This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft File: 3pj4NjKYKX-6uupodyArXEQOWpA.mft (raw, json) Hash identifier: YyHKmQp3PTg2bd05m4mfhfxlj517RXt0uFC5KqQrF9o= Subject key identifier: 38:2C:34:D4:8B:9B:A7:AF:33:9C:98:43:F7:AF:D3:9C:6F:67:4A:6E Authority key identifier: DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90 Certificate issuer: /CN=de98f8363298297fbabaea6877202b5c440e5a90 Certificate serial: 019B66FB0E498AF974F0C9FE5E81C01DA8CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft Manifest number: 0E2D Signing time: Sun 28 Dec 2025 22:01:27 +0000 Manifest this update: Sun 28 Dec 2025 22:01:27 +0000 Manifest next update: Mon 29 Dec 2025 22:01:27 +0000 Files and hashes: 1: 3pj4NjKYKX-6uupodyArXEQOWpA.crl (hash: +8jQggwMXDTEhSOuUAAVZm+NNVVFk/yPBwVdveF+x1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:0e:49:8a:f9:74:f0:c9:fe:5e:81:c0:1d:a8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de98f8363298297fbabaea6877202b5c440e5a90 Validity Not Before: Dec 28 22:01:27 2025 GMT Not After : Dec 29 22:01:27 2025 GMT Subject: CN=382c34d48b9ba7af339c9843f7afd39c6f674a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:ae:80:f3:36:cc:05:0c:02:7d:49:8e:55: cb:c9:de:07:7b:49:a8:db:f7:ba:a2:73:4e:eb:0c: 5c:77:71:c9:ba:4d:8c:d7:e3:9a:b0:1b:49:f0:76: da:80:e0:e0:f1:32:9b:2c:83:e3:26:89:13:43:e8: f7:20:41:f3:c6:38:8e:3b:20:c5:1a:8f:84:b2:97: 76:96:ea:97:4a:df:30:ff:32:6a:26:b5:bd:ff:2d: ea:8f:d9:e8:ad:ad:22:b2:d3:33:d9:e8:36:ea:9a: 31:1f:7d:42:1b:60:ba:ff:e6:02:2d:1c:1e:0b:c7: 9f:67:01:26:54:cf:54:cb:35:f4:01:a1:14:9d:97: 40:be:ba:9f:c2:2c:b7:5d:28:6a:85:0e:dc:4f:c7: 6b:96:f9:8e:c4:f7:bb:67:2b:61:d1:9c:f6:80:d7: 2f:62:6e:78:bd:5f:b4:63:f6:38:b3:be:6f:02:ee: dd:c9:7a:a5:bf:4c:09:9e:bd:5f:17:bd:7b:d0:e8: dc:24:e7:c9:1a:4f:2a:c5:75:96:53:a2:c3:be:ba: 5a:d5:b0:b1:cb:bb:c7:8c:d8:59:8d:82:ae:ac:4b: 69:84:e7:a8:5f:0e:d3:25:b5:76:bc:c6:f3:38:06: d7:db:01:24:86:32:55:f6:81:46:ec:16:f8:f7:5c: a0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2C:34:D4:8B:9B:A7:AF:33:9C:98:43:F7:AF:D3:9C:6F:67:4A:6E X509v3 Authority Key Identifier: keyid:DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9a:20:b1:0c:ba:47:1f:61:63:4f:0a:0f:9e:d8:21:68:cc: 38:a2:d1:87:b8:57:8b:41:2a:8a:d6:29:fd:90:4c:a9:23:b7: b4:f4:5d:09:af:43:66:fb:1d:f8:53:20:b4:d7:ee:67:93:57: 0d:96:17:6f:c6:5f:48:6b:ff:c8:f1:31:ba:0d:19:a8:28:b9: 9e:84:2e:bc:fe:63:dd:03:f5:ee:09:88:88:50:1c:0f:08:c8: 88:95:6a:ce:c8:5d:77:07:0d:01:1e:63:d0:76:e7:85:9d:73: 53:f5:f4:13:1e:c7:13:30:54:17:dc:59:e4:71:f8:f7:fd:9b: 16:2c:dc:03:57:9e:c8:97:e3:92:ec:a2:c9:8e:01:14:99:79: c6:a2:89:f5:51:5c:16:96:e0:0a:3a:d9:85:82:93:fc:37:72: 09:b1:b1:bc:fe:5f:8a:ee:f6:86:6e:04:e0:4e:5c:23:ae:48: 32:00:c0:16:70:a1:85:2b:f6:86:d7:8a:fd:cf:56:1b:56:a5: 2a:29:e1:ba:fd:87:7f:0b:6f:21:a8:df:ea:28:31:96:08:df: 70:9e:ba:57:9f:80:68:75:b9:d6:d9:61:49:a1:50:75:ed:2f: bd:9c:22:12:c2:f1:8f:93:3c:53:fa:1d:3a:7d:73:99:1d:17: 70:05:81:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+w5Jivl08Mn+XoHAHajKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOThmODM2MzI5ODI5N2ZiYWJhZWE2ODc3MjAyYjVjNDQw ZTVhOTAwHhcNMjUxMjI4MjIwMTI3WhcNMjUxMjI5MjIwMTI3WjAzMTEwLwYDVQQD EygzODJjMzRkNDhiOWJhN2FmMzM5Yzk4NDNmN2FmZDM5YzZmNjc0YTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjCugPM2zAUMAn1JjlXLyd4He0mo 2/e6onNO6wxcd3HJuk2M1+OasBtJ8HbagODg8TKbLIPjJokTQ+j3IEHzxjiOOyDF Go+Espd2luqXSt8w/zJqJrW9/y3qj9nora0istMz2eg26poxH31CG2C6/+YCLRwe C8efZwEmVM9UyzX0AaEUnZdAvrqfwiy3XShqhQ7cT8drlvmOxPe7Zyth0Zz2gNcv Ym54vV+0Y/Y4s75vAu7dyXqlv0wJnr1fF7170OjcJOfJGk8qxXWWU6LDvrpa1bCx y7vHjNhZjYKurEtphOeoXw7TJbV2vMbzOAbX2wEkhjJV9oFG7Bb491ygsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgsNNSLm6evM5yYQ/ev05xvZ0puMB8GA1UdIwQY MBaAFN6Y+DYymCl/urrqaHcgK1xEDlqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ODBlMjktN2Q4My00NTU4LWI0MTEt ZTdmYmQ1MGUwMzQ5LzEvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82ODBlMjktN2Q4My00NTU4LWI0MTEtZTdmYmQ1MGUwMzQ5 LzEvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJogsQy6 Rx9hY08KD57YIWjMOKLRh7hXi0EqitYp/ZBMqSO3tPRdCa9DZvsd+FMgtNfuZ5NX DZYXb8ZfSGv/yPExug0ZqCi5noQuvP5j3QP17gmIiFAcDwjIiJVqzshddwcNAR5j 0HbnhZ1zU/X0Ex7HEzBUF9xZ5HH49/2bFizcA1eeyJfjkuyiyY4BFJl5xqKJ9VFc FpbgCjrZhYKT/DdyCbGxvP5fiu72hm4E4E5cI65IMgDAFnChhSv2hteK/c9WG1al Kinhuv2HfwtvIajf6igxlgjfcJ66V5+AaHW51tlhSaFQde0vvZwiEsLxj5M8U/od On1zmR0XcAWBrw== -----END CERTIFICATE-----Generated at Mon Dec 29 01:52:29 2025 by rpki-client