This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json) Hash identifier: Phz9s5DsZwheSJUSG1jLQcI63OjZaMr0BDu2xxMy+5A= Subject key identifier: DD:71:3E:08:6F:54:E2:33:14:79:E4:BB:28:EF:34:77:D2:7E:38:2F Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6 Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6 Certificate serial: 019B34C53819E0EAD6C8D94507541EDE0945 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft Manifest number: 0D80 Signing time: Fri 19 Dec 2025 04:01:38 +0000 Manifest this update: Fri 19 Dec 2025 04:01:38 +0000 Manifest next update: Sat 20 Dec 2025 04:01:38 +0000 Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: 2+GluK2BxKw9jpz5ygUivQ7lS6ZxWcDYK/wZlH+lP0U=) 2: XaWBl1pdgCEAOtWYlDnABozWGpY.roa (hash: NkTYxkGxoFs3l9oUz9ZXBu6um1xVsgaeI44+mBnF24s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:38:19:e0:ea:d6:c8:d9:45:07:54:1e:de:09:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6 Validity Not Before: Dec 19 04:01:38 2025 GMT Not After : Dec 20 04:01:38 2025 GMT Subject: CN=dd713e086f54e2331479e4bb28ef3477d27e382f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:c8:8a:33:2a:1a:a7:e1:ec:4d:f6:e8:72: f6:6a:b1:2a:7b:ca:51:3b:50:83:26:67:0d:ae:99: 78:c5:b9:53:e5:77:e7:29:dc:c6:86:29:df:36:d3: be:0a:61:c7:49:57:2c:6a:f7:46:46:58:07:fa:df: 74:93:e3:3e:1b:08:82:30:f6:fa:c0:0c:ea:f4:fb: 52:56:c4:25:32:62:bb:2e:c1:81:06:9f:0e:93:bd: a5:88:b9:8d:3a:65:db:a9:52:dc:b8:d0:a7:a5:4a: 84:6e:59:dc:ae:b3:59:22:72:e8:d2:39:2b:98:b5: da:ee:70:6c:d1:94:0c:aa:f8:2c:f5:83:d1:97:54: b6:15:bd:e1:59:55:d7:d6:43:69:a5:0a:c6:66:f5: 14:14:c1:9f:f6:61:24:9d:bf:35:a5:13:80:45:bb: 78:b8:f3:fd:40:34:26:d4:f6:ce:c0:70:3e:20:10: 4d:50:5c:ed:35:e1:d5:aa:3e:f8:ea:0f:66:a2:21: 95:18:22:a5:76:5d:4f:7b:57:75:6c:fb:d3:36:5f: 68:21:a0:07:6c:84:60:a6:f9:87:09:ef:51:79:df: ad:bb:9e:bf:46:32:9d:74:f0:43:e0:fc:d0:d3:59: 09:31:1d:bc:a1:5c:f5:82:7b:78:b2:b1:4d:0a:3b: 10:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:71:3E:08:6F:54:E2:33:14:79:E4:BB:28:EF:34:77:D2:7E:38:2F X509v3 Authority Key Identifier: keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6f:70:35:c0:61:3d:8d:ac:ad:25:a9:a2:d5:da:c3:39:d6: 0a:5c:34:ab:fe:a8:2e:a0:5d:11:27:55:08:4b:1f:2d:8d:48: 84:19:3c:f4:4e:d5:18:cd:2a:28:0c:ed:32:a6:c9:76:7c:35: 44:2e:32:f1:e8:a1:12:fa:5f:9a:fe:ce:23:66:bc:7c:ee:7a: 57:bd:bb:7d:c5:4e:b4:77:5b:ce:1c:c0:d0:17:4b:0c:78:cf: a2:7a:ef:5e:59:70:8a:fb:9c:88:82:65:ff:b4:07:c2:54:e1: ef:ad:41:46:55:8b:3d:c1:5f:03:0d:2a:fc:bb:bf:1c:53:7d: 8f:e3:58:6e:df:cd:b4:ea:0f:58:a7:8b:15:db:5e:c2:e5:a9: 6f:5d:d5:90:a4:89:c6:96:b7:fa:2b:8a:c6:44:6e:07:2f:ac: 75:03:b0:b9:e4:1e:f9:1e:8f:77:86:76:74:29:4d:a3:13:27: af:12:f4:c7:0e:55:40:f6:5c:b4:0a:65:36:de:11:98:9d:10: de:5c:6b:be:91:6d:f8:27:81:83:46:c1:2f:6d:21:82:86:9f: cb:dd:da:88:50:c8:c9:a0:31:fa:fd:2f:7e:7b:e3:3e:b7:d6: d8:50:f5:b8:0f:8b:f7:61:bf:64:15:8d:f2:24:e2:47:c7:26: fd:7b:c9:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xTgZ4OrWyNlFB1Qe3glFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYTVhMjIyYWNiOTlhYjIzOTg0MzllZGVkNzc3MGE2NWVl NjZkZTYwHhcNMjUxMjE5MDQwMTM4WhcNMjUxMjIwMDQwMTM4WjAzMTEwLwYDVQQD EyhkZDcxM2UwODZmNTRlMjMzMTQ3OWU0YmIyOGVmMzQ3N2QyN2UzODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySPIijMqGqfh7E326HL2arEqe8pR O1CDJmcNrpl4xblT5XfnKdzGhinfNtO+CmHHSVcsavdGRlgH+t90k+M+GwiCMPb6 wAzq9PtSVsQlMmK7LsGBBp8Ok72liLmNOmXbqVLcuNCnpUqEblncrrNZInLo0jkr mLXa7nBs0ZQMqvgs9YPRl1S2Fb3hWVXX1kNppQrGZvUUFMGf9mEknb81pROARbt4 uPP9QDQm1PbOwHA+IBBNUFztNeHVqj746g9moiGVGCKldl1Pe1d1bPvTNl9oIaAH bIRgpvmHCe9Red+tu56/RjKddPBD4PzQ01kJMR28oVz1gnt4srFNCjsQhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1xPghvVOIzFHnkuyjvNHfSfjgvMB8GA1UdIwQY MBaAFN2loiKsuZqyOYQ57e13cKZe5m3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQt NzUzYWIxOTY4N2Q4LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQtNzUzYWIxOTY4N2Q4 LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEm9wNcBh PY2srSWpotXawznWClw0q/6oLqBdESdVCEsfLY1IhBk89E7VGM0qKAztMqbJdnw1 RC4y8eihEvpfmv7OI2a8fO56V727fcVOtHdbzhzA0BdLDHjPonrvXllwivuciIJl /7QHwlTh761BRlWLPcFfAw0q/Lu/HFN9j+NYbt/NtOoPWKeLFdtewuWpb13VkKSJ xpa3+iuKxkRuBy+sdQOwueQe+R6Pd4Z2dClNoxMnrxL0xw5VQPZctAplNt4RmJ0Q 3lxrvpFt+CeBg0bBL20hgoafy93aiFDIyaAx+v0vfnvjPrfW2FD1uA+L92G/ZBWN 8iTiR8cm/XvJWg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:22:14 2025 by rpki-client