This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json) Hash identifier: k8ct3LmYYKHlpyb05zK6SPbwZwaINoT8ika3SVxzXmY= Subject key identifier: 11:A1:08:2D:57:5C:98:50:24:31:4F:83:9A:99:85:0E:42:87:92:77 Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9 Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9 Certificate serial: 019B3231E8E5E4966B991FEC3F238EEE5582 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft Manifest number: 0891 Signing time: Thu 18 Dec 2025 16:01:30 +0000 Manifest this update: Thu 18 Dec 2025 16:01:30 +0000 Manifest next update: Fri 19 Dec 2025 16:01:30 +0000 Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: Q9vEVeQxm1UmSp+IkHfiBFlpKAbQvWpSCWUHs+By79s=) 2: MpZzldQi5IW1vH72zsN86ALdCYo.roa (hash: hGLTyfZCRDqAerkM2L4I96QJCTHMEKoFxuiSvfkJH1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:e8:e5:e4:96:6b:99:1f:ec:3f:23:8e:ee:55:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9 Validity Not Before: Dec 18 16:01:30 2025 GMT Not After : Dec 19 16:01:30 2025 GMT Subject: CN=11a1082d575c985024314f839a99850e42879277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a9:3e:df:03:58:e4:a8:80:55:0d:30:b6:8b: e0:d3:fa:51:7a:7f:7d:4a:0d:54:0a:44:be:55:d1: 2c:e3:ef:d6:90:73:5a:4b:50:94:31:7e:da:c7:04: a8:46:c0:84:d7:12:83:fa:6c:c7:83:8c:44:0a:9e: 5a:d0:28:a0:d2:9c:f8:78:36:f0:b4:e3:49:21:3e: 85:32:3b:f1:f0:e1:69:81:cd:44:70:31:7c:9a:e8: 51:7e:87:a5:69:9c:fc:8b:14:1a:0b:dc:e8:5d:c7: c2:42:c5:52:e0:41:f9:d9:fe:55:95:0b:3b:67:33: 85:ae:f1:a1:af:02:87:c9:d8:42:83:a7:e2:6e:0f: 4d:19:e6:9e:8e:db:c0:56:68:45:d9:0c:da:55:9d: 81:7d:b2:4f:6a:87:e8:e1:ed:33:7b:ef:e5:14:af: 8f:62:81:57:e9:3f:83:1d:21:12:de:70:e5:8d:00: 66:bf:ff:24:8d:61:4f:b4:a1:4b:39:85:68:15:0f: d9:0e:00:8e:45:5d:1c:03:ad:a4:87:5a:d1:8d:ac: f6:71:ef:ae:e0:df:de:33:0b:bd:29:48:78:80:9e: 92:44:cd:5a:9e:51:13:4a:73:b7:30:f3:a0:15:ab: d7:79:8a:4c:af:5d:ab:2e:98:03:05:9f:96:bc:32: 02:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A1:08:2D:57:5C:98:50:24:31:4F:83:9A:99:85:0E:42:87:92:77 X509v3 Authority Key Identifier: keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:65:c5:88:68:2b:85:8e:1e:62:c0:d2:b8:61:4b:c3:41:6c: 86:04:a4:4c:1e:44:bf:9f:fc:01:d1:ff:c5:e4:a5:87:a5:b6: 98:91:6b:94:f4:02:ed:d7:e5:8a:c9:00:cc:df:67:a8:44:db: 7b:c4:0b:eb:cd:af:07:38:ab:85:3b:af:df:e7:d3:ba:97:a7: 9c:90:83:94:c7:f0:11:5f:71:52:5b:be:87:c2:8f:16:f7:3c: 4b:19:2c:5b:04:8d:0e:c9:8c:a8:a6:7c:66:75:e1:3d:eb:1c: 35:8b:bc:b4:35:94:49:29:1e:a4:7d:0a:4f:9f:98:88:ed:d9: e7:a8:96:c0:05:04:b7:6f:d6:94:bc:26:de:b3:98:f4:0d:1f: 91:69:f9:d6:34:90:45:61:ea:fa:c0:b2:5c:ec:c8:c3:41:37: 53:c6:2b:88:3f:a0:06:c8:7b:2a:52:3f:d3:40:01:8d:2b:31: d3:9e:ab:32:d4:cb:43:95:2e:fb:db:64:0a:12:d1:45:15:6b: bc:32:8b:f1:07:ed:42:f3:34:46:81:ed:25:36:45:d8:10:6a: 44:b8:06:0b:10:24:63:31:1b:4a:d7:41:58:b3:fa:b4:79:3c: d5:d9:0d:5c:c4:58:01:f8:ee:f2:50:57:e8:fd:cd:2e:be:48: e2:15:25:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMejl5JZrmR/sPyOO7lWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNmRhZWY2NjY0YTc1MjliNjI5ZjNmZDY1MDA0OTE1MjMw ZjFiZTkwHhcNMjUxMjE4MTYwMTMwWhcNMjUxMjE5MTYwMTMwWjAzMTEwLwYDVQQD EygxMWExMDgyZDU3NWM5ODUwMjQzMTRmODM5YTk5ODUwZTQyODc5Mjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqk+3wNY5KiAVQ0wtovg0/pRen99 Sg1UCkS+VdEs4+/WkHNaS1CUMX7axwSoRsCE1xKD+mzHg4xECp5a0Cig0pz4eDbw tONJIT6FMjvx8OFpgc1EcDF8muhRfoelaZz8ixQaC9zoXcfCQsVS4EH52f5VlQs7 ZzOFrvGhrwKHydhCg6fibg9NGeaejtvAVmhF2QzaVZ2BfbJPaofo4e0ze+/lFK+P YoFX6T+DHSES3nDljQBmv/8kjWFPtKFLOYVoFQ/ZDgCORV0cA62kh1rRjaz2ce+u 4N/eMwu9KUh4gJ6SRM1anlETSnO3MPOgFavXeYpMr12rLpgDBZ+WvDICuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGhCC1XXJhQJDFPg5qZhQ5Ch5J3MB8GA1UdIwQY MBaAFN1trvZmSnUptinz/WUASRUjDxvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83ZGQ0MmItNjZlZC00YzEzLWEzMzYt Y2ZlMTMzNWYyN2ZiLzEvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi83ZGQ0MmItNjZlZC00YzEzLWEzMzYtY2ZlMTMzNWYyN2Zi LzEvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmXFiGgr hY4eYsDSuGFLw0FshgSkTB5Ev5/8AdH/xeSlh6W2mJFrlPQC7dfliskAzN9nqETb e8QL682vBzirhTuv3+fTupennJCDlMfwEV9xUlu+h8KPFvc8SxksWwSNDsmMqKZ8 ZnXhPescNYu8tDWUSSkepH0KT5+YiO3Z56iWwAUEt2/WlLwm3rOY9A0fkWn51jSQ RWHq+sCyXOzIw0E3U8YriD+gBsh7KlI/00ABjSsx056rMtTLQ5Uu+9tkChLRRRVr vDKL8QftQvM0RoHtJTZF2BBqRLgGCxAkYzEbStdBWLP6tHk81dkNXMRYAfju8lBX 6P3NLr5I4hUlig== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:17 2025 by rpki-client