This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json) Hash identifier: REPJkoM+/LAryYFxKMUos6RTygqcKE3snS9n3oNwABg= Subject key identifier: A6:1E:7D:F2:39:F3:D9:BB:67:1B:61:B7:5C:B2:01:6C:26:E1:9F:D1 Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26 Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26 Certificate serial: 019B3EA388E0DC0B33FEA3E9AB0C9A4EFA3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft Manifest number: 116F Signing time: Sun 21 Dec 2025 02:01:03 +0000 Manifest this update: Sun 21 Dec 2025 02:01:03 +0000 Manifest next update: Mon 22 Dec 2025 02:01:03 +0000 Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: XAFPuk/j8fJkJPPv4tOXljBOWy9nVFSqPZ/ZasaQ8GQ=) 2: HbrG3H8i4MVchy7ux-rBNewfgN4.roa (hash: ZEnkqludW6ORRLo4vaUnR4azLQNvPJWfXdiBq5telHQ=) 3: eqT6wyPQANegQWczS_E8NsRIGH0.roa (hash: uVTDWyi87OupvvigMLyo7l17Ar6OD8Dv20/y/RB28lE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:88:e0:dc:0b:33:fe:a3:e9:ab:0c:9a:4e:fa:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26 Validity Not Before: Dec 21 02:01:03 2025 GMT Not After : Dec 22 02:01:03 2025 GMT Subject: CN=a61e7df239f3d9bb671b61b75cb2016c26e19fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:0f:dc:84:48:93:75:5e:56:7a:32:d5:46: d4:17:7c:af:ae:b7:31:fa:8a:8f:0c:91:62:3f:7f: 13:83:24:09:57:e8:43:c7:aa:0b:b1:1a:ab:9e:c5: 8e:a9:d5:e5:e6:4d:61:6a:ea:31:32:e6:ff:df:41: 33:40:6c:16:75:1b:34:b9:42:a3:9d:22:e0:8c:a0: 43:81:4f:0a:bd:99:6b:c3:90:05:4c:19:73:b0:c1: db:db:5c:7d:77:5f:04:55:07:c2:50:ce:a3:f1:06: 42:16:ed:22:9c:f2:cd:06:19:27:7f:18:30:8a:ef: 89:01:35:96:98:26:f2:5b:ef:da:87:c1:f2:18:25: 43:35:fd:b4:c0:87:c2:75:95:ad:16:98:c4:d5:2f: 6d:5a:03:af:5d:06:34:3a:e0:17:f0:b0:1b:12:02: 1f:81:de:bc:c1:68:d0:05:e3:14:db:98:a7:33:5b: bb:9b:1a:83:b1:3c:a8:13:5a:8e:dc:62:ec:49:61: 86:fa:3c:32:85:24:42:57:91:75:2b:e5:15:5d:30: b2:ee:03:5c:80:d9:a2:5a:91:30:d6:83:49:3a:60: 3c:11:fb:ee:c7:f1:61:67:06:18:0b:f1:22:cd:66: 6b:d9:f2:e4:d9:5b:3c:b8:31:bf:0b:29:6f:6f:2d: ba:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1E:7D:F2:39:F3:D9:BB:67:1B:61:B7:5C:B2:01:6C:26:E1:9F:D1 X509v3 Authority Key Identifier: keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:44:39:82:e5:f4:ea:18:a4:ce:15:42:69:89:5c:c0:77:ef: ef:1a:ee:6f:9a:90:3b:aa:0b:41:bc:1a:36:30:73:27:da:0f: 85:2a:ec:b2:98:e2:15:a2:6c:81:32:85:75:91:0b:6e:28:b1: d8:be:8b:b0:c3:a8:a2:e2:06:d9:b6:c3:12:3a:dd:a7:a6:43: 22:cb:67:61:d6:8a:e9:2f:b7:e4:8b:2b:f9:b3:15:aa:cb:ee: 73:c1:77:2f:0c:fc:3c:8b:f7:47:25:4c:09:aa:5a:a6:d6:17: 47:98:42:23:3b:e6:7c:fb:90:1a:bd:7c:13:8e:e8:93:d0:96: a0:18:33:cc:f8:16:06:2f:5e:5e:b0:81:69:f9:36:9f:f0:7f: 3a:98:de:b7:48:e3:3f:48:42:b2:5f:1a:a4:56:76:f0:13:e4: 42:1c:ab:e2:a7:59:f1:84:c9:a4:02:50:2f:62:17:8a:4b:84: 09:ba:4a:f2:fb:20:5b:c5:05:03:a1:be:9c:9e:be:ea:a8:07: 67:e9:8f:25:0a:e0:37:a3:f4:d8:ed:4c:12:d5:3b:9a:08:75: de:d2:e0:f6:40:1d:bf:cc:09:86:6d:75:e5:41:17:87:f2:b8: 11:e0:2b:10:31:70:c2:e8:aa:64:c8:0b:cb:2c:b0:76:d4:3c: 5b:14:aa:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o4jg3Asz/qPpqwyaTvo+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTRhNDI5ZTY2NThhYmI3MGEzNzkyYzE3MmQ3ZWQ2MmVi OGZhMjYwHhcNMjUxMjIxMDIwMTAzWhcNMjUxMjIyMDIwMTAzWjAzMTEwLwYDVQQD EyhhNjFlN2RmMjM5ZjNkOWJiNjcxYjYxYjc1Y2IyMDE2YzI2ZTE5ZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLEP3IRIk3VeVnoy1UbUF3yvrrcx +oqPDJFiP38TgyQJV+hDx6oLsRqrnsWOqdXl5k1hauoxMub/30EzQGwWdRs0uUKj nSLgjKBDgU8KvZlrw5AFTBlzsMHb21x9d18EVQfCUM6j8QZCFu0inPLNBhknfxgw iu+JATWWmCbyW+/ah8HyGCVDNf20wIfCdZWtFpjE1S9tWgOvXQY0OuAX8LAbEgIf gd68wWjQBeMU25inM1u7mxqDsTyoE1qO3GLsSWGG+jwyhSRCV5F1K+UVXTCy7gNc gNmiWpEw1oNJOmA8Efvux/FhZwYYC/EizWZr2fLk2Vs8uDG/Cylvby26lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYeffI589m7Zxtht1yyAWwm4Z/RMB8GA1UdIwQY MBaAFN4UpCnmZYq7cKN5LBctftYuuPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEt MDVkOWMxY2Q3NDI1LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEtMDVkOWMxY2Q3NDI1 LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUQ5guX0 6hikzhVCaYlcwHfv7xrub5qQO6oLQbwaNjBzJ9oPhSrsspjiFaJsgTKFdZELbiix 2L6LsMOoouIG2bbDEjrdp6ZDIstnYdaK6S+35Isr+bMVqsvuc8F3Lwz8PIv3RyVM CapaptYXR5hCIzvmfPuQGr18E47ok9CWoBgzzPgWBi9eXrCBafk2n/B/Opjet0jj P0hCsl8apFZ28BPkQhyr4qdZ8YTJpAJQL2IXikuECbpK8vsgW8UFA6G+nJ6+6qgH Z+mPJQrgN6P02O1MEtU7mgh13tLg9kAdv8wJhm115UEXh/K4EeArEDFwwuiqZMgL yyywdtQ8WxSqiA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:44:13 2025 by rpki-client