This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json) Hash identifier: S2h4ei9WWUZORik1qnd3TUXE/r1vc5t0I0UVMaA9jh0= Subject key identifier: BB:AD:E4:05:8B:F6:75:78:E0:3A:A9:85:57:1A:83:15:2E:5F:66:FC Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c Certificate serial: 019B3C0FD9310CDD48B2B60543902CB16CD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft Manifest number: 0CC0 Signing time: Sat 20 Dec 2025 14:00:30 +0000 Manifest this update: Sat 20 Dec 2025 14:00:30 +0000 Manifest next update: Sun 21 Dec 2025 14:00:30 +0000 Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: nuQeV/OHwafX85mfpjzaWkkBwVQpzWb6WM8k9bR08QM=) 2: 17Ijw7DnA-ky4M-qBTdOY4I7ec4.roa (hash: iu+mQ1jbZcSsyxSnbAMCeHovGJfrloyLqIxmClTwTuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:d9:31:0c:dd:48:b2:b6:05:43:90:2c:b1:6c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c Validity Not Before: Dec 20 14:00:30 2025 GMT Not After : Dec 21 14:00:30 2025 GMT Subject: CN=bbade4058bf67578e03aa985571a83152e5f66fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:40:39:7d:7c:08:ff:cc:b6:6d:d3:58:96:2e: ca:1d:46:de:b8:3c:28:5a:7e:06:02:bd:1a:3d:f0: af:7a:3a:41:e2:38:77:c2:b8:5a:61:d0:05:54:89: 1c:f9:86:d3:9a:44:3a:dc:82:21:4e:0b:34:85:99: cb:1e:b1:d9:dc:79:75:fe:89:28:4c:2f:3b:75:95: 04:52:4b:18:03:92:19:1f:35:a1:52:7d:c5:e0:de: 26:f8:43:ef:c0:4e:0c:d9:ff:47:19:e8:10:22:69: c0:af:fe:d5:84:b0:12:69:1a:73:c9:0b:ef:60:a8: 5b:aa:48:18:4a:f1:ba:f9:94:e8:d4:3f:c2:39:7c: 6e:68:2f:48:76:34:38:d6:ff:e6:35:22:30:c1:f6: 6a:41:71:0e:56:5e:ee:6f:ec:95:c0:20:2e:23:d9: d1:53:e7:f3:13:d1:4a:c2:b1:ae:c8:44:28:57:d8: 76:db:1c:0c:ec:e2:ba:f8:46:f7:81:2b:30:1d:6a: 3a:58:d6:b2:1f:f7:a4:63:0f:64:3f:c2:4c:ce:c0: e9:79:e1:ed:08:41:fb:d4:b0:56:6f:42:d1:95:30: 6c:1e:33:79:e3:be:1b:56:67:00:45:10:bd:d9:03: 9b:f3:fa:81:e8:37:99:91:3b:22:c3:84:f0:8b:16: 29:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AD:E4:05:8B:F6:75:78:E0:3A:A9:85:57:1A:83:15:2E:5F:66:FC X509v3 Authority Key Identifier: keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d2:ce:c5:10:ed:2e:b7:44:e4:d9:0a:98:85:22:5a:42:6e: 26:75:95:b7:95:63:51:97:36:87:8d:9c:64:48:7b:de:ec:51: d6:48:5f:75:f6:21:38:6c:a1:f0:b2:96:b1:9c:80:6a:45:00: 98:ca:9b:fe:7c:e1:31:13:fc:37:1b:d5:40:a4:8a:5d:8c:2b: 12:66:ef:eb:5d:51:e5:e5:b7:a9:9c:28:eb:a5:47:11:ba:fc: 64:13:70:ae:b4:c7:cd:ef:46:b0:a2:2b:9b:42:d4:d3:e9:86: 41:45:67:19:d5:9d:ce:b5:7a:c6:09:2e:21:08:23:7b:5c:4b: b4:bd:25:fc:8a:e8:fd:83:5c:ab:20:a0:a3:54:78:fa:d0:18: 4f:9c:3f:f9:bd:fd:95:ea:f7:02:9d:0a:07:02:0a:fd:68:30: 9f:ba:4a:a5:88:e8:ad:2d:e8:06:a6:5d:a7:9b:cc:ce:8b:b9: fa:13:45:6d:f5:57:8d:7c:02:76:b0:42:54:16:7c:cb:b8:13: 1e:4d:3f:64:e9:25:ea:ef:10:31:9c:2a:2d:8d:62:f7:a6:41: b9:a8:a5:8f:97:28:7f:44:b1:ce:e9:48:93:f2:aa:cb:75:60: 4c:4c:e7:3b:8b:0b:2e:3b:e3:d3:b6:cc:ed:be:11:8c:54:3f: 75:23:21:02 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs8D9kxDN1IsrYFQ5AssWzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzIzNzA2ZDBlODM3NThiYTUyMTM4ZTlkYjQyMDdiNWE1 YzE4OWMwHhcNMjUxMjIwMTQwMDMwWhcNMjUxMjIxMTQwMDMwWjAzMTEwLwYDVQQD EyhiYmFkZTQwNThiZjY3NTc4ZTAzYWE5ODU1NzFhODMxNTJlNWY2NmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0A5fXwI/8y2bdNYli7KHUbeuDwo Wn4GAr0aPfCvejpB4jh3wrhaYdAFVIkc+YbTmkQ63IIhTgs0hZnLHrHZ3Hl1/oko TC87dZUEUksYA5IZHzWhUn3F4N4m+EPvwE4M2f9HGegQImnAr/7VhLASaRpzyQvv YKhbqkgYSvG6+ZTo1D/COXxuaC9IdjQ41v/mNSIwwfZqQXEOVl7ub+yVwCAuI9nR U+fzE9FKwrGuyEQoV9h22xwM7OK6+Eb3gSswHWo6WNayH/ekYw9kP8JMzsDpeeHt CEH71LBWb0LRlTBsHjN5474bVmcARRC92QOb8/qB6DeZkTsiw4TwixYpPQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLut5AWL9nV44DqphVcagxUuX2b8MB8GA1UdIwQY MBaAFPtyNwbQ6DdYulITjp20IHtaXBicMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zSTNCdERvTjFpNlVoT09uYlFnZTFwY0dKdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvY2ZhYzMxLTgzNTYtNDMyZC1hMzRk LWI2MTQzNjExOTZmZC8xLzEtM0kzQnREb04xaTZVaE9PbmJRZ2UxcGNHSncubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzU5L2NmYWMzMS04MzU2LTQzMmQtYTM0ZC1iNjE0MzYxMTk2 ZmQvMS8xLTNJM0J0RG9OMWk2VWhPT25iUWdlMXBjR0p3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdLO xRDtLrdE5NkKmIUiWkJuJnWVt5VjUZc2h42cZEh73uxR1khfdfYhOGyh8LKWsZyA akUAmMqb/nzhMRP8NxvVQKSKXYwrEmbv611R5eW3qZwo66VHEbr8ZBNwrrTHze9G sKIrm0LU0+mGQUVnGdWdzrV6xgkuIQgje1xLtL0l/Iro/YNcqyCgo1R4+tAYT5w/ +b39ler3Ap0KBwIK/Wgwn7pKpYjorS3oBqZdp5vMzou5+hNFbfVXjXwCdrBCVBZ8 y7gTHk0/ZOkl6u8QMZwqLY1i96ZBuailj5cof0SxzulIk/Kqy3VgTEznO4sLLjvj 07bM7b4RjFQ/dSMhAg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:13:31 2025 by rpki-client