This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json) Hash identifier: ncaKVaF4zzNjcB9Cg3g5PMrWtNcyMotmY8OOsg061xY= Subject key identifier: DE:17:93:33:E9:DD:BE:10:CD:5B:ED:E5:2B:69:B8:82:A7:70:50:CF Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19 Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119 Certificate serial: 019B44A58AF2EEF042E9F15AB0A03E7D34F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft Manifest number: 0BCF Signing time: Mon 22 Dec 2025 06:00:58 +0000 Manifest this update: Mon 22 Dec 2025 06:00:58 +0000 Manifest next update: Tue 23 Dec 2025 06:00:58 +0000 Files and hashes: 1: 2K0uKSMybLcdA8jtmNxG5Ki84QY.roa (hash: 5mE2Q4t19bkfyumGCGmg6dxDWvIkT1fJkVfrU9nbK78=) 2: 6FGsGLFn7A73WCT0SPiFHEX5nI8.roa (hash: 7Hh/w12WqCnZ+Rx2BO6W7oVN9o4uT5fOf8UbGGxI1Zw=) 3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: cy5tIfFgV5pv7aGEkv7/BSu45zMO+FEE7UsVsyyRiuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:8a:f2:ee:f0:42:e9:f1:5a:b0:a0:3e:7d:34:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119 Validity Not Before: Dec 22 06:00:58 2025 GMT Not After : Dec 23 06:00:58 2025 GMT Subject: CN=de179333e9ddbe10cd5bede52b69b882a77050cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d8:2c:3f:78:89:14:b9:74:48:a0:39:0e:40: e7:d3:46:54:11:54:a2:04:e1:33:b9:94:69:6c:d3: bb:b5:d5:61:cb:a7:4e:8b:da:14:f4:09:05:83:67: fb:d2:b4:77:fc:2a:82:b9:df:9d:c7:01:a3:9d:59: 4e:11:a4:df:f1:ac:24:b8:d5:2c:36:4c:6e:54:73: c8:a2:53:75:26:d4:b5:61:42:c8:6a:5b:9b:a4:ed: 66:b6:de:d9:3a:06:9f:0a:d2:7b:10:7a:93:e3:4b: 77:af:6f:25:86:2f:d7:a8:20:37:52:e2:d6:7b:98: d8:04:ff:17:b9:5b:97:69:a8:db:fd:98:14:c9:91: e4:44:d2:15:b1:1a:cb:c4:d8:ba:bd:c9:a0:1d:6e: dd:25:45:5d:b9:2e:a8:cd:65:fd:6c:fe:b9:95:0d: 1e:78:e0:57:0c:88:ba:38:ad:9a:0d:da:58:68:60: 6c:b4:75:cd:bf:ea:5b:34:da:fc:e0:39:de:5c:f8: cc:64:e9:87:67:ca:b3:b9:08:40:ef:36:a2:63:24: 70:68:d8:e7:b2:44:55:0a:7b:a2:c7:e0:12:ac:02: 43:b0:85:9f:08:45:6c:9f:b1:a9:72:4a:b9:9c:96: 05:e1:11:92:c3:39:83:54:17:af:82:f7:21:58:48: 83:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:17:93:33:E9:DD:BE:10:CD:5B:ED:E5:2B:69:B8:82:A7:70:50:CF X509v3 Authority Key Identifier: keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:09:5f:f8:c2:34:37:80:cd:a4:b4:93:56:c0:15:9a:11:d6: a1:bd:a2:65:f2:fc:ae:c3:50:70:27:4f:22:8a:67:4c:2c:c4: 21:2b:ca:a8:22:b7:a4:40:3b:f6:74:14:3e:c8:b0:68:1d:f3: f0:52:93:18:49:65:24:80:c9:8c:77:5c:ac:14:61:d1:00:89: 40:cf:59:3d:9f:21:c9:57:2a:1f:65:33:d5:17:00:cd:a7:ad: ab:dd:36:29:4e:f2:93:6a:7c:51:17:67:7e:f9:cf:5e:07:8c: 2a:50:e9:df:0c:de:c0:0b:f2:ec:80:4d:2e:e9:75:7b:a0:d2: 75:b8:5f:db:bf:30:d0:be:cc:76:c5:af:97:c0:d9:3b:5b:82: 23:a4:f4:79:e7:ef:c7:08:02:90:b7:d4:cf:c2:dc:f8:90:a7: 7f:7b:be:6d:99:42:e5:0b:a8:20:4d:d8:8a:72:67:fd:fc:1f: 03:7b:1c:5c:93:1f:4d:08:7e:c1:04:83:09:5d:46:d2:f0:26: cf:0c:71:97:50:75:ad:a6:ec:ff:95:fd:73:11:0d:ec:1b:01: 3e:3f:c4:c6:b3:b7:40:04:28:2a:e1:3a:82:d3:53:3a:5c:90: ae:fc:9b:69:3e:ef:29:5a:28:87:bd:d0:05:5c:86:f6:b8:bb: 9c:1a:cb:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpYry7vBC6fFasKA+fTTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNzFiMzQ5MzhhMzFhMzRiZjU4NjZhMGYzZGQ3OGMzOGFh YzYxMTkwHhcNMjUxMjIyMDYwMDU4WhcNMjUxMjIzMDYwMDU4WjAzMTEwLwYDVQQD EyhkZTE3OTMzM2U5ZGRiZTEwY2Q1YmVkZTUyYjY5Yjg4MmE3NzA1MGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNgsP3iJFLl0SKA5DkDn00ZUEVSi BOEzuZRpbNO7tdVhy6dOi9oU9AkFg2f70rR3/CqCud+dxwGjnVlOEaTf8awkuNUs NkxuVHPIolN1JtS1YULIalubpO1mtt7ZOgafCtJ7EHqT40t3r28lhi/XqCA3UuLW e5jYBP8XuVuXaajb/ZgUyZHkRNIVsRrLxNi6vcmgHW7dJUVduS6ozWX9bP65lQ0e eOBXDIi6OK2aDdpYaGBstHXNv+pbNNr84DneXPjMZOmHZ8qzuQhA7zaiYyRwaNjn skRVCnuix+ASrAJDsIWfCEVsn7Gpckq5nJYF4RGSwzmDVBevgvchWEiDGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4XkzPp3b4QzVvt5StpuIKncFDPMB8GA1UdIwQY MBaAFGtxs0k4oxo0v1hmoPPdeMOKrGEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYt NmY1NmUxZmEwMjMwLzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYtNmY1NmUxZmEwMjMw LzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAlf+MI0 N4DNpLSTVsAVmhHWob2iZfL8rsNQcCdPIopnTCzEISvKqCK3pEA79nQUPsiwaB3z 8FKTGEllJIDJjHdcrBRh0QCJQM9ZPZ8hyVcqH2Uz1RcAzaetq902KU7yk2p8URdn fvnPXgeMKlDp3wzewAvy7IBNLul1e6DSdbhf278w0L7MdsWvl8DZO1uCI6T0eefv xwgCkLfUz8Lc+JCnf3u+bZlC5QuoIE3YinJn/fwfA3scXJMfTQh+wQSDCV1G0vAm zwxxl1B1rabs/5X9cxEN7BsBPj/ExrO3QAQoKuE6gtNTOlyQrvybaT7vKVooh73Q BVyG9ri7nBrLuA== -----END CERTIFICATE-----Generated at Mon Dec 22 08:51:14 2025 by rpki-client