This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json) Hash identifier: 2b2eB2US66Wp6LK2HsT0d1YTzP7F2/Pee4Zk7480VbU= Subject key identifier: 28:02:7C:6C:4A:15:AE:09:7D:FB:21:8D:80:28:47:5F:BC:54:D4:60 Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26 Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26 Certificate serial: 019B3F4837533E70FAAC4EF2B6DBBBC8BADE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft Manifest number: 1792 Signing time: Sun 21 Dec 2025 05:00:55 +0000 Manifest this update: Sun 21 Dec 2025 05:00:55 +0000 Manifest next update: Mon 22 Dec 2025 05:00:55 +0000 Files and hashes: 1: N9sOXFw97UnrkSQWGmd4QE2g0Pc.roa (hash: FcVUr7Wqd51Nq1eKBFPb0ZOL/WKLNXNrrGtgMRztb2M=) 2: p6HHOYDEee_YFxcXEQQw4tj_loo.roa (hash: XVgmeoKKw2smz01W8p65Y0a7sBeyS3+sdPmsdrroyxo=) 3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: nBff4miK1mXMImjwJdaQRIfgwRS7jJkydgyh0Y/Qqng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:37:53:3e:70:fa:ac:4e:f2:b6:db:bb:c8:ba:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26 Validity Not Before: Dec 21 05:00:55 2025 GMT Not After : Dec 22 05:00:55 2025 GMT Subject: CN=28027c6c4a15ae097dfb218d8028475fbc54d460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7d:df:36:de:d5:99:69:00:fe:13:5a:45:5b: a1:db:18:1e:e0:6e:06:c7:16:a5:be:12:97:94:c8: 7a:97:91:93:99:57:88:93:93:66:27:21:75:6f:a9: f8:0e:32:0a:37:98:8a:8e:2b:4d:6a:26:60:65:81: cb:62:87:ba:0b:27:17:b5:a5:68:4f:4e:8f:c3:99: d3:a9:62:6a:3a:26:7c:c8:aa:de:e5:76:ae:ec:f4: ea:35:7b:01:bc:f3:e9:cd:14:16:5d:b8:a8:d4:a4: 38:05:b5:c2:fd:0b:97:b3:17:8f:33:86:c2:4f:91: 74:b6:9b:18:c9:43:ac:b9:85:c1:f2:88:a4:7c:85: 19:da:b2:d1:b3:91:db:eb:30:53:8f:58:54:a8:e0: 3c:6d:23:de:f8:18:41:b3:c2:f5:c9:0a:71:ce:9e: 81:63:72:a5:ee:ac:9c:06:b1:92:33:a9:ac:c1:36: db:d8:b1:31:68:0c:5a:cd:a0:61:7a:bc:b5:f8:10: cd:5e:1a:84:54:55:57:4d:d6:93:3d:6d:2e:a8:5b: c6:62:4d:44:ce:8e:77:09:cd:fb:88:01:31:c5:70: b2:3f:84:84:51:29:ba:5e:3d:d9:49:96:59:c9:c4: 78:3c:a3:64:13:54:e1:c8:80:af:5c:9b:55:db:a3: ea:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:02:7C:6C:4A:15:AE:09:7D:FB:21:8D:80:28:47:5F:BC:54:D4:60 X509v3 Authority Key Identifier: keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:31:cf:69:d3:e0:59:c2:91:28:12:1a:1f:9f:13:a4:16:3f: d9:81:15:18:63:d6:0f:5b:ef:05:56:1c:e0:ac:cd:1d:d0:bf: 3f:38:71:5d:dd:71:6d:68:c6:0d:27:77:e0:29:8b:47:f3:92: 54:1f:c3:96:17:dd:46:84:36:bd:91:fe:b7:22:0a:c5:8c:6e: 22:73:b7:fe:73:55:02:84:5d:2d:a2:d8:c7:ae:fd:11:4f:22: bb:06:38:ca:b1:04:ff:fc:9c:fc:d5:af:35:f0:c7:1a:9b:14: 8a:fd:5a:82:cf:6e:7e:de:e4:72:a5:ef:f8:f1:a2:e4:69:d4: f3:1f:bf:59:00:58:a3:75:73:f0:a2:f2:15:b7:fa:2d:6f:77: 26:54:d1:66:b6:fa:ad:16:d3:67:c2:d1:ba:ab:92:f3:47:38: 17:75:0c:9f:03:75:f3:c2:cc:87:87:63:6c:9c:4f:6b:77:05: 3a:34:c6:2e:21:1a:b6:b5:bc:29:19:da:02:54:17:b6:4b:45: 13:ab:5c:f5:7e:66:11:09:1a:aa:29:cd:55:d4:9a:5b:d2:9c: 2d:e2:48:e9:be:e3:76:4f:39:d8:9f:c7:fe:b6:32:7c:2c:6f: cc:33:c0:bd:61:2d:fe:b0:38:c7:86:21:92:aa:cb:d3:96:07: e9:a0:12:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SDdTPnD6rE7yttu7yLreMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzNmZjFlYzU1ZjQ5Mjk2ZGQ3MzQwMzlmYTAyODRjYzQw MGViMjYwHhcNMjUxMjIxMDUwMDU1WhcNMjUxMjIyMDUwMDU1WjAzMTEwLwYDVQQD EygyODAyN2M2YzRhMTVhZTA5N2RmYjIxOGQ4MDI4NDc1ZmJjNTRkNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X3fNt7VmWkA/hNaRVuh2xge4G4G xxalvhKXlMh6l5GTmVeIk5NmJyF1b6n4DjIKN5iKjitNaiZgZYHLYoe6CycXtaVo T06Pw5nTqWJqOiZ8yKre5Xau7PTqNXsBvPPpzRQWXbio1KQ4BbXC/QuXsxePM4bC T5F0tpsYyUOsuYXB8oikfIUZ2rLRs5Hb6zBTj1hUqOA8bSPe+BhBs8L1yQpxzp6B Y3Kl7qycBrGSM6mswTbb2LExaAxazaBhery1+BDNXhqEVFVXTdaTPW0uqFvGYk1E zo53Cc37iAExxXCyP4SEUSm6Xj3ZSZZZycR4PKNkE1ThyICvXJtV26PqwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgCfGxKFa4JffshjYAoR1+8VNRgMB8GA1UdIwQY MBaAFK9z/x7FX0kpbdc0A5+gKEzEAOsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZWE1ODEtNWNkZS00NTc0LWJhMGEt MmM2MmRlN2IzZTQ1LzEvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jZWE1ODEtNWNkZS00NTc0LWJhMGEtMmM2MmRlN2IzZTQ1 LzEvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDHPadPg WcKRKBIaH58TpBY/2YEVGGPWD1vvBVYc4KzNHdC/PzhxXd1xbWjGDSd34CmLR/OS VB/DlhfdRoQ2vZH+tyIKxYxuInO3/nNVAoRdLaLYx679EU8iuwY4yrEE//yc/NWv NfDHGpsUiv1ags9uft7kcqXv+PGi5GnU8x+/WQBYo3Vz8KLyFbf6LW93JlTRZrb6 rRbTZ8LRuquS80c4F3UMnwN188LMh4djbJxPa3cFOjTGLiEatrW8KRnaAlQXtktF E6tc9X5mEQkaqinNVdSaW9KcLeJI6b7jdk852J/H/rYyfCxvzDPAvWEt/rA4x4Yh kqrL05YH6aASag== -----END CERTIFICATE-----Generated at Sun Dec 21 07:20:59 2025 by rpki-client