: 89:85:66:14:03:3a:f4:74:8e:7b:0f:59:20:b3:cf: 5a:bd:de:54:2e:3a:2a:37:ac:02:d9:c7:7c:e8:07: aa:75:7d:f9:37:85:97:4a:cd:06:e4:da:88:15:e4: 9e:22:f9:48:03:43:c5:f4:f3:95:f7:cd:d1:b2:66: a9:b2:0a:f2:aa:d1:24:88:e9:20:fc:79:f9:d3:35: f2:f1:66:ac:db:4a:85:69:9c:6b:48:50:db:0b:b2: 16:57:9e:f4:d2:24:cc:9a:bb:44:46:ee:b1:79:18: de:74:74:ff:1a:cb:1b:78:1a:70:4e:cf:39:71:d2: 8c:41:be:4c:ba:78:ae:c8:61:80:35:f8:4b:9b:e3: 5b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:89:2D:3F:40:13:94:1C:8E:27:60:F4:3D:44:23:8E:ED:3C:36:7D X509v3 Authority Key Identifier: keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:fd:5d:26:f2:52:42:f8:a7:97:b0:a5:07:a3:7b:75:9e:79: ff:92:81:ea:6e:83:3c:d4:0a:50:49:9a:66:c6:99:84:97:bf: e7:48:cf:b0:f8:cb:2c:a9:ac:bb:49:a8:81:d4:27:66:76:b2: 86:15:34:8e:8d:e8:56:75:ce:f1:24:7d:d9:3d:aa:d6:da:40: 61:99:d3:1d:c8:6e:f0:2f:12:76:2a:cd:89:71:e4:0a:39:18: be:16:af:e4:4c:90:19:3e:28:da:15:b7:da:01:b7:ee:5f:88: 18:eb:8c:01:11:e6:35:f2:9c:3d:5c:67:15:5e:a0:77:9a:7f: 2a:b1:9d:11:59:20:8f:17:e2:9f:6f:1f:e1:e0:20:0c:56:05: e9:cb:80:e4:46:fa:e6:d1:59:8f:e3:e6:df:da:aa:b5:1d:80: 6c:42:90:fe:1f:f6:8d:8d:12:ee:c6:94:cf:e1:b8:bc:f2:40: 48:24:04:40:a2:ed:0c:cc:75:ef:e5:40:eb:38:47:dc:27:9d: 98:be:75:40:10:89:1e:c1:01:bf:74:ff:79:21:12:ca:ce:9e: 63:97:1e:72:1d:63:d9:1f:9d:ed:16:52:bd:ee:18:1f:41:11: 72:15:17:0e:2a:34:5b:54:bb:1b:48:dd:ec:0f:f6:7a:ac:86: 5e:a0:71:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJzhHSi5CjwIKdHbfTarRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDg1ODJiMDI0Mzg2M2M1NzJjZTI1Nzg2Y2NiMzZmZjc5 NWIyMmUwHhcNMjUxMjIyMTMwMjEzWhcNMjUxMjIzMTMwMjEzWjAzMTEwLwYDVQQD EygxODg5MmQzZjQwMTM5NDFjOGUyNzYwZjQzZDQ0MjM4ZWVkM2MzNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMP50psBHGNdNKZtSqayzSdAm2sm hnRBjlAUWpGcqXZlyR+0w4Y+kbJFltOih8Zpuxr1qrABPasxQw53fjrLXWaMrzgw FMT2w2U9VwBBiCZ+RALFLktc/w8dID9LJJqopLKCocnUo8c/gSaW/iWh+viUHZp8 ZjSJhWYUAzr0dI57D1kgs89avd5ULjoqN6wC2cd86AeqdX35N4WXSs0G5NqIFeSe IvlIA0PF9POV983RsmapsgryqtEkiOkg/Hn50zXy8Was20qFaZxrSFDbC7IWV570 0iTMmrtERu6xeRjedHT/GssbeBpwTs85cdKMQb5MuniuyGGANfhLm+NbsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiJLT9AE5Qcjidg9D1EI47tPDZ9MB8GA1UdIwQY MBaAFN7YWCsCQ4Y8VyziV4bMs2/3lbIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jYTUxMGMtYjZkMS00ZWIzLThkZDEt NDk4ZjRjMTBiNjU1LzEvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jYTUxMGMtYjZkMS00ZWIzLThkZDEtNDk4ZjRjMTBiNjU1 LzEvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqv1dJvJS Qvinl7ClB6N7dZ55/5KB6m6DPNQKUEmaZsaZhJe/50jPsPjLLKmsu0mogdQnZnay hhU0jo3oVnXO8SR92T2q1tpAYZnTHchu8C8SdirNiXHkCjkYvhav5EyQGT4o2hW3 2gG37l+IGOuMARHmNfKcPVxnFV6gd5p/KrGdEVkgjxfin28f4eAgDFYF6cuA5Eb6 5tFZj+Pm39qqtR2AbEKQ/h/2jY0S7saUz+G4vPJASCQEQKLtDMx17+VA6zhH3Ced mL51QBCJHsEBv3T/eSESys6eY5cech1j2R+d7RZSve4YH0ERchUXDio0W1S7G0jd 7A/2eqyGXqBxyQ== -----END CERTIFICATE-----Generated at Mon Dec 22 20:30:38 2025 by rpki-client