This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json) Hash identifier: LihBkUDpTrxoEN/RZoD8t4vSClwlB6MKBNRKV3WI5bw= Subject key identifier: 0D:37:17:07:23:08:B2:38:F9:AE:43:0B:FA:5C:D6:49:80:DE:F4:4D Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd Certificate serial: 019B53AB2CF38DC26BE23EB7D48C57C57D57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft Manifest number: 1105 Signing time: Thu 25 Dec 2025 04:01:25 +0000 Manifest this update: Thu 25 Dec 2025 04:01:25 +0000 Manifest next update: Fri 26 Dec 2025 04:01:25 +0000 Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: grwnsg3QK6t4flWNj3BEE6qdQmmi6+7EBrUbUEVNuIs=) 2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:2c:f3:8d:c2:6b:e2:3e:b7:d4:8c:57:c5:7d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd Validity Not Before: Dec 25 04:01:25 2025 GMT Not After : Dec 26 04:01:25 2025 GMT Subject: CN=0d3717072308b238f9ae430bfa5cd64980def44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:fc:b2:37:fa:ef:28:90:0f:de:0b:1e:4a: 67:14:9d:e7:47:1d:6e:0c:ca:c9:af:bc:a4:b1:43: 80:1f:87:ff:9a:2e:c4:18:98:82:d0:ec:35:2f:57: 8f:8d:28:cd:a5:6c:75:21:02:0b:ea:ba:78:05:13: 38:54:41:8e:b7:6b:fe:a5:bf:cf:7f:66:9f:c6:8e: c2:75:a1:29:57:72:84:f6:19:2a:25:27:a6:4c:74: b9:2e:40:b3:0d:ee:24:57:ce:dc:53:9f:58:11:a0: db:16:88:6f:75:11:2c:9f:df:ba:d5:f6:9c:6c:2a: 5a:f2:74:0c:a1:cf:6b:b2:14:59:7c:d2:75:bf:f5: 0d:d7:53:48:ab:da:8f:07:a6:28:31:1c:56:a7:86: e6:70:82:51:ee:aa:af:72:8d:01:c8:ff:cf:21:96: a0:f5:fe:b7:4a:d7:08:6d:3e:92:5b:53:67:18:7a: ac:30:1e:c4:3a:b6:24:f8:84:79:be:eb:54:7c:68: 9c:f4:57:15:b0:3a:24:a3:b7:6d:30:c8:91:f1:97: 69:7f:98:3e:af:4d:d8:0d:14:ab:d3:c3:e9:d1:ac: 4b:95:6e:ff:36:66:76:30:75:a6:94:29:fd:e8:8b: f0:ce:08:cf:07:20:80:ea:fe:71:07:96:f1:cf:b6: 35:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:37:17:07:23:08:B2:38:F9:AE:43:0B:FA:5C:D6:49:80:DE:F4:4D X509v3 Authority Key Identifier: keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ab:94:c4:8b:7d:3b:c3:a4:61:1b:f8:ab:97:16:7b:8c:82: 64:20:00:24:71:84:7b:72:c9:43:f1:e8:50:59:08:c8:3d:a2: 9b:7e:d0:56:e4:c4:3d:a5:f3:58:33:73:1c:f5:cc:ee:f9:32: a9:78:21:0d:f8:27:2b:84:68:3c:3f:84:2f:2c:4d:6d:12:44: 83:2c:bc:aa:d3:34:62:53:0b:14:55:84:af:3a:a3:cc:f4:fd: 21:60:1f:a7:eb:01:af:8c:8d:f3:b9:15:ae:70:3d:c5:ce:e5: 39:47:e9:55:b3:6f:a2:6d:4a:31:73:21:86:d3:51:34:9c:89: e3:71:90:75:fc:71:a9:3a:20:1a:4a:53:ba:d2:e3:ab:64:88: a7:3e:28:54:dd:bf:2f:c2:1b:89:7f:53:40:c8:76:ae:3f:a7: 21:3c:97:8f:b9:42:09:f1:66:b4:63:89:16:08:d0:c7:ef:a4: fb:51:a0:76:6e:7f:d4:f3:56:f8:57:dc:37:8f:bd:f0:df:ba: 8a:32:a4:92:73:27:5d:80:23:5d:16:8e:c6:6a:7d:34:b2:a0: 4b:0d:61:96:aa:32:54:96:ef:03:cd:4e:8e:fb:3c:b7:e1:7a: 32:9d:93:6e:35:20:ba:cb:4e:12:e7:f4:1c:a3:e2:b8:27:93: 9b:30:2e:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqyzzjcJr4j631IxXxX1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNGUzODkyZjQ2YjEwNzg1MmMzZWFlMWIyN2RjY2Y2MGZh Yjk5YmQwHhcNMjUxMjI1MDQwMTI1WhcNMjUxMjI2MDQwMTI1WjAzMTEwLwYDVQQD EygwZDM3MTcwNzIzMDhiMjM4ZjlhZTQzMGJmYTVjZDY0OTgwZGVmNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpT8sjf67yiQD94LHkpnFJ3nRx1u DMrJr7yksUOAH4f/mi7EGJiC0Ow1L1ePjSjNpWx1IQIL6rp4BRM4VEGOt2v+pb/P f2afxo7CdaEpV3KE9hkqJSemTHS5LkCzDe4kV87cU59YEaDbFohvdREsn9+61fac bCpa8nQMoc9rshRZfNJ1v/UN11NIq9qPB6YoMRxWp4bmcIJR7qqvco0ByP/PIZag 9f63StcIbT6SW1NnGHqsMB7EOrYk+IR5vutUfGic9FcVsDoko7dtMMiR8Zdpf5g+ r03YDRSr08Pp0axLlW7/NmZ2MHWmlCn96IvwzgjPByCA6v5xB5bxz7Y1DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA03FwcjCLI4+a5DC/pc1kmA3vRNMB8GA1UdIwQY MBaAFN1OOJL0axB4UsPq4bJ9zPYPq5m9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTkt M2I1YjcxY2JiMzIyLzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTktM2I1YjcxY2JiMzIy LzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6uUxIt9 O8OkYRv4q5cWe4yCZCAAJHGEe3LJQ/HoUFkIyD2im37QVuTEPaXzWDNzHPXM7vky qXghDfgnK4RoPD+ELyxNbRJEgyy8qtM0YlMLFFWErzqjzPT9IWAfp+sBr4yN87kV rnA9xc7lOUfpVbNvom1KMXMhhtNRNJyJ43GQdfxxqTogGkpTutLjq2SIpz4oVN2/ L8IbiX9TQMh2rj+nITyXj7lCCfFmtGOJFgjQx++k+1Ggdm5/1PNW+FfcN4+98N+6 ijKkknMnXYAjXRaOxmp9NLKgSw1hlqoyVJbvA81Ojvs8t+F6Mp2TbjUgustOEuf0 HKPiuCeTmzAuEA== -----END CERTIFICATE-----Generated at Thu Dec 25 06:29:20 2025 by rpki-client