This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json) Hash identifier: hsbnDZwINWW20pdJMI7rNYiacEvWtxeL32HYls/q8s8= Subject key identifier: E2:AE:50:5D:00:50:52:E1:B6:05:49:85:FA:22:47:AE:73:D1:D1:A8 Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c Certificate serial: 019B397D68FAFEC61A2267DA9646EAAE3355 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft Manifest number: 112C Signing time: Sat 20 Dec 2025 02:01:18 +0000 Manifest this update: Sat 20 Dec 2025 02:01:18 +0000 Manifest next update: Sun 21 Dec 2025 02:01:18 +0000 Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: lP+sKSPIBkExcn7Rep36GfMdkvskf4bOcnRy3q0LiTo=) 2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=) 3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:68:fa:fe:c6:1a:22:67:da:96:46:ea:ae:33:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c Validity Not Before: Dec 20 02:01:18 2025 GMT Not After : Dec 21 02:01:18 2025 GMT Subject: CN=e2ae505d005052e1b6054985fa2247ae73d1d1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:63:ad:ff:88:db:be:f8:d4:59:ff:d1:b6:eb: 38:09:c3:e0:c4:61:5b:cc:ef:28:2b:ae:5c:ed:08: e1:ba:ee:38:a6:12:d4:a4:3f:28:ee:59:8d:af:d7: 72:ba:e1:08:d3:04:5c:a1:01:e2:bd:41:ac:72:52: ba:94:e8:46:2c:46:28:38:67:53:12:5a:c0:7e:ef: 0f:a7:10:45:f4:e5:d4:99:a2:22:a3:5d:be:b2:83: 2a:48:55:65:58:91:2d:9f:fb:59:a3:a1:8e:ef:a1: 89:b0:eb:cf:20:78:ca:db:96:a1:50:ec:4f:9b:8f: ba:fa:b5:d0:db:44:cb:65:01:eb:95:4e:e2:a5:28: 70:16:b6:26:93:d1:34:ad:8d:a9:d8:42:11:de:d5: 97:1f:8b:c5:d5:98:d3:5b:94:dc:37:2a:8f:cb:1b: c5:f0:c3:9f:fb:d3:17:6e:fb:51:36:a7:0c:50:c4: b4:ef:24:e9:00:8d:53:a6:22:fe:19:1f:01:08:09: cd:74:ab:0b:2c:5f:dd:e6:ae:6b:4e:cd:c1:1a:7f: 67:6a:1c:6d:90:6f:90:53:d2:aa:27:95:9d:41:d7: f3:51:b3:52:6a:7e:b4:66:0a:6c:7c:93:0d:bd:a6: 12:2d:0c:12:82:fb:9f:19:f4:a9:4d:36:71:42:62: 3e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AE:50:5D:00:50:52:E1:B6:05:49:85:FA:22:47:AE:73:D1:D1:A8 X509v3 Authority Key Identifier: keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:8a:20:d6:e2:6c:8d:26:b9:d7:ac:86:e6:bc:d8:50:0b:bf: f0:6f:45:28:7c:ec:62:bf:4e:b9:bc:67:56:7c:8f:08:d0:8b: fc:1e:7d:d9:97:69:59:24:9d:c4:59:24:ee:02:e2:c9:e0:cc: a1:96:ea:e8:de:02:ee:df:fc:50:fb:53:17:30:6e:75:12:0a: 19:27:aa:b0:e4:1b:af:67:b2:9e:67:92:c4:4d:cc:7a:9c:9e: c7:7c:9b:5a:1c:83:25:3b:a1:53:e3:eb:af:25:11:2d:25:76: d8:d4:ad:a9:2f:a2:98:fe:0c:17:1d:48:54:68:c4:ea:ea:06: 13:18:2a:53:d8:c3:fd:9c:1c:5b:4b:65:53:bb:7f:81:0a:73: 4d:9f:0b:08:e3:4d:8e:a3:d0:85:d9:05:00:4f:f4:87:db:5f: f4:bf:66:74:76:70:af:31:0e:69:49:d0:0e:6a:e0:13:0a:47: de:a7:df:2c:9b:fc:77:b8:0a:ee:49:a0:ff:3b:e3:8c:eb:33: 65:7f:75:60:52:79:f5:e1:f9:2d:6c:af:9f:bc:5c:52:5c:8a: 3d:3e:9f:f5:6e:51:bb:84:29:ca:34:97:26:52:c5:3f:38:83: 73:30:61:a4:77:12:df:4c:1c:49:a2:90:a5:62:60:11:1d:e1: 6b:5d:5f:3c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs5fWj6/sYaImfalkbqrjNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzBkZTg0MGZkNmJmNGIwYWZkMTI3NGU0NGVmZDFiODY2 NTc2MmMwHhcNMjUxMjIwMDIwMTE4WhcNMjUxMjIxMDIwMTE4WjAzMTEwLwYDVQQD EyhlMmFlNTA1ZDAwNTA1MmUxYjYwNTQ5ODVmYTIyNDdhZTczZDFkMWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mOt/4jbvvjUWf/Rtus4CcPgxGFb zO8oK65c7Qjhuu44phLUpD8o7lmNr9dyuuEI0wRcoQHivUGsclK6lOhGLEYoOGdT ElrAfu8PpxBF9OXUmaIio12+soMqSFVlWJEtn/tZo6GO76GJsOvPIHjK25ahUOxP m4+6+rXQ20TLZQHrlU7ipShwFrYmk9E0rY2p2EIR3tWXH4vF1ZjTW5TcNyqPyxvF 8MOf+9MXbvtRNqcMUMS07yTpAI1TpiL+GR8BCAnNdKsLLF/d5q5rTs3BGn9nahxt kG+QU9KqJ5WdQdfzUbNSan60ZgpsfJMNvaYSLQwSgvufGfSpTTZxQmI+vQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOKuUF0AUFLhtgVJhfoiR65z0dGoMB8GA1UdIwQY MBaAFPtw3oQP1r9LCv0SdORO/RuGZXYsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zRGVoQV9XdjBzS19SSjA1RTc5RzRabGRpdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvOWEzZWFjLWY4NjItNDc4OS1hYzIx LWQ5NDQ0YTNkMGNlMC8xLzEtM0RlaEFfV3Ywc0tfUkowNUU3OUc0WmxkaXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRhLzlhM2VhYy1mODYyLTQ3ODktYWMyMS1kOTQ0NGEzZDBj ZTAvMS8xLTNEZWhBX1d2MHNLX1JKMDVFNzlHNFpsZGl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYog 1uJsjSa516yG5rzYUAu/8G9FKHzsYr9OubxnVnyPCNCL/B592ZdpWSSdxFkk7gLi yeDMoZbq6N4C7t/8UPtTFzBudRIKGSeqsOQbr2eynmeSxE3Mepyex3ybWhyDJTuh U+PrryURLSV22NStqS+imP4MFx1IVGjE6uoGExgqU9jD/ZwcW0tlU7t/gQpzTZ8L CONNjqPQhdkFAE/0h9tf9L9mdHZwrzEOaUnQDmrgEwpH3qffLJv8d7gK7kmg/zvj jOszZX91YFJ59eH5LWyvn7xcUlyKPT6f9W5Ru4QpyjSXJlLFPziDczBhpHcS30wc SaKQpWJgER3ha11fPA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:08 2025 by rpki-client