This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft File: 3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json) Hash identifier: ubiXiRuWQBSHRJ382bAW2g4hmU37UKYJ57sB8EiyqqQ= Subject key identifier: 5D:1E:62:96:30:2A:FE:16:5A:71:C3:98:13:2A:F8:DF:B3:D1:CE:00 Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Certificate serial: 019B3B34DE6617D0295BCECFF1CC8BD61D9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft Manifest number: 1793 Signing time: Sat 20 Dec 2025 10:01:19 +0000 Manifest this update: Sat 20 Dec 2025 10:01:19 +0000 Manifest next update: Sun 21 Dec 2025 10:01:19 +0000 Files and hashes: 1: 27nlRHwxg0E9Q8sg08KsIM7uurM.roa (hash: S/euVGTNqJg3LcazblgCESHTj7tHb3XsTieuaVZKJ7c=) 2: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: a/Pb0/lCCJ7ASuCqOIOOZu/4BTLi84gNQlq/5n9+XSs=) 3: KRrmKpMBCAuz0ycR3DqqV_RSLZI.roa (hash: 6JV0pm5KSl7dgRvcSyUz9iCbmsYOfYCoAcyuqvbgp6w=) 4: cb_zDnKlQ9maV_mcPiyN2HwpRxo.roa (hash: rr7OeDKsSm5RUPgVy2VLBciOmsBRvc5YKTQcvs96n0U=) 5: ph2FFZ9AUAY5f8HkJbk_3g9Wk8w.roa (hash: dL+5O6eKdQJWgkq0JqtkXhyJzAf/MU7XQ0/GDtElRTc=) 6: tXnSihcOVuv_2vztUkyTSpycPTE.roa (hash: Efwtt1HweEQTgxpNm/AGYJZxdg/P+K7yWvvbsl//zEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:de:66:17:d0:29:5b:ce:cf:f1:cc:8b:d6:1d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Validity Not Before: Dec 20 10:01:19 2025 GMT Not After : Dec 21 10:01:19 2025 GMT Subject: CN=5d1e6296302afe165a71c398132af8dfb3d1ce00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e2:72:d4:99:e5:89:c2:78:f7:ba:a8:02:0d: ab:6e:d8:f0:fc:87:18:d8:c2:be:1f:82:0c:b6:1d: 9d:09:b1:2d:79:ff:f7:d9:9a:1c:06:58:8a:b7:9e: f9:04:5e:0a:bf:01:f2:fa:0f:bb:dc:a7:96:a9:3d: da:b5:64:bc:f3:cd:c8:4a:51:a8:0c:93:c7:c3:6b: a9:7d:c5:31:c0:b8:22:58:d2:f0:26:a8:73:d2:38: 85:f5:5f:2d:3a:0f:b5:74:10:3f:bb:e4:62:03:6b: bc:bc:8b:a2:1c:a9:8f:8b:91:f4:86:99:5a:53:5f: 14:14:94:cd:68:fe:59:c0:44:23:1a:e2:24:39:3c: e3:da:5f:f3:c9:eb:3b:4d:5b:95:ef:5d:b4:d2:d6: f4:8c:55:d7:7a:e4:33:56:c5:27:bc:44:0c:16:46: fb:35:da:98:13:71:82:2e:66:02:f8:7f:4b:13:41: 53:cc:48:06:ec:0a:66:13:06:a2:11:5a:ca:db:d7: 9d:40:e8:de:34:83:ea:b2:96:3d:14:2a:36:fa:44: f0:21:75:69:55:2c:59:99:42:c5:45:61:0e:f8:0c: 94:69:0f:70:51:fc:4c:7a:c3:e2:2a:72:ad:4a:fd: c4:0e:a4:3c:10:55:df:dd:f5:c3:57:8b:06:68:f5: e1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1E:62:96:30:2A:FE:16:5A:71:C3:98:13:2A:F8:DF:B3:D1:CE:00 X509v3 Authority Key Identifier: keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:3f:5b:04:b0:f4:03:22:f0:17:ce:dc:8b:2c:22:70:4b:bb: b8:a8:30:52:59:95:2b:01:81:5b:9f:da:4d:f0:cf:80:33:01: ee:5a:df:1b:52:72:51:d0:db:99:3b:c1:d3:40:1b:d3:5f:eb: f4:21:99:9d:7b:12:ce:f6:e4:56:2a:50:cb:1c:68:02:97:61: 5a:ea:af:61:c1:de:1f:5e:fa:04:6f:47:bb:7d:ce:8d:5e:19: e2:a6:57:a7:aa:f7:8d:7c:93:40:d0:30:e0:12:aa:af:32:a2: 7d:74:01:0f:e7:02:57:ba:17:64:7e:da:e1:0e:90:31:17:0b: 51:a1:12:60:d9:19:b0:c2:b4:e8:a2:79:5b:e6:63:e3:72:dc: 0a:09:f2:bf:87:3d:44:35:72:75:ef:2b:a7:ce:f5:1b:60:8f: 17:9e:a6:d2:59:9d:cf:2f:88:2c:0d:fd:b9:5b:d8:b4:d1:59: 29:a4:77:2e:6d:f1:ae:40:1c:1b:65:4b:3e:2f:90:af:69:b6: 16:3f:c1:9b:f8:4b:87:c9:9a:4a:02:f6:4a:14:ef:c9:25:7d: e9:b4:96:c2:7c:32:9a:91:db:52:22:ed:3a:4b:7f:c9:29:38: 66:65:d7:b8:20:b4:52:f1:d8:aa:fa:58:78:8c:5b:c1:d7:d5: 82:29:42:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NN5mF9ApW87P8cyL1h2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz Zjc5MzAwHhcNMjUxMjIwMTAwMTE5WhcNMjUxMjIxMTAwMTE5WjAzMTEwLwYDVQQD Eyg1ZDFlNjI5NjMwMmFmZTE2NWE3MWMzOTgxMzJhZjhkZmIzZDFjZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+Jy1JnlicJ497qoAg2rbtjw/IcY 2MK+H4IMth2dCbEtef/32ZocBliKt575BF4KvwHy+g+73KeWqT3atWS8883ISlGo DJPHw2upfcUxwLgiWNLwJqhz0jiF9V8tOg+1dBA/u+RiA2u8vIuiHKmPi5H0hpla U18UFJTNaP5ZwEQjGuIkOTzj2l/zyes7TVuV71200tb0jFXXeuQzVsUnvEQMFkb7 NdqYE3GCLmYC+H9LE0FTzEgG7ApmEwaiEVrK29edQOjeNIPqspY9FCo2+kTwIXVp VSxZmULFRWEO+AyUaQ9wUfxMesPiKnKtSv3EDqQ8EFXf3fXDV4sGaPXhQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0eYpYwKv4WWnHDmBMq+N+z0c4AMB8GA1UdIwQY MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt MDBiY2Q5YjkxYzFiLzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtD9bBLD0 AyLwF87ciywicEu7uKgwUlmVKwGBW5/aTfDPgDMB7lrfG1JyUdDbmTvB00Ab01/r 9CGZnXsSzvbkVipQyxxoApdhWuqvYcHeH176BG9Hu33OjV4Z4qZXp6r3jXyTQNAw 4BKqrzKifXQBD+cCV7oXZH7a4Q6QMRcLUaESYNkZsMK06KJ5W+Zj43LcCgnyv4c9 RDVyde8rp871G2CPF56m0lmdzy+ILA39uVvYtNFZKaR3Lm3xrkAcG2VLPi+Qr2m2 Fj/Bm/hLh8maSgL2ShTvySV96bSWwnwympHbUiLtOkt/ySk4ZmXXuCC0UvHYqvpY eIxbwdfVgilCaw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:43:48 2025 by rpki-client