This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft File: 3tRskpaCjJwCVTCqaEFgmt8FaaA.mft (raw, json) Hash identifier: T0+WOQqz3yGAvyK8UZYrCjzfYl52Yo/aUpVfu/ut41o= Subject key identifier: 31:D4:D2:09:0B:56:A8:0D:42:5A:C7:D1:39:02:75:9B:5F:47:A8:85 Authority key identifier: DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0 Certificate issuer: /CN=ded46c9296828c9c025530aa6841609adf0569a0 Certificate serial: 019B31FA4EA1228EBD5DDAF8655BBD9821CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft Manifest number: 049A Signing time: Thu 18 Dec 2025 15:00:45 +0000 Manifest this update: Thu 18 Dec 2025 15:00:45 +0000 Manifest next update: Fri 19 Dec 2025 15:00:45 +0000 Files and hashes: 1: 3tRskpaCjJwCVTCqaEFgmt8FaaA.crl (hash: EjqX0eMmVeMLv+pxc/GFzusE+djhg44+6rrgNyjAL5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:4e:a1:22:8e:bd:5d:da:f8:65:5b:bd:98:21:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded46c9296828c9c025530aa6841609adf0569a0 Validity Not Before: Dec 18 15:00:45 2025 GMT Not After : Dec 19 15:00:45 2025 GMT Subject: CN=31d4d2090b56a80d425ac7d13902759b5f47a885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a4:31:a8:cf:ff:60:a9:5c:07:6d:9d:4a:07: 08:db:20:e7:eb:a0:10:3c:19:80:a5:96:bf:6e:29: 1e:ce:1c:b7:98:29:ef:a1:31:a9:22:95:d2:d6:77: ef:57:3d:d3:c4:63:3d:55:ef:f3:42:5e:8a:e0:40: dd:78:2a:33:13:f3:0b:35:8c:96:e3:08:75:8f:41: 1e:68:41:0a:1d:89:38:ac:23:d3:eb:17:10:48:36: b9:bc:b0:7f:7f:b5:9b:2f:4e:ce:e5:bd:df:09:1f: ed:c9:d0:26:53:4d:4e:cc:fc:7f:4f:01:81:c0:c3: ee:a9:6f:f2:5e:2f:c0:95:19:ae:de:ae:40:5a:f8: 65:56:1f:e3:29:5e:9b:db:1f:a0:0b:8c:ed:e6:36: d9:2a:d9:0a:95:6a:a7:3c:bc:1c:c8:dd:99:7f:3f: 47:a5:96:2e:75:3e:2e:e9:f7:00:99:95:16:ab:f5: 17:43:d7:8c:9c:ff:e4:0e:4d:7b:0d:f1:b1:61:bc: bd:99:44:70:d8:66:01:48:ff:62:66:0e:d9:6a:9e: c8:89:3d:62:da:f7:9f:97:6c:a3:76:02:49:22:4c: fb:f9:c8:4e:a3:6f:34:7e:7c:7f:66:98:59:84:03: f5:9f:a1:ff:06:be:30:3e:58:4f:04:bd:9e:15:3b: 0d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D4:D2:09:0B:56:A8:0D:42:5A:C7:D1:39:02:75:9B:5F:47:A8:85 X509v3 Authority Key Identifier: keyid:DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:0b:73:90:45:30:0c:9d:70:e5:5b:ac:7f:fb:12:23:6a:e5: 5b:e9:99:a4:86:2f:c8:d5:61:60:0c:74:76:f4:13:d0:c0:7f: f9:ba:0a:24:25:08:36:2b:ee:e8:c1:8a:1f:b7:70:48:53:4c: 6b:6a:70:68:0c:44:c8:2c:ca:1d:f8:ff:af:ae:ed:e2:96:11: 33:f0:ba:82:93:3d:3b:93:f0:87:4c:ac:fe:cb:99:55:8e:b5: 50:cc:68:ab:66:aa:62:48:50:88:da:59:34:de:5e:bb:c9:0e: 7e:d0:9d:13:37:cd:25:02:ab:86:ac:de:34:6b:43:72:c7:8c: 99:eb:7b:4d:57:62:21:e4:0c:38:a5:d9:3a:fb:40:63:6c:e8: 0f:5f:98:1c:45:69:27:1b:76:68:43:85:e8:bd:e4:3b:e1:71: d0:b0:59:75:2f:01:b1:1b:2e:9f:03:29:75:0f:50:75:a6:79: d3:db:a4:18:9b:09:8a:ae:48:72:96:f8:b0:2b:75:d1:bc:04: 9e:88:76:e1:d3:b4:c4:a8:d1:52:0e:e6:95:db:14:8b:8e:6c: 3a:ee:10:9c:2c:27:4e:55:8a:7c:85:40:eb:0c:ed:09:f8:5a: 6f:2c:52:c3:50:40:77:56:bc:57:c3:5d:ed:f5:28:1e:e8:fb: b2:32:29:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+k6hIo69Xdr4ZVu9mCHKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDQ2YzkyOTY4MjhjOWMwMjU1MzBhYTY4NDE2MDlhZGYw NTY5YTAwHhcNMjUxMjE4MTUwMDQ1WhcNMjUxMjE5MTUwMDQ1WjAzMTEwLwYDVQQD EygzMWQ0ZDIwOTBiNTZhODBkNDI1YWM3ZDEzOTAyNzU5YjVmNDdhODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KQxqM//YKlcB22dSgcI2yDn66AQ PBmApZa/bikezhy3mCnvoTGpIpXS1nfvVz3TxGM9Ve/zQl6K4EDdeCozE/MLNYyW 4wh1j0EeaEEKHYk4rCPT6xcQSDa5vLB/f7WbL07O5b3fCR/tydAmU01OzPx/TwGB wMPuqW/yXi/AlRmu3q5AWvhlVh/jKV6b2x+gC4zt5jbZKtkKlWqnPLwcyN2Zfz9H pZYudT4u6fcAmZUWq/UXQ9eMnP/kDk17DfGxYby9mURw2GYBSP9iZg7Zap7IiT1i 2vefl2yjdgJJIkz7+chOo280fnx/ZphZhAP1n6H/Br4wPlhPBL2eFTsNzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHU0gkLVqgNQlrH0TkCdZtfR6iFMB8GA1UdIwQY MBaAFN7UbJKWgoycAlUwqmhBYJrfBWmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3RSc2twYUNqSndDVlRDcWFFRmdtdDhGYWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85MzZmOTMtMDkyMi00ZjVkLThlM2Et YTAwMDdiZDVhY2U3LzEvM3RSc2twYUNqSndDVlRDcWFFRmdtdDhGYWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85MzZmOTMtMDkyMi00ZjVkLThlM2EtYTAwMDdiZDVhY2U3 LzEvM3RSc2twYUNqSndDVlRDcWFFRmdtdDhGYWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgtzkEUw DJ1w5Vusf/sSI2rlW+mZpIYvyNVhYAx0dvQT0MB/+boKJCUINivu6MGKH7dwSFNM a2pwaAxEyCzKHfj/r67t4pYRM/C6gpM9O5Pwh0ys/suZVY61UMxoq2aqYkhQiNpZ NN5eu8kOftCdEzfNJQKrhqzeNGtDcseMmet7TVdiIeQMOKXZOvtAY2zoD1+YHEVp Jxt2aEOF6L3kO+Fx0LBZdS8BsRsunwMpdQ9QdaZ509ukGJsJiq5Icpb4sCt10bwE noh24dO0xKjRUg7mldsUi45sOu4QnCwnTlWKfIVA6wztCfhabyxSw1BAd1a8V8Nd 7fUoHuj7sjIpMw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:53 2025 by rpki-client