This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json) Hash identifier: OF00awdKzhk/USZNqkfrPiVuiZZklby75eohV50Qu9M= Subject key identifier: F0:40:F4:3F:B1:26:AA:B8:E8:EC:92:C9:1F:65:3E:67:08:2A:EF:5A Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f Certificate serial: 019B3F7F3D27B2F0450A879904909ED64FC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft Manifest number: 0678 Signing time: Sun 21 Dec 2025 06:01:01 +0000 Manifest this update: Sun 21 Dec 2025 06:01:01 +0000 Manifest next update: Mon 22 Dec 2025 06:01:01 +0000 Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: JsbQlWpbpUreVe3xxz/v0LwwwVqzF1ASZaho5QhX4mw=) 2: wLvB8cGiUEUZNSS38jCt0kGtb0w.roa (hash: m3dcBbH2bIeKi8Ap8eHL2CuPz3vf7Stl96ekMV6tjIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:3d:27:b2:f0:45:0a:87:99:04:90:9e:d6:4f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f Validity Not Before: Dec 21 06:01:01 2025 GMT Not After : Dec 22 06:01:01 2025 GMT Subject: CN=f040f43fb126aab8e8ec92c91f653e67082aef5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:53:4d:67:14:c3:80:c4:e8:51:d8:c2:a3: bc:8f:a3:91:78:67:73:78:19:d7:04:51:c3:03:34: 2c:b6:09:96:29:71:72:7f:c0:f7:0c:fa:54:18:ef: 30:e5:61:fa:39:24:ae:a5:af:c8:79:4a:99:61:b4: a6:23:44:5a:13:20:1b:92:65:4f:51:82:51:98:48: 31:68:2a:93:2e:9c:d6:7d:2d:4f:35:69:52:7b:de: 62:52:32:dd:ea:74:12:b4:11:55:ba:38:f4:35:be: d8:23:9c:88:d7:49:27:4b:9a:06:58:d4:62:f1:84: 51:ce:8b:d7:7b:ec:3e:34:7b:b2:3c:56:6b:1f:76: 7d:b3:f9:d3:7d:bf:54:fb:2a:eb:4a:14:c1:98:e3: b7:c2:bc:9f:95:37:c2:15:38:27:eb:d8:3e:7f:ae: df:79:28:af:30:0a:f5:6f:3b:cf:e9:1f:49:42:6b: 25:05:b3:75:4e:1e:c5:8d:80:53:8f:a4:64:fb:fd: c1:18:90:a0:1a:b9:d1:0b:96:46:0c:db:c5:47:60: ee:66:44:58:5e:44:f9:91:9b:73:f0:64:9f:6b:63: 28:6d:1d:51:70:ff:cf:25:bf:07:f5:0a:29:94:be: 8e:bb:9d:a5:b5:a2:18:08:10:6d:37:df:2f:ab:91: 90:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:40:F4:3F:B1:26:AA:B8:E8:EC:92:C9:1F:65:3E:67:08:2A:EF:5A X509v3 Authority Key Identifier: keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:52:06:15:eb:54:46:e0:45:ee:0d:23:f5:4e:dd:d9:7f:70: c2:11:e0:d9:20:ca:c6:bd:5d:e6:4c:da:f3:bb:bf:6c:71:79: cd:b1:51:be:ca:90:77:3a:f5:d5:b0:2a:40:4d:f0:5b:82:0d: 7c:27:42:52:e4:62:74:71:cc:a6:69:2c:5e:d4:a8:a5:9b:5a: cb:52:85:91:2f:67:92:61:f7:34:df:bb:eb:65:f8:8f:2c:aa: b3:e4:9f:95:ea:c9:1d:67:d1:8b:6a:93:d1:6a:14:ed:4b:30: ae:66:57:df:bf:12:48:fd:55:8d:a1:09:d1:ec:03:2f:01:7f: df:b8:96:f3:a0:01:3b:f0:9a:5d:f8:66:f7:c5:e3:32:17:55: b7:3c:65:43:7f:3c:51:a7:42:98:f9:01:3d:66:65:aa:cc:28: fd:b8:d0:12:c7:cb:db:fd:7b:df:83:7c:5e:95:bd:26:32:a6: 04:3a:95:bb:e3:48:7a:dc:c1:98:2b:47:c5:35:0c:94:8b:51: ea:6f:6c:b6:57:1f:4e:61:59:77:af:42:63:76:46:25:33:f0: ab:23:46:76:2d:9a:db:c3:c6:a2:be:c0:d7:86:9b:34:bb:f8: 5f:3b:82:6e:11:43:b6:d9:9c:bf:5e:68:bb:9a:6c:b7:77:11: e5:af:63:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fz0nsvBFCoeZBJCe1k/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYWZhZGExMGUyY2UyMGUxYzk2Zjg5NWJiOGVjMzJhNTgw OGY2M2YwHhcNMjUxMjIxMDYwMTAxWhcNMjUxMjIyMDYwMTAxWjAzMTEwLwYDVQQD EyhmMDQwZjQzZmIxMjZhYWI4ZThlYzkyYzkxZjY1M2U2NzA4MmFlZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplpTTWcUw4DE6FHYwqO8j6OReGdz eBnXBFHDAzQstgmWKXFyf8D3DPpUGO8w5WH6OSSupa/IeUqZYbSmI0RaEyAbkmVP UYJRmEgxaCqTLpzWfS1PNWlSe95iUjLd6nQStBFVujj0Nb7YI5yI10knS5oGWNRi 8YRRzovXe+w+NHuyPFZrH3Z9s/nTfb9U+yrrShTBmOO3wryflTfCFTgn69g+f67f eSivMAr1bzvP6R9JQmslBbN1Th7FjYBTj6Rk+/3BGJCgGrnRC5ZGDNvFR2DuZkRY XkT5kZtz8GSfa2MobR1RcP/PJb8H9QoplL6Ou52ltaIYCBBtN98vq5GQBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBA9D+xJqq46OySyR9lPmcIKu9aMB8GA1UdIwQY MBaAFNyvraEOLOIOHJb4lbuOwypYCPY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQt YTY2Zjg0ZWRiZDZkLzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQtYTY2Zjg0ZWRiZDZk LzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1IGFetU RuBF7g0j9U7d2X9wwhHg2SDKxr1d5kza87u/bHF5zbFRvsqQdzr11bAqQE3wW4IN fCdCUuRidHHMpmksXtSopZtay1KFkS9nkmH3NN+762X4jyyqs+SflerJHWfRi2qT 0WoU7UswrmZX378SSP1VjaEJ0ewDLwF/37iW86ABO/CaXfhm98XjMhdVtzxlQ388 UadCmPkBPWZlqswo/bjQEsfL2/1734N8XpW9JjKmBDqVu+NIetzBmCtHxTUMlItR 6m9stlcfTmFZd69CY3ZGJTPwqyNGdi2a28PGor7A14abNLv4XzuCbhFDttmcv15o u5pst3cR5a9jpw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:49:45 2025 by rpki-client