This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json) Hash identifier: Y9slqSBcbC08w2h/TZvGT/zGa9wGckDD8voPuntovN4= Subject key identifier: 0B:83:00:B1:7E:B6:5A:F8:FF:42:CD:82:F1:99:67:73:A5:DF:61:41 Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16 Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16 Certificate serial: 019B3BA20E8D24D53D18447A83B96CA36B84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft Manifest number: 12CB Signing time: Sat 20 Dec 2025 12:00:34 +0000 Manifest this update: Sat 20 Dec 2025 12:00:34 +0000 Manifest next update: Sun 21 Dec 2025 12:00:34 +0000 Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: DTF2AS6UOHgmf61wZkZav9Yi+BMkZ/JpAjtiScSkX6Q=) 2: _Kt_ylx952g7HZhxMZibU4U_S9U.roa (hash: BRXKGTpDPGrVqoVy2fXV55G1/RGVRY4TQXSqB3YxXnw=) 3: bJ6OkDBz35azmUeGZSSY8SRMI4Y.roa (hash: y21BnaoaGpgbQvC0jOtfGrk+wq3H1xWVUYMR7XJq8OU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:0e:8d:24:d5:3d:18:44:7a:83:b9:6c:a3:6b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16 Validity Not Before: Dec 20 12:00:34 2025 GMT Not After : Dec 21 12:00:34 2025 GMT Subject: CN=0b8300b17eb65af8ff42cd82f1996773a5df6141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:6b:8f:2f:78:2e:22:3d:61:73:0f:9d:17: 72:9c:91:8c:9b:72:94:60:6c:f9:8d:41:70:81:ac: 62:ad:28:63:a6:2d:d2:1a:b7:be:9c:b9:4e:17:aa: 62:65:0b:1b:f8:2b:25:ce:b8:70:64:a9:5c:34:26: 2a:f5:59:15:16:bc:19:43:e0:70:50:a5:3d:cf:a2: f5:6d:c4:b4:0e:4b:c7:ef:a8:91:01:8d:8b:cb:13: 66:50:7b:e1:dc:1c:28:8e:b5:85:6c:fb:75:87:64: e1:f4:f8:7d:e0:ee:bb:b4:85:40:be:37:23:09:e8: 21:36:c4:ed:8e:d7:26:e8:ca:b9:89:7f:40:c9:66: 27:a6:c1:7a:9a:69:57:a1:b2:2e:29:9e:fa:f5:67: 35:e4:10:4b:2b:8b:05:1e:0f:69:c7:4b:3c:b1:ef: d0:11:66:67:38:1a:c8:8b:9d:31:a4:07:37:3b:5d: 9d:39:ec:60:9d:17:0e:5c:da:65:20:c4:1f:c9:86: 6c:e3:e2:37:db:6f:a5:57:27:7b:95:f2:cd:c2:c1: 27:53:a2:4f:b4:b3:ab:58:91:db:ea:b8:4d:34:d7: db:2f:42:9d:3e:83:b1:aa:2b:b2:88:39:c3:d8:62: 19:ab:af:5c:10:51:b7:01:c6:c5:77:69:69:05:39: 15:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:83:00:B1:7E:B6:5A:F8:FF:42:CD:82:F1:99:67:73:A5:DF:61:41 X509v3 Authority Key Identifier: keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6e:62:b5:0e:8a:f8:fc:f8:19:2b:2e:67:c1:f2:12:02:ad: 53:c4:36:f6:f6:98:85:bb:9a:e2:47:e9:b4:b0:d4:12:b2:b0: 46:1d:ca:c8:d8:69:04:a3:c8:f1:bb:6b:41:a1:12:56:5e:2a: 09:65:67:17:28:9f:fe:f5:b2:12:6f:9a:af:e8:4d:b5:f6:b6: 93:3e:3a:a7:9d:5c:a8:21:f4:ca:98:7d:51:c8:3d:7f:e6:57: 03:fe:fe:0e:f3:ce:dc:a2:d8:a4:ee:d2:75:db:1e:c0:6e:b3: aa:aa:e2:85:0c:3a:85:70:f0:16:08:2f:cc:6c:2f:17:7c:01: ac:90:99:39:e2:cb:eb:3a:2d:07:15:e2:b1:63:6d:6d:ae:75: 34:f4:fe:48:32:73:d8:85:cd:57:bd:68:a4:c9:cc:e3:e7:f4: b7:81:09:85:50:6c:e6:79:9c:97:1f:ad:b3:47:a3:d6:88:07: 51:7d:4a:cf:b4:ee:0e:b0:8a:7c:5b:06:b5:38:37:0f:87:03: 1f:f0:77:95:d3:3c:c2:ab:82:93:aa:c8:79:c7:e8:f3:df:06: 5d:2b:aa:88:26:01:04:53:24:27:c1:e4:9d:4e:b2:3f:d7:1e: c0:53:95:ed:57:bc:08:f6:ee:2e:12:7e:8f:ce:39:5b:ae:7a: c9:81:86:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7og6NJNU9GER6g7lso2uEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNzI1YzRkMDk1M2U3ZWNmNDZmMzdlMTRmY2ExNGZkMDlh MTJkMTYwHhcNMjUxMjIwMTIwMDM0WhcNMjUxMjIxMTIwMDM0WjAzMTEwLwYDVQQD EygwYjgzMDBiMTdlYjY1YWY4ZmY0MmNkODJmMTk5Njc3M2E1ZGY2MTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRZrjy94LiI9YXMPnRdynJGMm3KU YGz5jUFwgaxirShjpi3SGre+nLlOF6piZQsb+CslzrhwZKlcNCYq9VkVFrwZQ+Bw UKU9z6L1bcS0DkvH76iRAY2LyxNmUHvh3BwojrWFbPt1h2Th9Ph94O67tIVAvjcj CeghNsTtjtcm6Mq5iX9AyWYnpsF6mmlXobIuKZ769Wc15BBLK4sFHg9px0s8se/Q EWZnOBrIi50xpAc3O12dOexgnRcOXNplIMQfyYZs4+I322+lVyd7lfLNwsEnU6JP tLOrWJHb6rhNNNfbL0KdPoOxqiuyiDnD2GIZq69cEFG3AcbFd2lpBTkVrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuDALF+tlr4/0LNgvGZZ3Ol32FBMB8GA1UdIwQY MBaAFN1yXE0JU+fs9G834U/KFP0JoS0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYWE2ZTMtZjA1NC00OGU3LTgyNDYt OGYyMGNiNzM0NDg4LzEvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hYWE2ZTMtZjA1NC00OGU3LTgyNDYtOGYyMGNiNzM0NDg4 LzEvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb25itQ6K +Pz4GSsuZ8HyEgKtU8Q29vaYhbua4kfptLDUErKwRh3KyNhpBKPI8btrQaESVl4q CWVnFyif/vWyEm+ar+hNtfa2kz46p51cqCH0yph9Ucg9f+ZXA/7+DvPO3KLYpO7S ddsewG6zqqrihQw6hXDwFggvzGwvF3wBrJCZOeLL6zotBxXisWNtba51NPT+SDJz 2IXNV71opMnM4+f0t4EJhVBs5nmclx+ts0ej1ogHUX1Kz7TuDrCKfFsGtTg3D4cD H/B3ldM8wquCk6rIecfo898GXSuqiCYBBFMkJ8HknU6yP9cewFOV7Ve8CPbuLhJ+ j845W656yYGGEQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:17:56 2025 by rpki-client