This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft File: V3zQhta4KSWruLuBXmWIUlIuCSE.mft (raw, json) Hash identifier: P9zETCnUmWgq6wMAj2UhdJIpNGSIvDJN15PEin6Hux8= Subject key identifier: A1:62:7C:5C:3E:F5:23:51:21:0A:64:A5:9B:17:C4:D1:76:AD:0A:43 Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21 Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921 Certificate serial: 019B2B53B5251E8481E1E88B8BADEB8BA30A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 08:01:04 +0000 Manifest this update: Wed 17 Dec 2025 08:01:04 +0000 Manifest next update: Thu 18 Dec 2025 08:01:04 +0000 Files and hashes: 1: 2rRfCyoNB-FJKFhJjElIAYCjuZM.roa (hash: BxYRtCrYD8JZ1KlROq/oLLjDfPXIXRywkgLQEAE4Bdo=) 2: V3zQhta4KSWruLuBXmWIUlIuCSE.crl (hash: 0SEkDnjPzK2foqilYX3aSpNUGbBKzjnUE/1pnezGBa4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:b5:25:1e:84:81:e1:e8:8b:8b:ad:eb:8b:a3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921 Validity Not Before: Dec 17 08:01:04 2025 GMT Not After : Dec 18 08:01:04 2025 GMT Subject: CN=a1627c5c3ef52351210a64a59b17c4d176ad0a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:f0:85:b6:3e:a2:42:38:87:07:93:7b:ef: da:73:80:0d:e1:e5:df:b2:30:fc:88:6d:20:63:60: 55:85:72:c8:8f:9f:a6:5a:38:0a:93:77:1b:fb:b1: 5f:80:8d:9e:44:c7:50:f6:c1:c1:84:32:57:50:09: 55:e5:c6:28:e7:2f:dc:22:15:4a:d9:20:b6:b0:d0: 6f:7d:ca:c6:f6:76:7b:f0:ce:18:31:3d:f8:98:07: ab:7d:07:19:54:16:48:3f:26:ce:0c:26:1d:a4:35: 25:c6:43:4f:9e:5f:bc:54:78:29:f5:3b:d9:7f:8d: 92:5b:cb:53:12:88:42:01:12:93:a9:9d:f3:ca:08: 41:85:09:bb:2b:55:1f:ac:da:0a:ef:69:e1:53:b4: 41:4e:af:44:cb:c3:bd:d3:59:01:ad:9b:6a:42:f6: a0:d3:5e:8e:58:7c:7b:d1:c7:1a:18:2f:45:a1:dd: bf:59:05:03:2f:ad:7d:98:36:8a:f4:91:97:f2:66: df:61:b8:d3:3a:0b:ba:ce:ac:d2:f0:40:3d:18:3f: b7:e5:5a:29:53:8c:55:ed:40:8f:1b:8c:03:0a:f0: 77:cc:48:67:e2:3d:dd:85:02:2b:92:3e:3f:da:58: 7d:5f:4b:9e:b9:a0:e3:92:d4:48:03:24:72:a8:41: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:62:7C:5C:3E:F5:23:51:21:0A:64:A5:9B:17:C4:D1:76:AD:0A:43 X509v3 Authority Key Identifier: keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e9:5b:32:f4:b3:bf:b7:98:7b:85:57:54:59:13:17:de:96: c2:08:c7:fb:0c:48:5f:78:3d:f3:8f:d4:f6:88:28:4c:22:15: fd:30:0f:cd:d1:90:c8:d4:0e:39:9a:5f:7c:00:75:8b:17:23: d6:51:92:69:53:e0:62:34:8e:38:25:48:ba:5a:97:8c:e7:ab: 4e:d5:60:eb:9e:ab:69:f3:fa:4b:6b:38:e2:6b:80:a7:53:0c: 6a:fd:49:8c:9e:da:77:d9:f9:a2:0a:45:6e:08:6c:c2:a2:46: 15:08:bb:c9:7e:65:eb:e6:67:41:13:81:34:0a:16:da:a2:d3: 78:13:f1:0d:7a:5f:f0:1f:85:66:c1:45:ee:76:15:b1:21:d3: 1c:4b:f4:b7:bc:14:3d:7f:24:c4:bf:74:62:08:27:10:aa:64: 3a:25:24:47:a4:68:9d:da:01:e7:23:99:a1:4a:dc:6d:9f:20: 37:c8:1c:f1:a0:51:8d:b4:1d:83:92:6d:a6:9a:c5:8b:05:05: 9d:24:ff:93:fa:0e:30:5f:77:92:50:1a:fc:2b:11:f4:8c:75: 81:31:16:be:f4:13:ca:e8:d1:58:9c:3c:a8:d4:4e:c1:25:79: d6:95:f5:df:ad:f4:64:2f:d2:92:1e:72:1f:c9:14:44:a8:d0: 09:cc:62:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU7UlHoSB4eiLi63ri6MKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3N2NkMDg2ZDZiODI5MjVhYmI4YmI4MTVlNjU4ODUyNTIy ZTA5MjEwHhcNMjUxMjE3MDgwMTA0WhcNMjUxMjE4MDgwMTA0WjAzMTEwLwYDVQQD EyhhMTYyN2M1YzNlZjUyMzUxMjEwYTY0YTU5YjE3YzRkMTc2YWQwYTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOvwhbY+okI4hweTe+/ac4AN4eXf sjD8iG0gY2BVhXLIj5+mWjgKk3cb+7FfgI2eRMdQ9sHBhDJXUAlV5cYo5y/cIhVK 2SC2sNBvfcrG9nZ78M4YMT34mAerfQcZVBZIPybODCYdpDUlxkNPnl+8VHgp9TvZ f42SW8tTEohCARKTqZ3zyghBhQm7K1UfrNoK72nhU7RBTq9Ey8O901kBrZtqQvag 016OWHx70ccaGC9Fod2/WQUDL619mDaK9JGX8mbfYbjTOgu6zqzS8EA9GD+35Vop U4xV7UCPG4wDCvB3zEhn4j3dhQIrkj4/2lh9X0ueuaDjktRIAyRyqEH6AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFifFw+9SNRIQpkpZsXxNF2rQpDMB8GA1UdIwQY MBaAFFd80IbWuCklq7i7gV5liFJSLgkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjkt NzIwOGNkOThkODgxLzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjktNzIwOGNkOThkODgx LzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+lbMvSz v7eYe4VXVFkTF96WwgjH+wxIX3g984/U9ogoTCIV/TAPzdGQyNQOOZpffAB1ixcj 1lGSaVPgYjSOOCVIulqXjOerTtVg656rafP6S2s44muAp1MMav1JjJ7ad9n5ogpF bghswqJGFQi7yX5l6+ZnQROBNAoW2qLTeBPxDXpf8B+FZsFF7nYVsSHTHEv0t7wU PX8kxL90YggnEKpkOiUkR6RondoB5yOZoUrcbZ8gN8gc8aBRjbQdg5JtpprFiwUF nST/k/oOMF93klAa/CsR9Ix1gTEWvvQTyujRWJw8qNROwSV51pX13630ZC/Skh5y H8kURKjQCcxiRw== -----END CERTIFICATE-----Generated at Wed Dec 17 11:20:19 2025 by rpki-client