This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json) Hash identifier: 4xB9No5nMKVhC2p4gQEykNH8hrBuSkTXa13n9yPvEuM= Subject key identifier: 4F:C3:34:21:0F:28:BE:65:C9:7F:D1:DF:26:17:8A:B8:AD:99:9F:B6 Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95 Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695 Certificate serial: 019B3FECD0837908A96119F9ED37662AC558 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 08:00:43 +0000 Manifest this update: Sun 21 Dec 2025 08:00:43 +0000 Manifest next update: Mon 22 Dec 2025 08:00:43 +0000 Files and hashes: 1: 6D6NbO4mpX3571YePb7wBqCbgBc.roa (hash: 360JpGFWi4fwKRE3FPgMGW/rJz0k3wsKNSQFnzGnVZI=) 2: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: LwuBwWBs7e4R+mYskQ0J61X7sANFquKlA2wYBX2afqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:d0:83:79:08:a9:61:19:f9:ed:37:66:2a:c5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695 Validity Not Before: Dec 21 08:00:43 2025 GMT Not After : Dec 22 08:00:43 2025 GMT Subject: CN=4fc334210f28be65c97fd1df26178ab8ad999fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f3:dc:e2:0c:75:d3:03:8f:10:95:c1:28:0f: 21:09:f1:ec:c4:4e:fb:e2:9f:13:0a:a5:9e:d5:0b: d3:c3:aa:66:d4:3d:2d:7b:0e:23:d6:8a:35:ab:85: c3:61:7d:e3:63:15:e8:75:32:7f:b8:c7:ce:4c:9f: a4:9e:0c:35:c8:ef:0b:f1:e0:35:c4:dc:08:aa:2f: c6:bf:8b:64:87:b0:fe:ef:f6:7f:81:79:8a:71:b3: f5:57:cd:98:7b:0a:4a:b7:11:15:67:49:4e:7d:f6: ed:fc:0c:b6:9b:93:ca:7d:89:fc:a6:92:3f:d0:1d: 93:21:e0:47:0a:a0:88:3e:1b:2d:4c:12:0f:ae:4c: 31:16:52:34:0a:3f:fa:7a:19:7f:c5:0c:ff:74:f6: b8:c7:67:ab:84:92:d1:b9:76:09:11:05:43:42:7b: 7d:42:29:23:b1:be:14:c6:38:7c:28:46:e4:d7:d5: 15:73:b6:47:02:f4:0c:a6:eb:14:79:12:a2:e1:d9: 1c:ba:3a:6d:84:5c:04:bd:ba:cc:4b:76:31:c0:3d: 2e:23:41:24:46:51:27:4b:dc:91:c5:83:ce:bc:fc: ad:01:86:ed:10:de:91:b6:e5:d5:da:23:7d:24:7b: 2c:bb:02:d1:41:bc:c1:79:94:1f:f4:c9:df:7d:a7: 3f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C3:34:21:0F:28:BE:65:C9:7F:D1:DF:26:17:8A:B8:AD:99:9F:B6 X509v3 Authority Key Identifier: keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:31:80:6f:7a:0c:89:2a:0c:ba:d9:39:93:54:bf:ba:d1:7d: da:81:72:09:d6:60:29:de:87:cf:3d:d2:94:f1:e6:4d:e6:d5: ab:d3:43:3a:29:32:b6:c7:20:a7:39:40:10:82:1d:54:2f:03: 96:a1:c7:9e:cd:c6:ed:bb:2b:45:a4:d5:fb:68:68:d2:e2:ec: cf:62:f9:8f:28:c6:72:1b:3d:3a:33:04:d1:12:5b:58:0b:11: b1:ff:14:58:33:6d:56:c9:be:64:fd:61:d5:76:cb:bf:ef:3f: fd:57:36:6b:a4:9a:68:09:a2:be:ac:6c:42:1f:6a:54:62:44: 00:10:e9:46:90:e0:03:d4:90:8f:e0:c3:b1:e8:e8:db:c4:23: 9a:3e:5a:58:60:f1:49:5c:e2:d2:3e:74:91:85:ed:00:da:e3: b8:0d:47:21:1e:48:ea:83:bb:01:f9:73:b9:59:ad:c2:d7:51: f7:39:55:b7:20:65:bd:ce:f4:14:d3:9f:6c:36:bf:cb:87:b2: e1:cd:a6:d4:6b:df:91:63:e0:d0:ff:14:29:20:e7:22:2d:52: d3:1c:24:b1:2f:56:25:b2:f5:d8:6f:bf:ef:1a:38:32:0e:7f: 67:b1:db:14:0f:ce:d1:c1:c6:24:5f:b5:a7:5e:dc:84:da:48: 86:3b:3c:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7NCDeQipYRn57TdmKsVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNzI3NmM0ZDhjZmFmYzA0YzI2Zjg1ZmIzNGZkOWVjZTQ3 Njk2OTUwHhcNMjUxMjIxMDgwMDQzWhcNMjUxMjIyMDgwMDQzWjAzMTEwLwYDVQQD Eyg0ZmMzMzQyMTBmMjhiZTY1Yzk3ZmQxZGYyNjE3OGFiOGFkOTk5ZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPPc4gx10wOPEJXBKA8hCfHsxE77 4p8TCqWe1QvTw6pm1D0tew4j1oo1q4XDYX3jYxXodTJ/uMfOTJ+kngw1yO8L8eA1 xNwIqi/Gv4tkh7D+7/Z/gXmKcbP1V82YewpKtxEVZ0lOffbt/Ay2m5PKfYn8ppI/ 0B2TIeBHCqCIPhstTBIPrkwxFlI0Cj/6ehl/xQz/dPa4x2erhJLRuXYJEQVDQnt9 Qikjsb4Uxjh8KEbk19UVc7ZHAvQMpusUeRKi4dkcujpthFwEvbrMS3YxwD0uI0Ek RlEnS9yRxYPOvPytAYbtEN6RtuXV2iN9JHssuwLRQbzBeZQf9Mnffac/kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/DNCEPKL5lyX/R3yYXiritmZ+2MB8GA1UdIwQY MBaAFP9ydsTYz6/ATCb4X7NP2ezkdpaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzNKMnhOalByOEJNSnZoZnMwX1o3T1IybHBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85ZGY4MTEtMDdkYy00ZmRmLTkxMTgt NzdmZDRkMWU1YjI2LzEvXzNKMnhOalByOEJNSnZoZnMwX1o3T1IybHBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC85ZGY4MTEtMDdkYy00ZmRmLTkxMTgtNzdmZDRkMWU1YjI2 LzEvXzNKMnhOalByOEJNSnZoZnMwX1o3T1IybHBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTGAb3oM iSoMutk5k1S/utF92oFyCdZgKd6Hzz3SlPHmTebVq9NDOikytscgpzlAEIIdVC8D lqHHns3G7bsrRaTV+2ho0uLsz2L5jyjGchs9OjME0RJbWAsRsf8UWDNtVsm+ZP1h 1XbLv+8//Vc2a6SaaAmivqxsQh9qVGJEABDpRpDgA9SQj+DDsejo28Qjmj5aWGDx SVzi0j50kYXtANrjuA1HIR5I6oO7AflzuVmtwtdR9zlVtyBlvc70FNOfbDa/y4ey 4c2m1GvfkWPg0P8UKSDnIi1S0xwksS9WJbL12G+/7xo4Mg5/Z7HbFA/O0cHGJF+1 p17chNpIhjs8KQ== -----END CERTIFICATE-----Generated at Sun Dec 21 14:12:01 2025 by rpki-client