This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json) Hash identifier: sPJq3lD6aK3pS+haMuafJQdT3jszv8EWWpnecMT3ORU= Subject key identifier: 13:DA:F0:4F:95:C6:A0:06:E2:FA:68:F8:4B:E2:FD:F9:4A:B8:E1:57 Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3 Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3 Certificate serial: 019B43254C4F8DD0AD2E81993DF7970987AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 23:01:16 +0000 Manifest this update: Sun 21 Dec 2025 23:01:16 +0000 Manifest next update: Mon 22 Dec 2025 23:01:16 +0000 Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: 9oUTrTWwO6V+nZ/WBgdwY3yAnqYce5e2agHo56R3oAg=) 2: 57HaC7393494-Kydk1JdAp5sP5I.roa (hash: MC5zLYnL7jsECqxeDtP30qM0sWScy6N43eUhfx207aw=) 3: m5gUSNnJ2hKaiWTW0ODmWqqDw-s.roa (hash: EE2S7AYIPyyJZqEsdRi77q99LaNKBqMzcLpUq4bS+A8=) 4: nX1l9uEaP3hKft0f6nr66330FaY.roa (hash: Ify3evSlWibc6XFuSTIlXp6BEPgQD/cUtILAv8sgqKU=) 5: rYOTmI6zBWy0_qXug-7vEbI5-NE.roa (hash: WCnXAEMnH2mCY9gWHiuKlZ1HO6eQUoArgriFfc+fAVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:4c:4f:8d:d0:ad:2e:81:99:3d:f7:97:09:87:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3 Validity Not Before: Dec 21 23:01:16 2025 GMT Not After : Dec 22 23:01:16 2025 GMT Subject: CN=13daf04f95c6a006e2fa68f84be2fdf94ab8e157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:28:c0:a8:d0:57:47:37:ba:9c:35:a0:d2:b2: 33:05:f8:13:93:5a:dd:02:6b:bf:56:5d:e9:0a:0f: 26:3d:63:f8:40:69:d0:f8:81:71:19:10:5b:05:a2: f9:e8:ea:f4:d6:4b:7d:55:50:58:1f:76:c8:c1:02: f1:b2:e3:eb:79:ed:3d:7f:46:c9:66:d7:5d:e1:48: 8c:18:29:65:48:b8:a4:d3:f1:9e:97:1f:db:bf:19: 4a:c0:f2:0a:cb:25:95:34:9e:09:82:98:83:66:62: c7:2c:ec:72:3f:97:fd:a8:d8:54:29:b2:da:7a:93: 49:1b:74:2a:a8:e9:5a:e6:7c:2d:05:0d:1b:81:81: 38:ef:e9:a9:94:cb:fc:e2:54:a3:91:04:ea:8f:c6: 3a:d3:94:2d:d9:74:bf:89:2d:74:28:e2:8a:23:97: 47:53:47:73:1d:96:7d:75:14:3a:94:05:2e:f7:38: cd:d9:9d:55:0f:65:51:0f:2a:44:d1:c6:7f:69:3e: 4d:bb:78:9e:9d:0b:59:ae:ef:a1:d6:2b:8c:14:d2: 73:13:91:95:8e:e3:03:42:4c:d0:b8:26:72:f4:bb: c0:88:c7:72:23:a6:61:6b:30:08:c5:8e:7c:1a:4e: 4f:45:63:af:e1:d3:d3:24:54:45:dc:48:6f:ad:a4: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DA:F0:4F:95:C6:A0:06:E2:FA:68:F8:4B:E2:FD:F9:4A:B8:E1:57 X509v3 Authority Key Identifier: keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7b:5f:0e:a6:3f:04:96:3b:55:91:46:2f:f3:67:78:42:11: 0d:14:18:f1:f4:dc:ec:40:1e:5b:b2:88:06:3c:93:d5:f4:5e: c1:91:d6:f3:00:b9:26:3f:ca:f1:3f:3f:a5:bd:c4:c1:cf:86: 33:58:a9:bc:51:e1:55:aa:dc:3e:57:b9:f2:77:d3:3b:44:ff: 4b:14:02:de:b4:95:f2:4e:da:e7:cb:b7:bf:ed:a1:b7:93:65: 8e:68:be:17:11:b0:83:f1:9f:6e:2c:c3:e0:a3:ab:ae:6f:f2: 3c:5c:51:6e:54:7b:b0:c5:d0:1d:99:fd:b3:42:44:84:be:00: ed:f6:43:c3:cd:49:e9:a0:1d:2d:ef:df:62:7e:81:f3:43:a3: 1a:e5:eb:d2:e4:63:22:b8:36:79:8c:27:70:9d:d1:21:d5:ef: d3:ec:db:9d:e2:2e:87:04:11:0c:b2:dc:1d:d6:31:ff:b9:4b: dc:fe:ac:f0:2e:8a:45:36:ac:27:af:d7:af:af:aa:24:c9:6b: 77:b9:4b:42:12:66:e4:d2:39:51:5e:07:8f:7d:13:aa:26:dd: 40:99:db:2d:96:13:0b:a5:8b:09:51:52:34:b2:f4:f4:6b:e7: 71:ec:b7:98:df:08:3b:54:03:79:d8:56:dd:c6:16:9f:97:f4: 9d:c4:3b:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJUxPjdCtLoGZPfeXCYesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTA4OWM5NDJiNjgwMzM2ODNiNGRkNTA2YzBjMzZmNzRi ZTBlYTMwHhcNMjUxMjIxMjMwMTE2WhcNMjUxMjIyMjMwMTE2WjAzMTEwLwYDVQQD EygxM2RhZjA0Zjk1YzZhMDA2ZTJmYTY4Zjg0YmUyZmRmOTRhYjhlMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SjAqNBXRze6nDWg0rIzBfgTk1rd Amu/Vl3pCg8mPWP4QGnQ+IFxGRBbBaL56Or01kt9VVBYH3bIwQLxsuPree09f0bJ Ztdd4UiMGCllSLik0/Gelx/bvxlKwPIKyyWVNJ4JgpiDZmLHLOxyP5f9qNhUKbLa epNJG3QqqOla5nwtBQ0bgYE47+mplMv84lSjkQTqj8Y605Qt2XS/iS10KOKKI5dH U0dzHZZ9dRQ6lAUu9zjN2Z1VD2VRDypE0cZ/aT5Nu3ienQtZru+h1iuMFNJzE5GV juMDQkzQuCZy9LvAiMdyI6ZhazAIxY58Gk5PRWOv4dPTJFRF3EhvraSUAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPa8E+VxqAG4vpo+Evi/flKuOFXMB8GA1UdIwQY MBaAFNwQiclCtoAzaDtN1QbAw290vg6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDkt Y2I1NmVkM2VhN2ZhLzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDktY2I1NmVkM2VhN2Zh LzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbntfDqY/ BJY7VZFGL/NneEIRDRQY8fTc7EAeW7KIBjyT1fRewZHW8wC5Jj/K8T8/pb3Ewc+G M1ipvFHhVarcPle58nfTO0T/SxQC3rSV8k7a58u3v+2ht5Nljmi+FxGwg/GfbizD 4KOrrm/yPFxRblR7sMXQHZn9s0JEhL4A7fZDw81J6aAdLe/fYn6B80OjGuXr0uRj Irg2eYwncJ3RIdXv0+zbneIuhwQRDLLcHdYx/7lL3P6s8C6KRTasJ6/Xr6+qJMlr d7lLQhJm5NI5UV4Hj30TqibdQJnbLZYTC6WLCVFSNLL09Gvncey3mN8IO1QDedhW 3cYWn5f0ncQ7vw== -----END CERTIFICATE-----Generated at Mon Dec 22 07:07:56 2025 by rpki-client