This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft File: dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json) Hash identifier: 1lbierE+Iteku76li8V9/jiaAkA/P3WxTwAwRRh2gdM= Subject key identifier: 11:03:E8:2F:BE:A9:35:F2:89:BA:02:8A:BD:0E:BA:91:3B:DD:F1:77 Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA Certificate issuer: /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa Certificate serial: 019B3DFEE55BDA4DBC93A210E3FA35D11CC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 23:01:13 +0000 Manifest this update: Sat 20 Dec 2025 23:01:13 +0000 Manifest next update: Sun 21 Dec 2025 23:01:13 +0000 Files and hashes: 1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: +pB9h4681el4cj8b2sQbkF2QWrf+Yl5yXoWYVUO4cW0=) 2: fOC0mLVVaWFlMUvT0z_PddjsHw8.roa (hash: BmfmQSKAMKow/2vkZFChgOrrtOQvA5Kh+ohq4iFZyJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:e5:5b:da:4d:bc:93:a2:10:e3:fa:35:d1:1c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa Validity Not Before: Dec 20 23:01:13 2025 GMT Not After : Dec 21 23:01:13 2025 GMT Subject: CN=1103e82fbea935f289ba028abd0eba913bddf177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:9f:0d:f7:3e:1b:72:75:ed:eb:f0:c2:e8: 14:bc:d8:52:ea:10:37:2d:3e:c5:6b:be:f9:83:f2: 64:40:28:ac:1c:66:24:9b:90:99:19:72:98:88:cb: 6f:96:e8:e5:86:9a:8d:95:59:c4:fe:ee:70:46:e3: 6a:b0:d7:88:dd:6b:d5:40:3d:4d:d5:aa:c2:a7:ee: 00:0d:87:ef:e2:1d:51:93:07:7c:d1:c0:cc:c1:a6: e3:a8:1b:2e:7d:06:ed:54:db:7d:ec:34:e9:47:a4: 77:0d:e6:aa:ec:0a:80:88:3a:b1:52:82:37:67:d5: 38:82:04:6c:ac:81:ab:8f:c3:5b:7a:08:8d:4b:eb: 32:86:62:34:89:79:94:cb:37:f0:e1:94:0f:e4:19: 32:f4:71:9d:2b:05:91:eb:7f:23:e0:d3:34:ee:1e: 5c:d9:0c:03:01:e4:cd:7f:89:fd:c0:e2:dd:1e:60: ae:65:b7:ca:e9:c6:2b:78:27:14:41:c7:c8:4f:97: e0:7c:6f:c0:de:e8:0a:c6:65:2f:ae:87:97:f8:df: 08:72:cd:f7:17:0d:9d:84:c5:ab:54:2f:c3:17:3f: 4b:59:f5:a5:56:d7:4c:85:c5:30:5c:96:80:90:eb: b9:88:34:fb:6e:d2:6f:71:1e:35:6b:eb:c0:09:cd: 78:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:03:E8:2F:BE:A9:35:F2:89:BA:02:8A:BD:0E:BA:91:3B:DD:F1:77 X509v3 Authority Key Identifier: keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:22:06:9a:d3:3e:4d:e2:16:a3:c2:5c:1c:15:2c:cf:2a:85: de:d4:40:30:89:93:4a:de:ce:3d:3d:a7:3c:be:90:e3:c3:cc: b0:2f:65:f4:e0:b7:b5:a8:da:16:d5:51:78:27:73:4a:81:18: 0e:ce:02:26:3a:ea:f0:79:91:df:8b:27:7f:28:d1:62:14:3e: 41:92:34:73:39:5a:a4:00:e8:d2:99:c3:93:b0:24:99:91:b1: 44:28:dc:50:bb:b0:71:27:52:ea:ec:1d:84:62:3e:93:d0:9b: 85:fb:88:70:09:ee:cb:dc:cb:83:85:9e:8b:ca:50:8a:1d:16: 23:16:dd:62:4b:68:58:fd:a7:d8:4c:6b:30:10:f5:9d:ef:08: 5f:ec:3d:25:4c:2d:2d:d0:ea:cb:fd:aa:e1:41:98:92:7e:bf: 8a:bf:f3:b8:50:05:d0:a2:21:5e:ec:0c:4a:36:f6:2c:1e:77: 72:7b:14:bd:76:68:bf:04:ff:56:76:f9:e9:49:e3:8f:74:ac: 59:38:1f:34:5e:8b:b2:be:65:1e:75:75:d0:ef:e9:b2:96:99: d9:ca:49:ca:bd:38:94:ef:f8:47:fb:83:8d:21:bb:08:a9:ad: 72:49:3d:71:3a:6d:e8:84:77:7d:41:cd:fb:17:ee:00:c7:47: c6:ed:01:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/uVb2k28k6IQ4/o10RzIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NGRkM2FmZDdjY2U3Y2UwMGE5ZWFjNjdlMGJjYTk5YmVi NzI5YWEwHhcNMjUxMjIwMjMwMTEzWhcNMjUxMjIxMjMwMTEzWjAzMTEwLwYDVQQD EygxMTAzZTgyZmJlYTkzNWYyODliYTAyOGFiZDBlYmE5MTNiZGRmMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1CfDfc+G3J17evwwugUvNhS6hA3 LT7Fa775g/JkQCisHGYkm5CZGXKYiMtvlujlhpqNlVnE/u5wRuNqsNeI3WvVQD1N 1arCp+4ADYfv4h1Rkwd80cDMwabjqBsufQbtVNt97DTpR6R3Deaq7AqAiDqxUoI3 Z9U4ggRsrIGrj8NbegiNS+syhmI0iXmUyzfw4ZQP5Bky9HGdKwWR638j4NM07h5c 2QwDAeTNf4n9wOLdHmCuZbfK6cYreCcUQcfIT5fgfG/A3ugKxmUvroeX+N8Ics33 Fw2dhMWrVC/DFz9LWfWlVtdMhcUwXJaAkOu5iDT7btJvcR41a+vACc14yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBED6C++qTXyiboCir0OupE73fF3MB8GA1UdIwQY MBaAFHRN06/XzOfOAKnqxn4Lypm+tymqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yZWE1OTQtYTJjYS00ZmZhLTg5ZWUt ODkyMWIwNTU5ZTkwLzEvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yZWE1OTQtYTJjYS00ZmZhLTg5ZWUtODkyMWIwNTU5ZTkw LzEvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICIGmtM+ TeIWo8JcHBUszyqF3tRAMImTSt7OPT2nPL6Q48PMsC9l9OC3tajaFtVReCdzSoEY Ds4CJjrq8HmR34snfyjRYhQ+QZI0czlapADo0pnDk7AkmZGxRCjcULuwcSdS6uwd hGI+k9CbhfuIcAnuy9zLg4Wei8pQih0WIxbdYktoWP2n2ExrMBD1ne8IX+w9JUwt LdDqy/2q4UGYkn6/ir/zuFAF0KIhXuwMSjb2LB53cnsUvXZovwT/Vnb56Unjj3Ss WTgfNF6Lsr5lHnV10O/pspaZ2cpJyr04lO/4R/uDjSG7CKmtckk9cTpt6IR3fUHN +xfuAMdHxu0B8w== -----END CERTIFICATE-----Generated at Sun Dec 21 03:54:12 2025 by rpki-client